HEX
Server: LiteSpeed
System: Linux sv3.hami.host 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: j677 (1224)
PHP: 5.6.40
Disabled: show_source, system, shell_exec, passthru, exec, popen, proc_open, mail, socket_create, socket_create_listen, socket_create_pair, link, dl, openlog, syslog, stream_socket_server, curl_multi_init
Upload Files
File: //home/j677/tmp/awstats/ssl/awstats062026.coinbase-com.diplomat-sadabad.com.txt
AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202606 will be lost/reset.
# Last config file used to build this data file was /home/j677/tmp/awstats/ssl/awstats.coinbase-com.diplomat-sadabad.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2101                
POS_TIME 2779                
POS_VISITOR 28572               
POS_DAY 36769               
POS_DOMAIN 3595                
POS_LOGIN 4262                
POS_ROBOT 4417                
POS_WORMS 5082                
POS_EMAILSENDER 5213                
POS_EMAILRECEIVER 5356                
POS_SESSION 37350               
POS_FILESIZE 37777               
POS_REQUESTTIME 37919               
POS_SIDER 37557               
POS_FILETYPES 5491                
POS_DOWNLOADS 5650                
POS_OS 5698                
POS_BROWSER 6084                
POS_SCREENSIZE 7645                
POS_UNKNOWNREFERER 7719                
POS_UNKNOWNREFERERBROWSER 8312                
POS_ORIGIN 8653                
POS_SEREFERRALS 8795                
POS_PAGEREFS 8982                
POS_SEARCHWORDS 9130                
POS_KEYWORDS 9318                
POS_MISC 2443                
POS_ERRORS 9413                
POS_CLUSTER 4118                
POS_SIDER_404 9552                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260701065626 24 4485 10441773033701
FirstTime 20260607210234
LastTime 20260630233510
LastUpdate 20260806201007 24 0 18 5 0
TotalVisits 243                 
TotalUnique 212                 
MonthHostsKnown 0                   
MonthHostsUnknown 213                 
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
WindowsMediaPlayerSupport 0 0 0
PDFSupport 0 0 0
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
DirectorSupport 0 0 0
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 5 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 13 31 109711 53 67 136761
1 5 11 12640 158 169 289308
2 14 30 26311 1728 1739 1565181
3 8 20 16834 1054 1056 1495342
4 7 7 13937 4922 4926 4138270
5 2997 3011 34480018 673 683 1615960
6 65 71 3171839 494 497 577289
7 3 3 3897 611 614 761257
8 6 12 11347 113 117 196432
9 9 23 32910 50 50 50398
10 7 19 16637 15 20 37856
11 1 1 1298 41 48 40728
12 10 28 41827 54 66 31909
13 8 14 14524 3 5 2544
14 3 9 11021 9 10 14192
15 10 28 29995 92 122 70887
16 51 85 546328 12 27 8984
17 49 113 3995054 9 27 6350
18 34 78 436975 669 703 540358
19 13 19 205089 36 44 40698
20 838 858 14958331 18 31 18144
21 1846 1884 25264259 100 144 75190
22 170 178 1814528 24 29 20610
23 58 76 2675682 7 18 14215
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 35
gb 5680 5696 80974600
us 354 618 1357360
de 90 108 5245453
ru 26 46 83922
ip 11 11 14084
nl 8 8 41577
au 8 8 17194
ca 5 29 24559
fr 5 17 21589
in 4 4 11633
nz 3 9 12352
jp 3 9 10412
dk 2 2 7234
at 2 2 2602
ir 2 2 1297
rs 2 2 6896
za 2 2 6529
zz 1 1 3904
lt 1 1 3293
ao 1 1 3317
cn 1 1 1300
cl 1 1 1304
il 1 7 5818
ng 1 1 1302
do 1 1 3271
es 1 1 3271
cy 1 1 3240
cz 1 1 1108
hk 1 7 5816
ch 1 1 0
se 1 1 1300
pl 1 1 1105
lb 1 1 3240
gr 1 7 5817
bd 1 1 3293
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 15
bot[\s_+:,\.\;\/\\-] 895 3816846 20260613194258 0
validator 15 19488 20260616143449 0
Googlebot/ 10 12173 20260613194258 0
MJ12bot/ 6 6633 20260625224305 0
Go\-http\-client/ 4 2600 20260618170845 0
Baiduspider/ 3 3436 20260628195553 0
[\s_+:,\.\;\/\\-]bot 3 7041 20260626183400 0
scanner 3 5849 20260619104621 0
no_user_agent 2 6888 20260608205729 0
java 1 0 20260612225323 0
YandexBot/ 1 3916 20260613110752 0
CCBot/ 1 366 20260613194256 0
GPTBot/ 1 3916 20260613194258 0
seek 1 3915 20260613110752 0
Wget/ 1 3448 20260610163033 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
js 138 176198 0 0
php 5874 87041221 0 0
svg 183 66172 0 0
html 351 523837 0 0
css 63 83564 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 22
win7 6 6
android 2 2
androidoreo 8 2
androidmarshmallow 15 3
macosx12 3 3
winxp 1 1
macosx9 5 5
macosx13 1 1
unix 99 99
androidlollipop 1 1
linuxubuntu 3 3
android13 17 9
win10 6198 5944
macosx15 33 29
macosx 2 2
Unknown 28 28
linux 81 31
android10 16 16
androidpie 1 1
android12 2 2
androidnougat 15 3
ios_iphone 72 34
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 77
safari15.5 2 0
chrome106.0.0.0 1 1
edge12 5352 5336
chrome111.0.0.0 4 4
chrome131.0.0.0 4 4
msie10.0 6 6
firefox83.0 5 5
chrome146.0.0.0 22 10
chrome126.0.0.0 1 1
chrome112.0.5615.136 2 2
chrome120.0.0.0 118 118
chrome140.0.0.0 3 3
safari18.0 1 1
firefox112.0 14 6
chrome142.0.0.0 8 8
chrome122.0.0.0 25 7
safari12.4 1 1
safari17.3 1 1
safari16.0 1 1
chrome68.0.3440.70 1 1
chrome89.0.4389.105 1 1
chrome127.0.0.0 1 1
chrome147.0.0.0 3 3
firefox38.0 1 1
chrome146.0.7680.117 1 1
chrome117.0.5938.132 42 6
safari18.0.1 5 5
firefox137.0 3 3
Unknown 18 18
chrome144.0.0.0 8 2
safari10.0 10 2
chrome148.0.0.0 31 13
chrome124.0.0.0 195 191
chrome33.0.1750.152 5 5
chrome146.0.7680.115 1 1
firefox139.0 1 1
safari18.4 24 12
chrome145.0.0.0 5 5
chrome139.0.0.0 7 1
chrome59.0.3071.125 14 2
firefox149.0 1 1
firefox134.0 2 2
safari26.5 1 1
msie11.0 1 1
safari18.3 1 1
chrome135.0.0.0 10 4
chrome149.0.0.0 23 5
chrome109.0.0.0 1 1
chrome138.0.0.0 8 2
chrome143.0.0.0 95 83
chrome84.0.4147.89 6 6
safari16 2 2
chrome114.0.0.0 9 9
chrome54.0.2840.98 3 3
chrome137.0.0.0 2 2
firefox147.0 2 2
chrome67.0.3396.87 1 1
safari15.0 2 2
chrome91.0.4472.124 8 2
chrome67.0.3396.99 1 1
chrome135.0.6422.113 1 1
firefox142.0 7 7
netscape5.0 11 9
chrome68.0.3440.106 1 1
firefox109.0 45 9
chrome63.0.3239.132 236 236
mozilla 2 2
chrome112.0.0.0 6 4
chrome132.0.0.0 112 16
chrome40.0.0.0 1 1
chrome130.0.0.0 14 2
chrome110.0.0.0 2 2
safari17.4.1 1 1
chrome70.0.3538.80 1 1
chrome58.0.3029.110 2 2
safari 26 8
chrome138.0.7204.23 14 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 12
Mozilla/5.0_(compatible;) 20260628230936
Mozilla/5.0 20260617155406
Mozilla/5.0_(compatible;_probe/1.0) 20260616212917
Mozilla/5.0_(l9scan/2.0.3313e2232323e2531323e2330313;__https://leakix.net) 20260624034443
claw-watchtower/1.0 20260614185505
Python/3.12_aiohttp/3.13.5 20260618214729
okhttp/5.3.0 20260610164320
Mozilla/5.0_zgrab/0.x 20260623124723
Python/3.12_aiohttp/3.13.3 20260610163034
python-requests/2.31.0 20260620101920
HeartbeatMonitor/1.0 20260618213848
python-requests/2.32.5 20260613221657
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 7
python-requests/2.31.0 20260620101920
Python/3.12_aiohttp/3.13.3 20260610163034
python-requests/2.32.5 20260613221657
HeartbeatMonitor/1.0 20260618213848
okhttp/5.3.0 20260610164320
claw-watchtower/1.0 20260614185505
Python/3.12_aiohttp/3.13.5 20260618214729
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 786 798
From1 0 0
From2 14 14
From3 0 0
From4 5425 5797
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 2
www_google_com 4 4
bing_com_catchall 10 10
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 1
coinbase-com.diplomat-sadabad.com 4
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 1
coinbase-com.diplomat-sadabad.com 4
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
301 6 4770
403 8736 6858705
404 1339 981468
508 1 875
500 62 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 887
/home/j677/public_ftp 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/wp-blog.php 1 -
/log.php 1 -
/style.php 1 -
/ZGlpSWsxX6JYPP3oNj.jsp 1 -
/lib/.env 1 -
/.env.prod 3 -
/Jj7__bg7tO5bNyERvbJ.nosocket.php 1 -
/caches.php 1 -
/class-wp-text-diff-renderer-table.php 1 -
/index_old.php 1 -
/alf.php 1 -
/QuxaLEvt8kI.php 1 -
/panel/.env 1 -
/home/j677/lscache 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/xleet.php 1 -
/static/style/protect/index.js 2 http://www.coinbase-com.diplomat-sadabad.com/static/style/protect/index.js
/index3.php 1 -
/php.php 2 -
/mo.php 1 -
/WuWyhffJh3v7utLBq 1 -
/db.php 1 -
/php8.php 1 -
/cmd.php 1 -
/sGZC8ThUf_4NlUvzm.LuFix-983426.php 1 -
/ses/.env 1 -
/mah.php 1 -
/wpxfebns.php 1 -
/___proxy_subdomain_cpanel 2 -
/plugin-core.php 1 -
/OrvceX-87545456892.php 1 -
/.env.production.local 3 -
/firebase.json 2 -
/aRVzCstGFDPG2CnRGP.tmb 1 -
/oxs.php 1 -
/nest/.env 1 -
/site/.env 1 -
/996abdcb6a4ec3.php 1 -
/symlnk.php 1 -
/newdebugz.php 1 -
/2EDOY1r6lF7.php 1 -
/api/v2/.env 1 -
/page.php 1 -
/Heed.jsp 1 -
/NwjNbuyXy816zcreF5N.login-n.jsp 1 -
/greeting.jsp 1 -
/n3y9zvRUIw46BnhfN.txt 1 -
/6d_HVYSR8FRme9G8iEV.htaccess 1 -
/erp/.env 1 -
/prv.php 1 -
/3aeYw9Es3r46oaiqNc.index.php 1 -
/xleet-shell.php 1 -
/ws.php 1 -
/.docker/config.json 4 -
/one-lin.jsp 1 -
/server-info.php 1 -
/plugins.php 1 -
/user-edit.php 1 -
/news_parser.class.php 1 -
/wp-plugins.php 1 -
/graphql/api 2 -
/J_CHkjQ5OHpq2PTBQS.PhP7 1 -
/client_secret.json 4 https://www.google.com/search
/data.php 1 -
/@vite/env 2 -
/actuator/env 3 -
/M3tri-control.php 1 -
/tmp/phpinfo.php 1 -
/test/phpinfo.php 1 -
/options.php 1 -
/load.php 1 -
/beence.php 1 -
/style.jsp 1 -
/css.php 1 -
/d.php 1 -
/xml.php 1 -
/GPGsItdefault.php 1 -
/bulk/.env 1 -
/a3Ih_Fg9SMntRiIlO.phtml 1 -
/sql.jsp 1 -
/lol.php 1 -
/z.php 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/302.php 1 -
/db-update.php 1 -
/campaign/.env 1 -
/img.php 1 -
/atomlib.php 1 -
/.env.docker 1 -
/wp-class.php 1 -
/cp.php 1 -
/setup-config.php 1 -
/app/.env 1 -
/_rNd9xZ7kL3 15 -
/wp-config.php.bak 6 -
/wp-list.php 1 -
/wpxffeets.php 1 -
/LJrGLLZwtjUj4MIlrKR.xhtml 1 -
/socket.io/ 3 -
/Mnrt8e4RdnBncgHlpyz.js 1 -
/cms/.env 1 -
/local.php 1 -
/settings.php 1 -
/key.json 2 -
/.login-n.jsp 1 -
/indexs.php 1 -
/.claude/.credentials.json 1 -
/.env 18 -
/proxy-jsp.jsp 1 -
/wp-mail.php 1 -
/ws0.php 1 -
/12.php 1 -
/ini_db-update.php 1 -
/oqYzaLLw1kvs_sKjx.tomcat.5.jsp 1 -
/menu.php 1 -
/backend/.env 1 -
/ms-delete-site.php 1 -
/guXDkxMl17ziS1VbKER.update.php 1 -
/signup.php 1 -
/options-reading.php 1 -
/login 5 https://www.google.com/search
/wp-links-opml.php 1 -
/_next/static/chunks/1380-a504780fae82778d.js 4 -
/tmp/.env 1 -
/mailing/.env 1 -
/3index.php 1 -
/er.php 1 -
/wpdemogra.php 1 -
/admin.php.suspected 1 -
/KhNaXxPo9xBHJEheFpO 1 -
/uadm.php 1 -
/retu1.php 1 -
/sendmail.php 1 -
/q.php 1 -
/222.php 1 -
/server.js 2 -
/.tmb 1 -
/wp-register.php 1 -
/Ov-Simple1.php 1 -
/pi.php 1 -
/test-new.php 1 -
/adm.php 1 -
/mah.php.suspected 1 -
/sell.php7 1 -
/accesson.php 1 -
/pinfo.php 1 -
/w.php 1 -
/tools/.env 1 -
/admin/.env 1 -
/4KzbaFNqiJQ.php 1 -
/db_model.php 1 -
/database/.env 1 -
/bot-connect.js 2 http://www.coinbase-com.diplomat-sadabad.com/bot-connect.js
/NGFmkTZ8v3Fkm9Ha3.php.suspected 1 -
/psh.php 1 -
/la.php 1 -
/wso.php.malware 1 -
/wprsirdddt.php 1 -
/xmlrpc.php 1 -
/static/style/sys_files/index.js 2 http://www.coinbase-com.diplomat-sadabad.com/static/style/sys_files/index.js
/wso2.php 1 -
/nEng2zYotwcelsxgtv.php 1 -
/pricing 5 -
/anon.php 1 -
/sql.phtml 1 -
/165cuk0hTBmxxyVoOtC.jsp 1 -
/build/.env 1 -
/ORVX-udXWxG.php 1 -
/cache.php.suspected 1 -
/public_html/.env 1 -
/special.php 1 -
/k1LFm3Zjfxg.php 1 -
/product.php.malware 1 -
/blackrock.php 1 -
/011i.php 1 -
/dist/.env 1 -
/payment/index.php 9 -
/dist/server.js 2 -
/.env.preprod 1 -
/l.php 1 -
/shop/.env 1 -
/4TsoDsPmqzAGKHbpk.PHP 1 -
/releases/.env 1 -
/cjfuns.php 1 -
/lufix.php 1 -
/graphql 1 -
/stamena-WP.php 1 -
/go.php 1 -
/temp/.env 1 -
/index.php.suspected 1 -
/wp-atom.php 1 -
/shsspnwyl 2 -
/c34DG9hjpaXGThFO4IA.test.php 1 -
/Thumbs.jsp 1 -
/src/server.js 2 -
/lufx.php 1 -
/current/.env 1 -
/backups/.env 1 -
/G64Jz6CzQiXRynnMT.do 1 -
/wpzrstesn.php 1 -
/transactional/.env 1 -
/wp-admin.php 1 -
/v2/.env 1 -
/assets/js/qr_modal.js 2 -
/.env.dev 2 https://www.google.com/search
/lf.php 1 -
/inputs.php 1 -
/sparkpost/.env 1 -
/jUVwgFgg7tfbaSDPYW.php.malware 1 -
/d81Nk2BgHk1kJBm7MaP.well-known 1 -
/readme.html 1 -
/hh.php 1 -
/wp-trackback.php.suspected 1 -
/home/j677/cache 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/wp-cron.php 1 -
/form.php 1 -
/main.js 1 -
/admin 4 -
/favicon.jsp 1 -
/oSpPdqLZPvptFuRgE.login-n.jsp 1 -
/dn.jsp 1 -
/new.php 1 -
/api/config 17 -
/saudi.php 1 -
/apple-touch-icon.png 2 -
/postnews.php 1 -
/home/j677 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/tool.php 1 -
/.env.stage 1 -
/.env.staging 1 -
/blackkitty.php 1 -
/node/.env 1 -
/f35.php 1 -
/.login-w.jsp 1 -
/wp-settings.php 1 -
/class.api.php 1 -
/r.php 1 -
/code89765456478.php 1 -
/yj1vAJhNComNeQckXjs.login-w.jsp 1 -
/mai.php 1 -
/mailer.php 1 -
/unziper.php 1 -
/shell.php 1 -
/src/config.js 1 -
/wpzrsvtesn.php 1 -
/mELhy356juV.php 1 -
/dashboard 5 -
/app 5 -
/email/.env 1 -
/config.json 14 -
/idpost.jsp 1 -
/dev/phpinfo.php 1 -
/psm.phtml 1 -
/class-IXR-base64.php 1 -
/htdocs/.env 1 -
/ogegewAaJjQggD_NSU.shtml 1 -
/class.php 1 -
/id_win.jsp 1 -
/app.js 2 -
/gcp-credentials.json 2 -
/web/.env 1 -
/.env.swp 1 -
/mail.php 1 -
/goods.php 1 -
/preaproveWelcome.jsp 1 -
/wp-rss2.php 1 -
/wm_cfshared.jsp 1 -
/html/.env 1 -
/bOvqsaz1544KJfpU1.jsp 1 -
/console/ 2 -
/error.php 1 -
/apps/.env 1 -
/v1/.env 1 -
/LG5q_EDKVvaxV1qzKx.ashx 1 -
/xwvUH2b24svRhYHo8Z1.api.php 1 -
/options.php.malware 1 -
/wpmsrfa.php 1 -
/class-IXR-server.php 1 -
/a.php 1 -
/classwithtostring.php 1 -
/vendor/.env 1 -
/mLtZAQ5HIzuKvD9JF6z.LuFix-983426.php 1 -
/adminfuns.php 1 -
/click.php 1 -
/moon.php 1 -
/debug.php 1 -
/rest/.env 1 -
/logos.jsp 1 -
/q7OpQmQK9Ti6pgfctp.js 1 -
/502.php 1 -
/home/j677/logs 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/dev/.env 1 -
/alfa-rex.php8 1 -
/wp-configs.php 1 -
/SFUoYEKXfz5YoOLGU.well-known 1 -
/tunnel.aspx 1 -
/bb.php7 1 -
/checkout 3 https://www.google.com/search
/assets/js/message.js 2 http://www.coinbase-com.diplomat-sadabad.com/assets/js/message.js
/option.php 1 -
/schallfuns.php 1 -
/511.php 1 -
/mc.php 1 -
/wp-login.php.suspected 1 -
/client 4 -
/creates.php 1 -
/.env.remote 1 -
/send.php 1 -
/administrator/.env 1 -
/shell.jsp 1 -
/aa.php 1 -
/plugin.php 1 -
/BuwKM2WHIGC.php 1 -
/HelloHTML.jsp 1 -
/internal/.env 1 -
/wpc.php 1 -
/function.php 1 -
/secrets.json 11 -
/.env~ 1 -
/plugins.php.malware 1 -
/X2LRIEpReEs5TM26tX9.php8 1 -
/wp-trackback.php 1 -
/dos2unix.php 1 -
/.env.development.local 3 -
/17MwHpPbI0n2yXiSrm.xhtml 1 -
/T9wbrjv2YW5N7zGVj.index.php 1 -
/crm/.env 1 -
/.env.old 10 https://www.google.com/search
/wp-includes/css/buttons.css 1 -
/_next/static/chunks/app/layout-3468a04dc4c1e7e4.js 3 -
/c.php 1 -
/xhornoeu.php 1 -
/s2rtTImi_2g8LAQDev.test.php 1 -
/prevaricate.php 1 -
/shared/.env 1 -
/link-manager.php 1 -
/toCz5HBxmUYy3RkTHE.class.php 1 -
/1911.php 1 -
/tunnel.nosocket.php 1 -
/config.yml 10 https://www.google.com/search
/v.php 1 -
/item.php 1 -
/mDRp8qv3W0glY940B.js 1 -
/402.php 1 -
/GPpZYTYsjgBhsv636vJ.php 1 -
/w3llstore.php 1 -
/api/v1/.env 1 -
/comments.php 1 -
/HitCount.jsp 1 -
/1e1c59c27bd7de.php 1 -
/.env.development 3 -
/store/.env 1 -
/wp-load.php 1 -
/t.php 1 -
/js/lkk_ch.js 2 http://www.coinbase-com.diplomat-sadabad.com/js/lkk_ch.js
/expect.php 1 -
/backup/.env 1 -
/_environment 1 -
/jXFd7Z08NfCqdz0BD.html 1 -
/postmark/.env 1 -
/eddFHlMg6SWXO2q8c7n.shtml 1 -
/home.php 1 -
/.index.php 1 -
/y2thzlwwonmnfvazoklaeCakc.php 1 -
/pro.php 1 -
/sendgrid/.env 1 -
/class-IXR-date.php 1 -
/sAKhscf4E_hhX8Au_bf.do 1 -
/sitemap-index.xml 11 -
/uploads/.env 1 -
/radio.php 1 -
/wpsirdddt.php 1 -
/userfuns.php 1 -
/sitemap_index.xml 11 -
/_autoindex/assets/js/tablesort.js.map 2 -
/as.php 1 -
/es.php 1 -
/.env.test 4 -
/r5EaAER4UhGeWj9Q1.xhtml 1 -
/iisstart.aspx 1 -
/5BwCgkPXJpYqEVdTYn.do 1 -
/tool1.php 1 -
/old/phpinfo.php 1 -
/private/.env 1 -
/spacer.jsp 1 -
/service-account.json 2 -
/config/.env 1 -
/dropdown.php 1 -
/wp.php 1 -
/clsleakdyzm1.php 1 -
/assets/js/auth.js 2 http://www.coinbase-com.diplomat-sadabad.com/assets/js/auth.js
/uadmin.php 1 -
/xbin10x.jsp 1 -
/portal/.env 1 -
/JHvChm70Co4uxor44.htaccess 1 -
/min.php 1 -
/manager10.jsp 1 -
/api/domains/switch 3 -
/cloud.html 1 -
/about.php7 1 -
/nuxt/.env 1 -
/prestashop/.env 1 -
/mailgun/.env 1 -
/_example.jsp 1 -
/old/.env 1 -
/gSQb7zl9JA30c9ec2.update.php 1 -
/signup 5 -
/tmp.php 1 -
/app.php 1 -
/fai.php 1 -
/core/Database/.env 1 -
/frontend/.env 1 -
/drupal/.env 1 -
/cdY4L0nk6xKbmSqvLbd.wjpl95qv_mlr.php 1 -
/class_api.php 1 -
/about.php.suspected 1 -
/.dev.vars 7 https://www.google.com/search
/uploader.php 1 -
/assets/.env 1 -
/laravel/.env 1 -
/abc.php 1 -
/6n8_TemIS5toqFeF8.api.php 1 -
/packed.php 1 -
/saas/.env 1 -
/bless.php 1 -
/_next/static/WWvvzId0UHx43RHIwAs0H/_buildManifest.js 3 -
/kthusnjbc8ab0jiryls2jinCdefault.php 1 -
/media-new.php 1 -
/post.php 1 -
/foxx.php 1 -
/src/app.js 2 -
/leaf.php 1 -
/special.php.malware 1 -
/GA13.php 1 -
/www/.env 1 -
/public/phpinfo.php 1 -
/product.php 1 -
/server 1 -
/about 1 -
/privacy.php 1 -
/font-awesome.max6.jsp 1 -
/.test.php 1 -
/thoms.php 1 -
/smtp.php 1 -
/vps.php 1 -
/wp-config.php 7 -
/newsgroup.php 1 -
/n.php 1 -
/edit-comments.php 1 -
/l0g.jsp 1 -
/js.php 1 -
/nOXXHiCdmlqaonyxOQ.htaccess 1 -
/1337.txt 1 -
/phpinfo 1 -
/express/.env 1 -
/next/.env 1 -
/wp-signup.php 1 -
/ol.phtml 1 -
/graphql/.env 1 -
/info 1 -
/ini.php 1 -
/wpzarsna.php 1 -
/dist/app.js 1 -
/service/.env 1 -
/database.php 1 -
/task.php 1 -
/css/support_parent.css 2 http://www.coinbase-com.diplomat-sadabad.com/css/support_parent.css
/.wjpl95qv_mlr.php 1 -
/mvsgc.php.malware 4 -
/zz.php 1 -
/service.php 1 -
/include.php 1 -
/dashboard/.env 1 -
/yzefqL41Fr8yvibJD.PhP7 1 -
/en 2 -
/mah.php.malware 1 -
/admin-post.php 1 -
/html.php 1 -
/admin/phpinfo.php 1 -
/doiconvs.php 1 -
/config.yaml 8 -
/upload.jsp 1 -
/ci0NQMLcrjIkZZymRN8.aspx 1 -
/on.php 1 -
/info.php 3 -
/wp/.env 1 -
/en/.env 1 -
/Jennie007Greene.php 1 -
/mail/.env 1 -
/inbox.php 1 -
/delpaths.php 1 -
/lu4UVAMKagGJCKrSV.tmb 1 -
/.DS_Store 2 -
/core/app/.env 1 -
/xMX5I7aSGO1.php 1 -
/favic0n.jsp 1 -
/xm.php 1 -
/trace.axd 1 -
/id.jsp 1 -
/cron/.env 1 -
/got.php 1 -
/.pgpass 7 -
/.continue/config.json 7 https://www.google.com/search
/prod/.env 1 -
/tempfuns.php 1 -
/release/.env 1 -
/footer.php 1 -
/v3/.env 1 -
/redirect.php 1 -
/s8lNvqO9RoyGg040c.php7 1 -
/gateway/.env 1 -
/config.js 1 -
/smtp/phpinfo.php 1 -
/owl.php 1 -
/deploy/.env 1 -
/wpsirwdddt.php 1 -
/nlQzyFUlyXT8aAgrIyw.index.php 1 -
/yVqJlTZSeHnIt2aBr6.aspx 1 -
/wso.php.suspected 1 -
/media.php 1 -
/wpyii2.php 1 -
/8gPzX2Y_Kti7zp47ch.LuFix-983426.php 1 -
/1.php 1 -
/L5WsopsSPZurEcMrwSz.max6.jsp 1 -
/E2rCp8uoZV99ESa6sj 1 -
/robots.txt 58 -
/exapi/.env 1 -
/tester.php 1 -
/tunnel.tomcat.5.jsp 1 -
/wp-backup.update.php 1 -
/___proxy_subdomain_whm/login 2 -
/build/server.js 1 -
/ROdjWfdefault.php 1 -
/src/index.js 1 -
/.env.backup 12 -
/wprvsirdddt.php 1 -
/shell.php7 1 -
/sitemap.xml 12 -
/wpzdstesn.php 1 -
/scripts/.env 1 -
/pD9F15miLbMY6KPkw.php 1 -
/autoload_classmap.php 1 -
/ww.php 1 -
/phpversion.php 1 -
/backup.php 1 -
/30QFA3mG5pUTPt5KiR.php.suspected 1 -
/Wqoc6ag1TuN.php 1 -
/tunnel.ashx 1 -
/c99.php 1 -
/wp-Iogin.php 1 -
/SkgWeaKeiv5OE3TzxXt.tmb 1 -
/RKR1xKhfMW0n_YLDYUW.php7 1 -
/resources/.env 1 -
/leafmailer.php 1 -
/Q1e9E3WoTRVpdBf79s.tomcat.5.jsp 1 -
/check.php 1 -
/3fc9Jzt7Mkyfk7kkr.php8 1 -
/helper.php 1 -
/unzip.php 1 -
/HelpSessions.jsp 1 -
/testmail.php 1 -
/moduless.php 1 -
/edit.php 1 -
/access.php 1 -
/itkfLfxe3kEdAg1JIS.login-n.jsp 1 -
/psm.php7 1 -
/includes.php 1 -
/api/gql 1 -
/api/graphql 2 -
/_next/static/chunks/9219-3082f1333b16e105.js 4 -
/sitemaps/.env 1 -
/home/j677/mail 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/403.shtml 1 -
/.LuFix-983426.php 1 -
/options-discussion.php 1 -
/kCVYxbNG0_vFL0npvW.php8 1 -
/lab/.env 1 -
/view.php 1 -
/ljmgxhl5uujGTdixGq.api.php 1 -
/wpzavrrsna.php 1 -
/networks.php.malware 1 -
/symfony/.env 1 -
/feedback.php 1 -
/wp-login.php 2 -
/alfa.php 1 -
/src.php 1 -
/install.php 1 -
/caminho-ranger-32.php 1 -
/bootstrap/cache/config.php 3 https://www.google.com/search
/tunnel.jsp 1 -
/sw3.jsp 1 -
/BSnEHTCJ4dI3bo9wSj.update.php 1 -
/wso.php 1 -
/telescope/requests 1 -
/joomla/.env 1 -
/home 2 -
/wp-blog-header.php 1 -
/p.php 2 -
/cmd-pro.jsp 1 -
/plugin-install.php 1 -
/welcome.jsp 1 -
/stats.php 1 -
/bob.php 1 -
/old_phpinfo.php 1 -
/.vscode/sftp.json 1 -
/o.php 1 -
/js/twint_ch.js 2 -
/alfa-rex.php 1 -
/wp-admins.php 1 -
/themes.php 1 -
/6mtPyry5g1ay4KdEpN.well-known 1 -
/3.php 1 -
/mvsgc.php.suspected 2 -
/Login.php 1 -
/config.php 1 -
/KCpvlBSynPH.php 1 -
/.env.local 15 -
/wpzabrsna.php 1 -
/wp-app.php 1 -
/credentials.json 2 -
/mailer.php7 1 -
/wp-comments-post.php 1 -
/jsfshell.xhtml 1 -
/brevo/.env 1 -
/admin-ajax.php 1 -
/wpstense.php 1 -
/content.php 1 -
/license.php 1 -
/lulzm.php 1 -
/YSp0s3wrRVRMh8Ja_B.wjpl95qv_mlr.php 1 -
/orven-5645648745.php 1 -
/SvXu5VnMu64uGpQ5XW.txt 1 -
/start.php 1 -
/siteheads.php 1 -
/src/api.js 1 -
/3cw96nhzkq2wmkznqoCdefault.php 1 -
/notify/.env 1 -
/firebase-adminsdk.json 2 -
/notifications/.env 1 -
/api.js 1 -
/link.php 1 -
/raw.php 1 -
/test1.php 1 -
/_phpinfo.php 1 -
/WKSJdEHG0rYAtsYK3.class.php 1 -
/smtp/.env 1 -
/newsletter/.env 1 -
/RMH9jPsVGQo.php 1 -
/ini_db_model.php 1 -
/u.php 1 -
/config.env 2 -
/m.php 1 -
/.env.bak 7 -
/lock360.php 1 -
/kA1QNepHdlc.php 1 -
/wp-log1n.php 1 -
/api 2 -
/head.php 1 -
/2index.php 1 -
/live/.env 1 -
/.npmrc 10 https://www.google.com/search
/xhornoeu.update.php 1 -
/DioDgNNjzTpV4_cL4.nosocket.php 1 -
/KAnwWUZsLhpMttEaGW.max6.jsp 1 -
/favicon.png 2 -
/about.php 1 -
/filefuns.php 1 -
/home/j677/access-logs 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/about.php.malware 1 -
/.env.production 16 https://www.google.com/search
/server.cjs 1 -
/defaults.php.malware 1 -
/4eeK31wowpxRlASWs.login-w.jsp 1 -
/options-discussion.php.malware 1 -
/mail/phpinfo.php 1 -
/test2.php 1 -
/pages.php 1 -
/system.php 1 -
/hosting/phpinfo.php 1 -
/Z2diadRURq6UfB5Kylk.tomcat.5.jsp 1 -
/cpanel/phpinfo.php 1 -
/504.php 1 -
/profile.php 1 -
/wpstart.php 1 -
/Wp-demand.php 1 -
/bb.php 1 -
/options-style.php 1 -
/i.php 2 -
/public/.env 1 -
/header.php 1 -
/alfa-rex.PhP7 1 -
/alwso.php 1 -
/y.php 1 -
/B4I3RcLqZ5Swtgitz6.html 1 -
/mmm.php 1 -
/upload.php 1 -
/tunnel.js 1 -
/home/j677/etc 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/s.php 1 -
/1975.php 1 -
/input.php 1 -
/auth.php 1 -
/system_log.php 1 -
/file.php 1 -
/xmlrpc.php.malware 1 -
/rmUJWIu8rbs3hUGlV.ashx 1 -
/SukcqWGrF2Skz2mxI.php.malware 1 -
/phpinfo.php 1 -
/wp-activites.php 1 -
/man.php7 1 -
/wpzarrsna.php 1 -
/search.php 1 -
/functions.php 1 -
/server/.env 1 -
/1fj005lhyjfrsfqowCdefault.php 1 -
/engine.php 1 -
/orvxv4.php 1 -
/cmd-prow.jsp 1 -
/yeniurun.php 1 -
/memberfuns.php 1 -
/update.php 1 -
/index.js 1 -
/wordpress/.env 1 -
/simple.php 1 -
/rzIUt95o5Xqqz6sPbU.php7 1 -
/project/.env 1 -
/delcheck.php 1 -
/alfa-rex.PHP 1 -
/defaults.php 1 -
/login.action 1 -
/antineutrino.php 1 -
/network.php 1 -
/secrets.yaml 10 -
/dashboard.php 1 -
/php-info.php 1 -
/api/env 2 -
/networks.php 1 -
/x.php 1 -
/default.php 1 -
/s/3313e2232323e2531323e2330313/_/ 1 -
/.env.ci 1 -
/wp-login.php.malware 1 -
/staging/.env 1 -
/RoQDyb2tkQQuXVrA4Is.html 1 -
/sW8W3Bf_NPpzVVSU1.aspx 1 -
/user-new.php 1 -
/v2.php 1 -
/storage/.env 1 -
/404.php 1 -
/I9xND9ja3lWHLFJwOvY.php.malware 1 -
/aaa.php 1 -
/b.php 1 -
/pPJ2RuEG1lC.php 1 -
/login.php 1 -
/_profiler/phpinfo 1 -
/users.php 1 -
/orvxmailer.php 1 -
/YxPQuY9K3mKI5eamx.wjpl95qv_mlr.php 1 -
/docindex.php 1 -
/src/.env 3 -
/Qp2vT5xozHBdcUj6qK.PHP 1 -
/module.php 1 -
/readme.txt 1 -
/userLoginAction.do 1 -
/EdXF5ZArV7UVqEE0WQ.phtml 1 -
/microservice/.env 1 -
/wvzmubrv.php 1 -
/wp-config-sample.php 1 -
/wp-scripts.php 1 -
/wpzstesn.php 1 -
/wp-config.php.malware 1 -
/DownloadDocStepsAction.do 1 -
/upgrade.php 1 -
/nuan.php 1 -
/user-info.php 1 -
/pdlGQkyJSrg3dB4JJRy.phtml 1 -
/C6c6Xl_Hw5g2dhH4Xg4.php.suspected 1 -
/admin-footer.php 1 -
/wp-commentsrssl.php 1 -
/shopify/.env 1 -
/mailjet/.env 1 -
/.env.example 1 -
/settings 5 -
/.env.dist 11 -
/unzipper.php 1 -
/index.php.malware 1 -
/.pypirc 10 https://www.google.com/search
/h2cq_08W5yOA8w8Sy.test.php 1 -
/mandrill/.env 1 -
/index.php 1 -
/term.php 1 -
/.env.uat 1 -
/themes7.php 1 -
/sender/.env 1 -
/shell20211028.php 1 -
/wprxffeets.php 1 -
/2020.php 1 -
/wp-activate.php 1 -
/tunnel.php 1 -
/f.php 1 -
/TpdNShW1a0JTcWeiKbd.ashx 1 -
/bWOclDsdCJp.php 1 -
/soul.php 1 -
/index.html 1 -
/xoss.php 1 -
/webroot/index.php/_environment 1 -
/4.php 1 -
/Sfn2kmdefault.php 1 -
/plugin-editor.php 1 -
/eSNLxxtvFwDb8z_MEvD.txt 1 -
/PYmtwJEoKEzI6Yvsp3.login-w.jsp 1 -
/logs.php 1 -
/moddofuns.php 1 -
/eix3tum9nwpmlb8thh54Cdefault.php 1 -
/wp-editor.php 1 -
/simple-backdoor.php 1 -
/20170219.jsp 1 -
/alfa-rex.php7 1 -
/2me_mWkU2KUWM7_yj.shtml 1 -
/ms-edit.php 1 -
/test.php 2 -
/output.php 1 -
/to.php 1 -
/client/.env 1 -
/magento/.env 1 -
/5BTOfbMdeH1.php 1 -
/urun.php 1 -
/api/.env 1 -
/ss.php 1 -
/priv.php 1 -
/wprxvffeets.php 1 -
/get.php 1 -
/hplfuns.php 1 -
/.vscode/settings.json 6 https://www.google.com/search
/cronlab/.env 1 -
/home/j677/directadmin_backups 1 https://www.coinbase-com.diplomat-sadabad.com/mvsgc.php
/export.php 1 -
/.aws/credentials 11 -
/0day.php 1 -
/logout.php 1 -
/core/.env 1 -
/tools.php 1 -
/wpxffteets.php 1 -
/admin.php 1 -
/zolando.php 1 -
/alex.php 1 -
/shop.php 1 -
/fWAQw97_iryaIDMJa.max6.jsp 1 -
/_autoindex/assets/js/tablesort.number.js.map 2 -
/admin.php.malware 1 -
/wp-l0gin.php 1 -
/lu.php 1 -
/msok.aspx 1 -
/up.php 1 -
/mailer/.env 1 -
/.cursor/mcp.json 6 -
/noRAY_cVBIHs3IK1wiB.class.php 1 -
/sym403.php 1 -
/.env.sample 3 -
/keyfile.json 2 -
/index2.php 1 -
/403.php 1 -
/account.json 2 -
/WuoMxmdLJmDXLQ3N7yT.PhP7 1 -
/upfile.php 1 -
/install.php.malware 1 -
/desk.php 1 -
/debug/default/view 2 -
/google-credentials.json 2 -
/chosen.php 1 -
/xs.php 1 -
/import.php 1 -
/cache.php 1 -
/Caterpillar.aspx 1 -
/psnlink/.env 1 -
/sell.php 1 -
/DKfjRDaxzBcBG5QLF_6.PHP 1 -
/v2/_catalog 2 -
/.env.save 4 https://www.google.com/search
/classfuns.php 1 -
/cache.php.malware 1 -
/buy.php 1 -
/.env.live 1 -
/appsettings.json 2 -
/epinyins.php 1 -
/4S1brgE0iUvRZoRh1p.nosocket.php 1 -
/server-status.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 213
51.195.90.123 3047 3055 37609419 20260608065436
217.182.76.73 2624 2632 43344427 20260609000218
65.21.124.77 103 105 503871 20260607210837
107.189.7.156 87 89 404883 20260607220950
89.244.95.143 73 79 5151204 20260610212057
2a06:98c0:3600::103 10 10 12979 20260630133402
34.248.137.227 9 27 24081 20260615123325
52.16.245.145 6 18 16053 20260615203054
84.147.58.237 6 12 54290 20260609215640
80.90.189.79 6 6 7886 20260610163034
46.101.70.221 5 5 37673 20260624095859
34.98.143.167 5 7 5452 20260618164837
139.59.136.184 4 4 6042 20260607210446
3.80.221.10 4 4 5215 20260610160908
152.55.180.48 4 4 4432 20260630134914
195.178.110.48 4 4 5194 20260627034507
45.149.78.11 3 3 10336 20260629174045
34.98.143.165 3 6 1427 20260618164836
54.149.85.109 3 3 3897 20260618215400
143.198.220.27 3 3 16205 20260627055457
93.216.74.26 3 9 24273 20260608122252
80.94.92.7 3 3 3903 20260626074308
139.99.8.57 3 3 11748 20260628143918
152.55.180.35 2 2 2216 20260630233510
18.213.2.53 2 8 7117 20260610164410
205.169.39.22 1 7 5817 20260618180925
44.242.212.209 1 1 3290 20260619050809
205.169.39.6 1 7 5815 20260618174921
95.181.235.57 1 7 5818 20260612233200
178.171.15.220 1 1 3292 20260610170931
165.227.117.188 1 1 1299 20260613160250
217.181.88.165 2 2 2216 20260627042031
82.139.195.6 1 1 0 20260618181523
87.106.134.37 1 1 1108 20260628230936
164.90.241.135 1 1 3240 20260607211139
3.18.186.238 1 1 1297 20260627210123
170.247.222.168 1 1 3448 20260610155924
165.227.113.1 1 1 1302 20260617051456
45.11.172.54 1 1 3293 20260607211129
79.127.252.66 1 1 1108 20260612183634
96.44.159.148 1 1 3240 20260607211132
2a01:4f9:6b:1aa6::2 1 1 1105 20260611000335
208.84.100.97 1 1 1299 20260611220013
141.227.137.47 1 1 3240 20260607211121
150.5.155.123 1 1 1302 20260610192603
185.242.177.67 1 1 1106 20260617081258
75.156.81.80 1 7 5813 20260610172900
162.220.234.153 2 2 2216 20260630184854
157.230.115.130 1 1 1297 20260621173947
168.158.245.208 1 1 3316 20260610171109
168.158.23.48 1 1 0 20260610170927
44.246.127.179 1 7 5816 20260618214142
34.211.25.1 1 7 5815 20260618170359
81.53.36.105 1 1 3271 20260607211135
212.38.189.186 1 1 3293 20260607211125
38.213.6.95 1 1 3317 20260629010254
23.82.99.148 1 1 0 20260607210612
45.9.168.96 1 1 1299 20260616073221
84.233.216.142 1 1 3240 20260609185105
167.99.88.20 1 1 1297 20260619155538
136.62.214.56 1 7 5812 20260612094805
150.5.153.253 1 7 5817 20260610192608
149.22.85.88 1 1 3240 20260607211133
93.159.230.28 1 1 1297 20260630202729
49.199.153.249 1 1 3293 20260607211126
149.119.53.234 1 1 3293 20260607211121
185.135.77.63 1 1 3905 20260607210704
173.239.198.19 1 1 1299 20260612040220
176.65.139.231 1 1 3444 20260620233810
2.56.72.45 1 7 5818 20260610161807
185.25.49.104 1 1 3293 20260607211122
185.212.171.136 2 2 7145 20260607211131
162.43.188.69 1 1 3294 20260609185107
194.5.83.95 1 7 5817 20260610160144
216.231.32.105 1 1 1111 20260613022133
168.158.195.1 1 7 5813 20260610171132
16.59.38.111 1 1 1299 20260612025626
34.98.143.166 0 3 2459 
143.244.47.86 1 1 0 20260619033741
47.166.35.70 1 7 5818 20260616124405
75.72.87.253 1 7 5816 20260619001440
172.121.41.111 1 1 1301 20260608022107
192.42.116.18 1 1 1300 20260609101224
52.14.100.73 1 1 1299 20260618164824
205.169.39.16 1 7 5817 20260618180922
146.190.221.88 1 1 0 20260620101920
205.169.39.5 1 7 5815 20260618174919
58.251.94.154 1 1 1300 20260619140015
3.143.144.31 1 1 1302 20260618170844
5.78.158.121 1 1 0 20260614185505
18.212.79.68 2 8 7110 20260607213820
52.27.44.164 1 7 5815 20260611025308
5.196.129.159 1 7 5817 20260618185107
158.173.167.14 1 1 3317 20260607211128
52.230.100.152 1 1 1300 20260608003334
73.19.149.64 1 7 5816 20260618233234
149.102.227.90 1 1 1301 20260608102123
158.173.77.45 1 1 3917 20260612040242
104.244.210.58 1 1 1300 20260608005410
134.209.191.184 1 1 1297 20260629163405
91.231.89.126 1 1 3448 20260607212715
136.36.143.231 1 1 687 20260608005448
92.119.36.122 1 7 5817 20260610160148
46.101.59.90 1 1 1303 20260615051737
97.156.168.201 1 1 0 20260610173010
3.15.200.176 2 2 2598 20260612025633
46.225.209.92 1 1 1297 20260618214729
164.92.130.111 1 1 1300 20260619041057
156.59.195.226 2 2 6533 20260607211136
91.231.89.20 1 1 3448 20260607213431
86.153.49.200 1 1 3240 20260607211135
54.144.190.193 1 1 1301 20260622223353
197.242.156.69 2 2 6529 20260607211134
185.220.101.9 1 1 1298 20260608011637
47.134.196.130 1 7 5818 20260616222613
3.238.75.30 1 1 3444 20260616212917
154.205.154.21 1 1 3317 20260607211133
155.2.194.77 1 1 3942 20260618181532
35.161.55.221 1 7 5818 20260615202029
146.70.132.32 2 2 2208 20260618213848
3.217.128.115 1 1 1299 20260629222548
93.159.230.85 1 1 1299 20260615162611
54.70.53.60 1 7 5815 20260612025813
212.30.33.234 1 1 3240 20260607211133
173.212.44.63 1 7 5819 20260609034044
149.22.90.205 1 1 1304 20260610161231
185.209.196.229 1 1 1300 20260608004338
65.108.186.9 1 1 3444 20260607210538
165.84.191.180 1 7 5819 20260609001641
107.149.152.25 1 1 3903 20260612040243
159.26.110.181 1 1 1299 20260618175423
97.100.164.83 1 7 5816 20260607212617
149.22.80.150 1 1 1297 20260607210536
144.126.240.247 1 1 3294 20260609185117
205.169.39.27 1 7 5817 20260618180939
67.161.220.100 1 7 5818 20260608140710
185.213.174.98 1 3 3968 20260618090611
34.222.159.150 1 1 0 20260614005554
16.147.20.87 1 7 5814 20260613230644
98.89.175.179 1 1 1301 20260624164047
23.82.96.181 1 1 1107 20260610102057
52.34.76.65 1 7 5817 20260618170844
217.119.65.38 1 1 1105 20260611024702
128.90.59.193 1 1 3240 20260607211132
193.189.100.205 1 1 1300 20260609092821
134.41.56.197 1 1 0 20260610173150
44.247.181.160 1 7 5814 20260607211150
146.70.191.108 1 1 3240 20260607211131
68.64.151.246 1 1 1107 20260618200302
163.47.21.21 1 1 3240 20260607211131
18.225.54.163 2 2 2601 20260618170845
216.9.224.107 1 1 3448 20260612091143
45.148.10.245 1 1 1297 20260607210234
46.199.75.109 1 1 3240 20260607211135
3.82.24.13 1 7 5818 20260614172524
198.44.133.13 1 1 0 20260618200915
38.189.97.244 1 7 5817 20260611131015
205.169.39.25 1 3 2610 20260618180922
165.232.99.183 1 1 1299 20260617162506
205.169.39.15 2 14 11630 20260618174922
198.50.163.54 1 7 5812 20260612102439
41.216.188.176 1 1 1302 20260617155406
137.74.81.189 1 7 5816 20260618184756
165.232.35.220 1 1 1300 20260620103343
203.188.189.75 1 1 3293 20260607211134
35.187.132.35 1 3 1107 20260618170848
141.255.166.195 1 1 0 20260607210610
205.169.39.7 1 1 1299 20260616151226
209.38.213.245 1 1 1299 20260615154459
81.217.16.32 2 2 2602 20260614172318
94.198.130.211 1 1 1104 20260613225622
142.93.155.41 1 1 1298 20260624115732
44.244.37.188 1 7 5812 20260618215138
149.22.83.98 2 2 4348 20260612123915
191.101.217.226 1 1 1304 20260610161307
35.187.132.34 2 4 3566 20260618170854
205.169.39.18 1 7 5817 20260618180922
97.113.6.250 1 7 5816 20260619004716
35.187.132.33 1 1 0 20260618170853
203.57.50.250 1 1 3317 20260607211134
185.236.203.99 1 7 5817 20260610155859
143.110.216.239 1 1 1302 20260610133109
172.104.186.73 1 1 3271 20260607211132
54.70.212.222 1 1 3292 20260610204757
65.110.40.240 1 1 1298 20260626065713
152.55.180.8 1 1 1108 20260630041041
205.169.39.23 1 7 5815 20260612035645
98.159.234.205 1 7 5817 20260611105504
143.244.47.83 1 1 0 20260608030957
185.242.177.64 1 1 1107 20260607210446
185.227.134.106 1 1 26569 20260609185732
18.116.41.49 1 1 1299 20260612025626
149.75.102.116 1 7 5812 20260612091641
134.209.25.199 2 2 2602 20260624034443
146.70.203.26 1 1 3317 20260607211123
23.146.243.203 1 1 3904 20260607210612
167.71.4.2 1 1 1299 20260611175659
44.244.248.229 1 7 5814 20260612050811
139.59.34.200 1 1 1302 20260611054508
62.72.47.105 2 2 7231 20260620162207
74.80.181.158 1 1 3316 20260609185118
209.38.241.146 1 1 1299 20260611163107
106.161.65.206 1 1 3293 20260607211128
44.251.134.168 1 7 5817 20260610180600
155.2.228.196 2 14 13126 20260610155922
62.106.95.147 1 1 3444 20260616094924
176.100.133.200 1 7 5817 20260610175439
152.0.162.28 1 1 3271 20260607211124
18.218.232.208 1 1 1302 20260618170844
82.223.49.57 1 1 3271 20260607211120
91.195.201.52 1 1 1301 20260623124723
65.108.62.161 1 1 3448 20260607210536
18.133.114.231 1 1 1302 20260613221657
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 23
20260607 244 266 1074125 49
20260608 5680 5708 80909300 13
20260609 21 39 221378 12
20260610 108 186 5256561 27
20260611 11 29 27462 11
20260612 22 68 66646 19
20260613 6 12 11929 6
20260614 13 31 32316 9
20260615 14 38 35102 8
20260616 8 20 23720 8
20260617 4 4 5009 4
20260618 40 142 122111 33
20260619 7 19 18819 7
20260620 6 6 11252 5
20260621 2 2 2594 2
20260622 1 1 1301 1
20260623 2 2 2599 2
20260624 6 6 13028 5
20260626 5 5 6301 4
20260627 8 8 22505 5
20260628 2 2 5011 2
20260629 4 4 9357 4
20260630 11 11 12566 7
END_DAY

# Session range - Number of visits
BEGIN_SESSION 7
0s-30s 227
5mn-15mn 3
1h+ 3
30s-2mn 6
15mn-30mn 2
2mn-5mn 1
30mn-1h 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 6
/mvsgc.php 5385 72173497 28 34
/xhgwz.php 465 14854113 27 26
/ 289 464433 178 171
/cgi-bin/ 62 59404 1 1
/txets.php 23 0 9 10
/webmail/phpinfo.php 1 13611 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
0-44 2937
500-1K 10076
5K+ 3105
2K-5K 1123
100-500 241
1K-2K 339
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME