OwlCyberSecurity - MANAGER

Edit File: awstats032025.shiowla-bali.com.megahosting.pw.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202503 will be lost/reset.
# Last config file used to build this data file was /home/megavujh/tmp/awstats/ssl/awstats.shiowla-bali.com.megahosting.pw.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2066                
POS_TIME 2740                
POS_VISITOR 14870               
POS_DAY 17361               
POS_DOMAIN 3441                
POS_LOGIN 3884                
POS_ROBOT 4039                
POS_WORMS 4619                
POS_EMAILSENDER 4750                
POS_EMAILRECEIVER 4893                
POS_SESSION 17894               
POS_FILESIZE 18202               
POS_SIDER 18051               
POS_FILETYPES 5028                
POS_DOWNLOADS 5132                
POS_OS 5180                
POS_BROWSER 5474                
POS_SCREENSIZE 6126                
POS_UNKNOWNREFERER 6200                
POS_UNKNOWNREFERERBROWSER 6918                
POS_ORIGIN 7342                
POS_SEREFERRALS 7474                
POS_PAGEREFS 7698                
POS_SEARCHWORDS 7934                
POS_KEYWORDS 8086                
POS_MISC 2404                
POS_ERRORS 8145                
POS_CLUSTER 3740                
POS_SIDER_404 8249                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250401001612 7 1226 5396922582810
FirstTime 20250306144427
LastTime 20250331094543
LastUpdate 20250401140444 7 0 6 0 0
TotalVisits 65                  
TotalUnique 61                  
MonthHostsKnown 0                   
MonthHostsUnknown 61                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
QuickTimeSupport 0 0 0
PDFSupport 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 129944 2 7 49325
1 4 4 51969 7 9 132800
2 6 6 227814 4 5 6255
3 10 10 262270 6 11 13752
4 1 1 27400 2 4 5004
5 1 1 27400 8 10 58943
6 7 7 238556 17 28 81601
7 5 5 137000 59 150 309227
8 0 0 0 14 18 60584
9 3 3 70470 6 8 108781
10 1 1 27400 7 11 115018
11 3 3 82200 9 25 54922
12 3 3 76335 12 24 131317
13 0 0 0 6 10 30292
14 3 3 157344 8 15 59333
15 1 1 27400 4 10 63548
16 2 2 54800 2 7 29041
17 4 4 254023 6 8 9999
18 2 2 54800 17 18 22518
19 2 2 129944 12 16 134069
20 4 4 184744 3 8 26539
21 2 2 104061 8 13 57061
22 3 3 145614 1 5 107548
23 3 3 157344 4 7 110050
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 17
us 32 32 1199735
ru 11 11 195363
ca 7 7 417232
cn 4 4 259888
se 3 3 82200
gb 2 2 54800
au 2 2 48935
ro 2 2 54800
za 1 1 102544
pa 1 1 27400
id 1 1 21535
eu 1 1 27400
md 1 1 27400
de 1 1 27400
be 1 1 27400
nl 1 1 27400
zz 1 1 27400
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 12
AhrefsBot/ 8 172280 20250330073749 0
no_user_agent 8 820352 20250328233418 0
Googlebot/ 6 86140 20250328163827 0
bingbot/ 5 64605 20250331092800 0
Barkrowler 2 0 20250324194824 0
bot[\s_+:,\.\;\/\\-] 2 54800 20250314062542 0
(firefox/)([0-9]\.|[0-1][0]\.) 1 1517 20250330061942 0
nbot 1 27400 20250330153851 0
Dalvik/ 1 1517 20250306215333 0
Bytespider 1 21535 20250324210205 0
SemrushBot/ 1 27400 20250318152447 0
scrapy 1 27400 20250322054933 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 65 2618213 0 0
Unknown 7 10619 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 16
linuxubuntu 2 2
ios_iphone 1 1
androidnougat 1 1
android11 1 1
androidjellybean 2 2
win10 16 16
androidkitkat 1 1
win7 7 7
Unknown 25 25
win8 1 1
macosx9 1 1
macosx15 2 2
androidgingerbread 1 1
android12 6 6
linux 4 4
winxp 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 32
chrome62.0.3202.94 1 1
chrome129.0.0.0 2 2
chrome114.0.0.0 5 5
chrome91.0.4472.88 1 1
safari11.0.1 1 1
chrome134.0.0.0 1 1
chrome49.0.2623.75 1 1
chrome120.0.0.0 1 1
chrome81.0.4044.129 1 1
chrome133.0.0.0 1 1
mozilla 16 16
msie8.0 1 1
safari 1 1
netscape5.0 1 1
chrome112.0.0.0 2 2
firefox132.0 1 1
firefox28.0 2 2
Unknown 8 8
chrome110.0.0.0 2 2
chrome109.0.0.0 1 1
chrome74.0.3729.169 2 2
chrome100.0.4896.75 4 4
chrome105.0.0.0 3 3
safari17.3 1 1
firefox114.0 1 1
sonyericsson 1 1
msie10.0 1 1
android 3 3
chrome60.0.3112.107 1 1
chrome42.0.2311.90 2 2
chrome49.0.2623.112 2 2
chrome116.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 7
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250318050540
Mozilla/5.0_researchscan.comsys.rwth-aachen.de 20250327161024
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250326001143
panscient.com 20250326140802
okhttp/4.9.2 20250330114018
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250310202127
Mozilla/5.0_(compatible) 20250328023608
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
okhttp/4.9.2 20250330114018
panscient.com 20250326140802
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250326001143
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 65 65
From1 0 0
From2 5 5
From3 2 2
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 4
www_google_com_hk 2 2
google_com 1 1
www_google_com 1 1
id_search_yahoo_com 1 1
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 2
https://autodiscover.skyhighreservations.com 1 1
http://webiness.cooley.mitspace.dk 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
403 33 40986
404 354 431595
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 109
/mysql.php 1 -
/robots.txt 105 -
/sitemaps.xml 4 -
//assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js/latest/meta-data/placement/availability-zone/ 1 -
//cdn.ampproject.org/v0/amp-accordion-0.1.js/latest/meta-data/public-ipv4/ 1 -
//cdn.ampproject.org/v0.js/latest/meta-data/iam/security-credentials/ 1 -
//cdn.ampproject.org/v0/amp-youtube-0.1.js/latest/meta-data/placement/availability-zone/ 1 -
/siteheads.php 1 www.google.com
/sitemap.xml 4 -
/phpinfo 1 -
//cdn.ampproject.org/v0/amp-accordion-0.1.js 9 -
//cdn.ampproject.org/v0/amp-carousel-0.1.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//s0.wp.com/wp-content/js/bilmur.min.js/metadata/identity/oauth2/token 1 -
//cdn.ampproject.org/v0.js/latest/meta-data/instance-id/ 1 -
//assets.tumblr.com/assets/scripts/pre_tumblelog.js 9 -
//cdn.ampproject.org/v0.js/latest/meta-data/public-ipv4/ 1 -
//cdn.ampproject.org/v0/amp-carousel-0.1.js/metadata/identity/oauth2/token 1 -
/index.build.js 9 -
//cdn.ampproject.org/v0/amp-youtube-0.1.js/latest/meta-data/iam/security-credentials/ 1 -
//cdn.ampproject.org/v0/amp-carousel-0.1.js/latest/meta-data/public-ipv4/ 1 -
/wp-content/themes/seotheme/db.php 19 www.google.com
//cdn.ampproject.org/v0/amp-youtube-0.1.js 9 -
/sitemap.xml.gz 4 -
//cdn.ampproject.org/v0/amp-install-serviceworker-0.1.js/latest/meta-data/iam/security-credentials/ 1 -
//cdn.ampproject.org/v0/amp-carousel-0.1.js 9 -
//cdn.ampproject.org/v0.js/metadata/identity/oauth2/token 1 -
//cdn.ampproject.org/v0/amp-install-serviceworker-0.1.js/latest/meta-data/placement/availability-zone/ 1 -
//cdn.ampproject.org/v0/amp-install-serviceworker-0.1.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/idbistqm.php 1 www.google.com
/_profiler/phpinfo 1 -
/xqosdfoh.php 1 www.google.com
/index.build.js/latest/meta-data/iam/security-credentials/ 1 -
/index.build.js/latest/meta-data/placement/availability-zone/ 1 -
/uploaded_script.php 14 www.google.com
/api/.env 1 -
/.env.prod 1 -
//s0.wp.com/wp-content/js/bilmur.min.js/latest/meta-data/instance-id/ 1 -
/analytics.html 1 -
/index.build.js/latest/meta-data/public-ipv4/ 1 -
/wp-content/plugins/security-malware-firewall/readme.txt 1 -
//cdn.ampproject.org/v0/amp-youtube-0.1.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/login/.env 1 -
/php_info.php 1 -
/admin/.env 1 -
/ads.txt 3 -
/blog/adminer.php 1 -
//cdn.ampproject.org/v0.js 9 -
//assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js/metadata/identity/oauth2/token 1 -
/wp-json/wp/v2/users/1 1 -
/index.build.js/metadata/identity/oauth2/token 1 -
//assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js/latest/meta-data/instance-id/ 1 -
//cdn.ampproject.org/v0/amp-carousel-0.1.js/latest/meta-data/placement/availability-zone/ 1 -
/sitemap_index.xml 3 -
/index.build.js/latest/meta-data/instance-id/ 1 -
/gzhfxyyw.php 1 www.google.com
//assets.tumblr.com/assets/scripts/pre_tumblelog.js/latest/meta-data/placement/availability-zone/ 1 -
/sitemap.txt 4 -
/.env.save 1 -
//cdn.ampproject.org/v0/amp-accordion-0.1.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//cdn.ampproject.org/v0/amp-accordion-0.1.js/latest/meta-data/instance-id/ 1 -
/dev/.env 1 -
/local/.env 1 -
/lhqpxxcr.php 1 www.google.com
//s0.wp.com/wp-content/js/bilmur.min.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//cdn.ampproject.org/v0.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/wp-plain.php 10 www.google.com
//cdn.ampproject.org/v0/amp-accordion-0.1.js/metadata/identity/oauth2/token 1 -
//assets.tumblr.com/assets/scripts/pre_tumblelog.js/metadata/identity/oauth2/token 1 -
/application/.env 1 -
/index.build.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/iosvlxhk.php 2 www.google.com
//cdn.ampproject.org/v0/amp-carousel-0.1.js/latest/meta-data/iam/security-credentials/ 1 -
//assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js/latest/meta-data/public-ipv4/ 1 -
/_fragment 1 -
/wp-json/litespeed/v1/cdn_status 1 https://shiowla-bali.com
/favicon.png 1 -
//cdn.ampproject.org/v0/amp-accordion-0.1.js/latest/meta-data/iam/security-credentials/ 1 -
/NewFile.php 5 www.google.com
//cdn.ampproject.org/v0/amp-youtube-0.1.js/metadata/identity/oauth2/token 1 -
/wp-content/plugins/litespeed-cache/readme.txt 1 -
//cdn.ampproject.org/v0/amp-install-serviceworker-0.1.js/metadata/identity/oauth2/token 1 -
/admin/adminer.php 1 -
//s0.wp.com/wp-content/js/bilmur.min.js/latest/meta-data/public-ipv4/ 1 -
/phpinfo.php 1 -
/upwgipnx.php 1 www.google.com
/crm/adminer.php 1 -
/adm.php 1 -
//assets.tumblr.com/assets/scripts/pre_tumblelog.js/latest/meta-data/iam/security-credentials/ 1 -
//s0.wp.com/wp-content/js/bilmur.min.js 9 -
/rmpzycwe.php 1 www.google.com
//cdn.ampproject.org/v0/amp-youtube-0.1.js/latest/meta-data/instance-id/ 1 -
//assets.tumblr.com/assets/scripts/pre_tumblelog.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/.env 6 -
//assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js/latest/meta-data/iam/security-credentials/ 1 -
//cdn.ampproject.org/v0/amp-install-serviceworker-0.1.js/latest/meta-data/public-ipv4/ 1 -
//cdn.ampproject.org/v0/amp-youtube-0.1.js/latest/meta-data/public-ipv4/ 1 -
//assets.tumblr.com/assets/scripts/pre_tumblelog.js/latest/meta-data/public-ipv4/ 1 -
//cdn.ampproject.org/v0/amp-accordion-0.1.js/latest/meta-data/placement/availability-zone/ 1 -
//cdn.ampproject.org/v0/amp-carousel-0.1.js/latest/meta-data/instance-id/ 1 -
/wp-admin/ 2 https://www.google.com
//s0.wp.com/wp-content/js/bilmur.min.js/latest/meta-data/iam/security-credentials/ 1 -
/wp-login.php 3 https://shiowla-bali.com/wp-admin/
//assets.tumblr.com/assets/scripts/pre_tumblelog.js/latest/meta-data/instance-id/ 1 -
//cdn.ampproject.org/v0/amp-install-serviceworker-0.1.js 9 -
//s0.wp.com/wp-content/js/bilmur.min.js/latest/meta-data/placement/availability-zone/ 1 -
//cdn.ampproject.org/v0/amp-install-serviceworker-0.1.js/latest/meta-data/instance-id/ 1 -
//assets.tumblr.com/assets/scripts/tumblelog_post_message_queue.js 9 -
//cdn.ampproject.org/v0.js/latest/meta-data/placement/availability-zone/ 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 61
78.153.140.222 5 5 7585 20250330061942
35.171.144.152 3 3 64605 20250316223512
78.153.140.218 2 2 3034 20250315010909
51.79.230.129 2 2 54800 20250320125931
42.83.147.53 2 2 54800 20250322230942
52.167.144.206 2 2 43070 20250331094543
198.98.60.152 2 2 54800 20250324204711
35.89.138.141 1 1 27400 20250314154111
106.75.136.216 1 1 102544 20250331062415
202.62.46.137 1 1 21535 20250328171753
152.42.129.145 1 1 27400 20250330111243
159.65.36.133 1 1 27400 20250316031403
143.244.141.190 1 1 27400 20250318035425
147.185.132.144 1 1 102544 20250320232349
93.159.230.84 1 1 27400 20250312042254
93.158.91.19 1 1 27400 20250311073641
193.41.206.50 1 1 27400 20250317185117
179.43.191.19 1 1 27400 20250314173151
147.182.140.160 1 1 27400 20250310032021
134.209.42.215 1 1 27400 20250310060558
192.186.142.36 1 1 21535 20250326012205
38.255.52.227 1 1 27400 20250319104958
138.199.232.86 1 1 27400 20250325183049
44.244.170.45 1 1 21535 20250312034309
54.202.232.62 1 1 27400 20250312163704
87.236.176.206 1 1 27400 20250318050540
134.199.220.149 1 1 27400 20250318072429
23.230.243.33 1 1 27400 20250321091519
134.199.229.200 1 1 27400 20250324070822
35.81.171.253 1 1 21535 20250314033012
134.199.222.53 1 1 27400 20250320035919
93.159.230.28 1 1 27400 20250326010435
117.18.16.39 1 1 21535 20250318122543
196.251.73.110 1 1 102544 20250308063013
84.239.43.57 1 1 27400 20250326140802
188.166.84.6 1 1 27400 20250308024923
147.185.132.207 1 1 102544 20250313172028
64.23.201.89 1 1 27400 20250322023601
159.65.152.139 1 1 27400 20250314035027
147.185.132.240 1 1 102544 20250325210358
147.182.154.83 1 1 27400 20250324030418
139.59.42.246 1 1 27400 20250326032457
206.168.34.45 1 1 27400 20250310202127
93.158.91.25 1 1 27400 20250325235310
137.226.113.44 1 1 27400 20250327161024
205.210.31.245 1 1 102544 20250321022721
89.169.102.46 1 1 102544 20250306144427
134.199.236.198 1 1 27400 20250328023608
198.235.24.93 1 1 102544 20250326001143
198.23.221.50 1 1 102544 20250317175912
198.145.51.153 1 1 27400 20250330195741
176.123.10.50 1 1 27400 20250328070106
185.241.208.84 1 1 27400 20250320112449
198.235.24.251 1 1 102544 20250318220255
192.104.34.34 1 1 102544 20250313202926
23.158.56.51 1 1 27400 20250312075926
54.164.157.105 1 1 27400 20250330114018
106.75.128.199 1 1 102544 20250330193720
54.88.179.33 1 1 21535 20250316024056
209.38.146.134 1 1 27400 20250312030322
5.133.192.105 1 1 27400 20250318145650
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 22
20250306 2 2 104061 2
20250308 2 2 129944 2
20250310 3 3 82200 3
20250311 1 1 27400 1
20250312 5 5 131135 5
20250313 2 2 205088 2
20250314 4 4 103735 4
20250315 2 2 3034 1
20250316 5 5 113540 4
20250317 2 2 129944 2
20250318 6 6 233679 6
20250319 4 4 31951 2
20250320 6 6 239544 5
20250321 2 2 129944 2
20250322 2 2 54800 2
20250324 4 4 109600 3
20250325 3 3 157344 3
20250326 5 5 206279 5
20250327 1 1 27400 1
20250328 3 3 76335 3
20250330 5 5 186261 5
20250331 3 3 145614 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 64
2mn-5mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 3
/ 65 2618213 61 61
/.aws/credentials 6 9102 4 3
/app_dev.php/_profiler/phpinfo 1 1517 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
0-44 15
1K-2K 390
5K+ 94
END_FILESIZE