One Hat Cyber Team

View File Name : awstats042025.mumbi.techlup.co.ke.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202504 will be lost/reset.
# Last config file used to build this data file was /home/tech/tmp/awstats/ssl/awstats.mumbi.techlup.co.ke.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2016                
POS_TIME 2691                
POS_VISITOR 8437                
POS_DAY 10002               
POS_DOMAIN 3352                
POS_LOGIN 3632                
POS_ROBOT 3787                
POS_WORMS 4176                
POS_EMAILSENDER 4307                
POS_EMAILRECEIVER 4450                
POS_SESSION 10522               
POS_SIDER 10679               
POS_FILETYPES 4585                
POS_DOWNLOADS 4731                
POS_OS 4886                
POS_BROWSER 5090                
POS_SCREENSIZE 5443                
POS_UNKNOWNREFERER 5517                
POS_UNKNOWNREFERERBROWSER 6272                
POS_ORIGIN 6677                
POS_SEREFERRALS 6809                
POS_PAGEREFS 6953                
POS_SEARCHWORDS 7143                
POS_KEYWORDS 7295                
POS_MISC 2354                
POS_ERRORS 7354                
POS_CLUSTER 3488                
POS_SIDER_404 7454                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250424145346 8 1449 8212961262554
FirstTime 20250401051042
LastTime 20250424145217
LastUpdate 20250424150430 8 0 8 0 0
TotalVisits 76                  
TotalUnique 36                  
MonthHostsKnown 0                   
MonthHostsUnknown 39                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
TotalMisc 0 0 0
QuickTimeSupport 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 11 0
DirectorSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 0 1 1 18807
1 4 4 19280 2 4 38221
2 1 1 4470 0 0 0
3 6 6 37615 1 1 19134
4 3 4 23399 3 5 57694
5 10 10 131649 0 0 0
6 3 3 38560 0 2 19134
7 3 3 18807 1 1 19280
8 6 7 61486 20 21 364444
9 3 3 37614 23 23 412290
10 4 5 42206 20 21 364444
11 10 10 115207 40 40 713963
12 2 2 19280 20 20 361050
13 4 4 37614 21 23 390708
14 5 8 107152 21 34 486378
15 0 0 0 0 0 0
16 2 2 19280 0 0 0
17 3 3 18807 1 1 19134
18 3 3 18807 7 7 130627
19 8 9 135344 0 1 0
20 0 0 0 0 0 0
21 3 3 18807 2 3 37614
22 2 2 37614 0 2 0
23 11 11 131649 0 2 37322
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 5
us 84 87 789121
cn 5 9 147988
ca 4 4 61364
au 3 3 57367
ru 1 1 18807
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 7
no_user_agent 11 194164 20250422111033 0
Go\-http\-client/ 8 5632 20250422111045 0
MJ12bot/ 2 19347 20250418012009 1
bot[\s_+:,\.\;\/\\-] 2 18874 20250409010622 1
curl 1 18807 20250405212617 0
survey 1 18807 20250407214331 0
scrapy 1 19280 20250423045305 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
php 44 4471 0 0
png 4 16476 0 0
html 53 1005285 0 0
js 1 2749 0 0
txt 2 45666 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 2
/wp-content/plugins/elementor/readme.txt 1 0 30588
/wp-content/themes/hello-elementor/readme.txt 1 0 15078
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 11
androidmarshmallow 8 8
j2me 1 1
android 1 1
macosx15 2 2
macosx 2 1
macosx10 1 1
macosx7 1 0
win10 7 7
win7 1 1
winlong 3 3
Unknown 77 72
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 16
chrome104.0.0.0 2 2
chrome87.0.4280.88 2 1
chrome133.0.0.0 2 2
safari5.0.2 3 3
chrome103.0.5060.114 1 1
chrome52.0.2650.98 8 8
opera11.01 1 1
up\. 59 59
chrome17.0.963.56 1 0
chrome96.0.4664.110 1 1
Unknown 6 4
msie6.0 1 1
chrome41.0.2227.1 1 1
mozilla 12 9
chrome58.0.3029.110 3 3
chrome120.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 7
WordPress/6.7.2;_https://mumbi.techlup.co.ke 20250416035447
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250416043319
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250422011823
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250412233554
Mozilla/5.0_(compatible) 20250417065455
WordPress/6.8;_https://mumbi.techlup.co.ke 20250423162714
python-requests/2.32.3 20250424145346
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250422011823
python-requests/2.32.3 20250424145346
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 96 98
From1 0 0
From2 0 0
From3 1 1
From4 0 5
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
http://15.204.235.159:80/wp-login.php 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
301 6 0
404 169 3195333
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 30
/.git/HEAD 1 -
/.env.bak 1 -
/config.json 8 -
/s/935313e2533323e2430323e25313/_/ 8 -
/Public/home/js/check.js 1 -
/about 8 -
/@vite/env 6 -
/.DS_Store 8 -
/aws.yml 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 8 -
/phpinfo 1 -
/telescope/requests 8 -
/wp-sitemap.xml 3 http://mumbi.techlup.co.ke/sitemap.xml
/info.php 9 -
/debug/default/view 8 -
/actuator/env 8 -
/ads.txt 2 -
/.git/config 13 -
/login.action 8 -
/v2/_catalog 8 -
/_all_dbs 8 -
/phpinfo.php 1 -
/_profiler/phpinfo 1 -
/server-status 8 -
/server 8 -
/.aws/credentials 1 -
/wp-emoji-release.min.js 6 -
/static/admin/javascript/hetong.js 1 -
/.vscode/sftp.json 8 -
/.env 9 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 39
15.204.235.159 59 59 302805 20250423162714
52.208.151.205 3 3 56894 20250416064949
123.160.223.75 2 3 41309 20250422191433
205.210.31.69 1 1 4470 20250419023626
44.211.146.224 1 1 18807 20250412181332
3.84.192.114 1 1 19280 20250423083746
3.1.25.92 1 1 19280 20250422142501
203.55.131.5 1 1 19280 20250423162713
209.38.208.202 1 1 19280 20250416081136
209.38.248.17 1 1 18807 20250410131620
206.189.19.19 1 1 18807 20250406114558
218.72.226.8 1 1 18807 20250413092514
138.197.68.189 1 1 19280 20250417065455
165.227.84.14 1 1 19280 20250420121935
99.81.216.206 1 1 18807 20250401051042
147.185.132.67 1 1 19280 20250422011823
98.81.54.4 1 1 18807 20250412174119
185.247.137.176 1 1 18807 20250412233554
205.210.31.36 1 1 18807 20250408193808
203.55.131.3 1 1 18807 20250415230106
206.168.34.216 1 2 23399 20250416043212
143.110.147.145 1 1 18807 20250409220915
139.59.143.102 1 1 19280 20250422111034
162.142.125.208 1 2 22926 20250410105856
143.198.172.99 1 1 18807 20250401215517
123.6.49.38 0 1 15078 
123.6.49.42 0 1 30588 
123.6.49.41 0 1 4119 
64.226.118.97 1 1 18807 20250403135834
54.217.83.13 1 1 18807 20250410051635
159.223.13.21 1 1 18807 20250407221648
123.6.49.4 1 1 19280 20250424145217 20250424145217 /
114.103.81.190 1 1 18807 20250403031742
159.89.12.166 1 1 19280 20250418102017
47.88.94.159 1 1 18807 20250415235644
206.81.24.74 1 1 18807 20250412144429
198.235.24.58 1 1 18807 20250405071419
167.94.146.55 1 2 22926 20250406085446
207.154.212.47 1 1 18807 20250414095552
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 22
20250401 3 3 37614 3
20250402 4 4 75228 1
20250403 3 3 37614 3
20250404 1 1 0 1
20250405 4 4 18807 4
20250406 4 5 41733 4
20250407 2 2 18807 2
20250408 5 5 94035 2
20250409 2 2 18807 2
20250410 6 7 60540 6
20250412 10 10 94035 9
20250413 2 2 18807 2
20250414 3 3 37614 3
20250415 9 9 112842 3
20250416 7 8 61960 6
20250417 2 2 19280 2
20250418 3 3 19280 3
20250419 1 1 4470 1
20250420 3 3 19280 3
20250422 16 17 176269 9
20250423 6 6 38560 6
20250424 1 4 69065 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 72
30mn-1h 3
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/ 53 1005285 38 38
/wp-cron.php 42 0 37 36
/wp-admin/upgrade.php 1 1 0 0
/wp-login.php 1 4470 1 1
END_SIDER