One Hat Cyber Team

Edit File: awstats032025.isolir.cynet.id.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202503 will be lost/reset.
# Last config file used to build this data file was /home/cynet/tmp/awstats/awstats.isolir.cynet.id.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2009                
POS_TIME 2682                
POS_VISITOR 13639               
POS_DAY 14997               
POS_DOMAIN 3322                
POS_LOGIN 3657                
POS_ROBOT 3812                
POS_WORMS 3983                
POS_EMAILSENDER 4114                
POS_EMAILRECEIVER 4257                
POS_SESSION 15479               
POS_SIDER 15636               
POS_FILETYPES 4392                
POS_DOWNLOADS 4582                
POS_OS 4630                
POS_BROWSER 4815                
POS_SCREENSIZE 5246                
POS_UNKNOWNREFERER 5320                
POS_UNKNOWNREFERERBROWSER 5957                
POS_ORIGIN 6362                
POS_SEREFERRALS 6496                
POS_PAGEREFS 6640                
POS_SEARCHWORDS 6788                
POS_KEYWORDS 6940                
POS_MISC 2345                
POS_ERRORS 6999                
POS_CLUSTER 3513                
POS_SIDER_404 7088                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250401185838 1 0 12323589441557
FirstTime 20250301230416
LastTime 20250328213212
LastUpdate 20250401190117 1 0 0 0 0
TotalVisits 36                  
TotalUnique 31                  
MonthHostsKnown 0                   
MonthHostsUnknown 34                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
PDFSupport 0 0 0
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
AddToFavourites 0 13 0
DirectorSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 5 25 1564894 0 0 0
1 1 1 7878 4 4 7894
2 10 48 2966448 2 6 128184
3 4 4 31512 20 20 16
4 0 0 0 1 3 7878
5 0 1 51599 0 0 0
6 0 0 0 2 3 32
7 1 2 13895 1 1 7878
8 3 4 44756 18 18 16
9 1 1 7878 27 27 432
10 3 3 23634 21 21 48
11 1 2 192231 0 0 0
12 0 0 0 0 0 0
13 0 0 0 2 2 0
14 4 5 82655 19 22 32054
15 3 4 90298 18 18 16
16 2 3 102415 2 5 64076
17 1 1 7878 0 0 0
18 5 5 39390 31 34 32070
19 4 4 18207 9 13 64076
20 4 4 31512 17 20 32054
21 11 11 86658 53 58 32102
22 1 2 9500 13 13 0
23 4 13 569056 161 162 41132
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 35 54 1692954
cn 14 61 3548809
eu 9 9 70902
ca 3 3 23634
gr 3 3 23634
ru 1 1 7878
at 1 1 7878
za 1 1 7878
in 1 10 558727
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 1
no_user_agent 4 31512 20250330043816 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 7
ttf 9 1029360 0 0
png 6 465321 0 0
js 45 2754245 0 0
woff2 3 231480 0 0
css 21 912255 0 0
jpg 3 135075 0 0
html 56 414558 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
macosx15 10 4
Unknown 10 10
macosx 10 1
win10 62 40
androidnougat 1 1
androidjellybean 1 1
android10 48 10
macosx10 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 17
chrome121.0.0.0 3 0
chrome80.0.3987.149 6 6
chrome60.0.3112.107 1 1
mozilla 6 6
chrome120.0.0.0 9 3
chrome87.0.4280.88 10 1
chrome37.0.2062.124 1 1
Unknown 4 4
chrome96.0.4664.110 1 1
chrome117.0.5938.132 24 5
chrome78.0.3904.108 6 6
chrome89.0.4389.105 48 10
chrome95.0.4638.69 1 1
chrome90.0.4430.85 4 4
chrome88.0.4240.193 12 12
chrome89.0.4389.114 6 6
chrome38.0.1025.166 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible) 20250326194301
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250325164910
python-requests/2.31.0 20250305074305
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250322090746
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250326204958
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250322090746
python-requests/2.31.0 20250305074305
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 51 60
From1 5 5
From2 0 0
From3 0 0
From4 12 78
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 427 1952
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 231
/wp-includes/ID3/about.php 1 -
/wp-includes/pomo/about.php 1 -
/css.php 1 -
/install.php 1 -
/wp-content/about.php 1 -
/wp-content/plugins/index.php 1 -
/wp-content/plugins/hellopress/wp_filemanager.php 1 -
/baxi.php 1 -
/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php 1 -
/wp2/wp-includes/wlwmanifest.xml 10 -
/news/wp-includes/wlwmanifest.xml 10 -
/wp-content/plugins/rsquaaj/index4.php 1 -
/wp-admin/network/xmrlpc.php 1 -
/cms/wp-includes/wlwmanifest.xml 11 -
/.env 2 -
/wp-admin/css/about.php 1 -
/wp-content/plugins/wordpress-seo/rk1.php 1 -
/wp-content/themes/pridmag/db.php 1 -
/wp-includes/js/jquery/jquery.js 2 -
/.well-known/wso112233.php 1 -
/wp-content/themes/twentyfive/include.php 1 -
/a.php 1 -
/shell.php 1 -
/yindu.php 1 -
/alfa-rex.php7 1 -
/about.php 2 -
/assets/css/403.php 1 -
/web/wp-includes/wlwmanifest.xml 11 -
/index.php 1 -
/sites/default/files/ 2 binance.com
/wp-includes/blocks/table/int/tmpl/index.php 1 -
/wp-includes/js/tinymce/skins/lightgray/img/index.php 1 -
/wp-content/plugins/seoplugins/db.php 1 -
/wp-content/themes/travel/issue.php 1 -
/hidey.php 1 -
/chosen.php 1 -
/fw.php 2 -
/wp-admin/admin.php 1 -
/wp-content/wso.php 1 -
/atomlib.php 1 -
/tkcbretx.php 1 -
/test/wp-includes/wlwmanifest.xml 11 -
/classwithtostring.php 1 -
/wp-content/plugins/core/include.php 1 -
/alfa4.2.php 1 -
/sitemap.xml 2 -
/wp.php 1 -
/.well-known/acme-challenge/license.php 1 -
/uploads/k69834253_index.php 1 -
/wp-admin/images/xmrlpc.php 1 -
/wp-content/shell20211028.php 1 -
/wp-content/plugins/wp-apxupx.php 1 -
/shop/wp-includes/wlwmanifest.xml 11 -
/blog/wp-includes/wlwmanifest.xml 11 -
/hoot.php 1 -
/ksxnwfrm.php 1 -
/ads.txt 2 -
/alfa-bypass2.php 1 -
/wp-content/banners/about.php 1 -
/sftp-config.json 1 -
/file.php 1 -
/wp-includes/themes.php 1 -
/alfa-rex.php 1 -
/ccx/index.php 1 -
/wp-includes/widgets/about.php 1 -
/2018/wp-includes/wlwmanifest.xml 4 -
/wp-includes/rest-api/about.php 1 -
/xBrain.php 1 -
/users.php 1 -
/vendor/htmlawed/htmlawed/htmLawedTest.php 1 -
/bak.php 1 -
/wp-admin/includes/about.php 1 -
/as.php 1 -
/2020/wp-includes/wlwmanifest.xml 7 -
/files/ 2 binance.com
/wp-includes/SimplePie/about.php 1 -
/blog 1 www.google.com
/class.api.php 1 -
/wp-admin/css/index.php 1 -
/wp-includes/Requests/about.php 1 -
/makeasmtp.php 1 -
/403.php 1 -
/dropdown.php 1 -
/wp-content/themes/seotheme/db.php 1 -
/aovyumye.php 1 -
/wp-content/index.php 1 -
/iso.php 1 -
/fm1.php 1 -
/wp-admin/js/about.php 2 -
/Alfa-4.2.php 1 -
/wp-content/themes/travelscape/json.php 1 -
/worm0.PhP7 1 -
/yz.php 1 -
/wp-content/plugins/seoplugins/mar.php 1 -
/erros_run.php 1 -
/wp-includes/style-engine/about.php 1 -
/isolir 1 www.google.com
/wp-admin/css/ 2 binance.com
/yanz.php 1 -
/wp-info.php 1 -
/phpmyadmin/ 1 -
/wordpress/wp-admin/setup-config.php 2 -
/uploads/ 2 binance.com
/doc.php 1 -
/wp-admin/dropdown.php 1 -
/87.php 1 -
/wp-content/plugins/Cache/Cache.php 1 -
/plugins.php 1 -
/wp-admin/images/about.php 1 -
/wp-content/plugins/zgdsfagck/rk2.php 1 -
/ini.php 1 -
/dkshdabr.php 1 -
/mail.php 1 -
/.vscode/sftp.json 1 -
/.git/config 2 -
/wp-admin/user/xmrlpc.php 1 -
/old 1 www.google.com
/bsakdmdr.php 1 -
/upfile.php 1 -
/cgi-bin/xmrlpc.php 1 -
/wp-includes/Requests/Text/admin.php 1 -
/wp 2 www.google.com
/wordpress 2 www.google.com
/test 1 www.google.com
/wp-content/themes/seotheme/mar.php 1 -
/wp-atom.php 1 -
/xmrlpc.php 1 -
/cjfuns.php 1 -
/wp-admin/network/cloud.php 1 -
/radio.php 1 -
/wp-admin/maint/wp-login.php 1 -
/wp-content/themes/about.php 1 -
/404.php 1 -
/moon.php 1 -
/.tmb/class_api.php 1 -
/style.php 1 -
/condb.php 1 -
/wp-apxupx.php 1 -
/xl2023.php 1 -
/mah.php 1 -
/.well-known/admin.php 1 -
/.well-known/pki-validation/about.php 1 -
/wp-pano.php 1 -
/temp 1 www.google.com
/website/wp-includes/wlwmanifest.xml 10 -
/wso112233.php 1 -
/wp-includes/plugins.php 1 -
/.well-known/about.php 1 -
/.well-known/pki-validation/cloud.php 1 -
/wp-2019.php 1 -
/defaul1.php 1 -
/wp-aa.php 1 -
/themes.php 2 -
/.well-known/pki-validation/xmrlpc.php 1 -
/wp1/wp-includes/wlwmanifest.xml 11 -
/cong.php 1 -
/repeater.php 1 -
/bypass.php 1 -
/shell20211028.php 1 -
/wp-admin/images/index.php 1 -
/wp-includes/images/about.php 1 -
/wp-content/gallery/about.php 1 -
/wp-conflg.php 1 -
/alfanew.php 1 -
/hmdrpqcl.php 1 -
/wp-content/themes/twentyseventeen/page/index.php 1 -
/nf_tracking.php 1 -
/wp-sigunq.php 1 -
/sito/wp-includes/wlwmanifest.xml 10 -
/wp-admin/setup-config.php 2 -
/bionic.php 1 -
/ae.php 1 -
/wp-mail.php 1 -
/wp-content/plugins/linkpreview/db.php 1 -
/wp-includes/IXR/about.php 1 -
/simple.php 1 -
/wp-content/plugins/wp-automatic/inc/csv.php 1 -
/.well-known/acme-challenge/cloud.php 2 -
/updates.php 1 -
/sm.php 1 -
/feed/ 1 -
/xmlrpc.php 11 -
/wp/wp-includes/wlwmanifest.xml 11 -
/wp-login.php 9 -
/2019/wp-includes/wlwmanifest.xml 11 -
/wp-admin/x.php 1 -
/wp-content/plugins/fix/up.php 1 -
/wp-admin/css/colors/blue/about.php 1 -
//wordpress/wp-includes/css/dashicons.min.css 1 www.google.com
/site/wp-includes/wlwmanifest.xml 11 -
/admin/controller/extension/extension/ 2 binance.com
/log.php 1 -
/wp-activate.php 1 -
/2021/wp-includes/wlwmanifest.xml 1 -
/images/about.php 1 -
/evil.php 1 -
/wp-admin/css/colors/ocean/Module.php 1 -
/wp-head.php 1 -
/wp-includes/js/admin-bar.js 1 -
/config.json 2 -
/wp-includes/wlwmanifest.xml 10 -
/glpi/vendor/htmlawed/htmlawed/htmLawedTest.php 1 -
/wp-blog.php 1 -
/blog.php 1 -
/kputcjbh.php 1 -
/wp-admin/css/colors/index.php 1 -
/wp-includes/block-patterns/about.php 1 -
/media/wp-includes/wlwmanifest.xml 4 -
/images/cloud.php 1 -
/gawean.PhP7 1 -
//wp-includes/css/dashicons.min.css 1 www.google.com
/wp-content/ccx/index.php 1 -
/lufix.php 1 -
/admin.php 1 -
/wordpress/wp-includes/wlwmanifest.xml 11 -
/new 1 www.google.com
/templates/beez5/mar.php 1 -
/wp-admin/ccx/index.php 1 -
/wp-includes/Text/about.php 1 -
/content.php 1 -
/robots.txt 2 -
/wp-config-sample.php 1 -
/wp-admin/includes/class_api.php 1 -
/.well-known/acme-challenge/xmrlpc.php 1 -
/backup 1 www.google.com
/wp-content/plugins/revslider/includes/external/page/index.php 1 -
/wp-includes/ID3/license.txt 1 -
/cgi-bin/about.php 1 -
/wp-includes/about.php 1 -
/ws.php 1 -
/wp-admin/css/colors/coffee/index.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 34
143.198.213.193 9 9 70902 20250321030451
178.62.248.144 9 9 70902 20250318203026
123.6.49.44 5 19 1047328 20250310025750
134.209.221.228 5 5 26085 20250316103106
205.169.39.13 5 24 1483224 20250308003047
152.42.184.128 3 3 23634 20250320153105
209.15.117.194 3 3 23634 20250328213212
178.128.80.202 3 3 23634 20250327180617
123.6.49.50 2 11 765077 20250310025751
123.6.49.47 2 8 369517 20250310025741
159.223.125.96 2 2 2451 20250301230447
205.210.31.167 1 1 7878 20250318173516
196.251.66.5 1 1 7878 20250305074305
1.192.195.5 1 1 7878 20250326161603
147.139.144.73 1 1 7878 20250305015228
206.168.34.126 1 1 7878 20250323145756
157.245.111.219 1 1 7878 20250326194301
142.93.158.99 1 1 7878 20250312185212
123.160.223.72 1 6 219429 20250307235456
123.6.49.15 1 3 280165 20250310025750
92.223.86.11 1 1 7878 20250320180350
35.202.250.162 1 1 7878 20250303215650
45.148.10.174 1 1 7878 20250321112317
1.192.195.11 1 1 7878 20250326192024
185.247.137.148 1 1 7878 20250325164910
45.148.10.237 0 9 550849 
123.6.49.12 0 7 504361 
123.160.223.74 1 1 7878 20250307235454
206.189.92.140 1 1 7878 20250308030434
206.168.34.67 1 1 7878 20250326204958
198.235.24.52 1 1 7878 20250322090746
35.180.69.152 1 1 7878 20250315220435
167.94.146.50 1 1 7878 20250325213033
123.160.223.73 0 4 339298 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 20
20250301 2 2 2451 1
20250303 1 1 7878 1
20250305 2 2 15756 2
20250307 2 11 566605 2
20250308 12 31 1538370 4
20250310 10 48 2966448 4
20250312 4 4 31512 2
20250313 2 2 2451 1
20250315 1 1 7878 1
20250316 3 3 23634 1
20250318 7 7 55146 3
20250320 4 4 31512 2
20250321 4 4 31512 2
20250322 1 1 7878 1
20250323 1 1 7878 1
20250324 0 1 1622 0
20250325 2 3 67355 2
20250326 4 8 390211 4
20250327 3 6 162563 1
20250328 3 3 23634 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
30s-2mn 1
0s-30s 35
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 7
/ 52 409656 31 29
/fonts/Poppins/Poppins-Bold.ttf 3 423780 0 1
/fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2 3 231480 1 0
/fonts/Aldrich/Aldrich-Regular.ttf 3 169644 0 3
/fonts/Poppins/Poppins-Regular.ttf 3 435936 2 1
/.well-known/ 2 1590 2 0
/images/ 2 3312 0 2
END_SIDER