shell bypass 403

UnknownSec Shell

: /home3/espa7358/tmp/awstats/ [ drwx------ ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.216.229
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : awstats092026.metropolitano.espacofacial.com.br.txt
AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202609 will be lost/reset.
# Last config file used to build this data file was /home/espa7358/tmp/awstats/awstats.metropolitano.espacofacial.com.br.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2101                
POS_TIME 2782                
POS_VISITOR 28210               
POS_DAY 30310               
POS_DOMAIN 3516                
POS_LOGIN 3937                
POS_ROBOT 4092                
POS_WORMS 4634                
POS_EMAILSENDER 4765                
POS_EMAILRECEIVER 4908                
POS_SESSION 30700               
POS_FILESIZE 31482               
POS_REQUESTTIME 31628               
POS_SIDER 30900               
POS_FILETYPES 5043                
POS_DOWNLOADS 5212                
POS_OS 5332                
POS_BROWSER 5533                
POS_SCREENSIZE 6425                
POS_UNKNOWNREFERER 6499                
POS_UNKNOWNREFERERBROWSER 6988                
POS_ORIGIN 7258                
POS_SEREFERRALS 7394                
POS_PAGEREFS 7538                
POS_SEARCHWORDS 7738                
POS_KEYWORDS 7890                
POS_MISC 2446                
POS_ERRORS 7949                
POS_CLUSTER 3793                
POS_SIDER_404 8085                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260915090205 306 76646 4703092085977
FirstTime 20260901020729
LastTime 20260915071543
LastUpdate 20260915090639 306 0 306 0 0
TotalVisits 58                  
TotalUnique 52                  
MonthHostsKnown 0                   
MonthHostsUnknown 52                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
RealPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 7 0
TotalMisc 0 0 0
DirectorSupport 0 0 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 4401 3 7 25153
1 23 40 411976 59 63 7295
2 10 10 132578 126 131 56056
3 4 4 51184 11 11 21222
4 1 1 1324 4 6 19852
5 0 0 0 136 136 127168
6 18 18 248652 250 261 173429
7 15 15 162825 227 347 23583
8 5 5 72359 121 121 89056
9 28 45 429544 155 156 6139
10 2 6 26623 2 6 5329
11 27 27 129679 52 53 71177
12 4 4 540318 152 157 8930
13 1 1 21191 112 130 651868
14 3 3 29985 298 299 233369
15 1 1 4401 235 235 117071
16 2 2 2142 84 84 5137
17 2 2 25592 10 10 22067
18 1 4 21943 0 0 0
19 1 5 22222 113 117 90036
20 0 0 0 167 193 954089
21 1 1 4401 16 16 62
22 2 7 52770 123 126 3750
23 5 5 72351 21 21 17268
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 16
us 62 78 724566
bg 44 78 714398
kh 22 22 279132
ca 9 9 36279
cn 3 3 552699
gb 3 3 29993
ua 2 2 2142
it 2 2 25592
br 2 2 42366
ru 2 2 8802
ir 1 1 1324
dk 1 1 21183
za 1 1 4401
nl 1 1 4401
in 1 1 0
be 1 1 21183
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 11
Baiduspider/ 52 149465 20260912201708 2
Applebot/ 46 607100 20260914045027 7
Baiduspider- 24 771687 20260912200354 0
scanner 9 39609 20260915071624 0
checker 4 84748 20260907114426 0
bot[\s_+:,\.\;\/\\-] 2 206 20260910005341 2
unknown 2 206 20260912195027 2
robot 2 206 20260911064528 2
survey 1 4401 20260908024507 0
(firefox/)([0-9]\.|[0-1][0]\.) 1 21191 20260906112641 0
Googlebot/ 1 4401 20260915071551 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 6
php 13 159857 0 0
xml 7 517004 0 0
js 33 534159 0 0
txt 2 36184 0 0
png 15 3869 0 0
html 137 1217388 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 3
/LICENSE.txt 5 0 90460
/web.config.txt 3 0 8922
/htaccess.txt 3 0 20565
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 11
macosx 4 4
macosx10 1 0
win10 107 73
macosx12 2 2
macosx5 1 1
macosx9 2 2
Unknown 51 36
linux 19 19
macosx15 18 18
win7 1 1
win8.1 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 47
safari17.0 1 1
chrome122.0.0.0 1 1
chrome49.0.2640.61 1 1
mozilla 39 24
firefox132.0 2 2
firefox48.0 1 1
safari18.1 3 3
chrome39.0.2171.95 1 0
chrome131.0.0.0 2 2
chrome120 2 2
chrome126.0.0.0 5 5
firefox97.0 1 1
chrome125.0.0.0 3 3
firefox133.0 8 8
chrome120.0.0.0 3 3
chrome89.0.4389.114 3 3
firefox93.0 1 1
chrome20.0.1132.57 1 1
chrome137.0.0.0 78 44
safari16.3 1 1
netscape5.0 5 5
firefox126.0 1 1
safari17.1.1 1 1
safari17.4 1 1
chrome92.0.4515.107 2 2
chrome142.0.0.0 2 2
firefox47.0 1 1
chrome53.0.2836.28 1 1
chrome126.0 2 2
safari18.5 1 1
safari15.6.7 1 1
safari15.6.1 1 1
chrome121.0.0.0 8 8
chrome106.0.0.0 1 1
chrome140.0.0.0 1 1
safari3.1.1 1 1
firefox106.0 1 1
chrome124.0 2 2
chrome53.0.2807.92 1 1
chrome148.0.0.0 2 2
safari13.1.2 1 1
msie8.0 1 1
msie9.0 1 1
chrome119.0.0.0 1 1
safari7.0.3 1 1
Unknown 8 8
firefox142.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260913231944
Mozilla/5.0 20260901090303
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260912061242
RootEvidence/1.0 20260912031104
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260914155536
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
RootEvidence/1.0 20260912031104
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260912061242
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 130 178
From1 0 0
From2 0 0
From3 1 1
From4 26 28
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
https://metrophoenixjob.com//blog//wp-login.php 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
403 31 23746
406 1 29
301 16 4748
404 2482 1012492
401 1 34
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 830
/inso.php 6 -
/shiny.php 6 -
/bootstrap.php 1 -
/test/wp-admin/install.php 2 -
/wp-mail.php 1 -
/v1.40/containers/json 2 -
/mga.php 2 -
/file0.php 1 -
/felnggg.php 5 -
/ded.php 6 -
/tegubsiu.php 1 -
/cae.php 2 -
/img.php 2 -
/0.php 6 -
/olfclass.php 1 -
/tmp/822822.php8 1 http://metropolitano.espacofacial.com.br/index.php
/xnm-apc.php 3 -
/test1.php 2 -
/aaf.php 6 -
/wp-konfig.backup.php 1 -
/nx80954.txt 6 -
/min.php 5 -
/pouhg.php 1 -
/155.php 8 -
/administrator/tmp/nx80954.txt 6 -
/tmp/x.xml 2 -
/sitemap.xml 1 -
/efile.php 2 -
/admin.php 9 -
/wordpress/wp-includes/wlwmanifest.xml 1 -
/erty.php 1 -
/nox.php 5 -
/wp1/wp-includes/wlwmanifest.xml 1 -
/mmq.php 1 -
/aws_settings.php 1 -
/class.5.php 2 -
/wp-includes/pomo/xxx.php 1 -
/test.php 1 -
/fns.php 1 -
/jybkxer.php 4 -
/media/com_pagebuilderck/js/pagebuilderck.js 2 -
/in.php 3 -
/wp-content/themes/index.php 14 -
/wp-content/uploads/ 12 -
/nxc.php 2 -
/snq.php 1 -
/file.php 8 -
/aws_config.php 1 -
/abcd.php 7 -
//sys.php 1 -
/filemanager.php 1 -
/tmp/822822.svg 1 http://metropolitano.espacofacial.com.br/index.php
/fraro.php 1 -
/vx.php 1 -
/env.php 1 -
/php_info.php 1 -
/login.jsp 2 -
/f432c37202b5a3.php 1 -
/wp-includes/wlwmanifest.xml 1 -
/news/wp-includes/wlwmanifest.xml 1 -
/src/.git/config 1 -
/class20.php 1 -
/public/vx.php 1 -
/debuggen.php 1 -
/b8.php 13 -
/file10.php 2 -
/oldsite/wp-admin/install.php 2 -
/xs.php 4 -
/media/com_icagenda/ 2 -
/f6.php 1 -
/key.php 8 -
/agg.php 1 -
/504.php 2 -
/ws79.php 1 -
/images/nx80932.txt 6 -
/CDX1.php 1 -
/.aws/config 2 http://www.metropolitano.espacofacial.com.br/
/%252f/.env.local 2 http://www.metropolitano.espacofacial.com.br/
/atex1.php 1 -
/ioxi-o.php 1 -
/biufile.php 8 -
/das.php 6 -
/133.php 6 -
/wsws.php 1 -
/mk.php 2 -
/tmp/config.xml 2 -
/tmp/d5f2b4476f70169.txt 3 http://metropolitano.espacofacial.com.br/component/jce
/dyt8mjxc3yofbkoriukvgjaCdefault.php 6 -
/sale.php 1 -
/almafkew.php 2 -
/v4.php 2 -
/public/mah.php.php 1 -
/adminner.php 6 -
/.aider.conf.yml 2 http://www.metropolitano.espacofacial.com.br/
/phina.php 1 -
/xmy.php 1 -
/phpinfo01.php 1 -
/scnr-probe-404-b7e21c9a4f 1 -
/ffile.php 1 -
/index.php 304 -
/api/data/query 1 -
//koiy.php 1 -
/api/db/query 1 -
/queue.php 1 -
/api/.git/config 1 -
/administrator/components/com_splms/splms.php 2 -
/wp-admin/network/plugins.php 7 -
/var/www/.git/config 1 -
/ws62.php 1 -
/fm.php 1 -
/2d7433/index.php 1 -
/api/ 5 -
/groceries/index.php 1 -
/wp-whe.php 1 -
/tmp/822822.php7 1 http://metropolitano.espacofacial.com.br/index.php
/user-new.php 1 -
/.claude/.credentials.json 2 http://www.metropolitano.espacofacial.com.br/
/cli_bootstrap.php 1 -
/atkno.php 1 -
/shop/wp-admin/install.php 2 -
/bengi.php 1 -
//wp-includes/assets/ 5 -
/error_log.php 2 -
/rum.or.php 1 -
/wp-content/admin.php 7 -
/tmp/822822.php.PhP 1 http://metropolitano.espacofacial.com.br/index.php
/txets.php 2 -
/localconf.php 1 -
/media/jce/nx80932.txt 6 -
/blog/wp-admin/install.php 2 -
/dox.php 2 -
/wp-config.backup.php 1 -
/file-gertdxz.php 2 -
/.buildkite/pipeline.yml 2 http://www.metropolitano.espacofacial.com.br/
/time.php 1 -
/wp-content/plugins/hellopress/wp_filemanager.php 17 -
/wp-filemannger.php 2 -
/api/.env 2 http://www.metropolitano.espacofacial.com.br/
/ho.php 1 -
/tmp/cve48907-ektncb.xml.php 1 -
/wordpress/wp-login.php 1 -
/myfile.php 1 -
/media/com_pagebuilderck/css/pagebuilderck.css 2 -
/credentials/store/system/domain/_/api/json 2 -
/session.php 1 -
/gecko.php 6 -
/adminer-4.7.6-en.php 1 -
/media/nx80932.txt 6 -
/406.php 1 -
/logs/nx80932.txt 6 -
/.bash_history 2 http://www.metropolitano.espacofacial.com.br/
/config/laravolt/css/index.php 1 -
/admin-ajax.php 1 -
/api/rds/execute 1 -
/tmp/822822.php5 1 http://metropolitano.espacofacial.com.br/index.php
/1100.php 1 -
/templates/gridbox/library/icons/material/material.css 1 -
/x.php 3 -
/sadd.php 1 -
//cgi-bin/index.php 7 -
/wp-blog.php 6 -
/00zip.php 2 -
/bless.php 6 -
/xamp.php 4 -
/mamzi.php 1 -
/lib../.git/config 2 -
/wp/wp-login.php 1 -
/nexus.php 1 -
//wp-includes/js/tinymce/themes/inlite 1 -
/bibil.php 2 -
//u88.php 1 -
/aws_keys.php 1 -
/saml.php 1 -
/xkSudf.php 2 -
/wp-content/ 7 -
/wp-info.php 1 -
/css../.git/config 2 -
/oiko6u.php 1 -
/fun.php 1 -
/content../.git/config 2 -
/177.php 1 -
/file31.php 1 -
/c4.php 2 -
/GMJ6LnoT8rQ.php 1 -
/cache-compat.php 1 -
/wp-admin/w.php 1 -
/btx25.php 2 -
/requirements.php 1 -
/wp-content/l.php 1 -
/ebkid.php 2 -
/infos.php 1 -
/elements.php 1 -
/ff2.php 2 -
/images/stories/nx80932.txt 6 -
/events../.git/config 2 -
/sitemap.php 2 -
/vpn.php 7 -
/xin1.php 1 -
/pp.php 1 -
/database.php 1 -
/mac.php 14 -
/application.config.php 1 -
/nauik.php 3 -
/wp-admin/css/bolt.php 1 -
/.circleci/config.yml 2 http://www.metropolitano.espacofacial.com.br/
/filesystems.php 1 -
/blurbs.php 7 -
/wordpress/wp-admin/install.php 2 -
/index.php/component/users 2 http://metropolitano.espacofacial.com.br/component/users
/media/com_splms/ 2 -
/oc460l3x.php 1 -
/simple.php 11 -
//h.php 1 -
/administrator/components/com_jdownloads/assets/upload/upload-handler.php 3 -
/tesla.php 1 -
/forbidals.php 1 -
/als.php 6 -
//edit.php 7 -
/44.php 3 -
/n30n.php 2 -
/hur.php 1 -
/tcxhzlea.php 1 -
/5DSvcpyJW24.php 1 -
/tmp/822822.shtml 1 http://metropolitano.espacofacial.com.br/index.php
/csknilus.php 1 -
/tmp/cve48907-qpvpbe.xml.php 1 -
/site/wp-includes/wlwmanifest.xml 1 -
/mds.php 1 -
/file58.php 2 -
/file88.php 2 -
/app.default.php 1 -
//elp.php 1 -
/ 1 -
/aws_credentials.php 1 -
//wp-includes/Requests/ 5 -
/bnmtp.php 2 -
/loxi-o.php 1 -
/media/jce/nx80954.txt 6 -
/we.php 1 -
/FWAZ.php 4 -
/wom.php 1 -
/%u002f/.env 2 http://www.metropolitano.espacofacial.com.br/
/phinx.yaml 1 -
/82.php 1 -
/linusadmin-phpinfo.php 1 -
/prv8.php 1 -
/geoserver/web/ 1 -
/components/com_splms/com_splms.php 2 -
/wpver.php 1 -
/file52.php 5 -
/blog/ 1 https://metrophoenixjob.com//blog//wp-login.php
/gecko-litespeed.php 1 -
/dairg.php 1 -
/adminan.php 3 -
/api/session/properties 5 -
/xc.php 2 -
/1d9e308d1fb8cd.php 1 -
/api.php 1 -
//CAE-2.5.php 5 -
/replace.php 4 -
/3.php 1 -
/uploads/nx80954.txt 6 -
/yyyy.php 1 -
/info.php/new.php 2 -
/xp.php 2 -
/media.php 14 -
/3PJcpMFsD8B.php 14 -
/media/tmp/cve48907-qzeutz.xml.php 1 -
/file1221.php 5 -
/za-557.php 1 -
/tinyfilemanager.php 1 -
/brc.php 1 -
/f35.php 9 -
/.bundle/config 2 http://www.metropolitano.espacofacial.com.br/
/new/wp-admin/install.php 2 -
/xxmsnzra.php 1 -
/tmp/cve48907-dwozbp.xml.php 1 -
/i18n.php 1 -
/ddd.php 2 -
/wp-manager.php 7 -
/config_dev.php 1 -
/tmp/cve48907-qzeutz.xml.php 1 -
/routes.php 1 -
/classsmtps.php 1 -
//adminfuns.php 13 -
//xza.php 1 -
/ans.php 1 -
/app/.git/config 1 -
/zz.php 1 -
/file8.php 2 -
/fling.php 10 -
/file5.php 1 -
//admin.php 6 -
/konfig.php 1 -
/fffm.php 1 -
/js../.git/config 2 -
/sts.php 2 -
/tmp/cox.txt 2 -
/wp/wp-admin/install.php 2 -
/ano.php 3 -
/xetmolxr.php 1 -
/a1vx.php 1 -
/public/.env 2 http://www.metropolitano.espacofacial.com.br/
/cache/nx80932.txt 6 -
/product.php 1 -
/cong.php 1 -
/p.php 1 -
/inx.php 6 -
/X57.php 1 -
/images.php 13 -
/app_dev.php 1 -
/site.php 6 -
/red.php 6 -
/administrator/components/com_gridbox/gridbox.xml 1 http://metropolitano.espacofacial.com.br/templates/gridbox/library/icons/material/material.css
/g3.php 1 -
/wp-goods.php 1 -
/paypal.php 1 -
/test01.php 1 -
/reop3.php 1 -
/vo8lvekd4hhiu6meydu56piCdefault.php 1 -
/2P.php 1 -
/.git/HEAD 2 -
/sito/wp-includes/wlwmanifest.xml 1 -
/edit-tags.php 3 -
/backup-helper.php 1 -
/25.php 1 -
/wp-access.php 2 -
/wawan.php 2 -
/zzfenvgd.php 1 -
/inputs.php 6 -
/new.php 3 -
/wp-admin/includes/fex.php 1 -
/wnnjpsby.php 2 -
/plugins.php 1 -
/tmp/profile.xml 2 -
/fryvbbn.php 1 -
/billzgs.php 5 -
/fifii.php 1 -
/zpcutwcq.php 1 -
/avbxfstf.php 1 -
/kir.php 8 -
///admin.php 7 -
/wp/wp-includes/wlwmanifest.xml 1 -
/component/users 3 http://metropolitano.espacofacial.com.br/index.php
/web/wp-includes/wlwmanifest.xml 1 -
/myglu.php 1 -
/zoo1.php 2 -
/mari.php 2 -
/tmp/exploit.xml 2 -
/sm.php 7 -
/motu.php 1 -
/lm15.php 1 -
/FAAJ9o.php 1 -
/wp-tem.php 1 -
/admi.php 1 -
/z60.php 3 -
/leeocvou.php 1 -
/lala.php 1 -
/aws.php 1 -
//ms.php 1 -
/xa.php 1 -
/app/.env 2 http://www.metropolitano.espacofacial.com.br/
/gi2.php 2 -
/media/astroid/ 2 -
/wp2/wp-includes/wlwmanifest.xml 1 -
/wp-includes/Text/Diff/Engine/about.php 7 -
/server_info.php 1 -
/saorvwys.php 1 -
/bigdump.php 1 -
/services.php 1 -
/%252f/.env 2 http://www.metropolitano.espacofacial.com.br/
/this_is_a_new_hello_world.php 16 -
/BDKR28Wo.php 2 -
/fw.php 1 -
/wp-json/gravitysmtp/v1/tests/mock-data 3 -
/124.php 1 -
/wp-load.php 2 -
/bulet.php 3 -
/.cargo/credentials 2 http://www.metropolitano.espacofacial.com.br/
/wp-admin/install.php 2 -
/05.php 1 -
/wp-includes/index.php 1 -
/tmp/822822.php% 1 http://metropolitano.espacofacial.com.br/index.php
/%2f.env 2 http://www.metropolitano.espacofacial.com.br/
/xxw.php 2 -
/debug.php 1 -
/old_phpinfo.php 1 -
//wa.php 1 -
/k.php 11 -
/database2.php 1 -
/sym.php 2 -
/media/tmp/cve48907-dwozbp.xml.php 1 -
/blog/wp-includes/wlwmanifest.xml 1 -
/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance 1 -
/file32.php 1 -
/adminimagess.php 4 -
/ccc.php 7 -
/2020/wp-includes/wlwmanifest.xml 1 -
/dialog.php 1 -
/xiugai.php 6 -
/wp-admin/css/ 8 -
//wp-includes/js/jquery/ 5 -
/xmlrpc.php 2 -
/tmp/822822.phar 1 http://metropolitano.espacofacial.com.br/index.php
/logs/nx80954.txt 6 -
/fucku.php 1 -
/araso.php 6 -
/robot.php 5 -
//w.php 1 -
/BDKR28WP.php 14 -
/temp.php 1 -
/templates/shaper_helix3/templateDetails.xml 4 -
/adminfus.php 1 -
/%2f.env.local 2 http://www.metropolitano.espacofacial.com.br/
/.git/index 2 -
//wp-content/plugins/erinyani/ 2 -
/maxro.php 1 -
/wsd.php 6 -
/api/v4/ci/variables 2 -
/.composer/auth.json 1 http://metropolitano.espacofacial.com.br/
/tmp/822822.phps 1 http://metropolitano.espacofacial.com.br/index.php
/fms.php 6 -
/en 1 -
/sdsa.php 1 -
/btyuio.php 8 -
/bezzozdp.php 1 -
/fifi.php 1 -
/fi22.php 4 -
/r57.php 1 -
/wordpress/.git/config 1 -
/tmp/822822.PhP 1 http://metropolitano.espacofacial.com.br/index.php
/.aws/credentials 2 http://www.metropolitano.espacofacial.com.br/
/cp2.php 1 -
/api/json 1 -
/postgres/query 1 -
/aa.php 3 -
/administrator/tmp/cve48907-dwozbp.xml.php 1 -
/aws-credentials.php 1 -
/setup-config.php 1 -
/administrator/tmp/cve48907-qzeutz.xml.php 1 -
/test/wp-includes/wlwmanifest.xml 1 -
/ba.php 8 -
/7.php 1 -
/sb.php 6 -
/v4on3fxtoo5z5cq0yCdefault.php 7 -
/k2.php 3 -
/main/wp-login.php 1 -
/foxv10.php 1 -
/tmp/malicious_profile.xml 2 -
/x33.php 2 -
/G-in.php 1 -
/lmfi2.php 1 -
/.env.production 2 http://www.metropolitano.espacofacial.com.br/
/images../.git/config 2 -
/ssilver.php 1 -
/aaa.php 8 -
/gnmlc.php 1 -
/h02ugyh.php 6 -
/chosen.php 15 -
/06.php 1 -
/thui.php 1 -
/search 3 http://metropolitano.espacofacial.com.br/index.php/component/users/remind
/retu11.PhP 1 -
/wp-admin/css/colors/blue/ 7 -
/img../.git/config 2 -
/log.php 1 -
/shop/wp-includes/wlwmanifest.xml 1 -
/hochladen.form.php 1 -
/wp-update.php 1 -
/components/com_pagebuilderck/views/page/tmpl/default.php 2 -
/phinx.yml 1 -
/sgd.php 1 -
/public/wp-blog.php 1 -
/wp-links-opml.php 1 -
/wp-content/mod/adminfuns.php 1 -
/wp-class.php 1 -
/wp-act.php 1 -
/old/wp-admin/install.php 2 -
/one.php 2 -
/cloud.php 1 -
/asdf.php 1 -
/cabs.php 6 -
/ssg.php 1 -
//aww.php 1 -
/xex.php 5 -
/wp-admin/maint/index.php 7 -
/assets../.git/config 2 -
/blog/wp-login.php 1 -
/wp-mails.php 3 -
/or.php 11 -
/mcebraed.php 1 -
/kok.php 1 -
/fff.php 1 -
/file61.php 2 -
/i99z7zzbwtpteujvv6s8hiCdefault.php 6 -
/wp-content/index.php 7 -
/qazwsx.php 7 -
/bb.php 1 -
/tmp/configs.php 1 -
/xmini4.php 3 -
/private_html.php 1 -
/mu2.php 1 -
/puc.php 6 -
/templates/astroid/index.php 2 -
/ab.php 3 -
/public/.git/config 1 -
/87.php 1 -
/wdf.php 1 -
/xda.php 1 -
/cvx.php 1 -
/ms.php 1 -
/hndkzla.php 1 -
/zaza.php 1 -
/apikeys.php 1 -
/.well-known/nam.php 1 -
/2019/wp-includes/wlwmanifest.xml 1 -
/C.php 1 -
/.codex/config.json 1 http://metropolitano.espacofacial.com.br/
/0day.php 6 -
/params.php 1 -
//av.php 14 -
/.amplify-hosting/deploy-manifest.json 2 http://www.metropolitano.espacofacial.com.br/
/server-info.php 1 -
/1wvekeybd9it2di2vyipgr6Cdefault.php 6 -
/menu.php 1 -
/ff1.php 1 -
/file65.php 1 -
/xqq.php 1 -
/paths.php 1 -
/pinfo.php 1 -
/_ignition/health-check 1 -
//deals1.php 1 -
/file59.php 6 -
/ass.php 6 -
/rds-data/ExecuteStatement 1 -
/_profiler/empty/search/results 2 -
/alfa.php 8 -
/m.php 2 -
/bp.php 1 -
/css.php 1 -
/htdocs/.git/config 1 -
/site/wp-login.php 1 -
/.cline/mcp_settings.json 2 http://www.metropolitano.espacofacial.com.br/
/file2.php 1 -
/4563.php 1 -
/phpversion.php 1 -
/reviall.php 6 -
/cdc.php 1 -
/8xmlr9ommwdy3ro8dCdefault.php 5 -
/test2.php 2 -
/autoload_classmap.php 2 -
/rxr.php 2 -
/classwithtostring.php 9 -
//cgi-bin/admin.php 7 -
/w.php 13 -
/tmp/822822.ph$p 1 http://metropolitano.espacofacial.com.br/index.php
/rpk.php 1 -
/efjgujst.php 1 -
/license.txt 2 -
/.boto 2 http://www.metropolitano.espacofacial.com.br/
/silver.php 5 -
/about.php 1 -
/dronishness.php 2 -
/fleen.php 1 -
/administrator/tmp/cve48907-ektncb.xml.php 1 -
/hiquido.com/index.php 1 -
/ah25.php 1 -
/doc.php 2 -
/01yellw.php 2 -
/media/tmp/cve48907-qpvpbe.xml.php 1 -
/media/nx80954.txt 6 -
/crgio.php 1 -
/www/.git/config 1 -
/ugmlxqxz.php 1 -
//uejvv.php 1 -
/wp-login.php 10 https://www.facebook.com/
/ws55.php 2 -
/radio.php 9 -
/ccou.php 1 -
/config/.env 2 http://www.metropolitano.espacofacial.com.br/
/autogooey.php 1 -
/wp-admin/sc.php 1 -
/gel4y.php 1 -
/images/stories/nx80954.txt 6 -
/sss.php 7 -
/.bzr/README 2 http://www.metropolitano.espacofacial.com.br/
/1xmomo.php 1 -
/mpwkxnos.php 1 -
/website/wp-includes/wlwmanifest.xml 1 -
/indo.php 5 -
/administrator/components/com_icagenda/icagenda.php 2 -
/tmp/822822.ph%p 1 http://metropolitano.espacofacial.com.br/index.php
/wp-content/k.php 1 -
/wp-filemanager1.php 1 -
//wp-includes/l10n/ 5 -
/alls.php 6 -
/%2f.env.production 2 http://www.metropolitano.espacofacial.com.br/
/kgblegacy.php 1 -
/api/v1/secrets 1 -
/web/wp-admin/install.php 2 -
/dk.php 2 -
/wander.php 5 -
/update.php 1 -
/ws61.php 1 -
/pass4.php 1 -
/wp-json/ 1 -
/flash-kiss.php 1 -
/gigi.php 3 -
/8.php 11 -
/.cache/huggingface/token 2 http://www.metropolitano.espacofacial.com.br/
/faii.php 1 -
/new/wp-login.php 1 -
/nail.php 3 -
/dev.php 2 -
/dex.php 14 -
/site/.git/config 1 -
/wp_blog_footer.php 13 -
/a3ampzmbipnkpxeqhqpsanCdefault.php 6 -
/public/bnn_.php.php 1 -
/1.php 15 -
/403dd.php 7 -
/packed.php 1 -
/cycfruf.php 4 -
/login 2 http://metropolitano.espacofacial.com.br/
/i.php 1 -
/var/www/wallet/index.php 1 -
/tmp/822822.phtm 1 http://metropolitano.espacofacial.com.br/index.php
/wso.php 1 -
/By4mzbsowFX.php 1 -
/c.php 2 -
/aaaa.php 1 -
/koiy.php 1 -
/gwaih1gfzp5vuwr04Cdefault.php 6 -
/tax.php 1 -
/channels.php 1 -
/phpi.php 1 -
/888.php 2 -
/index.php/component/users/remind 3 http://metropolitano.espacofacial.com.br/index.php/component/users/
//aa.php 1 -
/file6.php 2 -
/wp/ 1 https://metrophoenixjob.com//blog//wp-login.php
/a.php 6 -
/wp-ainefgskk.php 1 -
/tmp/822822.php4 1 http://metropolitano.espacofacial.com.br/index.php
/wp-activate.php 1 -
/z70.php 2 -
/wp-includes/blocks/audio/ 7 -
/class.2.php 2 -
/index.php/component/users/ 3 http://metropolitano.espacofacial.com.br/index.php/component/users
/goods.php 5 -
/4PJcpMFsD8B.php 12 -
/File.php 6 -
/god.php 1 -
/html/.git/config 1 -
/file48.php 2 -
/administrator/tmp/nx80932.txt 6 -
/222.php 11 -
/pucci.php 6 -
/wp.php 9 -
/f35.update.php 4 -
/cccc.php 2 -
/2Tb9ay.php 1 -
/phpsysinfo.php 1 -
/modules.php 1 -
/backend/.git/config 1 -
/cae2.2.php 6 -
/blacks.php 7 -
/wss.php 1 -
/aws_secret_config.php 1 -
/av.php 8 -
/dejavu.php 6 -
/wp-konfig.php 1 -
/baru.php 2 -
/d5f2b4476f70.php 18 http://metropolitano.espacofacial.com.br/tmp/822822.php.PhP
/images/icagenda/ 2 -
/actuator 2 -
/adminfuns.php 1 -
/verox.php 4 -
/.env 2 http://www.metropolitano.espacofacial.com.br/
/tmp/822822.php 1 http://metropolitano.espacofacial.com.br/index.php
/php-info.php 1 -
/nzv.php 1 -
/Dss.php 1 -
/upload.form.php 1 -
/pJPoKA.php 5 -
/.claude/mcp.json 2 http://www.metropolitano.espacofacial.com.br/
/grsiuk.php 3 -
/file68.php 1 -
/mails.php 1 -
/xx.php 1 -
/100.php 3 -
/imageskir.php 2 -
/public/rip.php.php 1 -
/fix.php 1 -
/administrator/tmp/cve48907-qpvpbe.xml.php 1 -
/t.php 1 -
/robots.php 7 -
/makeasmtp.php 7 -
/wp-includes/ID3/about.php 7 -
/aws_auth.php 1 -
/wp-admin/css/colors/modern/ 8 -
//thui.php 1 -
/wp-admin/css/colors/sunrise/ 8 -
/ai.php 1 -
/nw.php 1 -
/.claude.json 2 http://www.metropolitano.espacofacial.com.br/
/test.config.php 1 -
/guk.php 1 -
/ftde.php 1 -
/.cloudflared/config.yml 1 http://metropolitano.espacofacial.com.br/
/app_local.php 1 -
/otuz1.php 1 -
/wp-admin/ 1 -
/file4.php 2 -
/wmore1.php 3 -
/images/nx80954.txt 6 -
/tmp/822822.PHP 1 http://metropolitano.espacofacial.com.br/index.php
/tmp/nx80932.txt 6 -
/.claude/settings.local.json 2 http://www.metropolitano.espacofacial.com.br/
/backup/wp-admin/install.php 2 -
/wp-comments-post.php 1 -
/wo.php 1 -
/cu.php 1 -
//drykl.php 1 -
//dd.php 1 -
/cache/nx80954.txt 6 -
/backend/.env 2 http://www.metropolitano.espacofacial.com.br/
/ops.php 14 -
/config.php 1 -
/waa.php 1 -
//wp-includes/block-bindings/ 7 -
/app/Models/Hrm/Employee.php 1 -
/iov.php 1 -
/24.php 2 -
/CAE-2.5.php 6 -
/remote/fgt_lang 2 -
//xve22.php 1 -
/ebahvhhh.php 1 -
/site/wp-admin/install.php 2 -
/register.php 1 -
/v3.php 1 -
/insc.php 6 -
/cxc.php 1 -
/os.php 2 -
/media/astroid/assets/js/astroid.js 2 -
/NewFile.php 1 -
/wp-admin/maint/wp-is.php 1 -
/php-details.php 1 -
/sky.php 5 -
/.claude/settings.json 2 http://www.metropolitano.espacofacial.com.br/
/hosty.php 1 -
/environment.php 1 -
/dnjyoumb.php 1 -
/great.php 7 -
/nofile.php 8 -
/nx80932.txt 6 -
/333.php 1 -
/bypass2.php 1 -
//database2.php 2 -
/images2.php 3 -
/avim.php 1 -
/plss3.php 1 -
/ant.php 3 -
/v.php 1 -
/static../.git/config 2 -
/userfuns.php 1 -
/cms/wp-admin/install.php 2 -
/wp-includes/js/fosil.php 1 -
/_profiler/phpinfo 1 -
/app 2 -
/administrator/manifests/files/com_pagebuilderck.xml 2 -
/gk.php 1 -
/wp-admnn.php 1 -
/app/Helpers/bladeHelpers.php 1 -
/ty.php 1 -
/tmp/822822.pht 1 http://metropolitano.espacofacial.com.br/index.php
/ms-edit.php 6 -
/configuration.php 1 -
/wp-22.php 1 -
/nlnub.php 1 -
/png.php 1 -
/cms/wp-includes/wlwmanifest.xml 1 -
/gjm.php 1 -
/gulu.php 4 -
/sallu.php 3 -
/umgebung.php 1 -
/wefile.php 2 -
/wp-includes/blocks/post-comments-form/ 4 -
/media/tmp/cve48907-ektncb.xml.php 1 -
/file9.php 2 -
/baba.php 7 -
/run.php 8 -
//wp-admin/js/index.php 7 -
/tmp/822822.phtml 1 http://metropolitano.espacofacial.com.br/index.php
/bnbfggf.php 1 -
/wp-includes/blocks/details/ 5 -
/tmp/nx80954.txt 6 -
/.azure/accessTokens.json 2 http://www.metropolitano.espacofacial.com.br/
/asa.php 1 -
/.cargo/config.toml 2 http://www.metropolitano.espacofacial.com.br/
/administrator/components/com_astroid/ 2 -
/wordpress/ 1 https://metrophoenixjob.com//blog//wp-login.php
/media../.git/config 2 -
/blog/robots.txt 1 https://metrophoenixjob.com//blog//wp-login.php
/felnggg.update.php 2 -
/wp-temp.php 5 -
/.codex/auth.json 1 http://metropolitano.espacofacial.com.br/
/46dbr8i8qeclytcxawrCdefault.php 1 -
/geck.php 6 -
/dehnl.php 2 -
/actuator/health 1 -
/kedi.php 1 -
/cms/wp-login.php 1 -
/.git/config 3 -
/broadcasting.php 1 -
//0.php 1 -
/uploads/nx80932.txt 6 -
/.codeium/config.json 1 http://metropolitano.espacofacial.com.br/
/.config/anthropic/credentials/default.json 1 http://metropolitano.espacofacial.com.br/
/11.php 7 -
/botwdhur.php 1 -
/.codeium/windsurf/mcp_config.json 1 http://metropolitano.espacofacial.com.br/
/aws_sdk_settings.php 1 -
/moon.php 2 -
/dx.php 1 -
/components/com_icagenda/com_icagenda.php 2 -
//admin1.php 2 -
/file21.php 1 -
/mod_simplefileuploadv1.3.php 1 -
/66.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 52
85.239.151.78 44 78 714398 20260915014908
66.132.195.121 16 16 23748 20260910113435
124.108.50.149 14 14 214258 20260902060825
104.28.236.82 11 11 105931 20260906112621
124.108.50.136 8 8 64874 20260914071551
20.212.233.41 4 4 84748 20260901090303
165.154.46.26 4 4 14274 20260915071543
8.234.251.105 3 4 89688 20260901230351
66.132.186.166 2 2 8802 20260913231944
51.15.215.70 2 2 25592 20260910082801
3.18.186.238 2 2 42382 20260907084424
170.205.31.43 2 2 42366 20260905092439
194.114.136.4 2 2 2142 20260902165526
104.30.167.164 2 2 0 20260909024233
23.19.228.103 2 2 42374 20260905024749
185.79.138.71 2 2 8802 20260909140313
201.51.24.4 2 2 42366 20260901021557
34.125.56.225 1 1 4401 20260910124012
54.39.100.119 1 1 4401 20260914171034
168.144.251.110 1 1 4401 20260914062128
169.40.142.134 1 1 21191 20260901074302
3.151.194.164 1 1 21183 20260906022546
66.132.172.46 1 5 22222 20260904102835
147.185.132.81 1 1 21191 20260902064207
147.185.132.159 1 1 21191 20260906132808
205.210.31.56 1 1 4401 20260909081546
151.242.17.99 1 1 1324 20260905040530
193.29.139.251 1 1 4401 20260910213739
143.198.64.146 1 1 21183 20260902014910
150.251.225.28 1 1 21183 20260904021109
106.63.26.155 1 1 21191 20260903120720
167.94.146.57 1 5 22222 20260906190240
173.239.217.182 1 1 4401 20260910224558
34.132.20.171 1 1 21183 20260907071758
106.63.26.147 1 1 21183 20260903142219
158.173.77.142 1 1 21183 20260903081729
199.45.154.123 1 4 21943 20260906181946
71.6.240.198 1 1 4401 20260912031104
205.210.31.54 1 1 4401 20260912061242
106.63.26.139 1 1 510325 20260903120747
195.96.139.121 1 1 4401 20260914155536
66.132.195.99 1 5 22230 20260902222035
196.189.51.191 1 1 4401 20260913000925
31.76.240.172 1 1 4401 20260909140241
71.6.237.222 1 1 4401 20260912023943
167.71.26.13 1 1 21191 20260904012709
205.210.31.230 1 1 4401 20260908125337
103.18.77.223 1 1 0 20260906090120
205.188.198.1 1 1 4401 20260911062114
195.96.139.79 1 1 21191 20260905010018
3.139.242.79 1 1 21191 20260903035428
198.235.24.140 1 1 4401 20260908100640
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 15
20260901 10 11 237993 5
20260902 19 23 281004 5
20260903 6 6 616264 6
20260904 3 7 64596 3
20260905 6 6 107255 4
20260906 17 24 213661 7
20260907 2 2 42374 2
20260908 3 3 13203 3
20260909 5 5 13203 4
20260910 20 20 41352 5
20260911 1 1 4401 1
20260912 3 3 13203 3
20260913 3 3 13203 2
20260914 35 52 444064 5
20260915 24 41 362685 3
END_DAY

# Session range - Number of visits
BEGIN_SESSION 6
5mn-15mn 1
30mn-1h 1
0s-30s 49
2mn-5mn 2
30s-2mn 3
15mn-30mn 2
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 22
/ 111 1170688 52 52
/index.php 7 106177 0 1
/plugins/editors/jce/jce.xml 5 5355 3 2
/administrator/index.php 4 53680 0 0
/formulario/ 3 3534 0 1
/administrator/ 3 40216 0 0
/cli/ 3 93 0 0
/components/ 3 93 0 0
/cache/ 3 93 0 0
/configuration.php 2 0 0 0
/components/com_jce/ 2 2392 1 0
/plugins/ 1 31 0 0
/layouts/ 1 31 0 0
/templates/ 1 31 0 0
/plugins/system/jce/jce.xml 1 1324 1 1
/libraries/ 1 31 0 0
/tmp/ 1 31 0 0
/media/ 1 31 0 0
/images/ 1 31 0 0
/sitemap.xml 1 510325 1 1
/language/ 1 31 0 0
/modules/ 1 31 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 7
100-500 54
1K-2K 14
0-44 1172
2K-5K 103
500-1K 1427
5K+ 117
44-100 6
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME
© 2026 UnknownSec