One Hat Cyber Team

View File Name : awstats062022.detox.glenar.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202206 will be lost/reset.
# Last config file used to build this data file was /home2/glenar/tmp/awstats/awstats.detox.glenar.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2012                
POS_TIME 2690                
POS_VISITOR 14457               
POS_DAY 16427               
POS_DOMAIN 3405                
POS_LOGIN 3719                
POS_ROBOT 3874                
POS_WORMS 4006                
POS_EMAILSENDER 4137                
POS_EMAILRECEIVER 4280                
POS_SESSION 17019               
POS_SIDER 17186               
POS_FILETYPES 4415                
POS_DOWNLOADS 4516                
POS_OS 4564                
POS_BROWSER 4737                
POS_SCREENSIZE 5143                
POS_UNKNOWNREFERER 5217                
POS_UNKNOWNREFERERBROWSER 5875                
POS_ORIGIN 6270                
POS_SEREFERRALS 6404                
POS_PAGEREFS 6584                
POS_SEARCHWORDS 6732                
POS_KEYWORDS 6884                
POS_MISC 2354                
POS_ERRORS 6943                
POS_CLUSTER 3575                
POS_SIDER_404 7073                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20220701023602 33 8080 12567908648423
FirstTime 20220601065637
LastTime 20220630150027
LastUpdate 20220701055451 33 0 32 0 0
TotalVisits 56                  
TotalUnique 48                  
MonthHostsKnown 0                   
MonthHostsUnknown 48                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
AddToFavourites 0 0 0
JavaEnabled 0 0 0
RealPlayerSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
QuickTimeSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 16 16 661744 171 171 713351
1 7 7 576093 6 6 33295
2 0 0 0 2 2 9354
3 1 1 16795 8 8 34371
4 0 0 0 0 0 0
5 2 2 164598 18 18 3925
6 11 11 905289 99 99 185887
7 10 10 822990 12 12 57402
8 6 6 493794 8 8 33461
9 3 3 50385 2 2 9354
10 0 0 0 14 14 56576
11 9 9 675187 134 134 597177
12 7 7 576093 15 16 71659
13 3 3 115889 40 40 104190
14 1 1 16795 4 4 9663
15 20 20 1580476 48 48 67654
16 9 9 740691 13 13 44613
17 8 8 461880 40 40 26558
18 2 2 164598 62 62 206525
19 2 2 99094 13 13 104560
20 2 2 33590 87 87 387189
21 3 3 115889 94 96 467808
22 7 7 576093 10 11 48274
23 2 2 0 15 15 83376
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 7
us 104 104 7084418
gb 12 12 856580
ca 10 10 822990
cn 2 2 33590
nl 1 1 16795
de 1 1 16795
cl 1 1 16795
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 128 8797578 0 0
php 3 50385 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
androidnougat 2 2
macosx10 2 2
Unknown 18 18
androidkitkat 3 3
macosx9 1 1
linux 1 1
win10 103 103
win7 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 17
chrome63.0.3486.93 1 1
Unknown 13 13
chrome60.0.3112.107 2 2
chrome79.0.3945.88 2 2
netscape 1 1
firefox50.0 4 4
chrome27.0.1453.93 1 1
chrome95.0.4638.69 2 2
chrome36.0.1985.125 1 1
chrome89.0.4389.82 1 1
chrome88.0.4240.193 22 22
chrome37.0.2062.124 1 1
chrome39.0.2171.95 1 1
chrome69.0.3497.100 10 10
mozilla 4 4
chrome78.0.3904.108 62 62
android 3 3
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_ThinkChaos/0.3.0;__In_the_test_phase,_if_the_ThinkChaos_brings_you_trouble,_please_add_disallow._Thank_you.) 20220619170359
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20220630150027
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20220629092825
Mozilla 20220610192922
wp_is_mobile 20220616204115
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20220630150027
wp_is_mobile 20220616204115
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 124 124
From1 3 3
From2 4 4
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 2
www_bing_com 2 2
www_google_com 2 2
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
409 69 4814
404 632 3261367
406 211 47460
403 7 42581
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 231
/blog/wp-json/wp/v2/users 1 -
/defau1t.php 3 www.bing.com
///dup-installer/main.installer.php 1 -
/home/ 1 -
/archives.php 3 www.bing.com
/mt/mt-xmlrpc.cgi 1 http://detox.glenar.com/mt/mt-xmlrpc.cgi
/cgi-bin/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi-bin/mt-xmlrpc.cgi
/mtos/mt-xmlrpc.cgi 1 http://detox.glenar.com/mtos/mt-xmlrpc.cgi
/legion.php 3 www.bing.com
/wp-content/uploads/alfacgiapi 3 www.bing.com
//admin.php 2 -
//wp-content/mu-plugins-old/index.php 2 -
////wp-admin/setup-config.php 1 bing.com
/wp-content/fw.php 2 -
/doc.php 5 -
/sites/default/files/ALFA_DATA 3 www.bing.com
/images/ALFA_DATA/alfacgiapi/perl.alfa 1 -
/blog/mt-xmlrpc.cgi 1 http://detox.glenar.com/blog/mt-xmlrpc.cgi
/back/xmlrpc.php 1 -
/templates/beez3/ALFA_DATA 3 www.bing.com
/old/ 11 -
/upload.php 3 www.bing.com
/wp-content/plugins/apikey/apikey.php.suspected 2 -
/wp-json/oembed/1.0/embed 11 -
/test_404_page/ 1 -
/wp-json/wp/v2/users/ 13 -
/wp-includes 1 www.google.com
/olux.php 3 www.bing.com
/1index.php 5 -
/cgi/mt/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi/mt/mt-xmlrpc.cgi
/takeout.php 1 -
/web/wp-json/wp/v2/users 1 -
/test/ 1 -
/alfacgiapi 3 www.bing.com
/site/wp-json/wp/v2/users 1 -
/kindex.php 2 -
/sh3llx.php 1 -
/wp-content/plugins/apikey/apikey.php 2 -
/moduless.php 3 www.bing.com
/config.php 3 www.bing.com
/.well-known/cgialfa 3 www.bing.com
/blog/xmlrpc.php 5 -
/shells.php 3 www.bing.com
/up.php 5 -
//3index.php 2 -
/new/ 11 -
/shx.php 2 -
/1337.php 2 -
/fw.php 2 -
/wp-content/cgialfa 3 www.bing.com
/style.php 4 bing.com
/wp-content/ALFA_DATA 3 www.bing.com
/.well-known/ALFA_DATA 3 www.bing.com
/cgi_bin/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi_bin/mt-xmlrpc.cgi
//wikindex.php 2 -
/aegcprhq.php 1 www.google.com
/autoload_classmap.php 2 -
/sym.php 2 -
/wordpress/wp-admin/install.php 1 -
/wp-admin/css/ 6 binance.com
/cms/mt-xmlrpc.cgi 1 http://detox.glenar.com/cms/mt-xmlrpc.cgi
/2020/wp-json/wp/v2/users 1 -
/gank.php.PhP 3 www.bing.com
/2020/ 10 -
/wp_wrong_datlib.php 5 -
/wp-signin.php 3 www.bing.com
/sites/default/files/alfacgiapi 3 www.bing.com
/templates/beez3/index.php 3 www.bing.com
//wordpress///wp-admin/setup-config.php 1 bing.com
/wp-content/ALFA_DATA/alfacgiapi/perl.alfa 1 -
/blog/ 11 -
/wp-content/plugins/dzs-zoomsounds/savepng.php 2 -
/wp-content/wp.php 2 -
/xlet.php 1 -
/admin.php 1 -
/backup/ 11 -
/mt-xmlrpc.cgi 1 http://detox.glenar.com/mt-xmlrpc.cgi
/wp-admin/style.php 3 www.bing.com
/admin/controller/extension/extension/ALFA_DATA 3 www.bing.com
/wordpress/ 12 -
/cgi-bin/MT/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi-bin/MT/mt-xmlrpc.cgi
/0byte.php 2 -
/installer.php 2 -
/WP/ 1 -
/s_ne.php 3 www.bing.com
/sindex.php 2 -
/beence.php 3 www.bing.com
/oldsite/wp-admin/install.php 1 -
/.local 2 https://www.google.com/
/new-index.php 2 -
/test/wp-admin/install.php 1 -
/wp-backup-sql-302.php 3 www.bing.com
/2020/xmlrpc.php 4 -
/sym403.php 2 -
/new/xmlrpc.php 5 -
/backup/wp-admin/install.php 1 -
/cgialfa 3 www.bing.com
/wp-content/alfacgiapi/perl.alfa 1 -
/wp-includes/ALFA_DATA 3 www.bing.com
/wp/wp-admin/install.php 1 -
/wp-content/plugins/ubh/up.php 3 www.bing.com
/wp.php 5 -
/plugins/content/apismtp/apismtp.php.suspected 2 -
/demo/ 11 -
/back/ 1 -
/old/wp-admin/install.php 1 -
/about.php 3 www.bing.com
/wp-includes/cgialfa 3 www.bing.com
/old/xmlrpc.php 5 -
/old-index.php 2 -
/mini.php 2 -
/test.php 3 www.bing.com
//wp-content/plugins/dzs-zoomsounds/savepng.php 2 -
/wp-admin/alfacgiapi 3 www.bing.com
/stindex.php 2 -
/baindex.php 2 -
/wp-booking.php 3 www.bing.com
/.production 2 https://www.google.com/
/x.php 3 www.bing.com
/.git/HEAD 1 -
/fyfllhtc.php 1 www.google.com
/wp/ 11 -
/css/ALFA_DATA/alfacgiapi/perl.alfa 1 -
/shell.php 5 -
/media-admin.php 5 -
/xl.php 2 -
/bk/ 1 -
/web/wp-admin/install.php 1 -
/jindex.php 1 -
/system_log.php 3 www.bing.com
/wp/xmlrpc.php 1 -
/cgi_bin/mt/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi_bin/mt/mt-xmlrpc.cgi
/wp-includes/ALFA_DATA/alfacgiapi/perl.alfa 1 -
/site/ 10 -
/wordpress/wp-admin/setup-config.php 1 -
/files/ALFA_DATA/alfacgiapi/perl.alfa 1 -
/xleet-shell.php 3 -
/wp-content/fx.php 2 -
/wp/wp-json/wp/v2/users 1 -
/fx.php 2 -
/wp-content/wso.php 2 -
/wp-plugins.php 3 www.bing.com
/wordpress/wp-json/wp/v2/users 1 -
/xmlrpc.php 5 -
/ALFA_DATA/alfacgiapi/perl.alfa 3 -
/wp-content/plugins/backup_index.php 3 www.bing.com
/wp-content/export.php 3 www.bing.com
/cgi-bin/mt/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi-bin/mt/mt-xmlrpc.cgi
///installer.php 1 -
/site/wp-admin/install.php 1 -
/symlink.php 2 -
/old/wp-admin/setup-config.php 1 -
/blog/wp-admin/install.php 1 -
/.well-known/alfacgiapi 3 www.bing.com
/wikindex.php 2 -
/1.php 3 www.bing.com
/xleet.php 6 -
/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa 1 -
/403.php 2 -
/feed/ 1 -
/wp-admin/alfacgiapi/perl.alfa 1 -
/ups.php 5 -
/wp-content/shell.php 2 -
/_profiler/phpinfo 2 -
/wordpress/xmlrpc.php 5 -
/hxioiyps.php 1 www.google.com
/web/xmlrpc.php 5 -
/s_e.php 3 www.bing.com
//wordpress//wp-admin/install.php 1 bing.com
/wp-content/uploads/cgialfa 3 www.bing.com
/wso.php 3 www.bing.com
/wp-admin/setup-config.php 1 -
/cgi_bin/MT/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi_bin/MT/mt-xmlrpc.cgi
/wp-includes/wp-class.php 3 www.bing.com
/robots.txt 3 -
/cms/wp-admin/install.php 1 -
/wp-includes/wp-atom.php 3 www.bing.com
/alfacgiapi/perl.alfa 3 -
/old/wp-json/wp/v2/users 1 -
/wp-content/alfacgiapi 3 www.bing.com
/export.php 3 www.bing.com
///wp-admin/install.php 2 bing.com
/wp-includes/images/css.php 3 www.bing.com
/wp-includes/css/wp-config.php 3 www.bing.com
/plugins/content/apismtp/apismtp.php 3 -
/404.php 2 -
/templates/beez3/cgialfa 3 www.bing.com
/web/ 10 -
/xindex.php 2 -
/defau11.php 3 www.bing.com
/alwso.php 2 -
/wp-admin/ALFA_DATA 3 www.bing.com
/wp-content/db-cache.php 3 www.bing.com
/wp-content/outcms.php 3 www.bing.com
/z.php 3 www.bing.com
/shop/ 1 -
/wp-content/uploads/ALFA_DATA 3 www.bing.com
/demo/wp-json/wp/v2/users 1 -
/templates/beez3/alfacgiapi 3 www.bing.com
/wp-admin/includes/class-wp-media-list-data.php 2 -
/backup/xmlrpc.php 5 -
/new/wp-admin/setup-config.php 1 -
/wp-includes/alfacgiapi/perl.alfa 1 -
/error.php 3 www.bing.com
/wp-load.php 3 www.bing.com
//vendor/phpunit/phpunit/phpunit.xsd 2 -
/wp-admin/cgialfa 3 www.bing.com
///installer-backup.php 1 -
/admin/controller/extension/extension/alfacgiapi 3 www.bing.com
/qindex.php 2 -
///wp-admin/setup-config.php 1 -
/site/xmlrpc.php 5 -
/wp-includes/css/css.php 3 www.bing.com
/radio.php 5 -
/admin/controller/extension/extension/cgialfa 3 www.bing.com
/wp-includes/alfacgiapi 3 www.bing.com
/oldsite/xmlrpc.php 1 -
/new/wp-admin/install.php 1 -
/new/wp-json/wp/v2/users 1 -
/cgi/mt-xmlrpc.cgi 1 http://detox.glenar.com/cgi/mt-xmlrpc.cgi
/wp-content/mu-plugins/db-safe-mode.php 3 www.bing.com
/wp-admin/install.php 1 -
/.remote 2 https://www.google.com/
/sites/default/files/cgialfa 3 www.bing.com
/backup/wp-json/wp/v2/users 1 -
/a.php 3 www.bing.com
/MT/mt-xmlrpc.cgi 1 http://detox.glenar.com/MT/mt-xmlrpc.cgi
/wp-plain.php 3 www.google.com
/alfa.php 5 -
/wp-json/wp/v2/users 1 -
/ALFA_DATA 3 www.bing.com
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 48
20.248.177.146 10 10 822990 20220605070902
40.122.151.49 10 10 167950 20220612002300
20.248.182.85 7 7 576093 20220621111627
20.5.222.113 7 7 576093 20220630084525
13.92.226.19 7 7 576093 20220611060938
168.63.248.74 6 6 493794 20220617115711
159.242.227.96 6 6 493794 20220609151723
62.128.217.100 6 6 493794 20220612161659
20.213.121.85 5 5 411495 20220603002028
159.65.6.53 5 5 411495 20220609155630
192.241.144.82 5 5 411495 20220606124910
157.245.51.118 5 5 411495 20220603013040
20.28.234.162 4 4 329196 20220628182850
20.28.235.178 3 3 246897 20220613165130
20.242.68.26 2 2 164598 20220626154310
5.62.43.203 2 2 164598 20220610170423
18.119.110.86 2 2 164598 20220625221517
87.117.225.135 2 2 164598 20220613154028
54.70.232.17 2 2 164598 20220601120701
175.24.232.97 2 2 33590 20220619170359
23.100.99.240 2 2 164598 20220629061040
40.86.47.75 2 2 164598 20220615063207
20.70.201.252 2 2 33590 20220603200413
20.214.8.177 2 2 164598 20220622213541
51.12.241.222 2 2 33590 20220626031749
137.184.89.104 1 1 0 20220619235842
181.214.206.219 1 1 16795 20220629145724
205.210.31.128 1 1 82299 20220601080326
205.210.31.28 1 1 82299 20220604001908
198.235.24.148 1 1 82299 20220612063544
198.235.24.27 1 1 82299 20220628014023
198.235.24.153 1 1 82299 20220604133101
198.235.24.8 1 1 82299 20220604060206
192.187.100.10 1 1 16795 20220614114008
148.153.98.19 1 1 16795 20220623212007
205.210.31.147 1 1 82299 20220614175843
188.166.215.124 1 1 16795 20220610192922
54.37.131.60 1 1 0 20220624232332
205.210.31.152 1 1 82299 20220630150027
162.142.125.10 1 1 16795 20220610090156
172.245.6.156 1 1 16795 20220601133208
138.201.16.213 1 1 16795 20220616204115
20.29.122.31 1 1 16795 20220615213818
205.210.31.32 1 1 82299 20220601065637
167.94.138.45 1 1 16795 20220629092825
205.210.31.158 1 1 82299 20220610015958
144.91.106.14 1 1 16795 20220612092240
158.101.30.206 1 1 16795 20220622132508
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 24
20220601 5 5 345991 4
20220603 12 12 856580 4
20220604 3 3 246897 3
20220605 10 10 822990 1
20220606 5 5 411495 1
20220609 11 11 905289 2
20220610 10 10 691982 5
20220611 2 2 164598 1
20220612 18 18 760838 4
20220613 5 5 411495 2
20220614 4 4 263692 3
20220615 3 3 181393 2
20220616 4 4 263692 2
20220617 3 3 246897 1
20220619 3 3 33590 2
20220621 5 5 411495 1
20220622 3 3 181393 3
20220623 1 1 16795 1
20220624 2 2 16795 2
20220625 2 2 164598 1
20220626 3 3 181393 2
20220628 5 5 411495 3
20220629 4 4 198188 3
20220630 8 8 658392 3
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
2mn-5mn 1
0s-30s 54
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 2
/ 128 8797578 53 53
/index.php 3 50385 3 3
END_SIDER