One Hat Cyber Team

Edit File: awstats012026.sms.farmersapp.store.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202601 will be lost/reset.
# Last config file used to build this data file was /home/farmersapp/tmp/awstats/awstats.sms.farmersapp.store.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2053                
POS_TIME 2738                
POS_VISITOR 3592                
POS_DAY 5046                
POS_DOMAIN 5349                
POS_LOGIN 5672                
POS_ROBOT 5827                
POS_WORMS 6131                
POS_EMAILSENDER 6262                
POS_EMAILRECEIVER 6405                
POS_SESSION 6481                
POS_FILESIZE 9570                
POS_SIDER 6654                
POS_FILETYPES 7040                
POS_DOWNLOADS 7189                
POS_OS 7237                
POS_BROWSER 7448                
POS_SCREENSIZE 7976                
POS_UNKNOWNREFERER 8050                
POS_UNKNOWNREFERERBROWSER 8629                
POS_ORIGIN 8825                
POS_SEREFERRALS 8960                
POS_PAGEREFS 9104                
POS_SEARCHWORDS 9252                
POS_KEYWORDS 9404                
POS_MISC 2402                
POS_ERRORS 9463                
POS_CLUSTER 5528                
POS_SIDER_404 9706                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260201002708 1072 124008 4972641341922
FirstTime 20260113115245
LastTime 20260127030728
LastUpdate 20260208094258 1072 0 1071 0 0
TotalVisits 40                  
TotalUnique 34                  
MonthHostsKnown 0                   
MonthHostsUnknown 38                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
JavascriptDisabled 0 0 0
AddToFavourites 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
PDFSupport 0 0 0
DirectorSupport 0 0 0
FlashSupport 0 0 0
QuickTimeSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 12 12 8448 24 24 0
1 15 19 15979 35 36 11232
2 12 12 8448 25 26 0
3 13 13 8448 25 25 0
4 12 12 8448 25 25 1251
5 13 13 9152 27 27 2502
6 16 16 11234 24 25 1251
7 12 12 8448 24 24 0
8 12 12 8448 25 25 0
9 14 16 12545 25 27 1811
10 12 12 8448 32 33 0
11 27 31 20709 69 70 48778
12 13 13 9823 28 30 0
13 18 18 15362 35 39 6668
14 22 28 22197 32 34 1949
15 15 15 10569 30 32 2617
16 12 12 8448 28 28 0
17 12 12 8448 26 26 0
18 13 13 9155 27 28 0
19 12 12 8448 26 26 0
20 13 13 9155 28 29 0
21 12 12 8448 27 27 0
22 12 12 8448 27 27 0
23 12 12 8448 26 26 0
END_TIME

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 38
5.189.175.239 290 290 204666 20260119115054
176.65.148.161 5 5 2750 20260113115858
199.45.155.82 3 3 2121 20260113140740
52.12.160.76 3 3 2118 20260113145231
103.153.182.11 2 2 1375 20260115060025
142.93.129.190 2 2 2082 20260113115342
205.169.39.134 2 8 8099 20260113143030
34.133.255.234 2 4 4097 20260117010702
69.166.236.89 2 4 4097 20260116094016
192.175.111.228 1 1 1375 20260113130017
64.15.129.113 1 1 1375 20260113130019
195.181.170.238 1 1 707 20260116134644
79.209.229.74 1 1 707 20260114134741
146.190.206.67 1 1 707 20260115015330
162.243.167.183 1 1 0 20260127030728
167.99.190.10 1 1 707 20260116204311
192.175.111.231 1 1 1375 20260113130018
34.123.170.104 1 2 1991 20260113115307
87.236.176.38 1 1 707 20260114150847
23.178.112.210 1 1 87 20260113115253
54.184.100.150 1 1 704 20260113145233
3.21.167.226 1 1 87 20260113115253
34.87.191.7 1 1 704 20260114054515
149.22.80.137 1 1 707 20260113154814
91.231.89.18 1 1 1375 20260113121625
205.169.39.7 0 1 2321 
34.72.176.129 0 1 362 
13.48.203.199 1 1 87 20260113115253
213.139.9.138 1 1 707 20260113154813
100.52.3.146 1 1 707 20260118063738
34.122.147.229 0 2 2727 
205.169.39.26 0 1 406 
192.175.111.243 1 1 1375 20260113130017
34.59.130.47 1 1 707 20260113140516
18.237.170.164 1 1 87 20260113115253
152.53.210.225 1 1 704 20260117065345
13.229.200.165 1 1 87 20260113115254
64.23.158.162 1 1 707 20260114182213
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 8
20260113 56 66 49409 21
20260114 52 54 39344 5
20260115 51 51 35874 3
20260116 52 54 39303 4
20260117 51 53 38593 3
20260118 49 49 34499 2
20260119 24 24 18682 1
20260127 1 1 0 1
END_DAY

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
de 296 296 208123
us 27 43 35041
ca 6 6 7582
in 2 2 1375
dk 1 1 707
be 1 1 707
rs 1 1 1375
zz 1 1 87
es 1 1 707
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 5
MJ12bot/ 7 3938 20260114134120 0
Go\-http\-client/ 1 707 20260113115310 0
checker 1 707 20260114141443 0
curl 1 1375 20260114150906 0
no_user_agent 1 1375 20260113115308 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Session range - Number of visits
BEGIN_SESSION 4
1h+ 7
30s-2mn 2
2mn-5mn 1
0s-30s 30
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 5
/ 328 233430 34 34
/.well-known/acme-challenge/Wp5AkRD4m717vskrkbenLachT-Y0zPYsm2M04q2TqK4 5 435 5 5
/.well-known/acme-challenge/4L95O83S80-14X18P4MGM7ZWCP9W0A3M 1 64 0 0
/install/start 1 2413 0 1
/.well-known/acme-challenge/QB682_ZCF0YLMH6YE0ZGKMFC0BO0KNQS 1 64 1 0
END_SIDER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
css 2 2568 0 0
svg 3 1218 0 0
Unknown 8 2976 0 0
html 328 233430 0 0
js 11 15512 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 11
win10 16 10
android 1 1
macosx15 8 6
linux 8 4
android10 2 2
linuxubuntu 1 1
macosx9 1 1
ios_iphone 2 2
androidoreo 1 1
Unknown 308 306
win7 4 2
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 25
chrome120.0 1 1
firefox134.0 1 1
chrome114.0.0.0 3 1
chrome118.0.5993.80 1 1
firefox43.0 1 1
netscape5.0 4 4
chrome106.0.0.0 2 0
chrome143.0.0.0 4 4
chrome142.0.0.0 2 2
chrome120.0.0.0 1 1
chrome139.0.0.0 1 1
chrome113.0.0.0 2 2
safari15.0 1 1
chrome58.0.3029.110 2 2
chrome63.0.3239.111 1 1
chrome83.0.4103.61 3 1
chrome79.0.3945.79 5 1
chrome125.0.0.0 5 1
mozilla 14 14
safari15.4 1 1
chrome134.0.0.0 1 1
safari18.4 1 1
chrome32.0.1664.3 1 1
firefox142.0 2 2
Unknown 292 290
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 7
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20260113115858
Mozilla/5.0_(l9scan/2.0.933323e2537313e2938313e253;__https://leakix.net) 20260113115342
Cpanel-HTTP-Client/1.0 20260113115245
python-httpx/0.28.1 20260117010626
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260113140722
Python/3.11_aiohttp/3.9.2 20260119115054
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260114150847
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
Python/3.11_aiohttp/3.9.2 20260119115054
Cpanel-HTTP-Client/1.0 20260113115245
python-httpx/0.28.1 20260117010626
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 336 340
From1 0 0
From2 0 0
From3 0 0
From4 0 12
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
404 47 56295
403 11 13662
307 639 0
303 1 0
END_ERRORS

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
44-100 7
500-1K 323
1K-2K 79
2K-5K 7
0-44 647
100-500 8
END_FILESIZE

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 43
/api 1 -
/telescope/requests 1 -
/index.php 1 -
/webjars/swagger-ui/index.html 1 -
/v3/api-docs 1 -
/test.php 1 -
/_profiler/phpinfo 1 -
/graphql/api 1 -
/.env 1 -
/_all_dbs 1 -
/@vite/env 1 -
/server-status 1 -
/.vscode/sftp.json 1 -
/wp-login.php 2 -
/login.action 1 -
/.aws/credentials 1 -
/.DS_Store 1 -
/api/graphql 1 -
/wordpress/ 1 -
/swagger/v1/swagger.json 1 -
/api-docs/swagger.json 1 -
/graphql 1 -
/api/swagger.json 1 -
/license.txt 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/v2/_catalog 1 -
/swagger/swagger-ui.html 1 -
/info.php 1 -
/robots.txt 3 -
/v2/api-docs 1 -
/about 1 -
/s/933323e2537313e2938313e253/_/ 1 -
/_next 2 -
/swagger-ui.html 1 -
/.env/.env.bak 1 -
/phpinfo.php 1 -
/config.json 1 -
/debug/default/view 1 -
/swagger/index.html 1 -
/api/gql 1 -
/swagger.json 1 -
/actuator/env 1 -
/server 1 -
END_SIDER_404