shell bypass 403

UnknownSec Shell

: /home/espa7358/tmp/awstats/ [ drwx------ ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 172.67.154.186
Your Ip: 216.73.217.33
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE
upload mass deface mass delete console

name : awstats092025.novohamburgo.espacofacial.com.br.txt 
AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202509 will be lost/reset.
# Last config file used to build this data file was /home3/espa7358/tmp/awstats/awstats.novohamburgo.espacofacial.com.br.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2101                
POS_TIME 2775                
POS_VISITOR 13528               
POS_DAY 14223               
POS_DOMAIN 3389                
POS_LOGIN 3662                
POS_ROBOT 3817                
POS_WORMS 3988                
POS_EMAILSENDER 4119                
POS_EMAILRECEIVER 4262                
POS_SESSION 14561               
POS_FILESIZE 14804               
POS_REQUESTTIME 14935               
POS_SIDER 14708               
POS_FILETYPES 4397                
POS_DOWNLOADS 4511                
POS_OS 4559                
POS_BROWSER 4680                
POS_SCREENSIZE 4939                
POS_UNKNOWNREFERER 5013                
POS_UNKNOWNREFERERBROWSER 5443                
POS_ORIGIN 5681                
POS_SEREFERRALS 5813                
POS_PAGEREFS 5957                
POS_SEARCHWORDS 6105                
POS_KEYWORDS 6257                
POS_MISC 2439                
POS_ERRORS 6316                
POS_CLUSTER 3518                
POS_SIDER_404 6433                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20251001011042 3 586 16974520643487
FirstTime 20250902055834
LastTime 20250930083230
LastUpdate 20251001092224 3 0 2 0 0
TotalVisits 16                  
TotalUnique 15                  
MonthHostsKnown 0                   
MonthHostsUnknown 17                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
AddToFavourites 0 7 0
TotalMisc 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 2 3 510
1 0 0 0 1 1 255
2 2 2 27224 171 174 402461
3 1 1 6293 42 42 97056
4 1 1 6294 1 2 946
5 2 2 12590 0 1 691
6 0 0 0 5 5 1275
7 0 0 0 0 0 0
8 1 1 6295 252 252 560577
9 0 2 2446 22 22 2111
10 2 6 7334 194 197 513838
11 0 0 0 9 9 2871
12 1 5 7333 2 5 1201
13 0 0 0 119 119 276747
14 2 6 13628 2 5 1201
15 1 5 7335 0 4 1527
16 0 0 0 1 1 255
17 0 0 0 0 0 0
18 0 0 0 93 93 217467
19 1 1 6295 18 18 38286
20 0 0 0 3 3 1346
21 1 1 20928 0 0 0
22 0 0 0 5 5 3390
23 1 1 6293 3 5 2292
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 5
us 9 25 60807
nl 2 2 12589
ca 2 4 44302
ru 2 2 12590
ro 1 1 0
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 1
no_user_agent 1 20928 20250914102753 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
html 16 123686 0 0
css 2 2446 0 0
png 16 4156 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
linux 3 3
macosx15 4 3
win11 1 1
win10 3 2
Unknown 23 7
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 11
chrome96.0.4664.45 1 1
firefox122.0 2 2
chrome139.0.0.0 2 2
chrome127.0.0.0 1 1
chrome20.0.1132.57 1 1
mozilla 21 5
chrome133.0.0.0 1 0
chrome124.0.0.0 1 0
Unknown 2 2
chrome104.0.0.0 1 1
chrome126.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250912211553
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250925121109
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250906040342
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250912211553
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 15 33
From1 0 0
From2 0 0
From3 0 0
From4 1 1
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
403 4 88488
301 43 10464
404 900 2001586
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 466
/uploan.php 1 -
/TNT.php 1 -
/get.php 1 -
/555.php 1 -
/reyna.php 2 -
/yellow.php 1 -
/cra.php 1 -
/jjzsijpj.php 1 -
/wp-json/wp/v2/users 1 -
/13k.php 1 -
/xc.php 1 -
/wp-old 1 -
/cron.php 1 -
/123.php 1 -
/shorw.php 2 -
/WP 1 -
/ff2.php 1 -
/ledlight.php 1 -
/zeal.php 3 -
/ertg.php 2 -
/ioxi2.php 6 -
/jga.php 2 -
/ar.php 4 -
/temp.php 2 -
/h8h9.php 2 -
/Old 1 -
/xjEuhHoaut.php 1 -
/html.php 1 -
/jp.php 2 -
/Shop 1 -
/slo.php 4 -
/shop 1 -
/tcp.php 4 -
/disagimons.php 1 -
/xex.php 2 -
/abcd.php 6 -
/chn.php 1 -
/fass.php 1 -
/ww.php 1 -
/weo.php 1 -
/noe.php 2 -
/7.php 1 -
/888.php 1 -
/qing.php 1 -
/aa17.php 4 -
/gaga.php 1 -
/loli.php 2 -
/va.php 1 -
/hello.php 1 -
/0kb.php 1 -
/note.php 2 -
/aa18.php 1 -
/.well-known/security.txt 3 -
/file32.php 6 -
/inc.php 1 -
/bypass.php 1 -
/2023 1 -
/bak 1 -
/minishell.php 1 -
/cf.php 1 -
/dropdown.php 2 -
/puts.php 1 -
/file9.php 2 -
/wordpress/ 1 -
/te.php 1 -
/Blog 1 -
/031.php 2 -
/bu10r7.php 1 -
/bizyqph.php 1 -
/sito 1 -
/2.php 1 -
/zwso.php 3 -
/bq.php 1 -
/php.php 2 -
/faq.php 1 -
/aaa.php 2 -
/bless5.php 1 -
/law.php 2 -
/great.php 2 -
/xpass.php 1 -
/aaaa.php 4 -
/hexx.php 3 -
/wpls.php 2 -
/mtrje.php 1 -
/lv.php 6 -
/grav.php 1 -
/atomlib.php 6 -
/system_log.php 4 -
/Site 1 -
/BLOG 1 -
/site 1 -
/moo.php 2 -
/sec.php 1 -
/sarang.php 1 -
/gm.php 5 -
/file1.php 5 -
/777.php 1 -
/wio.php 1 -
/file13.php 2 -
/file.php 6 -
/wordpress 1 -
/abhgt.php 2 -
/iov.php 2 -
/jlex3.php 2 -
/asasx.php 2 -
/alfa.php 1 -
/wp-config.php 1 -
/alf4.php 2 -
/ov.php 1 -
/orm.php 2 -
//wp-content/plugins/fix/up.php 1 -
/WordPress 1 -
/02.php 1 -
/huda.php 1 -
/acacia.php 1 -
/sao.php 1 -
/super.php 1 -
/run.php 1 -
/6erg.php 2 -
/shout.php 1 -
/1a.php 3 -
/blog 1 -
/ff.php 1 -
/666.php 1 -
/sxx.php 1 -
/Sanskrit.php 1 -
/hook.php 1 -
/yekzzq.php 1 -
/lol.php 2 -
/uwu2.php 2 -
/SITE 1 -
/10.php 1 -
/wsback.php 2 -
/pepe.php 1 -
/miansha.php 2 -
/size.php 1 -
/444.php 2 -
/samll.php 1 -
/mjq.php 2 -
/2018 1 -
/filei.php 2 -
/222.php 4 -
/TEST 1 -
/lupo.php 1 -
/13.php 6 -
/ot.php 2 -
/vxrl.php 3 -
/520.php 4 -
/karak.php 2 -
/zcxb.php 2 -
/CLA.php 8 -
/jx.php 1 -
/css.php 6 -
/lite.php 1 -
/sdsd777.php 1 -
/goat.php 6 -
/tarlv.php 1 -
/0x0x.php 1 -
/NEW 1 -
/2020 1 -
/a1.php 2 -
/2017 1 -
/ez.php 3 -
/tfm.php 1 -
/cccc.php 3 -
/.well-known/acme-challenge/about.php 4 -
/wp-cliner.php 2 -
/asus.php 1 -
/async.php 1 -
/class-t.api.php 2 -
/ronjgvf.php 1 -
/cjfuns.php 1 -
/nfile.php 1 -
/wp-admin/maint/maint.php 1 -
/rsnu.php 5 -
/cfile.php 7 -
/algox.php 2 -
/aw.php 1 -
/k90.php 1 -
/testas.php 2 -
/acxx.php 2 -
/content.php 1 -
/max.php 1 -
/wp-xm.php 2 -
/file21.php 1 -
/wp-mn.php 2 -
/abt.php 1 -
/vanta.php 2 -
/aucxcocoxo.php 2 -
/file2.php 4 -
/10266.php 1 -
/Wordpress 1 -
/x3x3x3x.php 1 -
/cool.php 4 -
/articles.php 1 -
/nbm.php 1 -
/you.php 1 -
/file4.php 2 -
/class20.php 2 -
/bless2.php 2 -
/fffff.php 1 -
/history.php 1 -
/yep.php 2 -
/krypton.php 2 -
/zews.php 1 -
/111.php 1 -
/raf.php 1 -
/WORDPRESS 1 -
/C1.php 2 -
/ho.php 1 -
/wp.php 3 -
/axx.php 5 -
/bypltspd.php 2 -
/i.php 1 -
/rei.php 1 -
/pkm.php 1 -
/New 1 -
/kk.php 1 -
/cbrfo.php 3 -
/gold.php 3 -
/fs.php 2 -
/file7.php 2 -
/ffile.php 7 -
/heroku.php 1 -
/a2.php 6 -
/gee.php 1 -
/upgrade.php 1 -
/bolt.php 4 -
/manager.php 4 -
/gif.php 1 -
/2x.php 1 -
/malo.php 1 -
/tlkzy.php 1 -
/autoload_classmap.php 2 -
/anan.php 1 -
/dfre.php 4 -
/akc.php 2 -
/ioxi.php 2 -
/elf.php 2 -
/124.php 1 -
/file18.php 2 -
/an.php 3 -
/wp-includes/certificates/plugins.php 2 -
/whv.php 1 -
/resp.php 3 -
/shell1.php 3 -
/file17.php 5 -
/667.php 3 -
/default.php 4 -
/OLD 1 -
/3.php 3 -
/bac 1 -
/huangs.php 1 -
/xhouf.php 2 -
/gfile1.php 4 -
/ova.php 1 -
/ioxi-o.php 2 -
/wp-gr.php 7 -
/2019 1 -
/bp.php 1 -
/wp-content/plugins/hellopress/wp_filemanager.php 11 -
/yanki.php 4 -
/shoha.php 1 -
/Webb.php 1 -
/wp-update.php 4 -
/bk 1 -
/WWW 1 -
/cbgd.php 1 -
/mms.php 1 -
/gfile.php 4 -
/hb02ugyh.php 2 -
/NH19T66T.php 1 -
/mws.php 2 -
/fork.php 1 -
/wander.php 2 -
/x.php 1 -
/path.php 1 -
/file6.php 2 -
/vast.php 2 -
/wp-xrm.php 1 -
/wp-kisaki.php 1 -
/bc 1 -
/usep.php 3 -
/goup.php 1 -
/7wom.php 2 -
/past.php 1 -
/vee.php 1 -
/berlin.php 1 -
/modules/mod_simplefileuploadv1.3/elements/filemanager.php 3 -
/2021 1 -
/89.php 2 -
/Ova-Simple.php 1 -
/wp-seo.php 1 -
/SHOP 1 -
/aa.php 6 -
/gifclass.php 2 -
/333.php 2 -
/Wp 1 -
/6.php 1 -
/trd.php 2 -
/wp-admin/setup-config.php 1 -
/claa.php 1 -
/aa2.php 1 -
/embed.php 1 -
/rjv.php 2 -
/tund.php 1 -
/wp-mt.php 1 -
/old-site 1 -
/www 1 -
/nc4.php 2 -
/des.php 5 -
/efile.php 3 -
/alpa.php 1 -
/v.php 1 -
/finny.php 1 -
/wp-trackback.php 2 -
/xzs.php 2 -
/lala.php 3 -
/ay.php 1 -
/ilex.php 2 -
/fe5.php 5 -
/tox.php 3 -
/dex.php 1 -
/r4f_1.php 3 -
/2022 1 -
/xox.php 1 -
/xmlrpc.php 1 -
/mbg.php 2 -
/epinyins.php 1 -
/folte.php 1 -
/shell20250630.php 2 -
/bless_250808022320.php 1 -
/zex4.php 2 -
/ss.php 1 -
/rak.php 2 -
/num.php 4 -
/file15.php 1 -
/jmfi2.php 5 -
/co.php 5 -
/ssss.php 2 -
/volka.php 1 -
/eauu.php 3 -
/pp.php 8 -
/sym.php 1 -
/lock360.php 7 -
/geck.php 1 -
/goh.php 2 -
/oldsite 1 -
/new 1 -
/status.php 1 -
/old 1 -
/wp-content/plugins/index.php 1 -
/word.php 1 -
/bitch.php 1 -
/berax.php 1 -
/card.php 2 -
/helper.php 2 -
/ll.php 1 -
/in.php 2 -
/.lajuju.php 2 -
/demo 1 -
/wp-cont.php 1 -
/aa21.php 1 -
/new4.php 6 -
/file3.php 2 -
/wp-xx.php 2 -
/error.php 7 -
/admi.php 2 -
/xx.php 1 -
/payout.php 1 -
/xBrain.php 1 -
/node.php 1 -
/class.1.php 4 -
/dev.php 2 -
/granary.php 1 -
/re.php 2 -
/zasd.php 2 -
/Www 1 -
/xLB2NXAP.php 1 -
/new.php 2 -
/cabs.php 1 -
/rrr.php 1 -
/test 1 -
/apply.php 1 -
/pm.php 2 -
/documentroot.php 1 -
/ma1.php 2 -
/hk.php 1 -
/fm.php 1 -
/12.php 1 -
/gmo.php 9 -
/public/wsr2.php 2 -
/hkn.php 1 -
/qil.php 1 -
/good.php 2 -
/jquery.php 1 -
/mo.php 4 -
/sxb.php 2 -
/akses.php 1 -
/ol.php 3 -
/nope.php 2 -
/blue.php 1 -
/tesla.php 2 -
/mr.php 2 -
/admin404.php 1 -
/MARIJUANA.php 3 -
/sad.php 2 -
/pola.php 2 -
/goods.php 2 -
/lc.php 3 -
/keu.php 2 -
/racs3.php 2 -
/.git/config 1 -
/akk.php 1 -
/file5.php 5 -
/config.php 1 -
/wp-key.php 1 -
/png.php 2 -
/makeasmtp.php 2 -
/w3llstore.php 3 -
/clawwww.php 1 -
/tech5pr.php 1 -
/as.php 1 -
/zadad4dadad1.php 1 -
/ee.php 3 -
/456.php 1 -
/gg.php 4 -
/fileas.php 1 -
/users/info.php 1 -
/2clas.php 1 -
/ayk.php 1 -
/11.php 1 -
/Lux.php 1 -
/H.php 2 -
/ahax.php 4 -
/Backup 1 -
/hg.php 1 -
/aucxzso.php 2 -
/prv8.php 1 -
/vbseo.php 1 -
/2024 1 -
/inputs.php 2 -
/we.php 7 -
/wp 1 -
/backup 1 -
/foot.php 2 -
/ava.php 7 -
/live.php 1 -
/ext.php 4 -
/mnkalo.php 2 -
/akcc.php 1 -
/fresh3.php 2 -
/file88.php 2 -
/disagreop.php 1 -
/filesss.php 2 -
/yasnu.php 5 -
/as4AaPasd.php 2 -
/v2.php 5 -
/sitio 1 -
/k.php 1 -
/wp-omo.php 1 -
/awi.php 1 -
/main 1 -
/wp-freya.php 1 -
/Test 1 -
/update.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 17
145.220.91.19 2 2 12589 20250924194113
185.247.137.11 1 1 6294 20250906040342
159.65.239.0 1 1 6296 20250913050441
185.129.48.13 1 1 6296 20250929025037
3.222.165.167 1 1 6295 20250930083230
3.235.16.184 1 1 6294 20250919143841
205.210.31.84 1 1 20928 20250912211553
192.238.175.16 1 1 6293 20250913030129
167.94.138.201 1 5 7335 20250906153227
89.38.208.127 1 1 0 20250904103444
205.210.31.225 1 1 20928 20250909022834
152.42.141.232 1 1 6293 20250926231520
199.45.154.120 1 5 7334 20250914140256
162.142.125.221 1 5 7333 20250925121105
206.168.34.52 1 5 7334 20250922100650
47.82.11.202 0 1 1361 
47.82.11.195 0 1 1085 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 14
20250902 1 1 6294 1
20250904 1 1 0 1
20250906 2 6 13629 2
20250909 1 1 20928 1
20250912 1 1 20928 1
20250913 2 2 12589 2
20250914 1 5 7334 1
20250919 1 1 6294 1
20250922 1 5 7334 1
20250924 1 1 6295 1
20250925 1 5 7333 1
20250926 1 1 6293 1
20250929 1 1 6296 1
20250930 1 3 8741 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 16
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 2
/ 15 123686 15 15
/BACKUP/ 1 0 1 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
500-1K 23
2K-5K 846
5K+ 20
1K-2K 2
0-44 52
100-500 57
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME
© 2026 UnknownSec