AWSTATS DATA FILE 5.9 (build 1.605)
# If you remove this file, all statistics for date 2005-01 will be lost/reset.

# Position (offset in bytes) in this file of beginning of each section
# for direct I/O access. If you made changes somewhere in this file, you
# should also remove completely the MAP section (AWStats will rewrite it
# at next update).
BEGIN_MAP 27
POS_GENERAL 1837                
POS_TIME 2414                
POS_VISITOR 25932               
POS_DAY 26359               
POS_DOMAIN 2771                
POS_LOGIN 2998                
POS_ROBOT 3132                
POS_WORMS 26635               
POS_EMAILSENDER 3291                
POS_EMAILRECEIVER 3434                
POS_SESSION 26695               
POS_SIDER 26851               
POS_FILETYPES 3569                
POS_OS 3636                
POS_BROWSER 3702                
POS_SCREENSIZE 3800                
POS_UNKNOWNREFERER 3874                
POS_UNKNOWNREFERERBROWSER 3978                
POS_ORIGIN 4077                
POS_SEREFERRALS 4209                
POS_PAGEREFS 4353                
POS_SEARCHWORDS 4566                
POS_KEYWORDS 4718                
POS_MISC 2164                
POS_ERRORS 4777                
POS_CLUSTER 2854                
POS_SIDER_404 4895                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of old records - Nb of new records - Nb of corrupted - Nb of dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20050126005457 979 193011 13876145460
FirstTime 0
LastTime 20050126005457
LastUpdate 20050126040231 3 0 1 2 0
TotalVisits 10                  
TotalUnique 9                   
MonthHostsKnown 0                   
MonthHostsUnknown 9                   
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 9
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 0 0
RealPlayerSupport 0 0 0
TotalMisc 0 0 0
DirectorSupport 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth
BEGIN_TIME 24
0 2 2 71
1 0 0 0
2 0 0 0
3 0 0 0
4 0 0 0
5 0 0 0
6 0 0 0
7 0 0 0
8 1 1 7322
9 0 0 0
10 0 0 0
11 22 22 131867
12 0 0 0
13 0 0 0
14 1 1 7323
15 0 0 0
16 1 1 71
17 0 0 0
18 1 1 7321
19 0 0 0
20 0 0 0
21 1 1 7322
22 0 0 0
23 1 1 7322
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 10 first Pages must be first (order not required for others)
BEGIN_DOMAIN 1
ip 30 30 168619
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit
# The 10 first Hits must be first (order not required for others)
BEGIN_ROBOT 1
netcraft 1 0 20050101031214
END_ROBOT

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 30 168619 0 0
END_FILETYPES

# OS ID - Hits
BEGIN_OS 3
unix 14
win98 3
Unknown 13
END_OS

# Browser ID - Hits
BEGIN_BROWSER 4
msie4.01 1
msie5.0 2
netscape4.75 14
Unknown 13
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 1
- 20050126005457
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
- 20050126005457
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 28 28
From1 0 0
From2 0 0
From3 2 2
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 10 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 2
http://www.i-horny.com 1 1
http://friendfinder.com/go/b37129 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
403 11 0
302 1 0
400 48 3963
404 853 19715
END_ERRORS

# URL with 404 errors - Hits - Last URL referer
BEGIN_SIDER_404 807
/........../boot.ini 1 -
/iisadmpwd/anot3.htr 1 -
/.../boot.ini 1 -
/cgi-bin/campas 1 -
/incoming/ 1 -
/Stats/ 1 -
/_vti_pvt/service.pwd 1 -
/null.idq 1 -
/domcfg.nsf 1 -
/phpgroupware/inc/phpgwapi/phpgw.inc.php 1 -
/cgi-bin/cgitest.exe 1 -
/wstats/ 1 -
/cfappman/ 1 -
/cgi-bin/build.cgi 1 -
/install/ 1 -
/cfdocs/expelval/displayopenedfile.cfm 1 -
/cgi-bin/E-Guest_sign.pl 1 -
/cgi-bin/auktion.pl 1 -
/cgi-bin/iisadmpwd/anot.htr 1 -
/..\\..\\..\\autoexec.bat 1 -
/wwwboard.pl 1 -
/users/scripts/submit.cgi 1 -
/sample.asp 1 -
/cgi-bin/wconsole.dll 1 -
/include/css.css 1 -
/_vti_pvt%5cwriteto.cnf 1 -
/search 1 -
/ports/ 1 -
/cgi-bin/environ.cgi 1 -
/pbserver/pbserver.dll 1 -
/cgi-bin/wrap.cgi 1 -
/index.php.bak 1 -
/databases/ 1 -
/scripts/Fpadmcgi.exe 1 -
/sex/ 1 -
/scripts 2 -
/_private/register.txt 1 -
/test/ 1 -
/getFile.cfm 1 -
/cgi-bin/wwwboard.pl 1 -
/cfdocs/expeval/openfile.cfm 1 -
/............../boot.ini 1 -
/cgi-bin/_vti_cnf 1 -
/cpqlogin.htm 1 -
/administrator/ 1 -
/cgi-bin/mailnews.cgi 1 -
/_vti_pvt%5cbotinfs.cnf 1 -
/sawmill 1 -
/php/ 1 -
/pccsmysqladm/incs/dbconnect.inc 2 -
/stats.htm 1 -
/cgi-win 1 -
/search97cgi/vtopic 1 -
/scripts/..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af..%e0%80%af../winnt/system32/cmd.exe 1 -
/cgi-bin/guestbook.pl 1 -
/passwd.txt 1 -
/scripts/c32web.exe/ChangeAdminPassword 1 -
/cgi-bin/php 1 -
/_vti_bin/_vti_aut/author.dll 2 -
/scripts//.%252e/.%252e/.%252e/.%252e/.%252e/./winnt/system32/cmd.exe 1 -
/cgi-bin/search/tidfinder.cgi 1 -
/cgi-bin/query 1 -
/index.php~ 1 -
/cgi-bin/ad.cgi 1 -
/cfdocs/exampleapp/email/application.cfm 1 -
/WebShop/logs/cc.txt 1 -
/scripts/fpcount.exe 1 -
/cgi-bin/bb-hist.sh 1 -
/_vti_pvt%5cbots.cnf 1 -
/inc/ 1 -
/cgi-bin/perl.exe 1 -
/library/ 1 -
/accept/ 1 -
/logfile.htm 1 -
/scripts/.._../winnt/system32/cmd.exe 1 -
/cgi-bin/alibaba.pl 1 -
/admisapi/fpadmin.htm 1 -
/cfusion/cfapps/security/data/realm.mdb 1 -
/cfdocs/mole.cfm 1 -
/..\\\\..\\\\..\\winnt\\repair\\sam._ 1 -
/pds/ 1 -
/cgi-bin/textcounter.pl 1 -
/cgi-bin/everythingform.cgi 1 -
/_vti_bin/_vti_aut/dvwssr.dll 1 -
/tree.dat 1 -
/cfdocs/cfmlsyntaxcheck.cfm 1 -
/cgi-bin/view-source 1 -
/cgi-bin/classifieds.cgi 1 -
/cgi-bin/.cobalt/siteUserMod/siteUserMod.cgi 1 -
/_vti_bin/_vti_aut/fp30reg.dll 2 -
/cgi-bin/htgrep 1 -
/cgi-bin/calender_admin.pl 1 -
/test/test.cgi 1 -
/snort2html.html 1 -
/default.asp\\\\ 1 -
/msadc/.._../winnt/system32/cmd.exe 1 -
/ultraboard.pl 1 -
/cgi-bin/admin/admin 1 -
/cgi-bin/register.cgi 1 -
/submit.php 1 -
/cgi-bin/newsdesk.cgi 1 -
/scripts/submit.cgi 1 -
/msadc/..\\../..\\../..\\../winnt/system32/cmd.exe 2 -
/_private/form_results.txt 1 -
/forum/ 1 -
/bdir.htr 1 -
/index.js%2570 1 -
/dbase/ 1 -
/cgi-bin/subscribe.pl 1 -
/IISSAMPLES/ExAir/Search/search.asp 1 -
/db/ 1 -
/cgi-bin/global.cgi 1 -
/enter_bug.cgi 1 -
/cgi-bin/Count.cgi 1 -
/cgi-bin/search97.vts 1 -
/cgi-bin/filemail.pl 1 -
/cgi-bin/..\\..\\..\\../winnt/system32/cmd.exe 1 -
/ex/jsp/simple.jsp. 1 -
/_vti_bin 1 -
/cgi-bin/hsx.cgi 1 -
/admisapi/ 1 -
/cgi-bin/perlshop.cgi 1 -
/scripts/gupcgi.exe 1 -
/ROADS/cgi-bin/search.pl 1 -
/bbs/db/ 1 -
/global.asa+.htr 1 -
/..\\\\..\\\\..\\\\..\\\\..\\\\..\\autoexec.bat 1 -
/cgi-bin/ikonboard/help.cgi 1 -
/scripts/samples/ctguestb.idc 1 -
/cgi-bin/amlite/amadmin.pl 1 -
/passwd 1 -
/........../autoexec.bat 1 -
/main.asp%2e 1 -
/cgi-bin/statsconfig.pl 1 -
/_vti_bin/_vti_aut 1 -
/cgi-bin/fpexplore.exe 1 -
/mp3/ 1 -
/cgi-bin/finger 1 -
/today.nsf 1 -
/cgi-bin/upload_file.pl 1 -
/........./boot.ini 1 -
/iissamples/issamples/query.asp 1 -
/scripts/samples/details.idc 1 -
/domlog.nsf 1 -
/iisamples/Sdk 1 -
/cgi-bin/guestbook.cgi 1 -
/secrets/ 1 -
/cgi-bin/webdriver 1 -
/NULL.ida 2 -
/iisadmpwd/aexp2.htr 2 -
/password 1 -
/scripts/iisadmin/tools/getdrvrs.exe 1 -
/php4/ 1 -
/iisadmpwd/aexp4b.htr 2 -
/iissamples/exair/search/qfullhit.htw 1 -
/msadc/samples/selector/showcode.asp 1 -
/msadc/..\\..\\..\\../winnt/system32/cmd.exe 2 -
/cgi-bin/mailform.exe 1 -
/..../boot.ini 1 -
/scripts/iisadmin/samples 1 -
/cfdocs/expressions.cfm 1 -
/cgi-bin/snorkerz.cmd 1 -
/null.idc 1 -
/cgi-bin/webgais 1 -
/cfdocs/exampleapp/email/getfile.cfm 2 -
/cfdocs/examples/cvbeans/beaninfo.cfm 1 -
/img/ 1 -
/_vti_pvt%5cservice.cnf 1 -
/porno/ 1 -
/phorum/plugin/replace/plugin.php 1 -
/server-status/ 1 -
/_vti_pvt%5caccess.cnf 1 -
/telephone/ 1 -
//66.209.65.90:19638/webhost/services/virtualhosting/siteadmin 1 -
/config/ 1 -
/scripts/nsiislog.dll 2 -
/scripts/proxy/w3proxy.dll 1 -
/iissamples/iissamples/query.asp 1 -
/cgi-bin/Board/db/ 1 -
/logfile/ 1 -
/scripts/cmd32.exe 2 -
/_vti_pvt/shtml.dll 1 -
/cgi-bin/visitor.exe 1 -
/cfdocs/expelval/exprcalc.cfm 1 -
/scripts/upload.asp 1 -
/scripts/cpshost.dll 1 -
/iisadmpwd/anot.htr 1 -
/scripts/emurl/RECMAN.dll 1 -
/cfdocs/snippets/viewexample.cfm 1 -
/scripts/wa.exe 1 -
/ncl_items.html 1 -
/cgi-bin/ppdscgi.exe 1 -
/cgi-bin/wais.pl 1 -
/cgi 1 -
/file/index.jsp 1 -
/log.html 1 -
/cgi-bin/c32web.exe/ShowAdminDir 1 -
/cgi-bin/test.cgi 1 -
/_vti_pvt 1 -
/login.jsp 1 -
/cgi-bin/pfdisplay.cgi 1 -
/cgi-bin/cached_feed.cgi 1 -
/scripts/c32web.exe 1 -
/cgi-bin/ezshopper3/loadpage.cgi 1 -
/scripts/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 -
/cgi-bin/pagelog.cgi 1 -
/cgi-bin/awl/auctionweaver.pl 1 -
/NULL.htr 2 -
/cgi-bin/plusmail 1 -
/cgi-bin/nph-test-cgi 1 -
/cgi-bin/infosrch.cgi 1 -
/\\../config.sys 1 -
/cfdocs/expeval/ExprCalc.cfm 2 -
/..../Windows/Admin.pwl 1 -
/search97.vts 1 -
/scripts/dmailweb.exe 1 -
/cgi-bin/htimage.exe 1 -
/cgi-bin/windmail.exe 1 -
/anything.ida 1 -
/cgi-auth/userreg.cgi 1 -
//WEB-INF/ 1 -
/cgi-bin/db2www/library/document.d2w/show 1 -
/server-info 1 -
/cgi-bin/nph-publish 1 -
/main.asp+.htr 1 -
/cgi-bin/survey.cgi 1 -
/iissamples/issamples/oop/qsumrhit.htw 1 -
/logs/ 1 -
/cgi-bin/redirect.exe 1 -
/cgi-bin/rguest.exe 1 -
/cfdocs/snippets/fileexists.cfm 1 -
/log.txt 1 -
/secret/ 1 -
/default.asp+.htr 1 -
/htdocs/ 1 -
/cfdocs/exampleapp/ 1 -
/bbs/admin/config/ 1 -
/cgi-bin/replicator/webpage.cgi 1 -
/cfdocs/snippets/gettempdirectory.cfm 1 -
/config/orders.txt 1 -
/iishelp/iis/misc/iirturnh.htw 1 -
/msadc/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 -
/customer/ 1 -
/iisadmpwd/aexp.htr 2 -
/scripts/* 1 -
/cgi-bin/fpcount.exe 1 -
/msadc/Samples/SELECTOR/codebrws.cfm 1 -
/servlet/com.unify.ewave.servletexec.UploadServlet 1 -
/catalog.nsf/ 1 -
/cgi-bin/formmail.cgi 1 -
/forum/common.php 1 -
/examples/jsp/num/numguess.js%70 1 -
/cgi-bin/simplestmail.cgi 1 -
/scripts/samples/search/qsumrhit.htw 1 -
/programming/ 1 -
/girl/ 1 -
/ws_ftp.ini 1 -
/cgi-bin/phf.cgi 1 -
/....../ 2 -
/scripts/iisadmin/ism.dll 2 -
/index.jsp 1 -
/scripts/dbman/db.cgi 2 -
/cgi-bin/dmailweb.cgi 1 -
/technote/print.cgi 1 -
/cgi-bin/Xrun.cgi 1 -
/scripts/slxweb.dll 1 -
/..\\..\\..\\..\\..\\autoexec.bat 1 -
/wwwstats.html 1 -
/_mem_bin/..\\..\\..\\../winnt/system32/cmd.exe 2 -
/example/ 1 -
/scripts/repost.asp 1 -
/cgi-bin/iisadmpwd/aexp2.htr 1 -
/..\\..\\..\\winnt\\repair\\sam._ 1 -
/scripts/..\\../winnt/system32/cmd.exe 1 -
/sources/ 1 -
/bin/scripts/.._../winnt/system32/cmd.exe 1 -
/cgi-bin/maillist.pl 1 -
/admin.php3 1 -
/cgi-bin/simplestguest.cgi 1 -
/site/eg/source.asp 1 -
/cfusion/cfapps/forums/data/forums.mdb 1 -
/cfdocs/exampleapp/publish/admin/application.cfm 1 -
/bin/common/user_update_admin.pl 1 -
/iissamples/exair/howitworks/code.asp 1 -
/cgi-bin/lsindex2.bat 1 -
/weblog/ 1 -
/wwwlog/ 1 -
/scripts/..%c1%1c..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe 1 -
/iissamples 1 -
/scripts/admin.exe 1 -
/cgi-bin/w3-msql 1 -
/.........../boot.ini 1 -
/.jsp/WEB-INF/classes/Env.java 1 -
/cgi-win/wincgi.bat 1 -
/cfusion/database/cypress.mdb 1 -
/scripts/pfieffer.cmd 1 -
/logger/ 1 -
/index.asp::$DATA 1 -
/cgi-bin/GWWEB.EXE 1 -
/scripts/cmd.exe 2 -
/\\../boot.ini 1 -
/scripts/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 1 -
/_vti_pvt/doctodep.btr 1 -
/scripts/cart32.exe 1 -
/cgi-bin/csChatRBox.cgi 1 -
/_vti_pvt/author.log 1 -
/scripts/iisadmin/tools/ctss.idc 1 -
/common/browser.inc 1 -
/scripts/counter.exe 1 -
/cgi-bin/webspirs.cgi 1 -
/bbs/admin/ 1 -
/temporary/ 1 -
/caspsamp/codebrws.asp 5 -
/cgi-bin/mailfile.cgi 1 -
/cgi-bin/webplus.cgi 1 -
/CompromisedScan.dll 2 -
/scripts/tools/mkilog.exe 1 -
/_vti_inf.html 1 -
/hire/ 1 -
/NessusTest11907.html 1 -
/index.php3 1 -
/cgi-bin/webplus.exe 1 -
/WebShop/logs/ck.log 1 -
/cgi-bin/iisadmpwd/aexp.htr 1 -
/sumthin 6 -
/logging/ 1 -
/cgi-bin/tst.bat\\dir 1 -
/scripts/rguest.exe 1 -
/mysql/ 1 -
/cgi-bin/ceilidh.exe 1 -
/scripts/samples 1 -
/survey 1 -
/cgi/ 1 -
/usage/ 1 -
/cmd.exe 1 -
/bbs/include/ 1 -
/cgi-bin/webwho.pl 1 -
/iisprotect/sample/protected 1 -
/_vti_log 1 -
/hosts.dat 1 -
/a.jsp//..//..//..//..//..//../winnt/win.ini 1 -
/cgi-bin/nph-maillist.pl 1 -
/scripts/no-such-file.pl 2 -
/server-info/ 1 -
/cgi-bin/redirect.cgi 1 -
/..%5C..%5C..%5C..%5C..%5C..%5C/winnt/win.ini 1 -
/cgi-bin/test-cgi 1 -
/iissamples/exair/search/qsumrhit.htw 1 -
/WebShop/templates/cc.txt 1 -
/_vti_bin/shtml.dll/_vti_rpc 2 -
/cgi-bin/php.cgi 1 -
/cgi-bin/bb-hostsvc.sh 1 -
/cgi-bin/processit.pl 1 -
/manage/cgi/cgiproc 1 -
/_private/orders.txt 1 -
/Newuser 1 -
/default.asp%2e%41sp 1 -
/....../config.sys 1 -
/NessusTest7971.html 1 -
/cfusion/database/cfsnippets.mdb 1 -
/cfusion/database/smpolicy.mdb 1 -
/banners.php 1 -
/cgi-bin/Web_Store/web_store.cgi 1 -
/scripts/dnewsweb.exe 1 -
/bbs/data/ 1 -
/cgi-bin/postings.cgi 1 -
/scripts/*.pl 1 -
/scripts/environ.pl 1 -
/database/ 1 -
/access.log 1 -
/exec/show/config/cr 1 -
/iissamples/issamples 1 -
/scripts/ 1 -
/cfdocs/expeval/eval.cfm 1 -
/cgi-bin/rpm_query 1 -
/devel/ 1 -
/public/ 1 -
/cgi-bin 1 -
/cgi-bin/loadpage.cgi 1 -
/scripts/iisadmin/default.htm 1 -
/cgi-bin/perl 1 -
/index.asp%81 1 -
/script/.._../winnt/system32/cmd.exe 1 -
/iisadmpwd/achg.htr 1 -
/_vti_bin/fpcount.exe 2 -
/scripts/tools/uploadx.asp 1 -
/cfdocs/root.cfm 1 -
/cgi-bin/allmanageup.pl 1 -
/cgi-bin/news/news.cgi 1 -
/cgi-bin/scripts/perl.exe 1 -
/ftp/ 1 -
/scripts/samples/search/qfullhit.htw 1 -
/iissamples/exair/howitworks/codebrws.asp 1 -
/main.asp::$DATA 1 -
/cgi-bin/phf 1 -
/iisadmpwd/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 -
/cfcache.map 1 -
/scripts/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe 1 -
/cfide/ 1 -
/bin/scripts/openvendor/gnete/RetrievePNBody.asp 1 -
/setpasswd.cgi 1 -
/scripts/visadmin.exe 1 -
/cgi-bin/allmanage.pl 1 -
/files/ 1 -
/cgi-bin/adcycle 1 -
/cgi-bin/iisadmpwd/achg.htr 1 -
/msadc/samples/selector/showcode.asp_2 1 -
/cfdocs/snippets/evaluate.cfm 1 -
/config/import.txt 1 -
/programs/ 1 -
/idea/ 1 -
/Album/ 1 -
/cgi-bin/webdata.cgi 1 -
/_mem_bin/.._../winnt/system32/cmd.exe 1 -
/work/ 1 -
/cgi-bin/man.sh 1 -
/sql/ 1 -
/PSUser/PSCOErrPage.htm 1 -
/cgi-bin/csLiveSupport.cgi 1 -
/scripts/iisadmin/bdir.htr 2 -
/config/mountain.cfg 1 -
/autoexec.bat 1 -
/scripts/samples/search/webhits.exe 1 -
/cgi-dos/args.bat 1 -
/cfdocs/ 1 -
/_vti_pvt/administrators.pwd 1 -
/scripts/perl 1 -
/cgi-bin/shop.cgi 1 -
/scripts/issadmin/bdir.htr 1 -
/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter 1 -
/secret/secret/sql_tool.shtml 1 -
/_vti_bin/shtml.dll 1 -
/cgi-bin/input2.bat 1 -
/msql/ 1 -
/_vti_pvt%5csvcacl.cnf 1 -
/manual.php 1 -
/iissamples/issamples/oop/qfullhit.htw 1 -
/Proxy/LoginResponse 1 -
/cgi-bin/fpexplorer.exe 1 -
/msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 -
/......./boot.ini 1 -
/ssi/envout.bat 1 -
/names.nsf 1 -
/iisprotect/admin/SiteAdmin.ASP 2 -
/cgi-bin/cachemgr.cgi 1 -
/log.nsf 1 -
/password.log 1 -
/cgi-bin/input.bat 1 -
/cgi-win/wguest.exe 1 -
/scripts/uploadx.asp 1 -
/private 1 -
/ASPSamp/AdvWorks/equipment/catalog_type.asp 1 -
/cgi-bin/cgiforum.pl 1 -
/process_bug.cgi 1 -
/....../boot.ini 1 -
/secret/secret/add-user.shmtl 1 -
/anything.idq 1 -
/piranha/secure/passwd.php3 1 -
/cgi-bin/webdist.cgi 1 -
/_vti_bin/shtml.dll/nosuch.htm 1 -
/scripts/tools/newdsn.exe 1 -
/server_stats/ 1 -
/include/inc/ 1 -
/cgi-bin/c32web.exe/CheckError 1 -
/doc 1 -
/cgi-bin/handler 1 -
/scripts/postinfo.asp 1 -
/cgi-bin/wrap 1 -
/cgi-bin/whois_raw.cgi 1 -
/scripts/iisadmin/tools 1 -
/cgi-bin/AnyForm2 1 -
/...................../config.sys 1 -
/inc/sendmail.inc 1 -
/config/checks.txt 1 -
/iisadmpwd/aexp3.htr 2 -
/webstats/ 1 -
/x.ida 1 -
/..................../boot.ini 1 -
/subscribe.pl 1 -
/log/ 1 -
/cgi-bin/htmlscript 1 -
/_private/registrations.txt 1 -
/index.asp%2e 1 -
/..../config.sys 1 -
/app.cfm 1 -
/bin/scripts/..\\..\\..\\../winnt/system32/cmd.exe 2 -
/_vti_bin/_vti_adm 1 -
/scripts/htimage.exe 1 -
/scripts/..\\..\\..\\..\\../winnt/system32/cmd.exe 2 -
/scripts/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe 1 -
/cgi-bin/htsearch 2 -
/cfide/administrator/index.cfm 1 -
/cgi-bin/calender.pl 1 -
/E-Guest_sign.pl 1 -
/down/ 1 -
/ConsoleHelp/login.jsp 1 -
/_vti_bin/.._../winnt/system32/cmd.exe 1 -
/scripts/cart32.exe/cart32clientlist 1 -
/cgi-bin/pals-cgi 1 -
/download/ 1 -
/_vti_bin/fpexe 1 -
/Admin_files/order.log 1 -
/..\\..\\autoexec.bat 1 -
/smdata.dat 1 -
/cgi-bin/gbook/gbook.cgi 1 -
/msadc/samples/adctest.asp 1 -
/cfdocs/expelval/sendmail.cfm 1 -
/msadc//.%252e/.%252e/.%252e/.%252e/.%252e/./winnt/system32/cmd.exe 1 -
/cgi-bin/glimpse 1 -
/index.html.bak 1 -
/nofile.pl 1 -
/main.asp. 1 -
/secure/.wwwacl 1 -
/................./boot.ini 1 -
/cgi-bin/websendmail 1 -
/cgi-bin/.._../winnt/system32/cmd.exe 1 -
/main.asp%81 1 -
/_vti_pvt/service.grp 1 -
/scripts/uploadn.asp 1 -
/cgi-bin/csNews.cgi 1 -
/main.asp\\\\ 1 -
/cgi-bin/webbbs/webbbs_config.pl 1 -
/getfile.cfm 2 -
/class/mysql.class 1 -
/girls/ 1 -
/adminlogin 1 -
/head.css 1 -
/srchadm 1 -
/......../boot.ini 1 -
/snmp/ 1 -
/scripts/..%c1%c1..%c1%c1..%c1%c1..%c1%c1..%c1%c1../winnt/system32/cmd.exe 1 -
/cgi-bin/Search.pl 1 -
/servlet/SessionServlet 1 -
/pbserver/ 1 -
/cfdocs/examples/httpclient/mainframeset.cfm 1 -
/iissamples/exair/howitworks/showcode.asp 1 -
/cgi-bin/www-sql 1 -
/stats.html 1 -
/scripts/tools 1 -
/cfide/Administrator/startstop.html 1 -
/cfappman/index.cfm 1 -
/blah.htm 1 -
/source/ 1 -
/cgi-bin/mailform.pl 1 -
/deny/ 1 -
/cgi-bin/mdma.bat 1 -
/downloads/ 1 -
/galaxy_7416.11965 1 -
/_private/shopping_cart.mdb 1 -
/iissamples/exair/search/advsearch.asp 1 -
/scripts/root.exe 1 -
/stat/ 1 -
/ideas/ 1 -
/cgi-bin/get32.exe 1 -
/_vti_pvt%5cservices.cnf 1 -
/....../autoexec.bat 1 -
/technote/main.cgi/oops 1 -
/main.asp%2e%41sp 1 -
/scripts/..%255c%255c../winnt/system32/cmd.exe 1 -
/cgi-bin/anacondaclip.pl 1 -
/webaccess.htm 1 -
/cfide/Administrator/ 1 -
/access-log 1 -
/_private 1 -
/ows-bin/perlidlc.bat 1 -
/cgi-bin/dcadmin.cgi 1 -
/logger.html 1 -
/_vti_txt 1 -
/misc/ 1 -
/card/ 1 -
/cgi-bin/shopper.cgi 1 -
/.................../boot.ini 1 -
/.\"./.\"./winnt/win.ini%20.php3 1 -
/iisadmin/ 1 -
/cgi-bin/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\winnt\\system32\\cmd.exe 1 -
/_vti_bin/..\\..\\..\\../winnt/system32/cmd.exe 2 -
/cgi-bin/GW5 1 -
/backup/ 1 -
/scripts/convert.bas 1 -
/scripts/iisadmin/tools/mkilog.exe 1 -
/cgi-shl/win-c-sample.exe 1 -
/cgi-bin/counterfiglet/nc/f 1 -
/scripts/Carello/add.exe 1 -
/filemanager/filemanager_forms.php 1 -
/cgi-bin/dumpenv.pl 1 -
/cgi-bin/day5datacopier.cgi 1 -
/cgi-bin/s.cgi 1 -
/msadc 1 -
/trace.axd 1 -
/scripts/pfieffer.bat 1 -
/server-status 1 -
/scripts/tools/dsnform.exe 1 -
/_vti_pvt/shtml.exe 1 -
/cgi-bin/changepw.exe 1 -
/WSFTP.LOG 1 -
/iisadmpwd//.%252e/.%252e/.%252e/.%252e/.%252e/./winnt/system32/cmd.exe 1 -
/number/ 1 -
/phpPhotoAlbum/explorer.php 1 -
/cgi-bin/cal_make.pl 1 -
/cd-cgi/sscd_suncourier.pl 1 -
/pservlet.html 1 -
/cfdocs/snippets/ 1 -
/cgi-bin/rwwwshell.pl 1 -
/cgi-bin/csvform.pl 1 -
/scripts/iisadmpwd 1 -
/cgi-bin/ipf/etc/gfw/ui/pwd.dat 1 -
/wwwboard/passwd.txt 1 -
/cfdocs/cfcache.map 1 -
/cgi-bin/dcforumlib.pl 1 -
/cgi-bin/test.bat 1 -
/cgi-bin/cvsweb/cvsweb.cgi 1 -
/stats/ 1 -
/cgi-dos/args.cmd 1 -
/cgi-bin/day5datanotifier.cgi 1 -
/catalog.nsf 1 -
/cgi-bin/unlg1.1 1 -
/cgi-bin/scripts/whois.cgi 1 -
/cgi-bin/tst.bat 1 -
/document/ 1 -
/cgi-bin/cgiwrap 1 -
/cgi-bin/getdoc.cgi 1 -
/scripts/CGImail.exe 1 -
/isapi/tstisapi.dll 1 -
/cgi-bin/snorkerz.bat 1 -
/user.php&op=saveuser 1 -
/logfile.html 1 -
/cfdocs/zero.cfm 1 -
/cgi-bin/view_page.html 1 -
/_vti_pvt/authors.pwd 1 -
/program/ 1 -
/setting/ 1 -
/cgi-bin/dcboard.cgi 1 -
/index.asp\\\\ 1 -
/iisadmpwd/aexp4.htr 1 -
/file/ 1 -
/_vti_pvt/users.pwd 1 -
/opendir.php 1 -
/linux/ 1 -
/default.asp 1 -
/cfdocs/toxic.cfm 1 -
/password.dat 1 -
/index.asp. 1 -
/html/snort2html.html 1 -
/adsamples/config/site.csc 1 -
/page.cfm 1 -
/cgi-bin/empower 1 -
/default.asp%2e 1 -
/abczxv.htw 1 -
/cgibin 1 -
/default.asp::$DATA 1 -
/cgi-bin/imagemap.exe 1 -
/cgi-bin/get32.exe\\dir 1 -
/include/head.html 1 -
/acid/ 1 -
/officescan/cgi/jdkRqNotify.exe 1 -
/AdvWorks/equipment/catalog_type.asp 1 -
/scripts/tools/getdrvrs.exe 1 -
/............/boot.ini 1 -
/cgi-bin/wguest.exe 1 -
/phorum/common.php 1 -
/_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 -
/cgi-bin/echo.bat 1 -
/cgi-win/uploader.exe 1 -
/scripts/tools/getdrvs.exe 1 -
/publisher 1 -
/cgi-bin/sam._ 1 -
/secret/secret/change-passwd.shtml 1 -
/stat.htm 1 -
/examples/applications/bboard/bboard_frames.html 1 -
/cfdocs/expeval/displayopenedfile.cfm 1 -
/cgibin/ 1 -
/cfdocs/expeval/sendmail.cfm 1 -
/............./boot.ini 1 -
/_vti_pvt%5clinkinfo.cnf 1 -
/private/ 1 -
/index.php3.%5c../..%5cconf/httpd.conf 1 -
/cfdocs/examples/parks/detail.cfm 1 -
/login.asp%3F+.htr 1 -
/iissamples/Default 1 -
/a.asp/..\\../..\\../winnt/repair/sam 1 -
/cgi-bin/dbmlparser.exe 1 -
/.jpilot/ 1 -
/cfdocs/expelval/openfile.cfm 1 -
/includes/global.inc 1 -
/cgi-bin/bnbform.cgi 1 -
/cgi-bin/webbbs/webbbs_settings.pl 1 -
/scripts/tools/uploadn.asp 1 -
/temp/ 1 -
/scripts/cgimail.exe 1 -
/acid/acid_main.php 1 -
/cgi-bin/ssi 1 -
/default.asp%81 1 -
/cgi-bin/lasso.cgi 1 -
/session/adminlogin 1 -
/scripts/webbbs.exe 1 -
/password.txt 1 -
/cgi-bin/faxsurvey 1 -
/statistics/ 1 -
/phorum/plugin/replace/admin.php 1 -
/msadc/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe 1 -
/................/boot.ini 1 -
/cgi-bin/ultraboard.cgi 1 -
/setup/ 1 -
/wwwstats/ 1 -
/cfdocs/examples/ 1 -
/perl 1 -
/admin-serv/config/admpw 1 -
/iissamples/ExAir 1 -
/iisadmpwd/aexp2b.htr 2 -
/cfdocs/exampleapp/docs/sourcewindow.cfm 1 -
/cgi-win/perl.exe 1 -
/scripts/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 -
/scancfg.cgi 1 -
/default.asp. 1 -
/cgi-bin/GW5/GWWEB.EXE 1 -
/_AuthChangeUrl 2 -
/index.asp%2e%41sp 1 -
/user.dat 1 -
/cgi-bin/edit.pl 1 -
/user.log 1 -
/logfiles/ 1 -
/................../boot.ini 1 -
/..\\..\\..\\..\\autoexec.bat 1 -
/cgi-bin/dnewsweb.cgi 1 -
/cgi-bin/post32.exe 1 -
/msadc/msadcs.dll 1 -
/cgi-bin/AT-generate.cgi 1 -
/...../boot.ini 1 -
/tool/ 1 -
/includes/ 1 -
/cgi-bin/aglimpse 1 -
/log.htm 1 -
/.............../boot.ini 1 -
/logfile 1 -
/rightfax/fuwww.dll/ 1 -
/phorum/admin/actions/del.php 1 -
/rightfax/fuwww.dll 1 -
/scripts/lsass.exe 1 -
/cgi-bin/mmstdod.cgi 1 -
/cache-stats/ 1 -
/_vti_adm/admin.dll 1 -
/index.html~ 1 -
/stats.txt 1 -
/php3/ 1 -
/scripts/srchadm/webhits.exe 1 -
/cgi-bin/CrazyWWWBoard.cgi 1 -
/cgi-bin/ezshopper2/loadpage.cgi 1 -
/cgi-bin/AT-admin.cgi 1 -
/scripts/wsisa.dll 1 -
/scripts/bbs.pl%3F+.htr 1 -
/NessusTest18891.html 1 -
/cgi-bin/unlg1.2 1 -
/cgi-bin/bbs_forum.cgi 1 -
/search.dll 1 -
/samples/search/queryhit.htm 1 -
/cgi-bin/YaBB.pl 1 -
/cgi-bin/jj 1 -
/servlet/com.livesoftware.jrun.plugins.jsp.JSP 1 -
/data/ 1 -
/adpassword.txt 1 -
/logfile.txt 1 -
/carbo.dll 1 -
/cgi-bin/responder.cgi 1 -
/cgi-bin/info2www 1 -
/cgi-bin/files.pl 1 -
/showfile.asp 1 -
/cgi-bin/changepw.cgi 1 -
/cgi-bin/bizdb1-search.cgi 1 -
/cgi-bin/ustorekeeper.pl 1 -
/iisadmpwd/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe 1 -
/_vti_pvt/ 1 -
/cgi-bin/netauth.cgi 1 -
/bbs/ 1 -
/image/ 1 -
/weblogs/ 1 -
/scripts/Carello/Carello.dll 1 -
/cfdocs/exampleapp/publish/admin/addcontent.cfm 1 -
/cfusion/cfapps/security/realm_.mdb 1 -
/..\\..\\..\\..\\..\\..\\autoexec.bat 1 -
/.nsf/../winnt/win.ini 1 -
/cgi-bin/hello.bat 1 -
/scripts/wguest.exe 1 -
/cgi-bin/visadmin.exe 2 -
/cgi-bin/search.cgi 1 -
/_vti_bin/shtml.exe 2 -
/private/.htpasswd 1 -
/cgi-bin/commerce.cgi 1 -
/logs/access_log 1 -
/iissamples/sdk/asp/docs/codebrws.asp 1 -
/tools/ 1 -
/documents/ 1 -
/cgi-bin/webbbs/webbbs_post.pl 1 -
/null.ida 1 -
/phone/ 1 -
/cgi-bin/post-query 1 -
/_vti_pvt/administrator.pwd 1 -
/lib/ 1 -
/NULL.printer 2 -
/secure/.htaccess 1 -
/bin/common/user_update_passwd.pl 1 -
/set/ 1 -
/b2/b2-include/b2edit.showposts.php 1 -
/cgi-bin/mailto.cgi 1 -
/index.asp+.htr 1 -
/scripts/iisadmin 1 -
/cgi-bin-sdb 1 -
/way-board/way-board.cgi 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start of last visit date] - [Last page of last visit]
# [Start of last visit date] and [Last page of last visit] are saved only if session is not finished
# The 10 first Hits must be first (order not required for others)
BEGIN_VISITOR 9
69.158.104.44 21 21 131796 20050122114249
69.31.82.202 2 2 142 20050114165646
220.170.88.36 1 1 7322 20050104231139
67.234.73.221 1 1 7322 20050102213809
61.178.149.160 1 1 7323 20050105143813
67.234.73.209 1 1 7322 20050102085033
141.89.52.183 1 1 0 20050126005457 20050126005457 /
67.234.73.44 1 1 7321 20050111182602
203.70.47.33 1 1 71 20050115112920
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 8
20050102 2 2 14644 2
20050104 1 1 7322 1
20050105 1 1 7323 1
20050111 1 1 7321 1
20050114 2 2 142 2
20050115 1 1 71 1
20050122 21 21 131796 1
20050126 1 1 0 1
END_DAY

# Worm ID - Hits - Last visit
# The 10 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# Session range - Number of visits
BEGIN_SESSION 2
2mn-5mn 1
0s-30s 8
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 10 first Pages must be first (order not required for others)
BEGIN_SIDER 7
/ 24 139332 6 5
http://www.yahoo.com/ 1 7322 1 1
/manual/ 1 0 0 0
http://67.234.73.221:25/ 1 7322 1 1
http://67.234.73.209:25/ 1 7322 1 1
/mrtg/ 1 0 0 0
http://67.234.73.44:25/ 1 7321 1 1
END_SIDER