Al-HUWAITI Shell
Al-huwaiti


Server : LiteSpeed
System : Linux ncr1.int3rnet.net 4.18.0-553.123.2.lve.el8.x86_64 #1 SMP Thu May 7 23:17:13 UTC 2026 x86_64
User : digitaln ( 1704)
PHP Version : 8.1.34
Disable Function : NONE
Directory :  /home/digitaln/tmp/awstats/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/digitaln/tmp/awstats/awstats112025.btw.digitalnaitik.com.txt
AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202511 will be lost/reset.
# Last config file used to build this data file was /home/digitaln/tmp/awstats/awstats.btw.digitalnaitik.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2089                
POS_TIME 2760                
POS_VISITOR 8817                
POS_DAY 10186               
POS_DOMAIN 3363                
POS_LOGIN 3691                
POS_ROBOT 3846                
POS_WORMS 4117                
POS_EMAILSENDER 4248                
POS_EMAILRECEIVER 4391                
POS_SESSION 10583               
POS_FILESIZE 11268               
POS_REQUESTTIME 11401               
POS_SIDER 10779               
POS_FILETYPES 4526                
POS_DOWNLOADS 4648                
POS_OS 4696                
POS_BROWSER 4828                
POS_SCREENSIZE 5127                
POS_UNKNOWNREFERER 5201                
POS_UNKNOWNREFERERBROWSER 5733                
POS_ORIGIN 6071                
POS_SEREFERRALS 6205                
POS_PAGEREFS 6349                
POS_SEARCHWORDS 6497                
POS_KEYWORDS 6649                
POS_MISC 2424                
POS_ERRORS 6708                
POS_CLUSTER 3547                
POS_SIDER_404 6830                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20251202142910 1 0 4463413387662
FirstTime 20251101145534
LastTime 20251128124119
LastUpdate 20251202173102 1 0 0 0 0
TotalVisits 53                  
TotalUnique 34                  
MonthHostsKnown 0                   
MonthHostsUnknown 34                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
FlashSupport 0 0 0
QuickTimeSupport 0 0 0
JavascriptDisabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 155 155 474787 5 5 203837
1 0 0 0 0 0 0
2 4 4 221848 0 1 22
3 1 1 0 1 3 25317
4 0 0 0 1 1 0
5 3 3 0 8 8 832448
6 5 5 0 2 4 105853
7 3 3 22944 2 3 104056
8 1 1 0 1 1 1242
9 0 0 0 0 0 0
10 0 0 0 0 0 0
11 0 0 0 0 0 0
12 5 5 22944 1 3 77
13 4 4 0 3 5 105877
14 3 3 128 0 0 0
15 14 14 25321 0 0 0
16 2 2 0 1 1 24451
17 51 51 285684 6 8 126994
18 62 62 134984 3 3 102543
19 3 3 0 1 2 0
20 6 6 216777 0 2 0
21 3 3 0 3 3 48902
22 124 124 269968 6 6 205086
23 3 3 5 108 108 10925886
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 395 395 1101088
in 45 45 128
ua 3 3 135375
rs 2 2 221848
ca 2 2 105853
zz 2 2 174
au 1 1 0
ru 1 1 110924
se 1 1 0
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
checker 4 97804 20251103165715 0
no_user_agent 3 211706 20251116134822 0
Googlebot/ 2 25317 20251118031154 1
DotBot/ 2 77 20251120122750 1
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
php 412 147942 0 0
Unknown 12 998 0 0
html 28 1526450 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
linuxubuntu 2 2
linux 8 8
macosx15 5 5
Unknown 59 59
win10 378 378
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 13
firefox139.0 3 3
chrome131.0.0.0 1 1
firefox134.0 2 2
chrome120.0.0.0 1 1
chrome78.0.3904.108 225 225
safari17.3 1 1
chrome137.0.0.0 1 1
chrome88.0.4240.193 152 152
chrome126.0.0.0 1 1
chrome139.0.0.0 5 5
mozilla 11 11
Unknown 48 48
firefox123 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251115233501
WordPress/6.8.3;_https://btw.digitalnaitik.com 20251128124121
Cpanel-HTTP-Client/1.0 20251101145534
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20251105033126
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20251101152051
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
WordPress/6.8.3;_https://btw.digitalnaitik.com 20251128124121
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251115233501
Cpanel-HTTP-Client/1.0 20251101145534
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 452 452
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
301 17 54
404 125 12476391
403 1 1242
302 2 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 108
/f6.php 1 -
/zde.php 1 -
/x.php 1 -
/class20.php 1 -
/444.php 1 -
/thai.php 1 -
/webshell 2 -
/geck.php 1 -
/13ede.php 1 -
/la.php 1 -
/sh3ll.php 1 -
/333.php 1 -
/2clas.php 1 -
/.well-known/security.txt 1 -
/webshell.php 2 -
/efsd.php 1 -
/fileas.php 1 -
/wp-freya.php 1 -
/wa.php 1 -
/lock360.php 1 -
/i1.php 1 -
/X7x.php 1 -
/mail.php 1 -
/520.php 1 -
/wpo.php 1 -
/file15.php 1 -
/cabs.php 1 -
/lv.php 2 -
/pp.php 1 -
/bless3.php 1 -
/gifclass4.php 1 -
/classwithtostring.php 2 -
/file52.php 1 -
/abcd.php 1 -
/ut.php 1 -
/file.php 1 -
/ffile.php 1 -
/lites.php 1 -
/xx.php 1 -
/css.php 1 -
/vee.php 1 -
/opts.php 1 -
/indo.php 1 -
/aves.php 1 -
/abc.php 1 -
/avaa.php 1 -
/afile.php 1 -
/file2.php 1 -
/goat1.php 1 -
/inde.php 1 -
/gm.php 1 -
/bless5.php 1 -
/wsd.php 1 -
/file4.php 1 -
/1.php 1 -
/gorila.php 1 -
/file1.php 1 -
/fm.php 1 -
/filesss.php 2 -
/file21.php 1 -
/file7.php 1 -
/about.php 1 -
/info.php 1 -
/berlin.php 1 -
/ioxi-o.php 2 -
/lock.php 1 -
/file9.php 1 -
/aj.php 1 -
/uuu.php 1 -
/cong.php 1 -
/error.php 1 -
/filer.php 1 -
/wp-admin/wp-conflg.php 1 -
/yellow.php 1 -
/222.php 1 -
/file18.php 1 -
/classgoto24.php 1 -
/he.php 1 -
/shell.php 2 -
/wp-content/plugins/hellopress/wp_filemanager.php 1 -
/file88.php 1 -
/wb.php 1 -
/vanta.php 1 -
/admir.php 1 -
/goods.php 1 -
/wfile.php 1 -
/shell 2 -
/wp-admin/js/wp-conflg.php 1 -
/efile.php 1 -
/class19.php 1 -
/build.php 1 -
/aaa.php 1 -
/wp-json/wp/v2/users/ 5 -
/0x.php 1 -
/xvent.php 1 -
/alpa.php 1 -
/admin.php 1 -
/usep.php 1 -
/image.php 1 -
/f35.php 1 -
/enclas.php 1 -
/wp-aaa.php 1 -
/ 6 -
/.well-known/acme-challenge/about.php 1 -
/thh.php 1 -
/gmo.php 1 -
/fffff.php 1 -
/403.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 34
34.82.201.111 97 97 149789 20251103003431
34.48.238.22 61 61 134984 20251102224246
34.173.166.209 61 61 134984 20251102182906
34.148.45.98 61 61 134984 20251102223531
136.107.3.28 55 55 324998 20251117003216
103.171.45.137 45 45 128 20251128124121
34.123.99.43 42 42 127365 20251103174601
3.18.112.211 2 2 174 20251101152051
23.178.112.210 2 2 174 20251101152050
195.123.244.84 2 2 24451 20251101152100
16.146.79.221 1 1 87 20251101152051
143.198.125.201 1 1 22944 20251128124119
167.94.146.63 1 1 0 20251105033126
95.24.157.222 1 1 110924 20251104024823
91.231.89.19 1 1 110924 20251102170219
5.133.192.197 1 1 0 20251110145832
64.226.85.34 1 1 0 20251110135432
13.229.103.43 1 1 87 20251101152051
139.59.185.248 1 1 0 20251106201817
104.248.88.33 1 1 0 20251104190950
3.138.185.30 1 1 22944 20251117075533
167.99.93.190 1 1 0 20251106061859
44.255.87.92 1 1 87 20251101152051
64.23.181.227 1 1 0 20251106204640
91.231.89.123 1 1 110924 20251102202548
205.210.31.223 1 1 105853 20251115205346
147.182.131.78 1 1 24451 20251102174045
13.50.240.238 1 1 87 20251101152051
205.210.31.233 1 1 0 20251111081709
147.185.132.19 1 1 5 20251115233501
134.122.35.147 1 1 22944 20251114172647
16.170.253.109 1 1 87 20251101152051
94.131.120.56 1 1 110924 20251104024849
13.214.217.119 1 1 87 20251101152051
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 17
20251101 16 16 25449 10
20251102 198 198 651251 11
20251103 145 145 277154 4
20251104 8 8 221848 6
20251105 1 1 0 1
20251106 3 3 0 3
20251110 2 2 0 2
20251111 1 1 0 1
20251112 2 2 0 1
20251114 3 3 22944 2
20251115 4 4 105858 3
20251116 4 4 0 2
20251117 56 56 347942 2
20251118 2 2 0 1
20251120 2 2 0 1
20251124 2 2 0 1
20251128 3 3 22944 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 6
15mn-30mn 4
5mn-15mn 4
0s-30s 40
2mn-5mn 1
30mn-1h 3
1h+ 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 9
/xmlrpc.php 368 147937 0 6
/wp-cron.php 43 0 19 20
/ 27 1525653 24 18
/.well-known/acme-challenge/8y-Jp8H9osm3nh-Aq0Ob4OG57e3GdMD4JuZnf_l7pBc 5 435 3 5
/.well-known/acme-challenge/QeW1IREW0_m8shwGypVqRlbCbf7fWuZ1DnwVFa_T_oQ 5 435 5 3
/.well-known/acme-challenge/TTA2OV087YJDQ3HRIGPTSBU4_RN00BY_ 1 64 0 0
/.well-known/acme-challenge/ZAQ5XCCDQH5Q52TGSBOX2CZ5NV-0WX6A 1 64 1 0
/wp-json/wp/v2/users/ 1 797 0 0
/wp-login.php 1 5 1 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
100-500 367
1K-2K 17
0-44 74
500-1K 2
44-100 14
5K+ 145
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME

Al-HUWAITI Shell