One Hat Cyber Team

Edit File: awstats032025.nuxbill.cynet.id.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202503 will be lost/reset.
# Last config file used to build this data file was /home/cynet/tmp/awstats/awstats.nuxbill.cynet.id.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2010                
POS_TIME 2669                
POS_VISITOR 14005               
POS_DAY 14268               
POS_DOMAIN 3209                
POS_LOGIN 3448                
POS_ROBOT 3603                
POS_WORMS 3735                
POS_EMAILSENDER 3866                
POS_EMAILRECEIVER 4009                
POS_SESSION 14427               
POS_SIDER 14573               
POS_FILETYPES 4144                
POS_DOWNLOADS 4243                
POS_OS 4291                
POS_BROWSER 4390                
POS_SCREENSIZE 4497                
POS_UNKNOWNREFERER 4571                
POS_UNKNOWNREFERERBROWSER 4696                
POS_ORIGIN 4816                
POS_SEREFERRALS 4946                
POS_PAGEREFS 5090                
POS_SEARCHWORDS 5238                
POS_KEYWORDS 5390                
POS_MISC 2333                
POS_ERRORS 5449                
POS_CLUSTER 3304                
POS_SIDER_404 5549                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250401140832 1 0 25089931925488
FirstTime 0
LastTime 20250325060654
LastUpdate 20250401190116 1 0 0 0 0
TotalVisits 3                   
TotalUnique 3                   
MonthHostsKnown 0                   
MonthHostsUnknown 6                   
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 3 0
QuickTimeSupport 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
FlashSupport 0 0 0
TotalMisc 0 0 0
JavaEnabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 3 4 2457
1 0 0 0 3 3 40
2 0 0 0 3 4 20
3 0 0 0 2 2 0
4 0 0 0 0 1 0
5 0 0 0 12 12 68
6 1 1 2595377 36 37 304
7 0 0 0 20 21 40
8 0 1 18095 10 11 0
9 0 0 0 121 121 1824
10 0 0 0 3 3 16
11 0 0 0 1 1 0
12 0 0 0 2 2 40
13 0 0 0 1 1 20
14 0 0 0 6 6 60
15 0 0 0 4 6 2477
16 0 0 0 1 1 0
17 0 2 36190 7 9 20
18 0 0 0 4 4 40
19 1 1 795 7 8 20
20 0 0 0 3 4 2457
21 0 0 0 3 3 0
22 0 0 0 2 2 40
23 1 1 795 161 161 1184
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 2
us 3 3 2596967
cn 0 3 54285
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
png 3 54285 0 0
html 3 2596967 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 3
macosx7 3 0
Unknown 1 1
win10 2 2
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 3
chrome90.0.4430.85 2 2
chrome17.0.963.56 3 0
Unknown 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 1
python-requests/2.27.1 20250325060654
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
python-requests/2.27.1 20250325060654
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 1 4
From1 2 2
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
302 57 580
404 367 3296
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 325
/wp-content/plugins/core/include.php 1 -
/Alfa-4.2.php 1 -
/chosen.php 1 -
/wp-admin/css/index.php 1 -
/wp-content/themes/twentyseventeen/page/index.php 1 -
/wp-admin/shapes.php 1 -
/wp-content/plugins/revslider/includes/external/page/index.php 1 -
/ccx/index.php 1 -
/777.php 1 -
/iso.php 1 -
/evil.php 1 -
/wp-content/themes/travelscape/json.php 1 -
/wp-includes/style-engine/about.php 1 -
/wp-pano.php 1 -
/wp-admin/css/colors/index.php 1 -
/shell.php 1 -
/alf.php 1 -
/wp-admin/Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php%20=%20%3E%3E%20shell%20no%20work 1 -
/l.php 1 -
/XxX.php 1 -
/wsa.php 1 -
/wp-content/ccx/index.php 1 -
/minimo.php 1 -
/.well-known/admin.php 1 -
/.well-known/about.php 1 -
/gawean.PhP7 1 -
/e.php 1 -
/wp-content/themes/twentyfive/include.php 1 -
/t.php 1 -
/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/hoot.php 1 -
/wp-content/wso.php 1 -
/wp-content/shell20211028.php 1 -
/mar.php 1 -
/wp-wso.php 1 -
/gallery/ 1 -
/plugins.php 1 -
/lufix.php 1 -
/wp-sigunq.php 1 -
/2.php 1 -
/robots.txt 3 -
/wp-content/plugins/ubh/index.php 1 -
/as.php 1 -
/p.php 1 -
/wp-config-sample.php 1 -
/wp-blogz.php 1 -
/wp-includes/ID3/about.php 1 -
/ws.php 2 -
/wp-x.php 1 -
/5.php 1 -
/lib/phpunit/Util/PHP/eval-stdin.php 1 -
/.well-known/acme-challenge/license.php 1 -
/wp-includes/block-patterns/about.php 1 -
/phpunit/phpunit/Util/PHP/eval-stdin.php 1 -
/wp-content/about.php 1 -
/modules/mod_simplefileuploadv1.3/elements/Clean.php 1 -
/modules/modules/modules.php 1 -
/u.php 1 -
/alfa-rex.php7 1 -
/glpi/vendor/htmlawed/htmlawed/htmLawedTest.php 2 -
/wp-includes/Requests/about.php 1 -
/defaul1.php 1 -
/403.php 2 -
/wp-content/banners/about.php 1 -
/phpunit/Util/PHP/eval-stdin.php 1 -
/moon.php 1 -
/wp-admin/dropdown.php 1 -
/wp-mail.php 1 -
/wp-content/themes/seotheme/db.php 1 -
/wp-login.php 1 -
/xox.php 1 -
/bak.php 1 -
/9.php 1 -
/10.php 1 -
/aovyumye.php 1 -
/wp-2019.php 1 -
/xxx.php 1 -
/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/nee.php 1 -
/images/cloud.php 1 -
/wp-includes/js/jquery/jquery.js 2 -
/f.php 1 -
/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/bypass.php 1 -
/wp-admin/css/colors/ocean/Module.php 1 -
/wp-admin/css/about.php 1 -
/nf_tracking.php 1 -
/wp-content/gallery/about.php 1 -
/css.php 1 -
/yz.php 1 -
/bionic.php 1 -
/wp-info.php 1 -
/dkshdabr.php 1 -
/wp-admin/css/colors/coffee/index.php 1 -
/install.php 1 -
/ok.php 1 -
/c.php 1 -
/alfa-bypass2.php 1 -
/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php 1 -
/s.php 1 -
/fm1.php 1 -
/local/moodle_webshell/webshell.php 1 -
/wp-content/plugins/hellopress/wp_filemanager.php 1 -
/users.php 1 -
/3.php 1 -
/13.php 1 -
/yindu.php 1 -
/j.php 1 -
/pdf/ 1 -
/xl.php 1 -
/tkcbretx.php 1 -
/wp-admin/css/colors/blue/about.php 1 -
/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php 1 -
/condb.php 1 -
/images/about.php 1 -
/wp-admin/network/xmrlpc.php 1 -
/sym403.php 1 -
/wp-includes/css/modules.php 1 -
/templates/beez5/mar.php 1 -
/v.php 1 -
/wp-atom.php 1 -
/wp-admin/includes/class_api.php 1 -
/ae.php 1 -
/i.php 1 -
/87.php 2 -
/alfa4.2.php 1 -
/hidey.php 1 -
/style.php 1 -
/assets/css/403.php 1 -
/4.php 1 -
/alfanew.php 1 -
/xBrain.php 1 -
/Alfa.php 1 -
/mah.php 1 -
/Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php%20=%20%3E%3E%20shell%20no%20work 1 -
/Marvins.php 1 -
/admin.php 1 -
/indoxploit.php 4 -
/wp-includes/rest-api/about.php 1 -
/ty.php 1 -
/wp-content/index.php 1 -
/wp-includes/blocks/table/int/tmpl/index.php 1 -
/wp.php 2 -
/wp-includes/about.php 1 -
/upfile.php 1 -
/wp-content/themes/about.php 1 -
/defau1t.php 1 -
/1.php 1 -
/cgi-bin/about.php 1 -
/wp-head.php 1 -
/library/tema/vendor/jquery-file-upload/ 1 -
/dropdown.php 1 -
/error.php 1 -
/uploads/ 3 binance.com
/xmrlpc.php 1 -
/shell20211028.php 1 -
/ksxnwfrm.php 1 -
/blog.php 1 -
/r.php 1 -
/y.php 1 -
/file.php 1 -
/.well-known/acme-challenge/xmrlpc.php 1 -
/.well-known/pki-validation/cloud.php 1 -
/wp-aa.php 1 -
/classwithtostring.php 1 -
/wp-admin/ccx/index.php 1 -
/images/vuln.php 1 -
/wp-content/plugins/vwcleanerplugin/bump.php 1 -
/wp-admin/images/xmrlpc.php 1 -
/V3.php 2 -
/wp-content/themes/pridmag/db.php 1 -
/0.php 1 -
/wp-content/plugins/wp-apxupx.php 1 -
/cong.php 1 -
/libraries/joomla/jmails.php 1 -
/uploads/k69834253_index.php 1 -
/assets/vendors/jquery.fileupload/ 1 -
/xleet.php 1 -
/wp-includes/images/about.php 1 -
/q.php 1 -
/kputcjbh.php 1 -
/www.php 1 -
/about.php 2 -
/new.php 1 -
/cgi-bin/xmrlpc.php 1 -
/wp-includes/pomo/about.php 1 -
/wp-content/plugins/index.php 1 -
/content.php 1 -
/wp-apxupx.php 1 -
/b.php 1 -
/ss.php 1 -
/modules/autoupgrade/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/.env 1 -
/wp-includes/IXR/about.php 1 -
/RxR.php 1 -
/7.php 1 -
/wp-content/plugins/royal-elementor-addons/readme.txt 1 -
/assets/global/plugins/jquery-file-upload/ 1 -
/k.php 1 -
/wp-includes/js/tinymce/skins/lightgray/img/index.php 1 -
/wp-admin/network/cloud.php 1 -
/bb.php 1 -
/wso.php 3 -
/erros_run.php 1 -
/V5.php 2 -
/.well-known/wso112233.php 1 -
/baxi.php 1 -
/updates.php 1 -
/rxr.php 1 -
/simple.php 1 -
/menu.php 1 -
/ads.txt 3 -
/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/up.php 2 -
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/root.php 1 -
/xx.php 1 -
/wp-admin/user/xmrlpc.php 1 -
/sym.php 1 -
/wp-admin/admin.php 1 -
/wp-conflg.php 1 -
/repeater.php 1 -
/wp-admin/maint/wp-login.php 1 -
/.well-known/acme-challenge/cloud.php 2 -
/g.php 1 -
/wp-admin/css/ 2 binance.com
/yanz.php 1 -
/lf.php 1 -
/components/com_b2jcontact/izoc.php 1 -
/wp-content/plugins/fix/up.php 1 -
/.well-known/pki-validation/xmrlpc.php 1 -
/tmp/vuln.php 1 -
/vendor/phpunit/Util/PHP/eval-stdin.php 1 -
/lol.php 1 -
/assets/plugins/jquery-file-upload/ 1 -
/c99.php 1 -
/atomlib.php 1 -
/wp-includes/SimplePie/about.php 1 -
/wp-content/themes/seotheme/mar.php 1 -
/.well-known/pki-validation/about.php 1 -
/7yn.php 1 -
/lib/phpunit/src/Util/PHP/eval-stdin.php 1 -
/404.php 2 -
/wp-admin/includes/about.php 1 -
/upload/ 1 -
/files/ 3 binance.com
/mail.php 1 -
/wp-content/plugins/linkpreview/db.php 1 -
/wp-includes/plugins.php 1 -
/sites/default/files/ 2 binance.com
/hmdrpqcl.php 1 -
/olux.php 3 -
/wp-content/plugins/rsquaaj/index4.php 1 -
/wp-admin/x.php 1 -
/8.php 1 -
/makeasmtp.php 1 -
/Ss.php 1 -
/radio.php 1 -
/admin/controller/extension/extension/ 2 binance.com
/cjfuns.php 1 -
/libraries/joomla/jmail.php 1 -
/x.php 1 -
/wp-activate.php 1 -
/wp-content/Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php%20=%20%3E%3E%20shell%20no%20work 1 -
/wp-blog.php 1 -
/xl2023.php 1 -
/wp-content/plugins/xichang/x.php 1 -
/assets/theme/assets/global/plugins/jquery-file-upload/ 1 -
/FoxWSOv1.php 1 -
/h.php 1 -
/wp-content/themes/travel/issue.php 1 -
/marijuana.php 1 -
/priv8.php 1 -
/wp-content/plugins/html404/index.html 1 -
/haxor.php 1 -
/sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/alfa-rex.php 1 -
/themes.php 2 -
/worm0.PhP7 1 -
/z.php 1 -
/ini.php 1 -
/wp-includes/widgets/about.php 1 -
/wso112233.php 1 -
/wp-admin/js/about.php 2 -
/.tmb/class_api.php 1 -
/modules/mod_simplefileuploadv1.3/elements/udd.php 1 -
/wp-content/plugins/seoplugins/mar.php 1 -
/wp-content/plugins/wp-automatic/inc/csv.php 1 -
/wp-content/plugins/zgdsfagck/rk2.php 1 -
/lib/phpunit/phpunit/Util/PHP/eval-stdin.php 1 -
/n.php 1 -
/sm.php 2 -
/fw.php 2 -
/6.php 1 -
/images/ 3 binance.com
/wp-content/plugins/wordpress-seo/rk1.php 1 -
/wi.php 1 -
/d.php 1 -
/wp-content/fw.php 1 -
/phpunit/src/Util/PHP/eval-stdin.php 1 -
/config.json 3 -
/bsakdmdr.php 1 -
/wp-includes/themes.php 1 -
/wp-content/plugins/Cache/Cache.php 1 -
/100.php 1 -
/wp-content/plugins/upspy/index.php 1 -
/vendor/phpunit/src/Util/PHP/eval-stdin.php 1 -
/doc.php 1 -
/img/ 1 -
/vendor/htmlawed/htmlawed/htmLawedTest.php 2 -
/wp-includes/Requests/Text/admin.php 1 -
/w.php 1 -
/wp-content/plugins/seoplugins/db.php 1 -
/libraries/joomla/css.php 1 -
/o.php 1 -
/sitemap.xml 3 -
/wp-includes/Text/about.php 1 -
/a.php 2 -
/m.php 1 -
/log.php 1 -
/0byte.php 1 -
/class.api.php 1 -
/wp-admin/images/index.php 1 -
/wp-admin/images/about.php 1 -
/symlink.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 6
159.223.125.96 1 1 795 20250301230517
134.209.221.228 1 1 795 20250313194221
174.138.61.32 1 1 2595377 20250325060654
1.192.192.4 0 1 18095 
101.198.0.188 0 1 18095 
101.198.0.182 0 1 18095 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 5
20250301 1 1 795 1
20250313 1 1 795 1
20250325 1 1 2595377 1
20250326 0 2 36190 0
20250331 0 1 18095 0
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 3
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 2
/.well-known/ 2 1590 2 2
/docs/ 1 2595377 1 1
END_SIDER