/home/brandsfa/tmp/awstats/awstats112025.winter.bigshoponly.com.txt
AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202511 will be lost/reset.
# Last config file used to build this data file was /home/brandsfa/tmp/awstats/awstats.winter.bigshoponly.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2090                
POS_TIME 2776                
POS_VISITOR 25703               
POS_DAY 28467               
POS_DOMAIN 3392                
POS_LOGIN 3799                
POS_ROBOT 3954                
POS_WORMS 4233                
POS_EMAILSENDER 4364                
POS_EMAILRECEIVER 4507                
POS_SESSION 28664               
POS_FILESIZE 29304               
POS_REQUESTTIME 29444               
POS_SIDER 28853               
POS_FILETYPES 4642                
POS_DOWNLOADS 4803                
POS_OS 4851                
POS_BROWSER 5051                
POS_SCREENSIZE 5759                
POS_UNKNOWNREFERER 5833                
POS_UNKNOWNREFERERBROWSER 6374                
POS_ORIGIN 6532                
POS_SEREFERRALS 6665                
POS_PAGEREFS 6809                
POS_SEARCHWORDS 6957                
POS_KEYWORDS 7109                
POS_MISC 2440                
POS_ERRORS 7168                
POS_CLUSTER 3655                
POS_SIDER_404 7297                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20251201061231 1398 298594 12800738669117
FirstTime 20251123152718
LastTime 20251130221855
LastUpdate 20251201134716 1398 0 1397 0 0
TotalVisits 70                  
TotalUnique 70                  
MonthHostsKnown 0                   
MonthHostsUnknown 72                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
DirectorSupport 0 0 0
FlashSupport 0 0 0
PDFSupport 0 0 0
QuickTimeSupport 0 0 0
AddToFavourites 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
TotalMisc 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 6 6 5727 4 4 2484
1 3 3 6177 18 18 22518
2 1 1 4166 1 1 4166
3 1 1 4178 1 1 4178
4 3 3 2029 0 0 0
5 8 8 9054 4 5 1242
6 1 1 625 1 1 625
7 1 1 764 1 1 764
8 5 7 6239 0 2 0
9 2 2 1400 1 2 625
10 1 1 775 0 0 0
11 0 0 0 0 0 0
12 1 1 764 1 1 764
13 2 2 3278 37 37 45794
14 1 1 1601 0 0 0
15 15 20 16897 37 38 45848
16 3 3 3219 0 1 0
17 3 3 7050 18 18 22518
18 4 4 2508 0 0 0
19 4 4 2808 0 0 0
20 6 6 4437 2 4 2484
21 17 17 50727 651 667 815140
22 12 14 61746 686 710 873931
23 0 0 0 2 2 1479
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 16
us 43 48 81376
in 13 13 12289
gb 8 8 36285
cn 7 11 25434
ca 6 6 6898
id 6 6 14530
tw 4 4 4601
zz 4 4 6264
rs 2 2 2754
kr 1 1 931
ro 1 1 769
dk 1 1 931
ru 1 1 775
nl 1 1 775
fr 1 1 932
ir 1 1 625
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
Googlebot/ 4 2778 20251129120201 0
checker 4 3185 20251130223438 0
no_user_agent 2 3731 20251130132655 0
Go\-http\-client/ 2 1628 20251130132739 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 6
css 1 1287 0 0
Unknown 7 563 0 0
php 17 95796 0 0
html 76 75068 0 0
svg 1 411 0 0
js 7 23044 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
linux 8 3
ios_iphone 3 3
macosx14 1 1
Unknown 25 25
androidoreo 1 1
win7 4 2
linuxubuntu 2 2
win10 35 35
macosx15 22 20
android10 8 8
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 33
chrome49.0.2623.112 4 2
chrome125.0.0.0 6 1
chrome120.0.0.0 1 1
chrome96.0.4664.110 1 1
safari15.4 1 1
Unknown 6 6
chrome138.0.0.0 1 1
firefox143.0 2 2
firefox134.0 2 2
chrome114.0.0.0 3 1
chrome78.0.3904.108 6 6
safari18.0 1 1
chrome128.0.0.0 12 12
netscape5.0 4 4
chrome136.0.0.0 1 1
chrome91.0.4472.124 2 2
chrome63.0.3239.111 1 1
chrome90.0.4430.212 4 4
chrome141.0.7390.37 3 3
chrome92.0.4515.107 2 2
chrome126.0.0.0 1 1
safari17.3 2 2
chrome76.0.3809.132 1 1
mozilla 15 15
chrome140.0.0.0 4 4
firefox139.0 1 1
chrome113.0.0.0 2 2
chrome141.0.0.0 5 5
chrome139.0.0.0 2 2
chrome136.0.7103.25 1 1
chrome142.0.0.0 10 10
safari14.0 1 1
chrome109.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 6
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20251126050014
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20251123152733
python-requests/2.32.3 20251126002851
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20251125103032
Cpanel-HTTP-Client/1.0 20251123152718
Mozilla/5.0_(l9scan/2.0.2323e22323e2738313e2330313;__https://leakix.net) 20251130132735
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20251123152718
python-requests/2.32.3 20251126002851
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 93 96
From1 0 0
From2 0 0
From3 0 0
From4 7 13
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
302 11 8344
403 23 27324
404 1435 1795185
301 3 2385
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 820
/wp-comments-post.php 2 -
/TZZ1fGbZtQQwgQovNfi.php 1 -
/id.jsp 2 -
/link.php 2 -
/class.api.php 2 -
/oGR1FUDEsudSJlQVd.PHP 1 -
/kk.php 2 -
/jVfrbgn9lxUcTribc.8.php 1 -
/sim.php 2 -
/3lBEJUEejBLlMyM2Cfq.tmb35r2a3366 1 -
/tt.php 2 -
/alfanewditz.php 2 -
/leafmailer.php 2 -
/v9vQ2_gsqNP3eYtKlk.8.php 1 -
/LZVUftnfnMosL0n_v.login-w.jsp 1 -
/wso.php.suspected 2 -
/efpO0FIFwAeUOKkIYPt.phtml 1 -
/0x.php 2 -
/mine.php 2 -
/YGAaOIzOxhyTQ_CUP9A.well-known 1 -
/creates.php 2 -
/cjfuns.php 2 -
/swagger/swagger-ui.html 2 -
/goods.php 2 -
/min.php 2 -
/user.php 2 -
/pages.php 2 -
/KH_jC5gNmINu97V0UJ.tmb 1 -
/1sis.php 2 -
/zh2IBHsITTU1jOMYn.f35.php 1 -
/about.php7 2 -
/q2bxrorckzdb67sbex8x2Cakc.php 2 -
/function.php 2 -
/cart.php.malware 2 -
/L8cmmt5PCyXZhxH_dr.PHP 1 -
/ups.php 2 -
/1index.php 2 -
/library.php 2 -
/Thumbs.jsp 2 -
/connects.php 2 -
/CwsD3DrSzacBksxUvC.html.php 1 -
/c3ye28T9Fm7LUn3qP26.login-w.jsp 1 -
/c.php 2 -
/moon.php 2 -
/0wn7JFaZx_tnQztOqv.xhtml 1 -
/wp-editor.php 2 -
/up.php 2 -
/5PQfDoTOwlGyFAZ2r.tmb35r2a3366 1 -
/mm8MyquPKDCRy0Gq1Sq.ini.php 1 -
/sell.php 2 -
/mariju.php 2 -
/tunnel.jsp 2 -
/zmL186sPE7pzBN3oE49.Php7.php 1 -
/mailer.php 2 -
/wp-signup.php 2 -
/alfa.php 2 -
/jvc.php 2 -
/swagger.json 2 -
/VJ8_9UxVibNSGGmtpd.8.php 1 -
/actuator/env 2 -
/wp-includes/wlwmanifest.xml 2 -
/gmtptnnv.php 2 -
/wNFCTLZpXVkaLkKaw5e.class.php 1 -
/aOu0tDBWuUOz_INgnW.class.php 1 -
/%3Fpath=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com&view_file=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com%252F.htaccess 5 -
/wss.php 2 -
/xmlrpc.php.malware 2 -
/shell.php 2 -
/zM4hoVyHUVs7hRP2U.Php7.php 1 -
/404.php 2 -
/cache.php.malware 2 -
/luf288xop.php 2 -
/wp-config.php.malware 2 -
/wp-rss2.php 2 -
/sito/wp-includes/wlwmanifest.xml 2 -
/wp-configs.php 2 -
/ws.php 2 -
/Login.php 2 -
/owowe.php 2 -
/userfuns.php 2 -
/yeniurun.php 2 -
/zero.php 2 -
/86LnHEIdMVqxhZyuR0.api.php 1 -
/wp-trackback.php.suspected 2 -
/leaf.php 2 -
/about2.php 2 -
/xXsend4.php 2 -
/wp/wp-includes/wlwmanifest.xml 2 -
/M3NDxr04s9CtU8dmft.php 1 -
/wpterm.php 2 -
/php.php 2 -
/2019/wp-includes/wlwmanifest.xml 2 -
/debug/default/view 2 -
/wp-KtxEuR.php 2 -
/x.php 2 -
/fai.php 2 -
/wp-logins.php 2 -
/dex.php 2 -
/alf.php 2 -
/sym403bp.php 2 -
/pRoksPi98a_MQbqE2.html 1 -
/E__qoB3oeHxa6QwEM4w.login-n.jsp 1 -
/wp-register.php 2 -
/zjpXmHoC0lec4Q7cMQx.f35.php 1 -
/uninstall.php 2 -
/classfuns.php 2 -
/soul.php 2 -
/index.html 2 -
/wp-mail.php 2 -
/unzipper.php7 2 -
/inbox.php 2 -
/lf.php 2 -
/ksCXIcNB4LnIBZmGP.api.php 1 -
/api/graphql 2 -
/Cyb9OsJXrNQlJ3yaYS.js 1 -
/idpost.jsp 2 -
/v2/api-docs 2 -
/test.php 2 -
/system.php 2 -
/7wJxgjS6eabWKAOdvX.aspx 1 -
/dOYm6Dx0XP07Qp12J.ini.php 1 -
/s.php 2 -
/list.php 2 -
/JCphW2aUtfr2T2pLiuG.LuFix-983426.php 1 -
/mai.php 2 -
/fix.php7 2 -
/votes.php 2 -
/authorize.php 2 -
/tunnel.nosocket.php 2 -
/doc.php 2 -
/mrlbcpszoy8hg9re5aybfCakc.php 2 -
/alfa-rex.php7 2 -
/4HHYVfh1nLdwVFm_t.tmb 1 -
/helper.php 2 -
/l0g.jsp 2 -
/zwso.php 2 -
/server-status 2 -
/edit-comments.php 2 -
/wsoditz1.php 2 -
/BSFKrqlXnMXnemgy0v.max6.jsp 1 -
/CtvKFsZEKZuWaj14t.txt 1 -
/view.html.php 2 -
/l.php 2 -
/m3P0mvUMarq6V3Netd.PhP7 1 -
/install.php.malware 2 -
/n.php 2 -
/Heed.jsp 2 -
/.DS_Store 2 -
/backup.php 2 -
/ioxi22.PhP7 2 -
/xxl.php 2 -
/user-edit.php 2 -
/WHcPj0J0Dye4xBZe3i 1 -
/orvxmailer.php 2 -
/PvqDq929BSx_A_D_M1n_a.php 2 -
/x3cyvONNB2o66YumLa.0.php 1 -
/zJRsm_KrX9GgQOeWNf.aspx 1 -
/classsmtps.php 2 -
/eHfBHp2Hli4uYM2RX.ashx 1 -
/xml.php 2 -
/wp-pano.php 2 -
/index.php.malware 2 -
/type.php 2 -
/hvMqpLNRJTWskaakn5.login-n.jsp 1 -
/zz10.php 2 -
/ceBpgNcsnEEZLv90J.max6.jsp 1 -
/about 2 -
/Ay6P5JlgHOOhwDfo86.LuFix-983426.php 1 -
/alexusMailer_v2.0.php 2 -
/511.php 2 -
/database.php 2 -
/1975.php 2 -
/edit.php 2 -
/lrwit7bvakghhggw6jCakc.php 2 -
/vshy_ZA8bnUL9gdPUNc.aspx 1 -
/ssl.php 2 -
/wp-advance.php 2 -
/8phpactual.php 2 -
/smtp.php 2 -
/71d3eg4CXtdgBhxHs.class.php 1 -
/ini_db-update.php 2 -
/wp-.php 2 -
/%3Fpath=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com&view_file=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com%252F7ykahi6pvzdiidg9puqcCakc.php 5 -
/psm.php7 2 -
/zAUuSsw54aMaT8tqt.jsp 1 -
/HitCount.jsp 2 -
/2Wu4gUTv9JBmK8qzk.php.malware 1 -
/tempfuns.php 2 -
/wp-atom.php 2 -
/byp.php 2 -
/priv8.php 2 -
/font-awesome.max6.jsp 2 -
/uaa01wUaPgk27hzkPil.tmb 1 -
/sell.php7 2 -
/wp1/wp-includes/wlwmanifest.xml 2 -
/shop.php 2 -
/BHeDB0UrVC2SZYy82Dt.wjpl95qv_mlr.php 1 -
/settings.php 2 -
/test2.php 2 -
/cmd-pro.jsp 2 -
/cs3J7rN6jP23_sngF.ini.php 1 -
/NEumxxLdh_8KHHLCwLv.tomcat.5.jsp 1 -
/402.php 2 -
/mar.php 2 -
/export.php 2 -
/wp-config-sample.php 2 -
/xU_18cPVE2bUx0uNU.8.php 1 -
/shell20211028.php 2 -
/siteheads.php 2 -
/J7S7FhxEdPM0jCUjyB.js 1 -
/oWndaCyczgrvfse9jt.test.php 1 -
/jsfshell.xhtml 2 -
/clsleakdyzm1.php 2 -
/xmailer.php 2 -
/output.php 2 -
/Unzip.php 2 -
/oaxv3ZMucMHr3uVyww.api.php 1 -
/403.php 2 -
/v2.php 2 -
/ocsB7e7Q8KruK8p8tqj.html.php 1 -
/one-lin.jsp 2 -
/raw.php 2 -
/q1.php 2 -
/css.php 2 -
/wm_cfshared.jsp 2 -
/favic0n.jsp 2 -
/LN9FwzfadTynkdrk80.tmb 1 -
/wp-settings.php 2 -
/tunnel.aspx 2 -
/debug_payload.php 2 -
/options.php 2 -
/task.php 2 -
/module.php 2 -
/sym.php 2 -
/las.php 2 -
/z60.php 2 -
/ES6fGe5kIF6C_xZPkQ.tomcat.5.jsp 1 -
/tunnel.tomcat.5.jsp 2 -
/asu.php 2 -
/@vite/env 2 -
/iisstart.aspx 2 -
/wKwWu0nxZmA6YCOI9.php7 1 -
/saudi.php 2 -
/5d5dPbHZ41AHosm4oSi.html.php 1 -
/2q3z_3C_2K200v2O5.PhP7 1 -
/uadm.php 2 -
/sx.php 2 -
/nc.php 2 -
/redirect.php 2 -
/wp-trackback.php.malware 2 -
/form.php 2 -
/v2/_catalog 2 -
/s/2323e22323e2738313e2330313/_/ 2 -
/xRUbJVOQs5248uiVc.php.suspected 1 -
/include.php 2 -
/classwithtostring.php 2 -
/z.php 2 -
/cache.php.suspected 2 -
/TyxTyFK4C59FbJEnC.php7 1 -
/kyoCXheN31g3MqNz3dz.PHP 1 -
/wp-activate.php 2 -
/lc.php 2 -
/f35.php 2 -
/8ILuea5c6NIREenkxg_.api.php 1 -
/product.php.malware 2 -
/6Zj2NOo4WmVW8ivDf.tmb 1 -
/wp-ver.php 2 -
/phpmailer.php 2 -
/Mhbgf.php.suspected 2 -
/shell.jsp 2 -
/stats.php 2 -
/xleet-shell.php 2 -
/about.php.malware 2 -
/msleaf.php7 2 -
/upfile.php 2 -
/atomlib.php 2 -
/security.php 2 -
/mini.php 2 -
/5gN2dNnQMIz0gt2TL.Php7.php 1 -
/option.php 2 -
/zz8.php 2 -
/.login-w.jsp 2 -
/view.php 2 -
/simple-backdoor.php 2 -
/user-info.php 2 -
/wso.php 2 -
/HN3dNXMKKoULiEyFe.php 1 -
/user.ini.php 2 -
/inc.php 2 -
/zCCiUT11zco9h7O7m7e.html 1 -
/fix.phtml 2 -
/upload.jsp 2 -
/source.php 2 -
/iMJ13KT1AirWoAFe2U.tmb35r2a3366 1 -
/%3Fpath=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com&view_file=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com%252Fwsoqn.php 5 -
/login.php 2 -
/upgrade.php 2 -
/auto_seo.php 2 -
/update.php 2 -
/class-wp-text-diff-renderer-table.php 2 -
/Zae3klWP2j0bFp4Y4.txt 1 -
/tool.php 2 -
/php8.php 2 -
/q_HWjenkNTSdQgfkBIp.test.php 1 -
/news_parser.class.php 2 -
/style-js.php 2 -
/testmail.php 2 -
/Q2aBkAKptqmjnV7LFJ.well-known 1 -
/w.php 2 -
/ToO5JGQ1UHYPvVRpnW.phtml 1 -
/lib.php 2 -
/lu.php 2 -
/tmp.php 2 -
/api 2 -
/2a2GARC7e0D1_k7KjR.well-known 1 -
/alfanew.php 2 -
/elp.php 2 -
/V3cwMsnoDts23VC7V.0.php 1 -
/jHM3vVL_ZEq9nEczs.xhtml 1 -
/4uDlc8KRACyzDmmo7mR.max6.jsp 1 -
/rQhfZKJYIWIm3kRJnh.php8 1 -
/page-login.html 2 -
/398u6JJmBTkkvNVIxP.login-w.jsp 1 -
/uPChZO0UfKuJGdIMBSZ.8.php 1 -
/worksec.php 2 -
/alfa-rex.PHP 2 -
/u2Vel9ZFa_DR5N86o.html.php 1 -
/Qv5Bbg43ngNE8jiyV.wjpl95qv_mlr.php 1 -
/2018/wp-includes/wlwmanifest.xml 2 -
/unzip.php 2 -
/j6KCgmlVMZXfv66ba.well-known 1 -
/.tmb35r2a3366 2 -
/k9E9coD7k3pXHvV2JC.php.malware 1 -
/Vg6weQruO9SIWfWQP_.html.php 1 -
/moduless.php 2 -
/profile.php 2 -
/antibot.php 2 -
/PZOfHOf0QwtWuJgnavy.txt 1 -
/uKIxxz_pC0juwpnIOi.login-n.jsp 1 -
/preaproveWelcome.jsp 2 -
/adm.php 2 -
/wpyii2.php 2 -
/PRmAbxfLvKOd_0LgC2.PhP7 1 -
/ini.php 2 -
/start.php 2 -
/BD0MG3DT1tqnxSyX3.php8 1 -
/user-new.php 2 -
/ss.php 2 -
/delpaths.php 2 -
/basic.php 2 -
/eowCDskNWmhQ3ruCSU2.ashx 1 -
/search.php 2 -
/WBGZpS3KlpXKCqwYEF.php7 1 -
/index.php.suspected 2 -
/msok.aspx 2 -
/admin-header.php 2 -
/o4VlY_Bf6o15suVNO.nosocket.php 1 -
/cc.php 2 -
/phpzipincs.php 2 -
/mailer.php8 2 -
/dos2unix.php 2 -
/3913a737be.php 2 -
/geju.php 2 -
/zestarts.php 2 -
/SLcX9q7Bq8xp7J0KeH.ini.php 1 -
/ca.php 2 -
/simple.php 2 -
/.wjpl95qv_mlr.php 2 -
/vXNoqM4Pfa1sPTugA.js 1 -
/wpc.php 2 -
/_all_dbs 2 -
/x1MBpLBEWzvcJiuggQp.htaccess 1 -
/2mcV93mTgKIL5W4NaWD.js 1 -
/news/wp-includes/wlwmanifest.xml 2 -
/class-IXR-date.php 2 -
/klBKgVzEh2Mlc1Eumt.f35.php 1 -
/1.php 2 -
/clear.php 2 -
/O81kf5kXgFqSdfe5Q.php.suspected 1 -
/dropdown.php 2 -
/alexusmailer.php 2 -
/dd.php 2 -
/media.php 2 -
/admin.php 2 -
/engine.php 2 -
/wp-mail.Php7.php 2 -
/xm.php 2 -
/api/gql 2 -
/5K9gv2gprQFRZ2ziXAL.jsp 1 -
/onclickfuns.php 2 -
/coRjndRzVYv1OZWHq9M.htaccess 1 -
/ICXEmFWVZMHvPqjDbXf.aspx 1 -
/KAZdiycR1IDHi1XWB1U.jsp 1 -
/mLNRBzqnnPQ4gx8XcJ 1 -
/e35pqnlwZASHuoeOWy.nosocket.php 1 -
/ghOzXx9VzxswVOAtf1m.txt 1 -
/db.php 2 -
/tsi8WO2d7aSv0KBWCX.php 1 -
/epinyins.php 2 -
/7Zf8nwqnUY7nxvN7m.LuFix-983426.php 1 -
/ASWcDo8AEDuEF_irM.login-w.jsp 1 -
/shsspnwyl 2 -
/db-update.php 2 -
/anon.php 2 -
/packed.php 2 -
/504.php 2 -
/yWEvYq8HDbn3lZHVwNX.f35.php 1 -
/3.php 2 -
/setup-config.php 2 -
/sts.php8 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/KVJF0ELRwbuxkn9WC.wjpl95qv_mlr.php 1 -
/html.php 2 -
/xc.php 2 -
/yYfu__ODWCfT6ycutCF.php7 1 -
/alfa-rex.PhP7 2 -
/9.php 2 -
/telescope/requests 2 -
/9BXsVBAbxsbixESl075.php.suspected 1 -
/cong.php 2 -
/.vscode/sftp.json 2 -
/xa.php 2 -
/ix.php 2 -
/get.php 2 -
/L_Swc1eiVqmqxD2wSr.jsp 1 -
/spacer.jsp 2 -
/wordpress/wp-includes/wlwmanifest.xml 2 -
/ml3.php 2 -
/3njJN8yF9wl2kyUWM8.f35.php 1 -
/error.php 2 -
/ol.php7 2 -
/zz.php 2 -
/id_win.jsp 2 -
/post.php 2 -
/termps.php 2 -
/update-core.php 2 -
/root.php 2 -
/IDCsHMtJJTRaugo8DnT.test.php 1 -
/tester.php 2 -
/crD0YZMV6TQUFe9td.tomcat.5.jsp 1 -
/owl.php 2 -
/login.action 2 -
/index.php 2 -
/CVI08qDy9PaiNw_kQdX.php.malware 1 -
/icloud.php 2 -
/on.php 2 -
/%3Fpath=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com&view_file=%252Fhome%252Fbrandsfa%252Fwinter.bigshoponly.com%252Fww7.php 5 -
/wp-config.php.suspected 2 -
/swagger/index.html 2 -
/9Bbpjn5zam0PyIENh.aspx 1 -
/3_PsubtwYxkloEMP_If.login-w.jsp 1 -
/logout.php 2 -
/test1.php 2 -
/a.php 2 -
/wp-22.php 2 -
/bcmVvaeEfIT03GOV3w.tmb35r2a3366 1 -
/t.php7 2 -
/accesson.php 2 -
/wp-blog-header.php 2 -
/vEMKQcwW1yK0_JM7HJ.ini.php 1 -
/tbl_status.php 2 -
/man.phtml 2 -
/0hyXScJ12RTr5KvBbSD.php8 1 -
/r.php 2 -
/7Me57AVmfvY4opUDw.phtml 1 -
/FYm4TQy0BgpeUUgx3FN.login-n.jsp 1 -
/xza.php 2 -
/networks.php 2 -
/class-IXR-server.php 2 -
/sell.php8 2 -
/SPh7T6ZsUftBnDWPUNO.0.php 1 -
/batman8.php 2 -
/foxx.php 2 -
/options-style.php 2 -
/moddofuns.php 2 -
/feedback.php 2 -
/jb7hdRwdxszBhtR8Irj.php.suspected 1 -
/MMAsdOmrTPD7CfkLB.PhP7 1 -
/autoload_classmap.php 2 -
/.LuFix-983426.php 2 -
/8.php 2 -
/txets.php 2 -
/access.php 2 -
/asasx.php 2 -
/QRHF5TNJd4aZqaIDb.tomcat.5.jsp 1 -
/akcc.php 2 -
/bless.php 2 -
/VOlhnqG3okK34f9SjZ.xhtml 1 -
/mailer.phtml 2 -
/home 2 -
/lNlpRQXO9FIG1P0e3f.wjpl95qv_mlr.php 1 -
/zip.php 2 -
/wp-confiq.php 2 -
/site/wp-includes/wlwmanifest.xml 2 -
/sw3.jsp 2 -
/owaa.php 2 -
/melumang.php 2 -
/content.php 2 -
/admin-footer.php 2 -
/c2VuqojMSZ_QxQ7V9.login-n.jsp 1 -
/media-new.php 2 -
/cloud.php 2 -
/04236bcd81.php 2 -
/5LrXTiHCFpis5FNAk.PHP 1 -
/repair.php 2 -
/mo.php 2 -
/logs.php 2 -
/ylpDQs9HsJle9C4SDE.txt 1 -
/wpautoedit.php 2 -
/v3/api-docs 2 -
/special.php 2 -
/wp-options.php 2 -
/info.php 2 -
/AQCxBzjyl1abOxqCRvt 1 -
/sql.php 2 -
/4.php 2 -
/wp-cron-thumb.php 2 -
/item.php 2 -
/jl1hj8ncc0tp7vji3Cakcx.php 2 -
/mmm.php 2 -
/.env 2 -
/style.php 2 -
/themes.php 2 -
/output.php.suspected 2 -
/alfa-rex.php 2 -
/cZY4yPRta9WKJtTS5Z.wjpl95qv_mlr.php 1 -
/xjNJXFprwoIlIuWYxoZ.PhP7 1 -
/wp-login.php.suspected 2 -
/OyjTdNwhsYKucnufLrp.ini.php 1 -
/makeasmtp.php 2 -
/eEzyaHvwpJsz2NoQfpC.tmb35r2a3366 1 -
/wp-commentsrssl.php 2 -
/y.php 2 -
/install.php 2 -
/sB4xaYdkE6HF6rdvtH.0.php 1 -
/q.php 2 -
/gdftps.php 2 -
/image.php 2 -
/proxy-jsp.jsp 2 -
/Z5qDnGqfkCPnR6lfCsC.php 1 -
/sfina.php 2 -
/logos.jsp 2 -
/header.php 2 -
/buy.php 2 -
/ms-edit.php 2 -
/gecko-new.php 2 -
/class.php 2 -
/caminho-ranger-32.php 2 -
/5NWWssXlU5upPGNegA.php7 1 -
/m.php 2 -
/xmlrpc.php 4 -
/BzMWOaqtBGVBwx0EqwC.Php7.php 1 -
/uted0zu3du7X0f225A.Php7.php 1 -
/php-cgi/php-cgi.exe 2 -
/setup.php 2 -
/t.php 2 -
/robots.txt 1 -
/SOzomgvtFWXt4Xf6mU.jsp 1 -
/l5QVndBHW188J8YS1.well-known 1 -
/unzipper.php 2 -
/wp-sigunq.php 2 -
/cache.php 2 -
/unjHKuBCieRJWoeXn8B.html 1 -
/admin-ajax.php 2 -
/web.php 2 -
/send.php 2 -
/plugin.php 2 -
/GbyddDUUOBSZsE0cc.login-n.jsp 1 -
/mail.php 2 -
/delcheck.php 2 -
/blackrock.php 2 -
/config.json 2 -
/r_YBeRT7f6PMaJZRJ65.phtml 1 -
/cmd.php 2 -
/antineutrino.php 2 -
/bFYMOknmjUPo50oas.php 1 -
/ujefvoyrhwqr53ptpfCakc.php 2 -
/1e3c8840f3cfa5199a03406ef731ea67RCakc.php 2 -
/103.php 2 -
/pp6H7mUYrH5nvdBwVug.PHP 1 -
/KorfZQ_eyCXWpGI8Cc.ashx 1 -
/filefuns.php 2 -
/sc52hVn7yMRgKXZXLA.php.malware 1 -
/z2Bx8Qqbo34qMiRLlu.php8 1 -
/config.php 2 -
/tools.php 2 -
/b.php 2 -
/wp.php 2 -
/wsoditz.php 2 -
/5bMbHR3H6hRVJlyHsJb.class.php 1 -
/ibbg3IRPA7b0rAbmdb.ashx 1 -
/tunnel.php 2 -
/doiconvs.php 2 -
/tunnel.js 2 -
/wp-blog.php 2 -
/wp-infos.php 2 -
/2X12Xyn_PcHxD9PQkS.LuFix-983426.php 1 -
/years.php 2 -
/file.php 2 -
/uUfLI9atJfZ70nrIK7z.php7 1 -
/lufix.php 2 -
/gawean.PhP7 2 -
/plugins.php 2 -
/marijuana.php 2 -
/zsywDH2se4NabThFh.nosocket.php 1 -
/uFVAo34cySGrgGNZJO.html 1 -
/nop.php 2 -
/xz2N6wUwezM9_OSSZ.test.php 1 -
/buy.txt 2 -
/input.php 2 -
/2020.php 2 -
/Mhbgf.php 2 -
/network.php 2 -
/7b1Z0UjwhZs4bpl04D.txt 1 -
/v.php 2 -
/HelloHTML.jsp 2 -
/src.php 2 -
/n6itWXi1KqZOxBpnhA4.php8 1 -
/randkeyword.PhP7 2 -
/wp-admin.php 2 -
/blok.php 2 -
/BThaOv0jA6fRz21gzZS.8.php 1 -
/20170219.jsp 2 -
/reset.php 2 -
/wp-app.php 2 -
/wp-cron.php 2 -
/Jennie007Greene.php 2 -
/psh.php 2 -
/tunnel.ashx 2 -
/api/swagger.json 1 -
/chosen.php 2 -
/radio.php 2 -
/58JrgL3ukOBpygL9rHb.xhtml 1 -
/2index.php 2 -
/Caterpillar.aspx 2 -
/import.php 2 -
/xleet.php 2 -
/xl.php 2 -
/tAFK3oDDHPkIOZpqgO.phtml 1 -
/spinstall0.aspx 2 -
/prevaricate.php 2 -
/_example.jsp 2 -
/ioxi-o.php 2 -
/KKDxmM8CuZ0mqWuJWB.class.php 1 -
/X_Zjk4CAJYev5h3OR.htaccess 1 -
/framework.php 2 -
/wp-trackback.php 2 -
/msleaf.php8 2 -
/dashboard.php 2 -
/cmd-prow.jsp 2 -
/lyak.php 2 -
/8CIpxYuiEYsEnTUDGbr.nosocket.php 1 -
/functions.php 2 -
/p.php 2 -
/rqEMKg6A29XzpkorxWA.LuFix-983426.php 1 -
/ygJ7NjDSQjoibRUGKv.login-w.jsp 1 -
/b7Vhvz971fxJySg3m 1 -
/ZmRNd4CCNge4ZDE7w.test.php 1 -
/adminfuns.php 2 -
/Gvvr2XdhKV_M4jrpliM.tomcat.5.jsp 1 -
/manager10.jsp 2 -
/class-IXR-base64.php 2 -
/lfjaWnSAVaWnZZKhe.max6.jsp 1 -
/wp-links-opml.php 2 -
/pro.php 2 -
/wp-link.php 2 -
/YGi26bpnakA01BhbY.jsp 1 -
/db_model.php 2 -
/_r0BlwDp0cBLamgFjzN.wjpl95qv_mlr.php 1 -
/d.php 2 -
/OP5f_l_ktscLTJBV1F.Php7.php 1 -
/FAUIcgrUgXzsAhzN6.htaccess 1 -
/SNVDEdgTJosMY4cqoS.htaccess 1 -
/sign.php 2 -
/HelpSessions.jsp 2 -
/cms/wp-includes/wlwmanifest.xml 2 -
/rk2.php 2 -
/footer.html 2 -
/Wp-demand.php 2 -
/defaults.php.malware 2 -
/iZxVOXoaj4pADTflW2L.0.php 1 -
/testc.php 2 -
/1LutUleEZLzClzy22gY.js 1 -
/graphql/api 2 -
/retu1.php 2 -
/cron.php 2 -
/FDo6WAGfO18n82PjbFK.well-known 1 -
/graphql 2 -
/media/wp-includes/wlwmanifest.xml 2 -
/defaults.php 2 -
/config1.php 2 -
/psm.php 2 -
/menu.php 2 -
/system_log.php 2 -
/RYWDae5xAC8G5Lhlt.xhtml 1 -
/MqFlqGsOFvDr7b2L3.f35.php 1 -
/schallfuns.php 2 -
/qZVyMQO4lp36_KfJa3d.max6.jsp 1 -
/EpAoy4hjSUuLV5ipqA.test.php 1 -
/service.php 2 -
/sendmail.php 2 -
/click.php 2 -
/style.jsp 2 -
/swagger/v1/swagger.json 2 -
/xlHPVvJGKcriXaLiw.tmb35r2a3366 1 -
/readme.html 2 -
/soyi9wt57PeXrn3LX.0.php 1 -
/wp-login.php 2 -
/302.php 2 -
/6WhxPEmpalXiqt4vdlc.api.php 1 -
/0JMMpoqfqk6trFc8zv.html 1 -
/nb5AeYoPgCBacOKOr.LuFix-983426.php 1 -
/k.php 2 -
/postnews.php 2 -
/wp-login.php.malware 2 -
/100.php 2 -
/app.php 2 -
/0YQ059LJoUjGEDQfZFr.xhtml 1 -
/gel4y.php 2 -
/alfa-rex.php8 2 -
/SkoOfz_6HFz3neRHD.js 1 -
/Ut8Svs4hCBRlg3zXq.php8 1 -
/8MpWeU_7FsaMQIigrq.php.suspected 1 -
/api-docs/swagger.json 2 -
/expect.php 2 -
/nuan.php 2 -
/OGvQkrHtm9R4ZKmGa.aspx 1 -
/ans.php 2 -
/alwso.php 2 -
/aa.php 2 -
/urun.php 2 -
/alfditz.php 2 -
/swagger-ui.html 2 -
/yD5VBrWdS0y0PFVu4a.PHP 1 -
/upload.php 2 -
/product.php 2 -
/tTpfp1BDLbWDZyaWp.class.php 1 -
/uadmin.php 2 -
/ksa3EuivJRFkPd2c4f.php.suspected 1 -
/wp-load.php 2 -
/o.php 2 -
/data.php 2 -
/sitemap.xml 1 -
/caches.php 2 -
/Sm_ogYBETTerFDVuE 1 -
/plugin-install.php 2 -
/default.php 2 -
/about.php 2 -
/memberfuns.php 2 -
/c9W13JCNcFJI0szDQnI.nosocket.php 1 -
/cv2HAdk6yzVkspHrTm.max6.jsp 1 -
/web/wp-includes/wlwmanifest.xml 2 -
/home.html 2 -
/defense.php 2 -
/.login-n.jsp 2 -
/sql.jsp 2 -
/.f35.php 2 -
/server 2 -
/Ova-Simple.php 2 -
/options-reading.php 2 -
/wpo.php 2 -
/lock360.php 2 -
/NrptcZNUMNdnT15hmA.nosocket.php 1 -
/Lufix.php 2 -
/r8gpTcZbOAPNRq3PV.html 1 -
/fm.php 2 -
/wp-conflg.php 2 -
/viewer.php 2 -
/beence.php 2 -
/xbin10x.jsp 2 -
/output.php.malware 2 -
/hplfuns.php 2 -
/kI1X6LnjlGLjOmtDZ.api.php 1 -
/shell.php7 2 -
/shop/wp-includes/wlwmanifest.xml 2 -
/links.php 2 -
/webjars/swagger-ui/index.html 2 -
/WTj64N6Oc5Tjx0WgACK.tmb 1 -
/man.php7 2 -
/welcome.jsp 2 -
/field.php 2 -
/plugin-editor.php 2 -
/users.php 2 -
/fAqZg1JCioP7eiV43EK.ashx 1 -
/xmrlpc.php 2 -
/wso.php.malware 2 -
/favicon.jsp 2 -
/9dNqvXoAhzQSYdinZP.tomcat.5.jsp 1 -
/qlnMvTIjr0tlNImpg.html.php 1 -
/hDm7rDC9VJEI5kOLh.phtml 1 -
/leafmailer2.8.php 2 -
/M3tri-control.php 2 -
/inputs.php 2 -
/website/wp-includes/wlwmanifest.xml 2 -
/CIXYgdAO5bKdl7XrHx4.PhP7 1 -
/webstand.php 2 -
/greeting.jsp 2 -
/wp-log1n.php 2 -
/mailer.php7 2 -
/h8cUwe78P4VVK57LQ.ashx 1 -
/l2ldBQXXBtB1R5h8Uo2.php.malware 1 -
/readme.txt 2 -
/cp.php 2 -
/mah.php 2 -
/.test.php 2 -
/contact.php 2 -
/.tmb 2 -
/test/wp-includes/wlwmanifest.xml 2 -
/h6K7nFmddVM60qWyGn.htaccess 1 -
/blog/wp-includes/wlwmanifest.xml 2 -
/index1.php 2 -
/wp-pass.php 2 -
/v3.php 2 -
/u.php 2 -
/dn.jsp 2 -
/moPkkfylCCcWk6Tr3.php.malware 1 -
/wp-config.php 2 -
/wp-links.php 2 -
/9J3tCXDXrohBZWm7YKV 1 -
/wp2/wp-includes/wlwmanifest.xml 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 72
86.16.74.122 6 6 27697 20251130221855
209.50.228.92 4 4 40074 20251130221151
167.94.138.187 3 3 2325 20251124204131
128.90.30.45 3 3 2793 20251130214922
66.132.153.141 3 3 2325 20251126050014
45.154.98.70 3 3 7050 20251129175033
206.168.34.33 3 3 2112 20251123201944
23.137.105.102 3 3 6177 20251129011739
157.230.19.140 2 2 2081 20251123152848
209.38.248.17 2 2 3278 20251130132814
114.10.79.58 2 2 8344 20251124031750
182.6.7.220 2 2 3054 20251125051443
34.220.158.98 2 2 1400 20251123195300
113.196.56.150 2 2 2299 20251126002851
34.210.189.223 2 2 1408 20251123195307
92.40.205.152 2 2 8588 20251130214845
113.196.59.51 2 2 2302 20251126000410
103.187.22.22 2 2 128 20251123152718
23.178.112.108 1 1 87 20251123152732
185.247.137.166 1 1 775 20251125103032
35.152.61.109 1 1 5577 20251130214959
64.15.129.117 1 1 1377 20251123154608
64.15.129.110 1 1 1377 20251123154604
101.44.83.136 1 1 764 20251129120138
104.164.158.132 1 1 661 20251126052708
91.250.249.150 1 1 769 20251130220201
64.15.129.121 1 1 1377 20251123154610
159.89.220.43 1 1 695 20251130220312
103.122.92.46 1 1 625 20251124064232
111.7.100.27 1 1 921 20251129161555
103.115.187.233 1 1 657 20251126052654
143.244.52.38 1 1 769 20251130220440
103.129.196.181 1 1 764 20251129070603
111.218.1.235 1 1 931 20251130214911
159.89.216.7 1 1 695 20251130220312
106.75.167.138 1 2 9311 20251125223230
103.115.187.90 1 1 625 20251124085436
34.216.174.84 1 1 87 20251123152733
111.7.100.24 1 1 921 20251129161556
91.231.89.16 1 1 1377 20251123155930
142.111.108.150 1 1 629 20251124180033
104.164.158.77 1 1 629 20251125043342
104.164.158.204 1 1 625 20251125043341
159.203.105.28 1 1 775 20251125083300
23.80.89.36 1 1 769 20251130220443
103.115.186.134 1 1 561 20251124000255
8.219.166.179 1 1 772 20251125223205
89.188.76.176 1 1 931 20251130220313
52.221.241.208 1 1 87 20251123152733
104.197.69.115 0 1 411 
91.231.89.22 1 1 1377 20251123160137
123.160.223.79 1 2 1138 20251124082432
123.160.223.78 1 2 3072 20251124082443
103.115.187.98 1 1 625 20251124180033
104.164.158.105 1 1 629 20251124085429
192.175.111.246 1 1 1377 20251123154605
65.130.5.52 1 1 932 20251130214417
23.82.96.181 1 1 931 20251130220312
192.187.120.74 1 1 1601 20251125143914
114.79.0.36 1 1 1605 20251129052454
114.10.76.87 1 1 1527 20251126050941
18.221.40.193 1 1 87 20251123152733
34.123.170.104 0 2 2666 
34.72.176.129 1 3 4291 20251123152907
103.115.187.51 1 1 629 20251125181338
82.64.198.149 1 1 932 20251130214420
185.36.195.138 1 1 625 20251125090418
106.75.154.226 1 2 9307 20251125223229
103.115.187.93 1 1 625 20251125181337
13.48.10.182 1 1 87 20251123152733
142.111.108.166 1 1 565 20251124000254
188.166.152.171 1 1 775 20251124092545
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 6
20251123 23 28 23194 17
20251124 15 17 19913 12
20251125 13 15 28728 12
20251126 10 10 9771 6
20251129 11 11 18202 7
20251130 28 28 96361 16
END_DAY

# Session range - Number of visits
BEGIN_SESSION 5
0s-30s 64
30mn-1h 1
30s-2mn 2
2mn-5mn 1
15mn-30mn 2
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 9
/ 71 71371 52 49
/ww7.php 9 19255 4 5
/wsoqn.php 5 66348 1 3
/.well-known/acme-challenge/AwAhr2KNCHGV51wB8035cGr-02eLcALGCJ9z1DtazVE 5 435 5 5
/7ykahi6pvzdiidg9puqcCakc.php 3 10193 2 2
/.well-known/ 3 2307 3 3
/.well-known/acme-challenge/ 2 1390 2 2
/.well-known/acme-challenge/KNLEU276LQWDSPZLGJ6U03TNK2YLWGY5 1 64 1 0
/.well-known/acme-challenge/BGVWJICXN9T6TZ0SZW7KRG1F01TQMC1U 1 64 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 7
44-100 7
0-44 10
2K-5K 15
500-1K 72
5K+ 8
100-500 3
1K-2K 1507
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME