One Hat Cyber Team

Edit File: awstats022026.loan.farmersapp.store.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202602 will be lost/reset.
# Last config file used to build this data file was /home/farmersapp/tmp/awstats/ssl/awstats.loan.farmersapp.store.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2058                
POS_TIME 2744                
POS_VISITOR 3474                
POS_DAY 4281                
POS_DOMAIN 4511                
POS_LOGIN 4795                
POS_ROBOT 4950                
POS_WORMS 5189                
POS_EMAILSENDER 5320                
POS_EMAILRECEIVER 5463                
POS_SESSION 5539                
POS_FILESIZE 8204                
POS_SIDER 5696                
POS_FILETYPES 6015                
POS_DOWNLOADS 6183                
POS_OS 6231                
POS_BROWSER 6368                
POS_SCREENSIZE 6659                
POS_UNKNOWNREFERER 6733                
POS_UNKNOWNREFERERBROWSER 7135                
POS_ORIGIN 7446                
POS_SEREFERRALS 7578                
POS_PAGEREFS 7722                
POS_SEARCHWORDS 7870                
POS_KEYWORDS 8022                
POS_MISC 2408                
POS_ERRORS 8081                
POS_CLUSTER 4651                
POS_SIDER_404 8337                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260208085222 4131 925788 10004234275417
FirstTime 20260203065009
LastTime 20260208085222
LastUpdate 20260208094256 4131 0 4131 0 0
TotalVisits 20                  
TotalUnique 19                  
MonthHostsKnown 0                   
MonthHostsUnknown 19                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
JavascriptDisabled 0 0 0
AddToFavourites 0 0 0
WindowsMediaPlayerSupport 0 0 0
FlashSupport 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
QuickTimeSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 2 25853 6 32 2651788
1 1 1 1348 11 12 26531
2 2 2 7740 1 1 0
3 0 0 0 2 2 5113
4 1 1 3871 0 0 0
5 8 8 21080 15 16 94926
6 2 2 19689 0 0 0
7 1 1 0 2 3 6897
8 5 5 12644 4 4 1016
9 0 0 0 0 0 0
10 0 0 0 2 3 1437
11 0 0 0 0 0 0
12 1 1 4301 1 1 386
13 0 0 0 1 1 1242
14 2 3 25860 1 2 212
15 0 0 0 0 0 0
16 1 1 0 2 2 2787
17 0 0 0 0 0 0
18 0 0 0 1 1 386
19 0 0 0 1 1 117117
20 0 0 0 0 0 0
21 0 0 0 0 0 0
22 0 0 0 0 0 0
23 0 0 0 0 0 0
END_TIME

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 19
77.83.39.170 5 5 1348 20260208052930
54.90.128.13 2 2 1348 20260208052224
204.76.203.25 2 2 5538 20260206122747
52.200.134.85 1 1 1494 20260205082443
195.178.110.132 1 1 3870 20260207022753
66.132.153.113 1 2 25853 20260206001350
159.223.82.39 1 1 0 20260207162810
195.178.110.54 1 1 3870 20260207022900
3.18.186.238 1 1 1490 20260203081424
35.172.9.70 1 1 3871 20260208085222 20260208085222 /
152.42.235.8 1 1 0 20260207072130
45.148.10.238 1 1 1348 20260208014908
105.234.162.13 1 1 0 20260207140221
205.210.31.48 1 1 18384 20260207052906
23.180.120.132 1 1 3871 20260207045421
198.235.24.30 1 1 4301 20260203081444
3.20.201.240 1 1 1488 20260203081757
205.210.31.180 1 1 18452 20260208064158
167.94.146.52 1 2 25860 20260203143302
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 5
20260203 5 6 34376 5
20260205 1 1 1494 1
20260206 2 3 30154 2
20260207 7 7 29995 7
20260208 10 10 26367 5
END_DAY

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 6
us 12 14 66942
ru 7 7 9088
ca 3 3 41137
in 1 1 1348
mw 1 1 0
zz 1 1 3871
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
bot[\s_+:,\.\;\/\\-] 29 2652802 20260207005521 0
robot 2 48 20260207005427 2
crawl 1 3871 20260207033533 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 18
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 10
/ 7 52318 7 6
/login 7 16055 7 7
/.env 4 5281 4 2
/aws.env 1 0 0 0
/aws.yml 1 0 0 0
/pms 1 0 0 1
/phpinfo.php 1 0 0 1
/admin/config 1 0 0 0
/wp-includes/wlwmanifest.xml 1 0 1 1
/wp-login.php 1 0 1 1
END_SIDER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 7
env 5 5281 0 0
html 7 52318 0 0
Unknown 9 16055 0 0
yml 1 0 0 0
png 2 48732 0 0
xml 1 0 0 0
php 2 0 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 6
ios_iphone 1 1
macosx15 2 2
linux 3 3
win10 10 10
Unknown 10 8
win7 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 13
mozilla 4 2
chrome119.0.0.0 1 1
chrome136.0.0.0 1 1
chrome126.0.0.0 2 2
chrome134.0.0.0 2 2
chrome122.0.0.0 1 1
safari12.0 1 1
netscape5.0 5 5
chrome81.0.4044.129 1 1
chrome74.0.3729.131 1 1
chrome144.0.0.0 1 1
firefox133.0 1 1
Unknown 6 6
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260208064158
python-requests/2.27.1 20260207072130
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260206001351
python-httpx/0.28.1 20260208052224
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
python-requests/2.27.1 20260207072130
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260208064158
python-httpx/0.28.1 20260208052224
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 23 25
From1 0 0
From2 0 0
From3 0 0
From4 2 2
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
404 29 126620
405 1 117117
301 1 795
403 5 6210
302 11 2375
END_ERRORS

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
1K-2K 21
100-500 11
5K+ 35
2K-5K 26
500-1K 3
0-44 12
END_FILESIZE

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 19
/.env.production 2 -
/info.php 1 -
/wp-config.aws 2 -
/.env.prod 2 -
/misc/ajax.js 1 -
/aws_config 1 -
/administrator/index.php 1 -
/_phpinfo.php 1 -
/view-source: 1 -
/cacti/cmd_realtime.php 1 -
/.env.bak 2 -
/.env.live 2 -
/awstats/.env 2 -
/awsconfig.js 2 -
/.aws/credentials 2 -
/crm/.env 2 -
/wp-config 2 -
/aws.env 1 -
/wp-admin 1 https://www.google.com/search
END_SIDER_404