One Hat Cyber Team

Edit File: awstats092025.nags-ap.andjemztech.com.txt

AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202509 will be lost/reset.
# Last config file used to build this data file was /home1/andjemzt/tmp/awstats/awstats.nags-ap.andjemztech.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2092                
POS_TIME 2764                
POS_VISITOR 13691               
POS_DAY 15344               
POS_DOMAIN 3429                
POS_LOGIN 3764                
POS_ROBOT 3919                
POS_WORMS 4051                
POS_EMAILSENDER 4182                
POS_EMAILRECEIVER 4325                
POS_SESSION 15873               
POS_FILESIZE 16124               
POS_REQUESTTIME 16264               
POS_SIDER 16020               
POS_FILETYPES 4460                
POS_DOWNLOADS 4617                
POS_OS 4703                
POS_BROWSER 4858                
POS_SCREENSIZE 5362                
POS_UNKNOWNREFERER 5436                
POS_UNKNOWNREFERERBROWSER 5938                
POS_ORIGIN 6211                
POS_SEREFERRALS 6343                
POS_PAGEREFS 6526                
POS_SEARCHWORDS 6674                
POS_KEYWORDS 6826                
POS_MISC 2428                
POS_ERRORS 6885                
POS_CLUSTER 3620                
POS_SIDER_404 7023                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20251001204939 1 0 16180196875047
FirstTime 20250901000045
LastTime 20250930160330
LastUpdate 20251002070143 1 0 0 0 0
TotalVisits 43                  
TotalUnique 38                  
MonthHostsKnown 0                   
MonthHostsUnknown 41                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
QuickTimeSupport 0 0 0
AddToFavourites 0 6 0
WindowsMediaPlayerSupport 0 0 0
PDFSupport 0 0 0
RealPlayerSupport 0 0 0
FlashSupport 0 0 0
JavaEnabled 0 0 0
TotalMisc 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 2 11902 0 0 0
1 4 6 1727646 1 1 226
2 0 2 4680 0 0 0
3 0 0 0 42 43 277552
4 3 8 34355 0 1 6603
5 3 3 20055 10 10 2260
6 4 6 589936 114 148 262456
7 4 6 1432700 121 160 293794
8 6 8 1745478 16 16 3473
9 4 6 1727639 0 1 0
10 8 10 1763324 23 24 5198
11 4 5 868255 4 5 5366
12 3 4 22420 96 96 599384
13 0 0 0 18 18 112477
14 0 1 7778 0 0 0
15 1 1 6773 0 0 0
16 4 5 881658 16 16 3473
17 3 4 12083 84 84 554652
18 0 0 0 0 0 0
19 0 0 0 0 0 0
20 4 5 881662 13 13 2938
21 3 4 866039 91 92 600873
22 2 7 1794634 2 3 2654
23 2 3 868376 0 2 2428
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 44 63 12246061
ru 7 9 1144392
in 4 4 8859
ca 4 4 26916
id 1 1 2216
se 1 1 2215
be 1 3 1720997
de 1 1 2211
zz 0 10 113526
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
Unknown 2 2154 0 0
js 15 136767 0 0
png 16 13750240 0 0
html 61 247068 0 0
log 2 1131164 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 1
/storage/logs/laravel.log 2 0 1131164
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 6
Unknown 28 13
linux 16 10
win10 39 33
androidlollipop 2 2
macosx15 10 4
androidkitkat 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 23
firefox113.0 1 1
chrome120.0.0.0 6 0
chrome104.0.0.0 2 2
chrome88.0.4240.193 3 3
mozilla 18 8
firefox128.0 2 2
firefox126.0 1 1
chrome114.0.0.0 1 1
chrome132.0.0.0 1 1
chrome136.0.0.0 1 1
chrome113.0.5672.93 1 1
chrome109.0.5414.119 1 1
netscape5.0 3 3
chrome121.0.0.0 4 0
chrome128.0.0.0 1 1
firefox41.0 1 1
chrome78.0.3904.108 18 18
chrome139.0.0.0 10 5
chrome58.0.3029.110 1 1
firefox139.0 2 1
Unknown 9 4
chrome91.0.4472.124 8 6
chrome133.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250912202128
python-httpx/0.28.1 20250913040558
Mozilla/5.0_zgrab/0.x 20250904041550
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250929170422
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250929112414
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
python-httpx/0.28.1 20250913040558
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250929170422
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 61 88
From1 0 0
From2 2 2
From3 0 0
From4 0 6
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 2
www_google_co_kr 1 1
www_google_es 1 1
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
404 540 2626245
409 2 166
406 179 40454
403 4 68432
301 2 510
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 347
/articles.php 1 -
/w3llstore.php 2 -
/get.php 1 -
/modules/mod_simplefileuploadv1.3/elements/filemanager.php 1 -
/yes.php 1 -
/wio.php 1 -
/admin/.env 2 -
/es.php 1 -
/asasx.php 2 -
/az.php 1 -
/sms.py 2 -
/.well-known/security.txt 2 -
/menu.php 1 -
/autoload_classmap.php 3 -
/apis/controllers/users.js 2 -
/api/shared/config/config.env 2 -
/lol.php 1 -
/.git/config 1 -
/server-info.php 2 -
/alpa.php 1 -
/filled.php 1 -
/api/config.js 2 -
/go.php 1 -
/wp.php 1 -
/disagimons.php 1 -
/.env.local 2 -
/network.php 1 -
/g.php 1 -
/aws-secret.yaml 2 -
/sad.php 1 -
/server.js 2 -
/xLB2NXAP.php 1 -
/fork.php 1 -
/dashboard/phpinfo.php 2 -
/wp-admin/install.php 1 -
/nf.php 1 -
/lara/phpinfo.php 2 -
/inputs.php 1 -
/wp-admin/maint/index.php 1 -
/backend/config/development.yml 2 -
/public/wordpress 2 http://nags-ap.andjemztech.com/wordpress/
/ot.php 1 -
/rsnu.php 1 -
/shorw.php 1 -
/lite.php 1 -
/size.php 1 -
/ab.php 1 -
/gifclass.php 1 -
/temp.php 1 -
/.circleci/configs/development.yml 2 -
/wp-gr.php 3 -
/controller/api/post.js 2 -
/gfile1.php 1 -
/lock.php 1 -
/pm.php 1 -
/wander.php 1 -
/wp-content/plugins/hellopress/wp_filemanager.php 5 -
/chosen.php 1 -
/claa.php 1 -
/lupo.php 1 -
/controller/admin/post.js 2 -
/documentroot.php 1 -
/.env_sample 2 -
/past.php 1 -
/lv.php 3 -
/class.1.php 1 -
/app/config/parameters.yml 2 -
/bitch.php 1 -
/gold.php 1 -
/shell20250630.php 1 -
/config/application.yml 2 -
/admin/upload/css.php 1 -
/system_log.php 3 -
/new/.env.local 2 -
/js/main.js 2 -
/index.html 2 -
/zex4.php 1 -
/xmlrpc.php 1 -
/jquery.php 1 -
/akc.php 1 -
/gfile.php 1 -
/main.js 2 -
/vxrl.php 2 -
/bless2.php 1 -
/iov.php 1 -
/acxx.php 1 -
/config/local.yml 2 -
/Lux.php 1 -
/efile.php 1 -
/new.php 2 -
/des.php 1 -
/huangs.php 1 -
/file2.php 2 -
/acacia.php 1 -
/my_env/palash.py 2 -
/aaaa.php 2 -
/a2.php 1 -
/222.php 1 -
/cbrfo.php 2 -
/dfre.php 2 -
/shared/config/config.js 2 -
/swagger.json 2 -
/configs/routes-4aug.js 2 -
/lock360.php 4 -
/server/config/database.js 2 -
/hexx.php 1 -
/great.php 1 -
/function/function.php 1 -
/3.php 1 -
/settings.py 2 -
/as4AaPasd.php 1 -
/.travis.yml 2 -
/cccc.php 1 -
/jlex3.php 1 -
/makeasmtp.php 1 -
/fm.php 1 -
/wsback.php 2 -
/file1.php 2 -
/user/controllers/index.js 2 -
/config/constants.js 2 -
/public/wsr2.php 1 -
/config.json 2 -
/bless_250808022320.php 1 -
/partner/config/config.js 2 -
/api/config.env 2 -
/slo.php 2 -
/disagreop.php 1 -
/good.php 1 -
/dex.php 1 -
/blue.php 1 -
/laravel/info.php 2 -
/zwso.php 1 -
/file21.php 1 -
/moon.php 1 -
/r4f_1.php 2 -
/vanta.php 1 -
/tcp.php 2 -
/wp-includes/widgets/index.php 1 -
/static/js/main.e85f7a37.js 2 -
/jjzsijpj.php 1 -
/2.php 1 -
/ww.php 1 -
/v2.php 2 -
/.aws/config 2 -
/new/.env.staging 2 -
/ahax.php 1 -
/wp-includes/Requests/Cookie/alfa-rex.php 1 -
/vee.php 1 -
/wp-config 2 -
/ertg.php 1 -
/Sanskrit.php 1 -
/filei.php 1 -
/config.php 1 -
/fe5.php 1 -
/img/dot.php 1 -
/wp-content/upgrade/file.php 1 -
/static/js/2.ca066a4b.chunk.js 2 -
/aa2.php 1 -
/tesla.php 1 -
/wp-includes/certificates/plugins.php 1 -
/berax.php 1 -
/goat.php 2 -
/wp-omo.php 1 -
/yy.php 1 -
/static/js/main.141b0494.js 2 -
/mo.php 1 -
/f1.php 1 -
/scripts/nodemailer.js 2 -
/hook.php 1 -
/api/config/config.yml 2 -
/phpinfo 2 -
/config.env 2 -
/xBrain.php 1 -
/jmfi2.php 2 -
/krypton.php 2 -
/re.php 1 -
/ext.php 2 -
/xhouf.php 1 -
/helper.php 1 -
/config/parameters.yml 2 -
/my_env/chakaash.py 2 -
/file.php 3 -
/in.php 1 -
/configs/routes.js 2 -
/puts.php 1 -
/css.php 2 -
/user/config/config.js 2 -
/cfile.php 3 -
/config/storage.yml 2 -
/aa21.php 1 -
/config/settings.local 2 -
/.AWS_/credentials 2 -
/wp-update.php 2 -
/gg.php 2 -
/va.php 1 -
/an.php 1 -
/x1.php 1 -
/gif.php 1 -
/swagger.js 2 -
/server_info.php 2 -
/tund.php 1 -
/class-t.api.php 1 -
/index.js 2 -
/ee.php 3 -
/MARIJUANA.php 1 -
/error.php 3 -
/wp-trackback.php 1 -
/karma.conf.json 2 -
/aucxzso.php 2 -
/axx.php 3 -
/.env.prod 2 -
/ol.php 2 -
/secured/phpinfo.php 2 -
/13.php 2 -
/.env.stage 2 -
/wp-kisaki.php 1 -
/appsettings.json 4 -
/atomlib.php 2 -
/_profiler/phpinfo/info.php 2 -
/file17.php 1 -
/helper.js 2 -
/aa.php 2 -
/0x0x.php 1 -
/finny.php 1 -
/usep.php 1 -
/main.yml 2 -
/ho.php 1 -
/phpinfo.php 2 -
/app_dev.php/_profiler/phpinfo 2 -
/jx.php 1 -
/api/shared/config.env 2 -
/config/settings.json 2 -
/.well-known/acme-challenge/about.php 1 -
/controllers/settings.js 2 -
/pp.php 4 -
/we.php 4 -
/co.php 3 -
/_phpinfo.php 2 -
/folte.php 1 -
/helpers/utility.js 2 -
/cabs.php 1 -
/hk.php 1 -
/admin/server_info.php 2 -
/app.py 2 -
/num.php 2 -
/goh.php 1 -
/as.php 1 -
/config/aws.yml 2 -
/public/js/main.js 2 -
/trd.php 1 -
/x3x3x3x.php 1 -
/7.php 1 -
/xampp/phpinfo.php 2 -
/aa17.php 1 -
/abhgt.php 1 -
/eauu.php 1 -
/file32.php 2 -
/.aws/credentials 2 -
/xm.php 1 -
/ava.php 2 -
/abcd.php 3 -
/node/.env_example 2 -
/akk.php 1 -
/test.php 2 -
/config.js 2 -
/ez.php 2 -
/gm.php 1 -
/class19.php 1 -
/foot.php 1 -
/_profiler/phpinfo 2 -
/granary.php 1 -
/manager.php 2 -
/config/settings.prod 2 -
/ioxi.php 1 -
/_profiler/phpinfo/phpinfo.php 2 -
/lc.php 2 -
/yasnu.php 1 -
/wp-includes/fonts/about.php 1 -
/nc4.php 1 -
/ffile.php 3 -
/configs/s3_config.json 2 -
/file5.php 1 -
/gatsby-config.js 2 -
/aucxcocoxo.php 2 -
/apis/config/config.js 2 -
/php.php 1 -
//installer.php 1 -
/bolt.php 1 -
/my_env/newsletter.py 2 -
/cjfuns.php 1 -
/simple.php 1 -
/build.php 1 -
/rrr.php 1 -
/ff2.php 1 -
/cloud/Scraper.js 2 -
/cool.php 1 -
/helper/EmailHelper.js 2 -
/f3.php 1 -
/orm.php 1 -
/C1.php 1 -
/.env.production.local 2 -
/ah.php 1 -
/getcpuutil.php-bakworking 2 -
/default.php 1 -
/app.js 2 -
/com.php 1 -
/520.php 2 -
/backend/config/default.yml 2 -
/cra.php 1 -
/admin/config 2 -
/service/email_service.py 2 -
/ssss.php 1 -
/weo.php 1 -
/backend/config/settings.yml 2 -
/s3.js 2 -
/inc.php 1 -
/CLA.php 3 -
/aa18.php 1 -
/api/objects/codes.php.save 2 -
/lara/info.php 2 -
/config/config.json 2 -
/admin/controllers/merchant.js 2 -
/class20.php 1 -
/file15.php 1 -
/application.properties 2 -
/aws.yml 2 -
/use.php 1 -
/admin/controllers/partner.js 2 -
/uploan.php 1 -
/zadad4dadad1.php 1 -
/conn.php 1 -
/k.php 1 -
/live.php 1 -
/ar.php 3 -
/anan.php 1 -
/lala.php 1 -
/mytest/astech_robot.js 2 -
/server/s3.js 2 -
/xc.php 1 -
/ioxi2.php 2 -
/new/.env.production 2 -
/rjv.php 1 -
/debug/default/view 2 -
/gmo.php 4 -
/aws/credentials 2 -
/new4.php 2 -
/rak.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 41
45.94.31.31 15 15 100275 20250921102948
185.177.72.57 3 4 571088 20250905065952
44.193.254.10 3 3 6648 20250916211244
34.136.156.9 3 3 20055 20250930160330
185.177.72.8 3 4 571091 20250909070428
34.148.217.235 3 3 20055 20250919080848
3.222.165.167 2 2 4433 20250929173547
161.35.39.216 1 2 861609 20250907012403
34.143.132.194 1 1 2213 20250926112633
164.90.194.3 1 2 861606 20250918102111
209.38.76.178 1 2 861610 20250921011011
103.124.95.168 1 1 2218 20250918085333
159.203.8.224 1 2 861603 20250918082536
185.247.137.116 1 1 2213 20250904160510
176.57.184.232 1 1 2211 20250929012750
206.168.34.194 1 2 861603 20250905234504
45.131.155.101 1 1 2214 20250901000045
205.210.31.107 1 1 6685 20250905041552
45.94.31.201 1 6 25459 20250913040556
18.208.202.102 1 1 2217 20250916095447
66.132.153.142 1 3 1720995 20250927090902
199.45.154.120 1 2 861610 20250929112411
165.232.119.182 1 2 861602 20250904085046
87.236.176.121 1 1 2217 20250912202126
45.131.155.100 1 1 2215 20250924092336
138.197.165.25 1 2 861609 20250921074446
87.236.176.228 0 1 859390 
44.220.168.142 1 1 2218 20250919114503
167.94.145.107 1 3 1721002 20250910220502
162.142.125.122 1 2 861606 20250910211047
205.210.31.9 1 1 6773 20250902231807
3.138.185.30 1 1 2211 20250904041550
199.45.154.150 1 2 861608 20250910103110
102.207.250.75 1 1 2216 20250929010928
87.236.176.247 0 1 859390 
198.235.24.93 1 1 6685 20250929170422
103.174.50.98 1 1 2212 20250918091147
35.240.244.161 1 1 2214 20250925115323
23.180.120.243 0 10 113526 
198.235.24.241 1 1 6773 20250915154420
157.180.62.67 1 1 2215 20250904225210
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 22
20250901 1 1 2214 1
20250902 1 1 6773 1
20250904 4 6 1727631 4
20250905 5 7 1439376 3
20250907 1 2 861609 1
20250909 3 6 580474 1
20250910 3 9 3456458 3
20250911 0 2 55689 0
20250912 1 5 895693 1
20250913 1 7 27585 1
20250915 4 4 26828 2
20250916 4 4 8865 3
20250918 7 9 1747694 5
20250919 7 7 42328 3
20250920 3 3 20055 1
20250921 5 7 1743274 3
20250924 1 1 2215 1
20250925 1 1 2214 1
20250926 1 1 2213 1
20250927 1 3 1720995 1
20250929 6 7 877155 5
20250930 3 3 20055 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 43
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 2
/ 61 247068 43 43
/.env.example 2 2154 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 7
5K+ 370
2K-5K 267
1K-2K 2
500-1K 1
100-500 181
44-100 2
0-44 6
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME