One Hat Cyber Team

View File Name : awstats072025.mumbi.techlup.co.ke.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202507 will be lost/reset.
# Last config file used to build this data file was /home/tech/tmp/awstats/ssl/awstats.mumbi.techlup.co.ke.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2016                
POS_TIME 2694                
POS_VISITOR 7980                
POS_DAY 9026                
POS_DOMAIN 3327                
POS_LOGIN 3606                
POS_ROBOT 3761                
POS_WORMS 4117                
POS_EMAILSENDER 4248                
POS_EMAILRECEIVER 4391                
POS_SESSION 9371                
POS_SIDER 9518                
POS_FILETYPES 4526                
POS_DOWNLOADS 4657                
POS_OS 4812                
POS_BROWSER 4959                
POS_SCREENSIZE 5210                
POS_UNKNOWNREFERER 5284                
POS_UNKNOWNREFERERBROWSER 5791                
POS_ORIGIN 6196                
POS_SEREFERRALS 6328                
POS_PAGEREFS 6472                
POS_SEARCHWORDS 6662                
POS_KEYWORDS 6814                
POS_MISC 2358                
POS_ERRORS 6873                
POS_CLUSTER 3462                
POS_SIDER_404 6973                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250714041218 33 6815 11600990025044
FirstTime 20250701043441
LastTime 20250714041218
LastUpdate 20250714150958 33 0 33 0 0
TotalVisits 45                  
TotalUnique 22                  
MonthHostsKnown 0                   
MonthHostsUnknown 25                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
AddToFavourites 0 7 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 4 4 38576 21 22 380549
1 3 3 19288 21 21 383884
2 0 0 0 0 0 0
3 1 1 4480 0 0 0
4 5 5 38576 22 22 399624
5 1 1 19288 0 1 0
6 0 0 0 0 0 0
7 3 3 19288 2 2 38284
8 2 2 0 18 27 568484
9 1 1 19288 0 0 0
10 0 0 0 0 0 0
11 4 5 42695 2 4 19209
12 11 11 105400 20 20 364596
13 4 4 77152 0 0 0
14 0 0 0 0 0 0
15 1 1 0 4 4 76568
16 0 0 0 0 0 0
17 0 0 0 1 1 19142
18 1 1 19288 11 16 306272
19 2 2 19288 22 22 402880
20 3 6 69073 5 8 76781
21 2 2 19288 12 23 522154
22 2 2 38576 20 20 364596
23 3 3 38576 21 22 383738
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 5
us 43 43 370952
ca 5 5 66824
nl 2 2 38576
cn 2 6 92480
in 1 1 19288
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 6
bot[\s_+:,\.\;\/\\-] 46 1071417 20250713210442 3
no_user_agent 9 166788 20250712193448 0
Go\-http\-client/ 7 5264 20250712193455 0
unknown 2 134 20250713200409 2
curl 2 38576 20250710212046 0
survey 1 19288 20250708040247 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 4
php 26 13440 0 0
html 27 520776 0 0
txt 2 45666 0 0
png 2 8238 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 2
/wp-content/themes/hello-elementor/readme.txt 1 0 15078
/wp-content/plugins/elementor/readme.txt 1 0 30588
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 6
androidmarshmallow 7 7
macosx7 2 0
Unknown 40 38
win10 2 2
macosx15 2 2
linux 4 4
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 11
firefox120.0 1 1
chrome137.0.0.0 2 2
chrome17.0.963.56 2 0
firefox137.0 1 1
Unknown 8 6
chrome52.0.2650.98 7 7
opera98.0.0.0 1 1
chrome120.0.0.0 2 2
chrome81.0.4044.129 1 1
up\. 31 31
netscape5.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
python-requests/2.32.4 20250713200500
WordPress/6.8.1;_https://mumbi.techlup.co.ke 20250714041218
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250711032655
Mozilla/5.0_zgrab/0.x 20250713115139
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
python-requests/2.32.4 20250713200500
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250711032655
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 52 54
From1 0 0
From2 0 0
From3 1 1
From4 0 2
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
http://15.204.235.159:80/wp-login.php 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 157 3005294
301 4 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 34
/login.action 7 -
/about 7 -
/telescope/requests 7 -
/api/config.js 1 -
/phpinfo.php 1 -
/s/935313e2533323e2430323e25313/_/ 7 -
/env.js 1 -
/.git/config 11 -
/wp-sitemap.xml 4 https://mumbi.techlup.co.ke/sitemap.xml
/.env 10 -
/server-status 7 -
/server 7 -
/phpinfo 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 7 -
/@vite/env 7 -
/_profiler/phpinfo 1 -
/.env.prod 1 -
/api/.env 1 -
/.git/HEAD 4 -
/.env.save 1 -
/assets/env.js 1 -
/config.json 9 -
/application/.env 1 -
/_all_dbs 7 -
/debug/default/view 7 -
/js/config.js 1 -
/.vscode/sftp.json 7 -
/v2/_catalog 7 -
/dev/.env 1 -
/js/app.js 1 -
/info.php 7 -
/actuator/env 7 -
/.DS_Store 7 -
/php_info.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 25
15.204.235.159 31 31 154304 20250714041218 20250714041218 /wp-cron.php
147.182.200.94 2 2 38576 20250708235726
146.190.251.144 1 1 19288 20250710052703
45.148.10.249 1 1 19288 20250710180330
188.166.171.102 1 1 19288 20250704212634
205.210.31.138 1 1 4480 20250701121655
165.22.235.3 1 1 19288 20250712193449
45.82.78.254 1 1 19288 20250712221441
205.210.31.111 1 1 4480 20250709122041
180.163.220.50 1 1 19288 20250713200343
142.93.0.66 1 1 19288 20250707125818
3.146.111.124 1 1 19288 20250713115139
147.185.132.84 1 1 19288 20250701070445
205.210.31.16 1 1 19288 20250709094707
101.198.0.182 1 2 23407 20250702115324
147.185.132.69 1 1 4480 20250711032655
198.235.24.64 1 1 19288 20250704001424
46.101.1.225 1 1 19288 20250710220544
157.245.36.108 1 1 19288 20250701043441
52.208.151.205 1 1 19288 20250701045330
64.227.163.137 1 1 19288 20250702233400
159.65.144.72 1 1 19288 20250705002250
180.163.220.124 0 1 4119 
180.163.220.97 0 1 30588 
180.163.220.42 0 1 15078 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 14
20250701 13 13 139496 8
20250702 3 4 42695 3
20250703 3 3 19288 3
20250704 3 3 38576 3
20250705 2 2 19288 2
20250706 2 2 0 2
20250707 3 3 19288 3
20250708 6 6 96440 3
20250709 4 4 23768 4
20250710 4 4 57864 4
20250711 1 1 4480 1
20250712 4 4 38576 4
20250713 4 7 88361 4
20250714 1 1 0 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 44
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 3
/ 27 520776 20 21
/wp-cron.php 23 0 22 20
/wp-login.php 3 13440 3 3
END_SIDER