One Hat Cyber Team

View File Name : awstats022025.billing.cynet.id.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202502 will be lost/reset.
# Last config file used to build this data file was /home/cynet/tmp/awstats/awstats.billing.cynet.id.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2010                
POS_TIME 2684                
POS_VISITOR 10357               
POS_DAY 11917               
POS_DOMAIN 3326                
POS_LOGIN 3637                
POS_ROBOT 3792                
POS_WORMS 4145                
POS_EMAILSENDER 4276                
POS_EMAILRECEIVER 4419                
POS_SESSION 12347               
POS_SIDER 12494               
POS_FILETYPES 4554                
POS_DOWNLOADS 4671                
POS_OS 4719                
POS_BROWSER 4907                
POS_SCREENSIZE 5364                
POS_UNKNOWNREFERER 5438                
POS_UNKNOWNREFERERBROWSER 6263                
POS_ORIGIN 6668                
POS_SEREFERRALS 6800                
POS_PAGEREFS 6944                
POS_SEARCHWORDS 7164                
POS_KEYWORDS 7316                
POS_MISC 2348                
POS_ERRORS 7375                
POS_CLUSTER 3493                
POS_SIDER_404 7485                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250301002326 2 148 15908873068126
FirstTime 20250204045002
LastTime 20250228051509
LastUpdate 20250301191451 2 0 1 0 0
TotalVisits 43                  
TotalUnique 39                  
MonthHostsKnown 0                   
MonthHostsUnknown 39                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
PDFSupport 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 9482 1 2 2260
1 3 3 28446 20 21 48786
2 1 1 9482 2 7 7910
3 0 0 0 1 1 1130
4 5 6 62647 12 13 21912
5 3 3 28554 2 5 20202
6 1 1 9482 2 4 12872
7 2 2 18964 1 2 2260
8 9 9 28945 20 25 42698
9 0 0 0 2 3 3390
10 2 2 18964 0 3 3390
11 0 0 0 0 1 1130
12 0 0 0 2 3 3390
13 2 3 29314 0 4 2260
14 3 3 28500 1 2 9536
15 3 3 28446 17 17 19210
16 0 0 0 0 1 1130
17 2 2 19018 39 40 51346
18 1 1 9482 0 4 4520
19 2 2 10277 6 7 7910
20 1 1 9482 2 4 4520
21 7 7 66374 4 11 12430
22 1 1 9482 4 5 14002
23 2 2 19018 20 23 41618
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 29 31 249411
cn 7 7 66374
in 5 5 47680
ca 4 4 37928
gr 3 3 33333
ru 1 1 9482
zz 1 1 87
jp 1 1 64
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 6
Go\-http\-client/ 6 57162 20250228051514 0
no_user_agent 3 28446 20250215010431 0
survey 2 18964 20250228234335 0
curl 2 9482 20250218085245 0
bot[\s_+:,\.\;\/\\-] 1 9482 20250212062832 0
MJ12bot/ 1 9482 20250205014056 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
png 2 20700 0 0
html 45 423160 0 0
Unknown 6 499 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 9
win10 14 14
android10 1 1
macosx15 3 3
androidmarshmallow 1 1
androidnougat 1 1
win7 2 2
macosx 3 3
unix 1 1
Unknown 27 25
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 19
chrome89.0.4389.114 9 9
chrome49.0.2623.112 2 2
chrome100.0.4896.75 1 1
chrome58.0.3029.110 1 1
chrome60.0.3112.107 1 1
chrome106.0.0.0 1 1
chrome120.0.0.0 2 2
mozilla 17 15
chrome52.0.2635.98 1 1
netscape5.0 5 5
chrome87.0.4280.88 1 1
chrome54.0.342 1 1
chrome96.0.4664.110 1 1
chrome90.0.4430.85 1 1
chrome27.0.1453.116 1 1
chrome95.0.4638.69 1 1
Unknown 5 5
chrome103.0.2655 1 1
chrome80.0.3987.162 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 8
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250215213638
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20250213080519
Cpanel-HTTP-Client/1.0 20250213080510
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250227132214
Mozilla/5.0 20250228051509
Mozilla/5.0_(compatible) 20250220003110
Mozilla/5.0_(compatible;_Dataprovider.com) 20250227215252
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250221084523
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20250213080510
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250215213638
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 47 49
From1 2 2
From2 0 0
From3 2 2
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 2
http://www.social.bernstein-bank.com:8880 1 1
https://172.96.206.47 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
307 2 0
404 182 205660
400 1 1134
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 98
/info.php 1 -
/ty.php 1 -
/classwithtostring.php 1 -
/debug/default/view 1 -
/wp1/wp-includes/wlwmanifest.xml 3 -
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 -
/feed/ 1 -
/wordpress/wp-includes/wlwmanifest.xml 4 -
/tkcbretx.php 1 -
/site/wp-includes/wlwmanifest.xml 3 -
/sitemap.xml 5 -
/wp-admin/setup-config.php 1 -
/.env 3 -
/hidey.php 1 -
/baxi.php 1 -
/kputcjbh.php 1 -
/temp 1 www.google.com
/config.json 3 -
/2019/wp-includes/wlwmanifest.xml 3 -
/news/wp-includes/wlwmanifest.xml 3 -
/bionic.php 1 -
/billing 1 www.google.com
/fw.php 1 -
/_all_dbs 1 -
/wp/wp-includes/wlwmanifest.xml 4 -
/wp-includes/wlwmanifest.xml 3 -
/cms/wp-includes/wlwmanifest.xml 3 -
/up.php 1 -
/robots.txt 29 -
/wp2/wp-includes/wlwmanifest.xml 2 -
/sites/default/files/ 1 binance.com
/test/wp-includes/wlwmanifest.xml 3 -
/condb.php 1 -
/actuator/env 1 -
/wp-includes/js/jquery/jquery.js 1 -
/humans.txt 1 -
/server 1 -
/wordpress 2 www.google.com
/wp-admin/css/ 1 binance.com
/2020/wp-includes/wlwmanifest.xml 4 -
/sm.php 1 -
/blog 1 www.google.com
/dkshdabr.php 1 -
/bsakdmdr.php 1 -
/xBrain.php 1 -
/uploads/ 1 binance.com
/test 1 www.google.com
/server-status 1 -
/.DS_Store 1 -
/assets/plugins/jquery.filer/php/readme.txt 1 -
/glpi/vendor/htmlawed/htmlawed/htmLawedTest.php 2 -
/plugins/jquery.filer/php/readme.txt 1 -
/admin/controller/extension/extension/ 1 binance.com
/v2/_catalog 1 -
/wp-x.php 1 -
/ads.txt 3 -
/.git/config 2 -
/jquery.filer/php/readme.txt 1 -
/evil.php 1 -
/login.action 1 -
/wp-includes/ID3/license.txt 1 -
/87.php 1 -
/wp-content/plugins/hellopress/wp_filemanager.php 1 -
/sftp-config.json 1 -
/xmlrpc.php 4 -
/web/wp-includes/wlwmanifest.xml 4 -
/a.php 1 -
/yz.php 1 -
/wp 2 www.google.com
/js 1 -
/website/wp-includes/wlwmanifest.xml 3 -
/assets/vendor/jquery.filer/php/readme.txt 1 -
/sito/wp-includes/wlwmanifest.xml 2 -
/blog/wp-includes/wlwmanifest.xml 4 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/2021/wp-includes/wlwmanifest.xml 1 -
/security.txt 1 -
/iso.php 1 -
/ksxnwfrm.php 1 -
/assets/admin/bower_components/jquery.filer/php/readme.txt 1 -
/yindu.php 1 -
/files/ 1 binance.com
/vendor/htmlawed/htmlawed/htmLawedTest.php 2 -
/aovyumye.php 1 -
/.well-known/security.txt 1 -
/hmdrpqcl.php 1 -
/.vscode/sftp.json 2 -
/local/moodle_webshell/webshell.php 1 -
/style.php 1 -
/telescope/requests 1 -
/old 1 www.google.com
/images/ 1 binance.com
/shop/wp-includes/wlwmanifest.xml 3 -
/hoot.php 1 -
/new 1 www.google.com
/wordpress/wp-admin/setup-config.php 1 -
/about.php 1 -
/wp-login.php 3 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 39
45.135.95.25 5 5 47680 20250228051509
209.38.89.3 3 3 28446 20250204155012
209.38.81.240 3 3 28446 20250224010322
178.128.120.19 3 3 33333 20250227042331
149.56.160.196 2 2 18964 20250227215214
111.7.106.104 2 2 18964 20250205105754
118.26.36.18 1 1 9482 20250211222244
35.180.231.116 1 1 9482 20250218174355
152.32.209.62 1 1 9482 20250218062609
167.94.138.45 1 2 19832 20250211041115
144.126.236.234 1 1 9482 20250212194534
159.203.96.42 1 1 9482 20250213080649
143.198.131.88 1 1 9482 20250214210547
198.235.24.177 1 1 9482 20250207053610
13.60.166.60 1 1 87 20250213080519
198.235.24.76 1 1 9482 20250211075126
34.134.167.127 1 1 9482 20250226023323
123.6.49.38 1 1 9482 20250226205244
54.244.43.254 1 1 87 20250213080519
140.245.63.243 1 1 9482 20250227233948
54.88.179.33 1 1 9482 20250214180352
149.56.150.195 1 1 9482 20250227215234
101.198.0.187 1 1 9482 20250211213613
185.247.137.186 1 1 9482 20250221084523
205.210.31.142 1 1 9482 20250215213638
106.75.143.119 1 1 9482 20250213142551
35.159.234.35 1 1 9482 20250219070747
106.75.146.37 1 1 9482 20250209144235
157.15.65.101 1 1 64 20250213080510
159.203.58.22 1 1 9482 20250205134359
23.178.112.216 1 1 87 20250213080518
205.169.39.26 1 1 9482 20250207081647
64.227.174.89 1 1 9482 20250220003110
206.168.34.223 1 2 19832 20250227132211
198.235.24.80 1 1 9482 20250204045002
3.134.106.88 1 1 87 20250213080519
167.99.52.233 1 1 795 20250210191451
144.217.135.218 1 1 9482 20250227215252
18.143.192.111 1 1 87 20250213080519
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 18
20250204 4 4 37928 2
20250205 3 3 28446 2
20250207 2 2 18964 2
20250209 1 1 9482 1
20250210 1 1 795 1
20250211 4 5 48278 4
20250212 1 1 9482 1
20250213 8 8 19463 8
20250214 2 2 18964 2
20250215 1 1 9482 1
20250218 2 2 18964 2
20250219 2 2 19018 2
20250220 1 1 9482 1
20250221 1 1 9482 1
20250224 3 3 28446 1
20250226 4 4 38036 4
20250227 10 11 110111 7
20250228 1 1 9536 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 43
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/ 44 422365 36 36
/.well-known/acme-challenge/16FUpDDfuNcZs99tb-LAaRBvP5B1YZF-Jg3MKYrwLiI 5 435 5 5
/.well-known/acme-challenge/27XEN158535XK633ERP-TF4I_958_9KI 1 64 1 1
/.well-known/ 1 795 1 1
END_SIDER