Intrusion Exploit
Server: LiteSpeed
System: Linux cisadane.iixcp.rumahweb.net 5.14.0-427.42.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 1 14:58:02 EDT 2024 x86_64
User: lenf4658 (1805)
PHP: 8.4.19
Disabled: NONE
Upload Files
File: //home/lenf4658/tmp/awstats/ssl/awstats122025.hrisconnect.lensapedia.id.txt
AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202512 will be lost/reset.
# Last config file used to build this data file was /home/lenf4658/tmp/awstats/ssl/awstats.hrisconnect.lensapedia.id.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2097                
POS_TIME 2757                
POS_VISITOR 21418               
POS_DAY 23684               
POS_DOMAIN 3518                
POS_LOGIN 3906                
POS_ROBOT 4061                
POS_WORMS 4680                
POS_EMAILSENDER 4811                
POS_EMAILRECEIVER 4954                
POS_SESSION 24131               
POS_FILESIZE 24627               
POS_REQUESTTIME 24765               
POS_SIDER 24288               
POS_FILETYPES 5089                
POS_DOWNLOADS 5235                
POS_OS 5304                
POS_BROWSER 5542                
POS_SCREENSIZE 6282                
POS_UNKNOWNREFERER 6356                
POS_UNKNOWNREFERERBROWSER 6741                
POS_ORIGIN 6934                
POS_SEREFERRALS 7068                
POS_PAGEREFS 7212                
POS_SEARCHWORDS 7360                
POS_KEYWORDS 7512                
POS_MISC 2420                
POS_ERRORS 7571                
POS_CLUSTER 3762                
POS_SIDER_404 7720                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260101184754 1 0 10331604686567
FirstTime 0
LastTime 20251229120314
LastUpdate 20260101190539 1 0 0 0 0
TotalVisits 54                  
TotalUnique 50                  
MonthHostsKnown 0                   
MonthHostsUnknown 60                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
FlashSupport 0 0 0
AddToFavourites 0 10 0
TotalMisc 0 0 0
DirectorSupport 0 0 0
QuickTimeSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 3 18458 39 56 434352
1 7 7 30145 315 338 1458286
2 3 3 15021 69 74 202101
3 1 3 121805 77 87 155900
4 0 0 0 10 14 29611
5 6 7 18432 30 38 58641
6 4 5 31975 20 25 56055
7 1 4 122361 22 55 647959
8 3 3 26849 278 282 1202509
9 2 4 18985 45 50 166092
10 3 4 27392 23 27 42792
11 6 11 164204 204 211 834723
12 8 10 103464 15 19 7273
13 2 3 18429 22 24 55886
14 3 10 218485 237 252 1154008
15 8 12 153617 23 26 24814
16 1 3 65963 17 25 37775
17 2 7 152595 735 747 3887178
18 7 8 47027 262 266 1400644
19 1 1 7532 173 182 983833
20 11 13 155320 223 252 1458368
21 8 12 163253 33 43 34772
22 1 1 9032 5 12 6852
23 1 1 8960 105 108 624384
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 13
us 46 61 494675
de 12 17 241919
in 8 19 350630
bg 6 6 33272
gb 4 5 24482
fr 3 4 65409
be 3 6 28483
ca 3 3 15018
ru 2 9 357044
eu 2 2 16417
bd 1 1 7477
vn 1 1 7507
ua 0 1 56419
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 13
bot[\s_+:,\.\;\/\\-] 79 300062 20251229222612 57
GPTBot/ 46 795837 20251227144449 0
Googlebot/ 30 331402 20251229204631 10
facebookexternalhit/ 27 174440 20251225065626 23
scanner 18 160870 20251223091543 0
robot 14 336 20251229041439 14
no_user_agent 9 391288 20251221082604 0
checker 6 35766 20251224210551 0
scrapy 4 35761 20251224114721 0
Googlebot\-Image/ 1 498 20251223201117 0
Go\-http\-client/ 1 24 20251225163842 1
crawl 1 8938 20251221175507 0
survey 1 43512 20251206065701 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
svg 19 17666 0 0
js 25 960306 0 0
php 5 54 0 0
Unknown 85 720726 0 0
aspx 1 0 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 1
/robots.txt 0 23 552
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 14
macosx9 1 0
win7 8 6
ios_ipad 4 4
macosx10 3 3
macosx11 1 0
macosx12 2 0
macosx8 2 0
win10 39 34
macosx15 6 6
win8 1 0
linux 23 15
win8.1 2 1
linuxubuntu 2 1
Unknown 41 21
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 37
chrome138.0.0.0 2 2
safari16.4 4 4
firefox139.0 2 1
chrome142.0.0.0 4 2
chrome55.0.2893.39 1 0
chrome139.0.0.0 6 3
firefox121.0 1 1
safari5.0.4 4 2
chrome137.0.0.0 2 2
chrome125.0.0.0 9 9
firefox50.0 1 0
chrome55.0.2892.19 1 0
firefox45.0 1 1
chrome56.0.2933.1 1 0
chrome111.0.0.0 2 2
firefox51.0 1 0
chrome119.0.0.0 2 2
safari17.1 1 1
mozilla 17 9
safari17.2 2 2
Unknown 24 12
firefox49.0 2 0
msie8.0 1 0
chrome124.0.0.0 10 10
firefox54.0 4 4
chrome104.0.0.0 3 3
chrome91.0.4472.124 1 1
firefox46.0 1 0
netscape5.0 2 2
chrome81.0.4044.122 1 1
chrome106.0.0.0 1 1
chrome116.0.0.0 8 3
chrome117.0.0.0 3 3
firefox142.0 4 2
chrome50.0.2666.29 3 3
chrome126.0.0.0 2 2
chrome109.0.5414.168 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
python-requests/2.32.4 20251228011710
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20251227213228
python-requests/2.32.5 20251221081016
python-httpx/0.28.1 20251223210230
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20251223204815
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
python-requests/2.32.4 20251228011710
python-requests/2.32.5 20251221081016
python-httpx/0.28.1 20251223210230
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 61 86
From1 0 0
From2 0 0
From3 0 0
From4 30 49
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
301 17 13515
403 982 3647585
405 29 20700
302 329 70769
404 1609 8933505
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 749
/about3.php 1 -
/blurbs15.php 1 -
/azure.json 1 -
/1%25.php 1 -
/nok.php 1 -
/1aa.php 3 -
/suy.php 1 -
/icdwb.php 1 -
/asasx.php 1 -
/adminer.php 1 -
/dbadmin 1 -
/enclas.php 1 -
/up4.php 4 -
/hob.php 1 -
/az.php 5 -
/la.php 5 -
/xz89.php 1 -
/show/asa.php 1 -
/.api_keys 1 -
/api/v1/config 1 -
/admin/phpinfo.php 3 -
/wolv2.php 1 -
/a1vx.php 1 -
/fwe.php 6 -
/cong.php 12 -
/888.php 1 -
/wsad.php 1 -
/wp-load.php 1 -
/cheka.php 1 -
/wpup.php 1 -
/build.php 1 -
/has.php 1 -
/class3.php 1 -
/yasnu.php 1 -
/hexx.php 1 -
/apikeys.json 1 -
/class.php 7 -
/logs/application.log 1 -
/s11.php 1 -
/index/function.php 6 -
/jga.php 1 -
/vendor/livewire/livewire.js 9 https://hrisconnect.lensapedia.id/livewire/livewire.js
/app/https%3A/hrisconnect.lensapedia.id/css/filament/support/support.css%3Fv%3D3.3.10.0 1 -
/ftp.php 1 -
/wp-includes/images/wp-login.php 5 -
/we.php 1 -
/asus.php 1 -
/assets/plugins/jquery-file-upload/server/php 1 -
/xtt.php 1 -
/zc-903.php 1 -
/an.php 2 -
/admir.php 2 -
/dfre.php 1 -
/wp-includes/SimplePie/wp-login.php 5 -
/mds.php 1 -
/class20.php 8 -
/mws.php 1 -
/ucp.php 1 -
/ouh.php 2 -
/bless11.php 6 -
/cms 4 -
/rh.php 5 -
/idea.php 1 -
/server.php 1 -
/wp-admin/new2.php 1 -
/ioxi2.php 1 -
/jp.php 1 -
/infophp.php 2 -
/app/https%3A/hrisconnect.lensapedia.id/css/filament/forms/forms.css%3Fv%3D3.3.10.0 1 -
/config/database.yml 2 -
/article.php 1 -
/wp-the1me.php 1 -
/miansha.php 1 -
/ww7.php 1 -
/.aws/config 1 -
/wle.php 1 -
/mh.php 2 -
/EM.php 1 -
/tinymce/filemanager/dialog.php 1 -
/abc.php 2 -
/sx.php 6 -
/wp-freya.php 2 -
/an7.php 1 -
/docker-compose.override.yml 1 -
/shoha.php 2 -
/index.php/phpinfo 2 -
/333.php 7 -
/mans.php 1 -
/security.php 6 -
/minik.php 1 -
/0%25.php 1 -
/r79.php 1 -
/etc/passwd 1 -
/tua.php 1 -
/file21.php 1 -
/ea.php 1 -
/efile.php 1 -
/ioxi-o.php 8 -
/ex.php 2 -
/aa.php 3 -
/phpversion.php 2 -
/wp-content/plugins/index.php 5 -
/sites/default/settings.php 1 -
/dom.php 1 -
/sty.php 1 -
/bless5.php 7 -
/aqw.php 1 -
/test 4 -
/docker-compose.yaml 1 -
/app/https%3A/hrisconnect.lensapedia.id/app/register 1 -
/plugins/filemanager/dialog.php 1 -
/fns.php 1 -
/ww1.php 6 -
/lib.php 1 -
/ac.php 5 -
/app_dev.php/_profiler/phpinfo 2 -
/vbbn.php 2 -
/mysql 1 -
/ok.php 1 -
/php_error.log 1 -
/phpMyAdmin 1 -
/wan.php 1 -
/tro.php 1 -
/wsvvs.php 1 -
/ave.php 4 -
/f35.php 6 -
/file18.php 2 -
/wordpres/wp-admin/setup-config.php 1 -
/about/function.php 5 -
/ed35f.php 1 -
/public/vendor/laravel-filemanager/js/script.js 3 -
/shelp.php 2 -
/an8.php 1 -
/elp.php 5 -
/wsr2.php 1 -
/nas.php 1 -
/04.php 5 -
/secrets.yml 1 -
/dir.php 1 -
/law.php 1 -
/keu.php 1 -
/byp.php 5 -
/0o0.php 3 -
/wp-content/themes/sketch/404.php 1 -
/wp-admin/setup-config.php 1 -
//xmlrpc.php 2 -
/zil.php 1 -
/403.php 12 -
/rss.php 1 -
/wp-conf.php 1 -
/man.php7 1 -
/dashboard/info.php 2 -
/app/logs/dev.log 1 -
/debug.php 1 -
/anon.php 1 -
/ahax.php 4 -
/css.php 14 -
/symfony/_profiler/phpinfo 2 -
/wp-admin/js/wp-conflg.php 7 -
/wp/wp-admin/setup-config.php 1 -
/zxl.php 3 -
/sto.php 1 -
/f8.php 1 -
/cool.php 1 -
/s1.php 1 -
/keys.json 1 -
/73106.php 1 -
/first.php 1 -
/errors.log 1 -
/wp-content/index.php 5 -
/ooj.php 1 -
/d4.php 1 -
/.gcloud/credentials 1 -
/haf.php 1 -
/133.php 3 -
/fe5.php 2 -
/JPG.php 1 -
/asgtt.php 1 -
/backup.sql 1 -
/admiin.php 2 -
/we2.php 5 -
/bluejackets.php 1 -
/wp-includes/widgets/include.php 2 -
/qlex1.php 1 -
/wok.php 1 -
/cc.php 1 -
/kal.php 1 -
/jmfi2.php 2 -
/gfile1.php 1 -
/ca1.php 1 -
/vendor/laravel-filemanager/js/script.js 3 -
/lol.php 1 -
/x3.php 1 -
/mpxct.php 1 -
/php.php 3 -
/n3.php 1 -
/t.php 1 -
/public/_ignition/execute-solution 3 -
/configuration.php 1 -
/spk.php 1 -
/thoms.php 1 -
/cccc.php 2 -
/.azure/credentials 1 -
/site 4 -
/claa.php 1 -
/yca.php 1 -
/bless14.php 1 -
/Tgb5C9.php 1 -
/doc.php 2 -
/4ff11.php 1 -
/wp-includes/wp-class.php 1 -
/wp-admin/includes/xmrlpc.php 1 -
/htaccess.php 5 -
/k8s-config.yml 1 -
/admin/assets/jquery-file-upload/server/php 1 -
/fw.php 1 -
/gg.php 7 -
/https%3A/hrisconnect.lensapedia.id/app 2 -
/wp-admin/network/plugins.php 5 -
/database.sql 1 -
/kwm4.php 1 -
/GX.php 1 -
/wft.php 1 -
/wp-admin/css/colour.php 1 -
/zafir1.php 1 -
/shellalfa.php 1 -
/php-info.php 2 -
/atomlib.php 2 -
/raw.php 1 -
/wsd.php 6 -
/ay.php 1 -
/phptest.php 1 -
/x50.php 3 -
/backup.tar.gz 1 -
/444.php 2 -
/gifclass.php 7 -
/wp-admin/maint/admin.php 5 -
/alexus.php 1 -
/p.php 1 -
/noe.php 1 -
/zse.php 1 -
/wp-content/admin.php 6 -
/esp.php 1 -
/wp-content/themes/include.php 2 -
/file.php 8 -
/test2.php 1 -
/just2.php 1 -
/13.php 2 -
/yas.php 1 -
/wl.php 2 -
/te.php 2 -
/litanies.php 1 -
/xz99.php 1 -
/simple.php 7 -
/xtride.php 1 -
/wp-includes/js/codemirror/index.php 5 -
/cgn.php 1 -
/11index.php 1 -
/new4.php 6 -
/himu.php 1 -
/config.zip 1 -
/wp-update.php 2 -
/api/v2/config 1 -
/api/index.php/v1/config/application 2 -
/gul.php 1 -
/latest/meta-data/iam/security-credentials 1 -
/wp-content/uploads/wp-conflg.php 1 -
/gcp-credentials.json 1 -
/1.php 1 -
/wordpress 4 -
/csv.php 1 -
/wp-x7.php 1 -
/auth.php 1 -
/wakak.php 1 -
/wp-admin/css/colors/blue/index.php 6 -
/a568ed4c2f9c.php 2 -
/layout.php 1 -
/file5.php 2 -
/click.php 6 -
/2clas.php 4 -
/info.php 12 -
/asf.php 1 -
/12.php 3 -
/fs.php 2 -
/probe.php 1 -
/abouta.php 1 -
/bras.php 1 -
/natural.php 1 -
/let.php 1 -
/tarc.php 1 -
/sid.php 1 -
/new.php 1 -
/wp-includes/images/include.php 2 -
/file32.php 2 -
/wp-admin/network/wp-conflg.php 5 -
/he.php 1 -
/blog/wp-admin/setup-config.php 1 -
/nij.php 1 -
/wp-content/packed.php 1 -
/xxxq.php 1 -
/readme.php 6 -
/app/etc/env.php 1 -
/ot.php 1 -
/nc4.php 1 -
/.dockerignore 1 -
/09fa6.php 1 -
/wp-admin/maint/wp-is.php 1 -
/aQw.php 1 -
/h2a2ck.php 1 -
/card.php 1 -
/dlu.php 2 -
/bibil.php 5 -
/d57.php 1 -
/old 4 -
/nbr.php 1 -
/site-backup.zip 1 -
/bbn.php 1 -
/flower2.php 1 -
/backup/wp-admin/install.php 1 -
/wp-includes/assets/index.php 5 -
/tgrs.php 1 -
/hey.php 1 -
/tons.php 1 -
/server-status 1 -
/33.php 1 -
/inputs.php 7 -
/zgh.php 1 -
/i.php 2 -
/gelap.php 1 -
/wp-trackback.php 5 -
/media.php 1 -
/schallfuns.php 1 -
/phpinfo.php 5 -
/zeal.php 1 -
/ma.php 1 -
/_next 2 http://www.hrisconnect.lensapedia.id/_next
/lufix.php 1 -
/lv.php 5 -
/cfile.php 1 -
/backup/wp-admin/setup-config.php 1 -
/beta 4 -
/asd67.php 2 -
/wp-admin/maint/index.php 6 -
/vx.php 5 -
/php_info.php 2 -
/blog/wp-admin/install.php 1 -
/3.php 1 -
/sko.php 1 -
/app/logs/prod.log 1 -
/v2/wp-admin/setup-config.php 1 -
/akcc.php 2 -
/hello.php 1 -
/file48.php 6 -
/lov.php 1 -
/css/index.php 6 -
/themes.php 6 -
/zde.php 1 -
/031.php 2 -
/app/https%3A/fonts.bunny.net 1 -
/Thumbs.db 1 -
/cgi-bin/wp-login.php 3 -
/kubernetes.yml 1 -
/class.1.php 1 -
/menu.php 1 -
/indo.php 1 -
/update/f35.php 1 -
/infos.php 1 -
/zxin.php 1 -
/c451f.php 1 -
/wp-signin.php 2 -
/.well-known/security.txt 1 -
/mawar.php 1 -
/lo.php 1 -
/wui.php 1 -
/pn.php 4 -
/file88.php 1 -
/gm.php 1 -
/gmo.php 8 -
/wb.php 1 -
/pi.php 1 -
/_ignition/execute-solution 3 -
/phpmyadmin 1 -
/file1.php 2 -
/assets/jquery-file-upload/server/php 1 -
/sec.php 2 -
/kla.php 1 -
/assets/kcfinder/upload.php 1 -
/ffile.php 2 -
/ula.php 1 -
/npi.php 1 -
/wp-admin/admin-ajax.php 2 -
/app/https%3A/hrisconnect.lensapedia.id/css/filament/filament/app.css%3Fv%3D3.3.10.0 1 -
/ad24f.php 1 -
/system_log.php 1 -
/php_version.php 1 -
/wp-includes/style-engine/index.php 1 -
/acp.php 2 -
/skj.php 1 -
/default.php 2 -
/file13.php 1 -
/ccou.php 4 -
/pent.php 1 -
/w2025.php 1 -
/sadis.php 1 -
/wp-xmlrpc.php 1 -
/pinfo.php 1 -
/fz.php 3 -
/juuuu.php 3 -
/shop.php 1 -
/classgoto24.php 1 -
/404.php 12 -
/check.php 1 -
/wsx.php 1 -
/conte.php 1 -
/xx.php 6 -
/wp/wp-admin/install.php 1 -
/app/https%3A/fonts.bunny.net/css%3Ffamily%3Dinter%3A400%2C500%2C600%2C700%26display%3Dswap 1 -
/atx.php 6 -
/dashboard/phpinfo.php 1 -
/nfile.php 1 -
/sitemap.xml 28 -
/dbc.php 2 -
/666.php 2 -
/nx.php 1 -
/2.php 1 -
/dlex.php 1 -
/xa.php 1 -
/wp-admin/maint/maint.php 5 -
/family.php 1 -
/lisa.php 1 -
/v2/wp-admin/install.php 1 -
/ws28.php 1 -
/lok.php 1 -
/wp-mail.php/wp-includes/ID3/rnEPv9.php 1 -
/gi.php 1 -
/image.php 1 -
/app_dev.php/_profiler/open 1 -
/auth.json 1 -
/error.log 1 -
/v2.php 2 -
/s3.yml 1 -
/wp2/wp-admin/install.php 1 -
/sfvul.php 1 -
/api/config 1 -
/dump.sql 1 -
/lsd.php 5 -
/price.php 1 -
/gfile.php 2 -
/wolv.php 2 -
/admin.php 13 -
/hzz.php 1 -
/hum.php 1 -
/shoyo.php 2 -
/520.php 6 -
/CLA.php 3 -
/oauth.json 1 -
/ea3f.php 1 -
/ws13.php 1 -
/wp.php 1 -
/item.php 6 -
/content.php 1 -
/gdn.php 1 -
/eauu.php 1 -
/f6.php 2 -
/aws-config.json 1 -
/wp-includes/block-patterns/index.php 5 -
/classwithtostring.php 8 -
/efa4f.php 1 -
/adminfuns.php 1 -
/nope.php 1 -
/https%3A/hrisconnect.lensapedia.id/app/login 2 -
/filemanager.php 1 -
/rsnu.php 1 -
/gifclass4.php 7 -
/2eaa2.php 1 -
/goat.php 1 -
/_profiler/phpinfo 4 -
/55.php 1 -
/manager.php 8 -
/fclas.php 1 -
/nc.php 1 -
/secrets.json 1 -
/num.php 2 -
/mek.php 1 -
/cwsd.php 1 -
/wp-admin/includes/index.php 2 -
/hi.php 1 -
/wp-includes/fonts/themes.php 1 -
/11.php 2 -
/aaaa.php 1 -
/log/error.log 1 -
/ifm.php 1 -
/jju.php 1 -
/blog 4 -
/error.php 2 -
/abcd.php 6 -
/db_backup.sql 1 -
/phpinfo 3 -
/good.php 1 -
/ha.php 6 -
/wp1.php 1 -
/tokens.json 1 -
/v3.php 2 -
/file17.php 2 -
/sow.php 1 -
/ioxi-o1.php 6 -
/tx1.php 6 -
/ar.php 7 -
/faq.php 1 -
/ilex.php 1 -
/pop.php 5 -
/xse25.php 3 -
/galex.php 5 -
/r4f_1.php 1 -
/fjpeb.php 1 -
/wp-content/uploads/wp.php 1 -
/css/colors/blue/index.php 5 -
/kki.php 1 -
/axx.php 1 -
/bipas.php 1 -
/wp-includes/customize/sx.php 2 -
/files.php 6 -
/dop.php 1 -
/test/phpinfo.php 1 -
/logs/error.log 3 -
/public/new2.php 1 -
/backup.zip 1 -
/ink.php 1 -
/js.php 1 -
/led.php 1 -
/tox.php 1 -
/info_php.php 1 -
/admin/function.php 5 -
/api/session 2 -
/new 4 -
/info1.php 1 -
/gib.php 1 -
/q1.php 1 -
/pass.php 1 -
/testphp.php 1 -
/wp2/wp-admin/setup-config.php 1 -
/mailer.php7 1 -
/lanz.php 1 -
/dox.php 1 -
/class9.php 5 -
/bolt.php 3 -
/var/www/html/error_log 1 -
/wsa.php 1 -
/class-wp.php 1 -
/diagnostic.php 1 -
/system.php 1 -
//hrisconnect.lensapedia.id/app' 4 -
/wp-good.php 4 -
/.vscode/sftp.json 1 -
/nox.php 7 -
/ova.php 4 -
/ext.php 3 -
/xaz.php 4 -
/luxe.php 1 -
/assets/plugins/kcfinder/upload.php 1 -
/wp-content/themes/admin.php 1 -
/ss1.php 1 -
/wp-includes/js/jquery/jquery.js 1 -
/000.php 2 -
/ol.php 1 -
/wrt.php 4 -
/inde.php 1 -
/wordpress/wp-admin/install.php 1 -
/NH19T66T.php 1 -
/db.php 1 -
/777.php 2 -
/ws29.php 1 -
//wp-includes/ID3/license.txt 2 -
/wp-admin/wp-conflg.php 5 -
/index.html 1 -
/idx.php 1 -
/test.php 5 -
/app/xmlrpc.php 3 -
/ssss.php 1 -
/xb.php 5 -
/pp.php 3 -
/xmrlpc.php 1 -
/static/as.php 1 -
/21x.php 1 -
/mnkalo.php 1 -
/file2.php 3 -
/api/decode 2 -
/geger.php 1 -
/wp-content/plugins/include.php 2 -
/NewFile.php 1 -
/hook.php 1 -
/cabs.php 1 -
/cwclass.php 1 -
/kcfinder/upload.php 1 -
/wpls.php 1 -
/randkeyword.php 6 -
/redi.php 1 -
/zwso.php 8 -
/oo.php 1 -
/wp-content/upgrade/index.php 1 -
/x56.php 3 -
/hk.php 1 -
/_debug 1 -
/2%25.php 1 -
/fopen.php 1 -
/pma 1 -
/ckeditor/kcfinder/upload.php 1 -
/usep.php 2 -
/class19.php 7 -
/orm.php 1 -
/Okxob.php 1 -
/e3.php 1 -
/loi.php 1 -
/f-401.php 1 -
/demo 4 -
/bak.php 1 -
/zxz.php 1 -
/wp-content/uploads/index.php 1 -
/old_phpinfo.php 1 -
/wfile.php 2 -
/wp-content/plugins/admin.php 5 -
/iov.php 1 -
/v4.php 1 -
/wp-includes/sodium_compat/index.php 1 -
/wp-admin/admin-post.php 1 -
/wp-content/themes/twentytwentytwo/index.php 5 -
/555.php 2 -
/info3.php 1 -
/livewire/livewire.js 9 -
/tll.php 1 -
/wp-login.php 5 -
/aws.json 1 -
/themes/twentytwentytwo/index.php 5 -
/buy.php 1 -
/file4.php 2 -
/filemanager/dialog.php 6 -
/fileas.php 1 -
/ticket.php 1 -
/akp.php 1 -
/yanki.php 1 -
/api_keys.json 1 -
/app/etc/local.xml 1 -
/var/log/apache2/error.log 1 -
/aw.php 1 -
/ad.php 1 -
/uploader.php 1 -
/xp.php 1 -
/eru.php 1 -
/wtz.php 4 -
/np.php 1 -
/file52.php 1 -
/wp-gr.php 1 -
/asset/kcfinder/upload.php 1 -
/xv.php 6 -
/wp-links-opml.php 1 -
/ton.php 5 -
/xeeex.php 1 -
/ask.php 1 -
/filesss.php 1 -
/Dockerfile 1 -
/AxAo.php 1 -
/sang.php 3 -
/x0.php 1 -
/file7.php 5 -
/wp-admin 2 -
/file3.php 2 -
/asas.php 1 -
/vast.php 1 -
/wp-includes/fonts/index.php 6 -
/shlo.php 2 -
/xpw.php 1 -
/adm.php 1 -
/wen.php 1 -
/out.php 1 -
/admin 2 -
/assets/filemanager/dialog.php 1 -
/7f8c8.php 1 -
/geck.php 1 -
/pes.php 1 -
/ava.php 2 -
/gtc.php 6 -
/lock1.php 1 -
/abt.php 1 -
/.dockerenv 1 -
/wp-admin/css/wp-conflg.php 5 -
/zuk.php 1 -
/mail.php 7 -
/cord.php 3 -
/ker.php 1 -
/rei.php 1 -
/nx9.php 1 -
/file9.php 6 -
/.DS_Store 1 -
/settings.py 2 -
/security.txt 1 -
/10.php 2 -
/sid3.php 1 -
/wp 4 -
/.secrets 1 -
/as.php 6 -
/xxxx.php 1 -
/ini.php 1 -
/var/log/nginx/error.log 1 -
/wto.php 1 -
/wcas.php 1 -
/mo.php 1 -
/fffff.php 1 -
/ss.php 1 -
/_fragment 1 -
/png.php 2 -
/login 6 -
/wp-admin/index.php 1 -
/.s3cfg 1 -
/ws35.php 1 -
/wp-includes/index.php 2 -
/info2.php 1 -
/log.php 2 -
/blurbs18.php 1 -
/dds.php 1 -
/des.php 1 -
/rtx.php 1 -
/api/cache 2 -
/waq.php 1 -
/credentials.json 1 -
/wp-su.php 1 -
/pepe.php 1 -
/sx21_1.php 1 -
/get.php 1 -
/vee.php 1 -
/av.php.php 1 -
/file6.php 1 -
/fv.php 6 -
/dex.php 1 -
/222.php 8 -
/bb.php7 1 -
/serverinfo.php 1 -
/z60.php 7 -
/backup 3 -
/2r.php 1 -
/wp-admin/js/index.php 5 -
/vanta-1.php 1 -
/wp-is.php 1 -
/lala.php 2 -
/a2.php 2 -
/yawa.php 1 -
/wp-admin/install.php 43 -
/ioxi-o2.php 1 -
/amphicyon.php 1 -
/poj.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 60
194.180.49.168 10 10 89350 20251223201531
87.120.205.122 6 6 33272 20251228011710
206.189.47.222 4 4 14994 20251214211759
100.30.248.17 4 4 35746 20251217055032
103.250.185.113 4 4 0 20251211053501
170.64.207.120 3 3 15021 20251219021201
134.199.174.237 3 3 15018 20251219180019
209.38.84.141 3 3 14959 20251219112208
194.110.207.198 3 4 65409 20251228011715
161.35.225.87 3 3 26825 20251221081016
45.148.10.204 2 7 152523 20251207174239
154.28.229.221 2 2 15015 20251223154133
192.64.113.146 2 2 8939 20251229120314
194.180.49.173 2 7 152569 20251209143030
103.196.9.240 2 7 141688 20251223110853
213.35.103.47 2 2 7509 20251219125729
13.218.130.38 2 2 15010 20251217185559
16.78.249.154 2 4 103166 20251213153755
3.146.111.124 1 1 8935 20251222101221
159.203.12.243 1 2 9497 20251211103720
167.172.163.78 1 2 9496 20251223095415
205.169.39.4 1 1 8939 20251226003247
167.94.146.56 1 2 9496 20251227051644
44.210.117.108 1 1 7478 20251217185556
206.168.34.119 1 1 8937 20251227130434
46.149.66.101 0 2 112875 
87.236.176.68 0 1 554 
45.143.20.147 0 1 56419 
93.175.200.227 0 1 56419 
5.188.9.110 0 1 56456 
147.182.185.232 1 2 9492 20251212133840
185.247.137.230 0 1 554 
116.98.245.201 1 1 7507 20251226065945
3.140.182.19 1 1 8936 20251214104123
185.247.137.227 1 1 8925 20251223204814
86.7.50.139 1 1 7477 20251226065936
68.183.78.175 1 2 9491 20251223151548
178.62.45.178 1 1 8936 20251211233629
199.45.154.122 1 2 9485 20251227213223
146.190.32.94 1 2 9483 20251225162723
87.236.176.19 0 1 554 
185.49.242.23 0 1 56419 
138.199.60.35 1 1 7481 20251222213304
149.88.22.146 1 1 7508 20251222195924
81.200.8.55 0 2 112875 
15.223.197.252 1 3 65913 20251223210227
87.236.176.83 1 1 8938 20251209120104
154.28.229.96 1 1 7512 20251223154113
188.120.237.20 1 1 8940 20251225122157
87.236.176.171 0 1 554 
64.226.103.10 1 2 9489 20251225094022
165.232.166.109 1 1 8930 20251213035903
206.168.34.221 1 2 9490 20251213063544
87.236.176.99 1 1 8941 20251209002314
182.252.74.247 1 1 7477 20251226065946
87.236.176.180 1 1 8942 20251223154942
209.97.135.220 1 2 9497 20251225142623
104.252.191.190 1 1 7509 20251223110824
209.38.222.22 1 2 9497 20251226185110
66.132.153.117 1 2 9486 20251220071757
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 18
20251207 2 7 152523 1
20251209 4 11 171628 3
20251211 6 7 18481 3
20251212 2 3 18453 2
20251213 5 8 130522 4
20251214 5 5 23930 2
20251215 1 1 8937 1
20251217 4 4 31424 3
20251219 11 11 52507 4
20251220 1 2 9486 1
20251221 3 3 26825 1
20251222 3 3 23972 3
20251223 21 32 364973 10
20251225 6 13 275348 5
20251226 5 9 210191 5
20251227 3 5 27918 3
20251228 7 7 30097 2
20251229 2 4 121777 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 50
30s-2mn 4
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 8
/app/login 81 662855 53 49
/livewire/update 3 6465 0 2
/a568ed4c2f9c.php 2 54 0 1
/app/register 1 51406 0 1
/telerik.web.ui.dialoghandler.aspx 1 0 1 0
/vendor/htmlawed/htmlawed/htmLawedTest.php 1 0 0 1
/wp-admin/install.php 1 0 0 0
/public_html.old/wp-admin/install.php 1 0 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
5K+ 1422
2K-5K 1150
500-1K 70
100-500 317
0-44 149
1K-2K 240
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME