HEX
Server: Apache
System: Linux darrell.nocdirect.com 4.18.0-513.18.2.el8_9.x86_64 #1 SMP Sat Mar 30 06:10:41 EDT 2024 x86_64
User: joderbya (1358)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /home/joderbya/tmp/awstats/awstats052026.proforma.quick-step-ei.com.txt
AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202605 will be lost/reset.
# Last config file used to build this data file was /home/joderbya/tmp/awstats/awstats.proforma.quick-step-ei.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2094                
POS_TIME 2766                
POS_VISITOR 8834                
POS_DAY 11233               
POS_DOMAIN 3371                
POS_LOGIN 3663                
POS_ROBOT 3818                
POS_WORMS 4054                
POS_EMAILSENDER 4185                
POS_EMAILRECEIVER 4328                
POS_SESSION 11880               
POS_FILESIZE 12243               
POS_REQUESTTIME 12363               
POS_SIDER 12027               
POS_FILETYPES 4463                
POS_DOWNLOADS 4634                
POS_OS 4682                
POS_BROWSER 4882                
POS_SCREENSIZE 5531                
POS_UNKNOWNREFERER 5605                
POS_UNKNOWNREFERERBROWSER 6035                
POS_ORIGIN 6273                
POS_SEREFERRALS 6407                
POS_PAGEREFS 6551                
POS_SEARCHWORDS 6699                
POS_KEYWORDS 6851                
POS_MISC 2430                
POS_ERRORS 6910                
POS_CLUSTER 3519                
POS_SIDER_404 7009                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260601124439 1 0 11865433569957
FirstTime 20260501093545
LastTime 20260531142330
LastUpdate 20260602110408 1 0 0 0 0
TotalVisits 69                  
TotalUnique 62                  
MonthHostsKnown 0                   
MonthHostsUnknown 62                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
DirectorSupport 0 0 0
RealPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 4 0
FlashSupport 0 0 0
JavaEnabled 0 0 0
TotalMisc 0 0 0
QuickTimeSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 3 3 18312 0 0 0
1 0 0 0 0 0 0
2 12 28 1252852 83 85 163499
3 6 6 44262 2 4 96
4 0 0 0 0 0 0
5 6 17 720905 1 4 301139
6 2 2 14634 1 1 0
7 3 3 22221 0 0 0
8 12 42 2126475 6 6 441157
9 4 4 29448 1 1 7407
10 0 0 0 3 3 22221
11 7 9 46381 0 2 4476
12 2 2 0 13 13 7407
13 4 4 14814 15 15 7407
14 9 9 0 54 54 0
15 5 5 14814 18 18 0
16 1 1 7407 1 1 0
17 5 5 7407 24 24 0
18 3 3 14814 8 8 0
19 4 4 14814 14 14 0
20 3 4 23216 0 0 0
21 0 0 0 0 0 0
22 4 5 26894 0 1 2238
23 1 1 7407 0 0 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 6
us 80 141 4292474
ca 9 9 66663
ro 3 3 22221
be 2 2 10905
nl 1 1 7407
ru 1 1 7407
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
checker 7 51849 20260527104721 0
unknown 2 192 20260515035828 2
Python\-urllib/ 1 7407 20260519121721 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 6
woff2 5 391340 0 0
html 69 340722 0 0
css 20 574690 0 0
png 5 5875 0 0
js 36 2662896 0 0
php 22 431554 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 11
ios_ipad 2 2
macosx 2 2
android 5 5
win10 62 22
macosx15 5 5
android13 2 2
win11 2 2
win7 8 2
android12 2 2
Unknown 27 22
linux 40 30
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 28
chrome127.0.6534.42 1 1
chrome125.0.6422.76 1 1
chrome91.0.4472.124 1 1
chrome79.0.3945.79 14 4
chrome125.0.6422.141 1 1
firefox142.0 4 4
chrome125.0.6422.112 1 1
safari16.5 1 1
chrome124.0.0.0 9 9
safari26.2 1 1
chrome125.0.6422.50 2 2
chrome142.0.0.0 8 8
chrome126.0.6478.41 1 1
mozilla 16 11
chrome123.0.6312.120 1 1
Unknown 11 11
safari17.4 2 2
chrome121.0.0.0 1 1
firefox127.0 5 5
chrome125.0.0.0 14 4
chrome126.0.6478.33 3 3
chrome117.0.5938.132 42 12
chrome34.0.1847.137 1 1
chrome128.0.6540.18 2 2
chrome83.0.4103.61 8 2
chrome135.0.0.0 4 4
chrome125.0.6422.102 1 1
chrome124.0.6367.48 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260531034359
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260507003327
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260530202932
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260531034359
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 72 77
From1 0 0
From2 0 0
From3 0 0
From4 24 80
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 235 0
202 5 888647
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 94
/wp-admin/css/colors/blue/file.php 1 -
/sbhu.php 1 -
/wp-firewall.php 1 -
/wordpress/ 23 -
/333.php 1 -
/xda.php 1 -
/z.php 1 -
/like.php 1 -
/amxloxxr.php 1 -
/cilus.php 1 -
/edit.php 1 -
/ff1.php 1 -
/fun.php 1 -
/yas.php 1 -
/wp-block.php 1 -
/mifta.php 1 -
/wp-wz.php 1 -
/wp-thi.php 1 -
/bthil.php 1 -
/atomlib.php 1 -
/wp-load.php 1 -
/file30.php 1 -
/shell20211028.php 1 -
/login/ 4 -
/mass.php 1 -
/app/ 4 -
/atkno.php 1 -
/forbidals.php 1 -
/x.php 1 -
/wp-at.php 1 -
/wehrman.php 1 -
/wp-content/plugins/hellopress/wp_filemanager.php 1 -
/i.php 1 -
/explorer/index_.php 1 -
/ccou.php 1 -
/wp-su.php 1 -
/backup/ 23 -
//test.php 1 -
/sitemap-news.xml.gz 1 -
/la.php 1 -
/ok.php 1 -
/sys.php 1 -
/app.php 1 -
/dropdown.php 1 -
/vx.php 1 -
/wp-login.php 1 -
/yellow.php 1 -
/wp-slss.php 1 -
/txets.php 1 -
/ah25.php 1 -
/aevly.php 1 -
/blog/ 23 -
/wp-ver.php 1 -
/lv.php 1 -
/wp-sing.php 1 -
/pass4.php 1 -
/1index.php 1 -
/wp-the.php 1 -
/wp-admin/install.php 2 -
/samll.php 1 -
/.env 1 -
/.git/config 1 -
/wp.php 1 -
/wp/ 23 -
/wuasr.php 1 -
/ff.php 1 -
/file59.php 1 -
/reze.php 1 -
/lala.php 1 -
/wp-access.php 1 -
/old/ 23 -
/db.php 1 -
/favicon.php 1 -
/new.php 1 -
/ftde.php 1 -
/revealability.php 1 -
/file4.php 1 -
/.well-known/security.txt 3 -
/wp-good.php 1 -
/crgio.php 1 -
/albin.php 1 -
/drykl.php 1 -
/tires.php 1 -
/wmore1.php 1 -
/asasx.php 1 -
/wp-trackback.php 1 -
/wefile.php 1 -
/wp-der.php 1 -
/png.php 1 -
/new/ 23 -
/Okxob.php 1 -
/lib.php 1 -
/wp-kd4xalrg7m.php 1 -
/database.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 62
4.223.141.202 6 6 44442 20260529230307
205.169.39.137 6 22 1208770 20260509025132
205.169.39.44 4 14 708825 20260514050117
205.169.39.29 4 14 708825 20260523080634
104.197.69.115 4 14 708825 20260502082243
205.169.39.49 4 14 708825 20260502082240
89.37.63.231 3 3 22221 20260513070952
167.94.146.56 2 3 12080 20260515223231
167.94.146.61 2 3 12080 20260504114048
159.65.127.144 2 2 14634 20260504033531
143.198.238.141 2 2 14634 20260526064150
207.154.243.232 2 2 14634 20260506021916
165.22.229.197 2 2 14634 20260527202113
199.45.154.113 2 3 12080 20260504053153
146.190.253.206 2 2 14634 20260512092943
161.35.237.87 2 2 14634 20260514024923
167.94.146.55 2 3 12080 20260501111847
205.210.31.99 1 1 7407 20260509030303
147.185.132.31 1 1 7407 20260513174115
34.21.66.73 1 1 0 20260518140719
205.210.31.36 1 1 7407 20260531034359
34.181.181.208 1 1 0 20260530141616
34.24.233.128 1 1 0 20260512154105
34.122.12.34 1 1 0 20260528144537
45.39.12.135 1 1 7407 20260512220418
34.70.108.96 1 1 0 20260519122407
34.174.108.116 1 1 0 20260506142534
34.174.180.126 1 1 0 20260527133225
34.162.12.135 1 1 0 20260529172216
35.231.186.146 1 1 0 20260504135643
66.132.195.104 1 2 8582 20260530202927
37.0.12.85 1 1 7407 20260529111504
35.232.94.143 1 1 0 20260503150209
198.235.24.167 1 1 7407 20260503072413
198.235.24.31 1 1 7407 20260506154220
198.235.24.15 1 1 7407 20260530112606
205.210.31.64 1 1 7407 20260501093545
8.230.109.162 1 1 0 20260511170214
185.150.115.193 1 1 7407 20260511033247
34.182.165.210 1 1 0 20260507175107
205.210.31.170 1 1 7407 20260530090829
205.210.31.60 1 1 7407 20260519130055
34.83.232.11 1 1 0 20260521145710
34.23.150.145 1 1 0 20260514143915
34.186.239.76 1 1 0 20260510142710
34.162.155.232 1 1 0 20260508182914
34.139.52.35 1 1 0 20260531142330
35.209.187.58 1 1 7407 20260521191324
35.208.239.221 1 1 7407 20260521183915
34.11.219.207 1 1 0 20260520172648
147.185.132.132 1 1 7407 20260530072156
87.236.176.175 1 1 7407 20260507003326
87.236.176.252 1 1 3498 20260507003327
136.113.39.38 1 1 0 20260526190236
34.45.7.85 1 1 7407 20260525150647
34.174.73.32 1 1 0 20260513155243
35.254.153.170 1 1 0 20260517142805
35.232.231.40 1 1 0 20260525190645
198.235.24.22 1 1 7407 20260525113712
35.208.75.207 1 1 7407 20260513030741
35.252.67.73 1 1 0 20260505124349
34.1.30.182 1 1 7407 20260513024324
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 29
20260501 3 4 19487 2
20260502 9 29 1425057 3
20260503 2 2 7407 2
20260504 7 9 38794 4
20260505 1 1 0 1
20260506 5 5 29448 4
20260507 3 3 10905 3
20260508 1 1 0 1
20260509 7 23 1216177 2
20260510 2 2 7407 2
20260511 2 2 7407 2
20260512 4 4 22041 3
20260513 5 5 29628 5
20260514 7 17 723459 3
20260515 2 3 12080 1
20260516 1 1 7407 1
20260517 1 1 0 1
20260518 1 1 0 1
20260519 3 3 14814 3
20260520 1 1 0 1
20260521 3 3 14814 3
20260523 5 15 716232 2
20260525 3 3 14814 3
20260526 4 4 22041 3
20260527 3 3 14634 2
20260528 1 1 0 1
20260529 3 3 14814 3
20260530 5 6 30803 5
20260531 2 2 7407 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 69
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/ 69 340722 68 53
/viewimage.php 16 139222 1 11
/core/js/lib_head.js.php 6 292332 0 0
/theme/common/fontawesome-5/webfonts/fa-solid-900.woff2 5 391340 0 5
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 5
44-100 2
2K-5K 20
0-44 258
1K-2K 5
5K+ 126
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME