One Hat Cyber Team

View File Name : awstats082025.mumbi.techlup.co.ke.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202508 will be lost/reset.
# Last config file used to build this data file was /home/tech/tmp/awstats/ssl/awstats.mumbi.techlup.co.ke.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2016                
POS_TIME 2689                
POS_VISITOR 6841                
POS_DAY 7282                
POS_DOMAIN 3214                
POS_LOGIN 3453                
POS_ROBOT 3608                
POS_WORMS 3867                
POS_EMAILSENDER 3998                
POS_EMAILRECEIVER 4141                
POS_SESSION 7404                
POS_SIDER 7561                
POS_FILETYPES 4276                
POS_DOWNLOADS 4374                
POS_OS 4422                
POS_BROWSER 4547                
POS_SCREENSIZE 4694                
POS_UNKNOWNREFERER 4768                
POS_UNKNOWNREFERERBROWSER 5108                
POS_ORIGIN 5346                
POS_SEREFERRALS 5478                
POS_PAGEREFS 5622                
POS_SEARCHWORDS 5812                
POS_KEYWORDS 5964                
POS_MISC 2353                
POS_ERRORS 6023                
POS_CLUSTER 3309                
POS_SIDER_404 6113                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250803143606 3 428 5004649427228
FirstTime 20250801011403
LastTime 20250803143606
LastUpdate 20250803151259 3 0 3 0 0
TotalVisits 15                  
TotalUnique 9                   
MonthHostsKnown 0                   
MonthHostsUnknown 9                   
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 0 0
PDFSupport 0 0 0
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
TotalMisc 0 0 0
FlashSupport 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 0 0 0
1 2 2 19435 0 0 0
2 0 0 0 0 0 0
3 0 0 0 0 0 0
4 0 0 0 0 0 0
5 2 2 0 1 3 38791
6 0 0 0 0 0 0
7 0 0 0 0 0 0
8 0 0 0 0 0 0
9 1 1 4480 0 0 0
10 0 0 0 0 0 0
11 2 2 19435 20 20 367389
12 0 0 0 0 0 0
13 2 2 19435 20 20 363840
14 1 1 19435 0 0 0
15 0 0 0 0 0 0
16 2 2 19435 0 0 0
17 0 0 0 0 0 0
18 0 0 0 0 0 0
19 0 0 0 0 0 0
20 0 0 0 0 0 0
21 2 2 4480 0 0 0
22 2 2 19435 0 0 0
23 0 0 0 0 0 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 2
us 14 14 116610
ca 2 2 8960
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
no_user_agent 2 35321 20250802134034 0
Go\-http\-client/ 2 1504 20250802134046 0
bot[\s_+:,\.\;\/\\-] 2 19502 20250801054013 1
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 6 116610 0 0
php 10 8960 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 4
androidmarshmallow 2 2
win10 1 1
macosx15 1 1
Unknown 12 12
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 6
netscape5.0 1 1
chrome136.0.0.0 1 1
chrome52.0.2650.98 2 2
up\. 8 8
firefox121.0 1 1
Unknown 3 3
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Mozilla/5.0_zgrab/0.x 20250803143606
WordPress/6.8.2;_https://mumbi.techlup.co.ke 20250803053647
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250801212145
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250801212145
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 15 15
From1 0 0
From2 0 0
From3 1 1
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
http://15.204.235.159:80/wp-login.php 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 37 713693
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 19
/debug/default/view 2 -
/v2/_catalog 2 -
/telescope/requests 2 -
/server-status 2 -
/.git/config 2 -
/.DS_Store 2 -
/@vite/env 2 -
/.vscode/sftp.json 2 -
/config.json 2 -
/login.action 2 -
/server 2 -
/info.php 2 -
/actuator/env 2 -
/s/935313e2533323e2430323e25313/_/ 2 -
/.well-known/security.txt 1 -
/_all_dbs 2 -
/.env 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/about 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 9
15.204.235.159 8 8 0 20250803053647
147.185.132.79 1 1 19435 20250801163312
198.235.24.6 1 1 4480 20250801091656
167.99.210.137 1 1 19435 20250801111136
164.92.244.132 1 1 19435 20250802134035
159.65.181.160 1 1 19435 20250801221631
205.210.31.11 1 1 4480 20250801212145
172.245.241.123 1 1 19435 20250801011403
18.224.192.118 1 1 19435 20250803143606 20250803143606 /
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 3
20250801 12 12 86700 11
20250802 2 2 19435 2
20250803 2 2 19435 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 13
30mn-1h 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 3
/wp-cron.php 8 0 7 7
/ 6 116610 6 5
/wp-login.php 2 8960 2 2
END_SIDER