��Root Mod By V1rus

Viewing: awstats092026.old.cutunix.ir.txt

AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202609 will be lost/reset.
# Last config file used to build this data file was /home2/cutunixc/tmp/awstats/awstats.old.cutunix.ir.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2083                
POS_TIME 2749                
POS_VISITOR 9733                
POS_DAY 11569               
POS_DOMAIN 3383                
POS_LOGIN 3769                
POS_ROBOT 3924                
POS_WORMS 4126                
POS_EMAILSENDER 4257                
POS_EMAILRECEIVER 4400                
POS_SESSION 11961               
POS_FILESIZE 14440               
POS_REQUESTTIME 14582               
POS_SIDER 12118               
POS_FILETYPES 4535                
POS_DOWNLOADS 4717                
POS_OS 4765                
POS_BROWSER 4917                
POS_SCREENSIZE 5432                
POS_UNKNOWNREFERER 5506                
POS_UNKNOWNREFERERBROWSER 6191                
POS_ORIGIN 6462                
POS_SEREFERRALS 6598                
POS_PAGEREFS 6742                
POS_SEARCHWORDS 6933                
POS_KEYWORDS 7085                
POS_MISC 2412                
POS_ERRORS 7144                
POS_CLUSTER 3625                
POS_SIDER_404 7275                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20261001014330 35 6876 10884913476963
FirstTime 0
LastTime 20260930092247
LastUpdate 20261001193903 35 0 34 0 0
TotalVisits 55                  
TotalUnique 47                  
MonthHostsKnown 0                   
MonthHostsUnknown 48                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
AddToFavourites 0 15 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
PDFSupport 0 0 0
RealPlayerSupport 0 0 0
TotalMisc 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 1 1 370
1 1 1 55 0 1 7246
2 8 8 30342 4 4 1057509
3 1 1 55 1 2 7452
4 3 3 30913 3 6 15384
5 3 3 104 6 8 18638
6 30 30 1585 6 8 16867
7 2 2 0 14 14 2026088
8 0 0 0 8 8 658683
9 24 24 1128 2 3 7663
10 2 2 96 2 3 8932
11 8 8 45453 19 19 119641
12 2 2 15295 3 6 14352
13 1 1 55 1 1 2272
14 4 4 17795 0 0 0
15 3 4 32411 11 17 54858
16 74 74 4193 65 65 51611
17 1 1 55 3 4 9031
18 0 0 0 3 3 1836
19 3 3 164 1 1 168
20 2 2 41 0 0 0
21 23 28 748268 8 12 1022868
22 42 42 1722 8 8 19899
23 23 23 55 1 1 2272
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 14
us 103 103 73236
in 93 93 5115
gb 24 24 45453
id 18 18 990
ru 10 10 30470
cn 3 3 151
ma 2 2 0
au 2 2 8898
ca 1 1 55
zz 1 1 87
it 1 1 4445
eg 1 6 748268
de 1 1 0
be 0 1 12617
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
unknown 2 168 20260928044154 2
no_user_agent 1 15151 20260922222837 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 7
json 1 0 0 0
php 49 17438 0 0
png 1 12617 0 0
xml 70 32307 0 0
html 91 131543 0 0
js 5 733117 0 0
Unknown 49 2763 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
macosx15 17 17
Unknown 30 29
macosx7 1 1
win10 196 196
win7 8 3
linux 13 13
macosx 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 23
chrome126.0.0.0 2 2
safari18.4 1 1
Unknown 14 14
chrome125.0.0.0 2 2
chrome76.0.3809.100 1 1
mozilla 14 13
chrome115.0.0.0 5 5
firefox142.0 1 1
chrome132.0.0.0 3 3
chrome124.0.0.0 1 1
chrome133.0.0.0 15 15
chrome136.0.0.0 2 2
chrome153.0.0.0 1 1
chrome120.0.0.0 97 97
chrome131.0.0.0 6 6
chrome80.0.3987.149 42 42
firefox153.0 1 1
chrome109.0.5414.119 1 1
chrome78.0.3904.108 45 45
chrome49.0.2623.112 8 3
chrome142.0.0.0 1 1
netscape5.0 2 2
chrome17.0.963.56 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 9
Cpanel-HTTP-Client/1.0 20260907164409
cve-2026-87902-poc/1.0 20260927110506
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260929125610
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20260907164609
RootEvidence/1.0 20260925133815
metabase-cve-2026-72898-detect/1.0_(benign_detection_probes_only) 20260929091704
Mozilla/5.0_(l9scan/2.0.531313e2533323e2431323e2539313;__https://leakix.net) 20260907164700
Mozilla/5.0 20260918193219
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260928235755
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 4
metabase-cve-2026-72898-detect/1.0_(benign_detection_probes_only) 20260929091704
Cpanel-HTTP-Client/1.0 20260907164409
cve-2026-87902-poc/1.0 20260927110506
RootEvidence/1.0 20260925133815
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 192 198
From1 0 0
From2 0 0
From3 1 1
From4 67 67
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
https://www.okpomsky.com//wp-login.php 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
302 30 7020
404 100 252326
403 34 26758
405 13 4705687
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 84
/admin/phpinfo.php 1 -
/docker-compose.env 1 -
/web/wp-includes/wlwmanifest.xml 1 -
/config/phpinfo.php 1 -
/admin/info.php 1 -
/wp-login.php 1 -
/dashboard/phpinfo 1 -
/console/ 1 -
/___proxy_subdomain_cpanel 1 -
/test/wp-includes/wlwmanifest.xml 1 -
/config/phpinfo 1 -
/info 1 -
/server 1 -
/admin/phpinfo 1 -
/___proxy_subdomain_whm/login 1 -
/blog/robots.txt 1 https://www.okpomsky.com//wp-login.php
/blog/wp-includes/wlwmanifest.xml 1 -
/php_info.php 1 -
/blog/ 1 https://www.okpomsky.com//wp-login.php
/trace.axd 1 -
/wp1/wp-includes/wlwmanifest.xml 1 -
/core/phpinfo.php 1 -
/i.php 1 -
/phpinfo.php 1 -
/v2/_catalog 1 -
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 2 -
/laravel/phpinfo.php 1 -
/graphql/api 1 -
/news/wp-includes/wlwmanifest.xml 1 -
/.env 7 -
/dashboard/phpinfo.php 1 -
/laravel/phpinfo 1 -
/actuator/env 1 -
/xmlrpc.php 2 -
/php-info.php 1 -
/telescope/requests 1 -
/info.php 2 -
/api/graphql 1 -
/sito/wp-includes/wlwmanifest.xml 1 -
/2018/wp-includes/wlwmanifest.xml 1 -
/api 1 -
/i 1 -
/media/wp-includes/wlwmanifest.xml 1 -
/config.json 2 -
/api/phpinfo.php 1 -
/server-status 1 -
/sitemap.xml 1 -
/wp/ 1 https://www.okpomsky.com//wp-login.php
/api/phpinfo 1 -
/js/main.min.js 1 -
/api/gql 1 -
/pi 1 -
/wp-json/wp/v2/pages 1 -
/.DS_Store 1 -
/p.php 1 -
/cms/wp-includes/wlwmanifest.xml 1 -
/sendgrid/.env 2 -
/graphql 1 -
/site/wp-includes/wlwmanifest.xml 1 -
/php_info 1 -
/debug/default/view 1 -
/images/favicon-32x32.png 2 -
/wp-sitemap-posts-page-1.xml 1 -
/.vscode/sftp.json 1 -
/wordpress/ 1 https://www.okpomsky.com//wp-login.php
/api/session/properties 2 -
/wp-includes/wlwmanifest.xml 1 -
/2019/wp-includes/wlwmanifest.xml 1 -
/core/phpinfo 1 -
/about 1 -
/wp2/wp-includes/wlwmanifest.xml 1 -
/website/wp-includes/wlwmanifest.xml 1 -
/php-info 1 -
/.aws/config 1 -
/login.action 1 -
/wp/wp-includes/wlwmanifest.xml 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/shop/wp-includes/wlwmanifest.xml 1 -
/s/531313e2533323e2431323e2539313/_/ 1 -
/phpinfo 1 -
/images/favicon-16x16.png 4 -
/@vite/env 1 -
/wordpress/wp-includes/wlwmanifest.xml 1 -
/_profiler/phpinfo 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 48
103.215.75.19 93 93 5115 20260918063529
158.23.162.109 42 42 1722 20260916222055
185.19.40.39 24 24 45453 20260921115103
143.244.57.90 21 21 0 20260929234246
182.8.68.36 18 18 990 20260918094939
195.178.110.247 7 7 30342 20260927110506
173.208.148.34 5 5 131 20260930064216
128.90.145.13 4 4 0 20260929024828
128.14.233.253 3 3 30913 20260928044204
195.214.235.114 2 2 128 20260907164409
36.255.97.129 2 2 110 20260917192059
202.61.130.221 2 2 8898 20260923140734
100.50.94.209 2 2 4451 20260922145017
45.249.244.55 2 2 0 20260926073810
71.6.237.12 1 1 55 20260925133815
66.132.224.225 1 1 0 20260929125610
66.132.172.47 1 1 54 20260918153212
13.51.205.2 1 1 87 20260907164609
23.178.112.213 1 1 87 20260907164609
66.132.172.178 1 1 0 20260925215944
157.245.1.236 1 1 24 20260930092247
157.230.19.140 1 1 0 20260907164700
173.214.163.142 1 1 55 20260918090703
106.63.26.131 1 1 41 20260915200231
152.32.128.204 1 1 15295 20260921125701
169.40.142.190 1 1 0 20260929091704
64.227.102.74 1 1 55 20260916035948
3.151.194.164 1 1 0 20260930025727
173.255.227.67 1 1 55 20260925092534
35.167.204.6 1 1 87 20260907164609
134.209.172.85 1 1 54 20260918193219
185.247.137.117 1 1 0 20260928235755
144.208.127.24 1 1 55 20260924233840
13.229.239.171 1 1 87 20260907164609
199.45.154.78 1 1 55 20260925014314
3.139.242.79 1 1 0 20260920204741
66.132.195.106 1 1 55 20260917163354
104.28.254.46 1 1 8 20260930054319
32.194.74.48 1 1 4446 20260922145016
178.16.53.77 1 1 0 20260928023035
87.236.176.162 0 1 12617 
142.93.9.218 1 1 55 20260916050459
107.170.64.183 1 1 55 20260924173258
195.96.139.85 1 1 4445 20260921153756
66.132.186.186 1 1 55 20260918105613
156.225.1.64 1 6 748268 20260922214503
206.189.44.36 1 1 15295 20260922155921
3.135.230.200 1 1 87 20260907164609
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 17
20260907 8 8 563 7
20260915 67 67 3657 3
20260916 44 44 1832 3
20260917 4 4 206 3
20260918 50 50 2748 6
20260919 21 21 0 1
20260920 2 2 0 2
20260921 5 6 77810 3
20260922 4 9 772460 4
20260923 2 2 8898 1
20260924 5 5 30493 4
20260925 4 4 165 4
20260926 2 2 0 1
20260927 5 5 0 1
20260928 6 6 30917 4
20260929 27 27 0 4
20260930 4 4 36 4
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 54
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 54
/ 82 131103 38 32
/index.php 25 16312 5 6
//wp-json/batch/v1 8 440 0 1
/wp-json/Batch/v1 8 440 0 0
/wp-json/batch/v1 8 440 0 0
/wp-json/batch/v1/ 7 385 0 0
/wordpress/wp-json/batch/v1 7 385 0 0
/blog/wp-json/batch/v1 7 385 0 0
/.well-known/acme-challenge/0tfelyWYE3OEJhbzoOkYavya--XyFbU8P3AfoHq6H3A 5 435 5 5
/wp1/wp-includes/wlwmanifest.xml 4 82 0 0
/cms/wp-includes/wlwmanifest.xml 4 82 0 0
/blog/wp-includes/wlwmanifest.xml 4 82 0 0
/site/wp-includes/wlwmanifest.xml 4 82 0 0
/test/wp-includes/wlwmanifest.xml 4 82 0 0
/web/wp-includes/wlwmanifest.xml 4 82 0 0
/2018/wp-includes/wlwmanifest.xml 4 82 0 0
/sito/wp-includes/wlwmanifest.xml 4 82 0 3
/media/wp-includes/wlwmanifest.xml 4 82 0 0
/shop/wp-includes/wlwmanifest.xml 4 82 0 0
/wordpress/wp-includes/wlwmanifest.xml 4 82 0 0
/website/wp-includes/wlwmanifest.xml 4 82 0 0
/wp2/wp-includes/wlwmanifest.xml 4 82 0 0
/wp/wp-includes/wlwmanifest.xml 4 82 0 0
/wp-includes/wlwmanifest.xml 4 82 0 0
/2019/wp-includes/wlwmanifest.xml 4 82 0 0
/wp-sitemap-posts-page-1.xml 1 0 0 0
/blogs/media/media/cache.php 1 55 0 0
/images/images/images/images/images/images/cache.php 1 55 0 0
/cache/sitemaps/sitemaps/cache.php 1 55 0 0
/wp-json/wp/v2/pages 1 0 0 0
/cache/cache/cache.php 1 55 0 0
/.well-known/acme-challenge/G06J4W9C0FLT8FLA-JU2AWE9_Q8UD3RM 1 64 0 1
/sitemap.xml 1 30913 0 0
/cgi-bin/cgi-bin-cgi-bin-cgi-bin-cgi-bin-cgi-bin-cgi-bin-cgi-bin/cache.php 1 55 0 0
/images/images/images/images/images/images/images/cache.php 1 55 0 0
/wp-json/ 2 55 1 0
/images/images/cache.php 1 55 0 1
/api/session/properties 3 110 3 3
/cgi-bin/cgi-bin-cgi-bin-cgi-bin/cache.php 1 55 0 0
/cache/logs/logs/cache.php 1 55 0 0
/wp-content/plugins/plugins/cache.php 1 55 0 0
/wp-login.php 2 54 1 2
/pdf/pdf/pdf/cache.php 1 55 0 0
/images/images/images/images/images/images/images/images/cache.php 1 55 0 0
/config.json 1 0 0 1
/images/images/images/images/images/cache.php 1 55 0 0
/cache/cache/cache/cache/cache.php 1 55 1 0
/xmlrpc.php 4 82 0 0
/assets/images/images/cache.php 1 55 0 0
/.well-known/acme-challenge/H-VEUOL841NA0FCZGV30A8HD-NKSG8EH 1 64 1 0
/images/images/images/images/cache.php 1 55 0 0
/cache/cache/cache/cache.php 1 55 0 0
/images/images/images/cache.php 1 55 0 0
/news/wp-includes/wlwmanifest.xml 4 82 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 7
500-1K 92
5K+ 71
44-100 134
100-500 30
0-44 114
1K-2K 6
2K-5K 14
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME
User / IP	: 216.73.217.78
Host / Server	: 195.214.235.115 / npln.ir
System	: Linux damavand.pws-dns.net 5.14.0-503.35.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 4 05:23:43 EDT 2025 x86_64
���Root Mod By V1rus_Alfa

Viewing: awstats092026.old.cutunix.ir.txt

��Root Mod By V1rus_Alfa
