One Hat Cyber Team

View File Name : awstats052022.pos.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202205 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.pos.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2013                
POS_TIME 2672                
POS_VISITOR 12403               
POS_DAY 13051               
POS_DOMAIN 3303                
POS_LOGIN 3543                
POS_ROBOT 3698                
POS_WORMS 3830                
POS_EMAILSENDER 3961                
POS_EMAILRECEIVER 4104                
POS_SESSION 13174               
POS_SIDER 13320               
POS_FILETYPES 4239                
POS_DOWNLOADS 4385                
POS_OS 4433                
POS_BROWSER 4555                
POS_SCREENSIZE 4692                
POS_UNKNOWNREFERER 4766                
POS_UNKNOWNREFERERBROWSER 4994                
POS_ORIGIN 5114                
POS_SEREFERRALS 5247                
POS_PAGEREFS 5391                
POS_SEARCHWORDS 5539                
POS_KEYWORDS 5691                
POS_MISC 2336                
POS_ERRORS 5750                
POS_CLUSTER 3399                
POS_SIDER_404 5884                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20220602121801 1 0 13600733102271
FirstTime 0
LastTime 20220502083708
LastUpdate 20220603033552 1 0 0 0 0
TotalVisits 8                   
TotalUnique 8                   
MonthHostsKnown 0                   
MonthHostsUnknown 20                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
AddToFavourites 0 0 0
RealPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 7 7 102648
1 0 0 0 3 3 4986
2 0 0 0 10 13 72999
3 0 0 0 4 4 22237
4 0 0 0 25 25 60604
5 0 0 0 7 7 17295
6 0 0 0 21 21 54245
7 0 0 0 31 31 66505
8 10 25 74090 32 32 142419
9 0 5 24422 27 27 72770
10 0 0 0 32 32 96671
11 0 0 0 24 24 85567
12 0 0 0 12 12 49780
13 0 0 0 29 31 121030
14 0 10 48844 25 26 84517
15 0 0 0 45 45 108910
16 0 0 0 13 13 37861
17 0 0 0 5 5 38361
18 0 0 0 10 10 33686
19 0 0 0 199 199 921821
20 0 0 0 5 5 22463
21 0 0 0 22 22 43044
22 0 0 0 22 22 91668
23 0 0 0 25 25 161879
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 2
us 10 20 49668
cn 0 20 97688
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
jpg 6 26010 0 0
gif 12 3942 0 0
js 6 7146 0 0
Unknown 10 824 0 0
png 6 109434 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 4
win10 5 0
ios_iphone 5 0
linuxandroid 20 0
Unknown 10 10
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 5
mozilla 8 8
chrome61.0.3163.128 20 0
chrome76.0.3809.71 5 0
safari11.0 5 0
Unknown 2 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 2
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20220502083708
Cpanel-HTTP-Client/1.0 20220502083707
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Cpanel-HTTP-Client/1.0 20220502083707
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 10 10
From1 0 0
From2 0 0
From3 0 0
From4 0 30
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
403 136 1004059
404 292 1465630
406 186 42036
409 27 2241
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 252
//wp-admin/css/modern/colors.css.php 1 -
/Pos 1 www.google.com
//wordpress//wp-admin/install.php 1 bing.com
//shx.php 1 -
//k.php 1 -
//wp-content/uploads/alexusmailer2.0.php 1 -
//kiss.php 1 -
//wordpress///wp-admin/setup-config.php 1 bing.com
//xox.php 1 -
//doc.php 1 -
//wp-admin/includes/mar.php 1 -
//g.php 1 -
/BACKUP 1 www.google.com
/WORDPRESS 1 www.google.com
//alexus-mailer.php 1 -
//templates/beez/index.php 1 -
//41.php 1 -
//administrator/templates/bluestork/index.php 1 -
//templates/atomic/index.php 1 -
//wp-admin.php 1 -
//wp-admin/includes/tablepress_controllers.php 1 -
//defau1t.php 1 -
//send.php 1 -
//ws.php 1 -
//wp-admin/includes/readindex.php 1 -
//wp-rss.php 1 -
//4price.php 1 -
//shell.php 1 -
//h.php 1 -
//lf.php 1 -
//bb.php 1 -
//kk.php 1 -
//wp-content/uploads/leaf.php 1 -
//mar.php 1 -
//wikindex.php 1 -
//leafmailer2.8.php 1 -
//wp-content/plugins/html404/index.html 1 -
//alfa.php 1 -
//administrator/templates/bluestork/error.php 1 -
//p.php 1 -
//wp-admin/includes/alexusmailer2.0.php 1 -
//wp-admin/network/wp-footer.php 1 -
/wp-admin/css/ 5 binance.com
//wp-content/plugins/ubh/index.php 1 -
//www.php 1 -
//d.php 1 -
//q.php 1 -
/web/wp-admin/install.php 2 -
//wp-content/includes/uploads/Va.php 1 -
/wp/ 1 -
//e.php 1 -
//xxx.php 1 -
//wp-content/includes/leafmailer2.8.php 1 -
//wp-content/plugins/vwcleanerplugin/bump.php 1 -
//wp-content/plugins/theme-configurator/mini.php 1 -
//3index.php 1 -
//dr.php 1 -
//wp-admin/includes/edit-tag-menu.php 1 -
//mini.php 1 -
//leaf.php 1 -
//olux.php%09%09 1 -
/test/wp-admin/install.php 2 -
//2index.php 1 -
//bypass.php 1 -
//a.php 1 -
//priv8.php 1 -
////wp-admin/setup-config.php 1 bing.com
//o.php 1 -
/blog/robots.txt 1 -
/wordpress/wp-admin/install.php 2 -
/robots.txt 4 -
//wp-content/plugins/ppus/up.php 1 -
//j.php 1 -
//1.php 1 -
//symlink.php 1 -
//wso1.php 1 -
/blog/ 1 -
//wp-admin/shapes.php 1 -
/plugins/content/apismtp/apismtp.php 1 -
//0.php 1 -
//templates/beez3/error.php 1 -
//wp-content/uploads/small.php 1 -
//if.php 1 -
//x.php 1 -
/wp-content/ 4 -
//administrator/templates/hathor/index.php 1 -
//xo.php 1 -
//ohayo.php 1 -
//wp-one.php 1 -
/wp-content/plugins/apikey/apikey.php.suspected 1 -
//alexusmailer2.0.php 1 -
//wp-content/plugins/xichang/x.php 1 -
//alf.php 1 -
//wso2.php 1 -
//s.php 1 -
//fw.php 1 -
/WordPress 1 www.google.com
//rss.php 1 -
/site/wp-admin/install.php 2 -
//11index.php 1 -
//it.php 1 -
//wp-content/plugins/css-ready/file.php 1 -
//!.php 1 -
//sym.php 1 -
//ok.php 1 -
//wp-admin/includes/leafmailer2.8.php 1 -
//Marvins.php 1 -
//blog.php 1 -
//templates/beez_20/error.php 1 -
//wp-includes/css/modules.php 1 -
//t.php 1 -
//n.php 1 -
/new/wp-admin/install.php 2 -
//cms.php 1 -
//wp2.php 1 -
//templates/beez_20/index.php 1 -
/wordpress 1 www.google.com
//wp-admin/includes/block-line.php 1 -
//u.php 1 -
/new 1 www.google.com
//administrator/templates/isis/error.php 1 -
//fa.php 1 -
//0byte.php 1 -
//FoxWSO.php 1 -
//wp/rahma.php 1 -
/wp-admin/install.php 2 -
//content.php 1 -
//.wp-cache.php 1 -
//templates/beez5/index.php 1 -
/style.php 3 -
//administrator/templates/hathor/error.php 1 -
/blog/wp-admin/install.php 2 -
//wp-content/plugins/upspy/index.php 1 -
/Backup 1 www.google.com
//alfa123.php 1 -
//templates/beez5/error.php 1 -
/wp 1 www.google.com
//wp-content/think.php 1 -
//mailer.php 1 -
//wp-content/vuln.php 1 -
//MARIJUANA.php 1 -
//100.php 1 -
//wso1337.php 1 -
//new.php 1 -
//wp-confirm.php 1 -
//y.php 1 -
//sindex.php 1 -
//wp-content/uploads/readindex.php 1 -
//alex.php 1 -
/FORUM 1 www.google.com
//2.php 1 -
//wp-configer.php 1 -
/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php 3 -
//wp-ad.php 1 -
//wp.php 1 -
//wp-admin/includes/maint/repair-bak.php 1 -
//indoxploit.php 1 -
/blog 1 www.google.com
//cpanel.php 1 -
//v.php 1 -
//wp-content/includes/leaf.php 1 -
//1index.php 1 -
/zlxlljqp.php 1 www.google.com
//l.php 1 -
/STORE 1 www.google.com
//cp.php 1 -
/store 1 www.google.com
/wordpress/ 1 -
//templates/ja_purity/index.php 1 -
//templates/protostar/error.php 1 -
/demo 1 www.google.com
//wp-file.php 1 -
//wp-admin/includes/leaf.php 1 -
//404.php 1 -
//Sendemail.php 1 -
//new-index.php 1 -
//3.php 1 -
//owl.php 1 -
//rahma.php 1 -
//wp-admin/includes/maint/wp-cron.php 1 -
//b.php 1 -
/oldsite/wp-admin/install.php 2 -
/backup/wp-admin/install.php 2 -
//wp-admin/includes/class-wp-media-list-data.php 1 -
//uploads/contexmini.php 1 -
//wp-content/wp-logins.php 1 -
//wp-content/uploads/leafmailer2.8.php 1 -
/wp-content/plugins/easy-wp-smtp/ 3 -
//wp-content/plugins/css-ready-sel/file.php 1 -
//nasgor.php 1 -
//wp-admin/includes/maint/wp-readindex.php 1 -
/wp-22.php 1 -
//templates/rhuk_milkyway/index.php 1 -
/ALFA_DATA/alfacgiapi/perl.alfa 1 www.google.com
//wp-content/plugins/three-column-screen-layout/db.php 1 -
//templates/atomic/error.php 1 -
/forum 1 www.google.com
//wp-admin/includes/media-site.php 1 -
///wp-admin/install.php 1 bing.com
/pos 1 www.google.com
/backup 1 www.google.com
//data.php 1 -
//old-index.php 1 -
/wp-content/plugins/apikey/apikey.php 1 -
//WSO.php 1 -
/WP 1 www.google.com
/old 1 www.google.com
/cms/wp-admin/install.php 2 -
//mi.php 1 -
//f.php 1 -
//templates/protostar/index.php 1 -
//sym403.php 1 -
//wp-content/wp-admin.php 1 -
//wi.php 1 -
//wp-content/themes/gaukingo/db.php 1 -
//z.php 1 -
//anone.php 1 -
//c.php 1 -
//m.php 1 -
//wp-content/plugins/widget-logic/mini.php 1 -
//alexus.php 1 -
//hello.php 1 -
/alfacgiapi/perl.alfa 1 www.google.com
//autoload_classmap.php 1 -
//wp-uploads.php 1 -
//wp-blog.php 1 -
//templates/beez3/index.php 1 -
/old/wp-admin/install.php 2 -
/dup-installer/main.installer.php 1 -
//r.php 1 -
//wp-content/plugins/wp-db-ajax-made/wp-ajax.php 1 -
/shop 1 www.google.com
//w.php 1 -
//edit-form.php 1 -
//777.php 1 -
//i.php 1 -
//baindex.php 1 -
//Gel.php 1 -
//administrator/templates/isis/index.php 1 -
/plugins/content/apismtp/apismtp.php.suspected 1 -
//kindex.php 1 -
//sendmail.php 1 -
/wp/wp-admin/install.php 2 -
//alwso.php 1 -
//wp-includes/sys.php 1 -
/wp-plain.php 1 www.google.com
//fk.php 1 -
//stindex.php 1 -
/SHOP 1 www.google.com
//FoxWSOv1.php 1 -
//wp-content/includes/alexusmailer2.0.php 1 -
/ 13 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 20
192.185.112.43 2 2 128 20220502083707
64.78.149.164 2 2 174 20220502083708
35.89.74.29 1 1 87 20220502083708
54.191.192.47 1 1 87 20220502083708
18.192.23.35 1 1 87 20220502083708
18.225.32.50 1 1 87 20220502083708
3.69.241.162 1 1 87 20220502083708
3.144.218.183 1 1 87 20220502083708
180.163.220.3 0 2 4872 
180.163.220.66 0 2 18359 
27.115.124.6 0 3 19550 
42.236.10.93 0 5 24422 
42.236.10.84 0 1 120 
27.115.124.38 0 1 4335 
104.192.108.9 0 3 23765 
27.115.124.45 0 1 537 
42.236.10.75 0 4 24302 
205.169.39.35 0 5 24422 
104.192.108.10 0 2 657 
180.163.220.4 0 1 1191 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 3
20220502 10 15 25246 8
20220503 0 15 73266 0
20220507 0 10 48844 0
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 8
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/.well-known/acme-challenge/kKOGArJCv6cSTD2y_wg3pu6bnOdkmaeNL00oCp7uOVI 4 348 3 4
/.well-known/acme-challenge/eVN5wpgf4S16JD_te_po3MeqqPYhgZppy6PyxF_j9cI 4 348 4 3
/.well-known/acme-challenge/2H1M7RS_-W21IXNJLF49BMP254WSH_H0 1 64 0 1
/.well-known/acme-challenge/B-6Z7CK7MR4F0X9MEH-_WPOGSUYRPOZT 1 64 1 0
END_SIDER