One Hat Cyber Team

Edit File: awstats022024.invoice.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202402 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.invoice.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2017                
POS_TIME 2690                
POS_VISITOR 7600                
POS_DAY 9244                
POS_DOMAIN 3259                
POS_LOGIN 3570                
POS_ROBOT 3725                
POS_WORMS 4014                
POS_EMAILSENDER 4145                
POS_EMAILRECEIVER 4288                
POS_SESSION 9727                
POS_SIDER 9905                
POS_FILETYPES 4423                
POS_DOWNLOADS 4524                
POS_OS 4572                
POS_BROWSER 4747                
POS_SCREENSIZE 5137                
POS_UNKNOWNREFERER 5211                
POS_UNKNOWNREFERERBROWSER 5810                
POS_ORIGIN 6215                
POS_SEREFERRALS 6347                
POS_PAGEREFS 6491                
POS_SEARCHWORDS 6639                
POS_KEYWORDS 6791                
POS_MISC 2353                
POS_ERRORS 6850                
POS_CLUSTER 3426                
POS_SIDER_404 6972                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20240301084457 1 0 13144201486495
FirstTime 20240201060349
LastTime 20240228233056
LastUpdate 20240302063820 1 0 0 0 0
TotalVisits 42                  
TotalUnique 41                  
MonthHostsKnown 0                   
MonthHostsUnknown 41                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 12 0
PDFSupport 0 0 0
DirectorSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 0 0 0
1 1 1 6017 0 1 24
2 4 4 16606 2 5 4743
3 2 2 8273 0 3 48
4 0 0 0 0 0 0
5 1 1 2257 0 1 0
6 4 4 12810 0 2 24
7 1 1 6017 2 2 166
8 10 10 15514 16 16 41432
9 1 1 2258 2 4 8298
10 2 2 8334 2 3 166
11 0 0 0 0 0 0
12 0 0 0 2 2 166
13 5 5 15140 6 7 18300
14 1 1 6065 2 2 166
15 5 5 20369 1 3 107
16 0 0 0 3 3 249
17 0 0 0 2 2 166
18 0 0 0 1 1 83
19 0 0 0 0 0 0
20 2 2 8331 0 2 24
21 7 7 32339 0 1 0
22 1 1 2257 0 1 0
23 7 7 19611 0 1 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 27 27 65211
cn 9 9 39336
ca 8 8 44434
gb 6 6 26327
id 1 1 2267
zz 1 1 87
nc 1 1 2268
ke 1 1 2268
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
unknown 7 168 20240222013220 7
no_user_agent 5 30133 20240225133627 0
bot[\s_+:,\.\;\/\\-] 4 4572 20240225024601 2
Go\-http\-client/ 1 2270 20240223083257 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
Unknown 5 389 0 0
html 49 181809 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
ios_iphone 3 3
Unknown 18 18
linux 8 8
win10 12 12
android 1 1
macosx15 1 1
androidmarshmallow 1 1
win7 10 10
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 17
chrome80.0.3987.149 3 3
Unknown 8 8
chrome63.0.3239.132 4 4
chrome118.0.5993.80 1 1
chrome52.0.3233.98 1 1
chrome71.0.2623.112 5 5
chrome79.0.3945.88 1 1
chrome79.0.3945.79 1 1
mozilla 10 10
chrome83.0.4103.61 1 1
safari17.2 1 1
chrome117.0.5938.132 1 1
chrome100.0.4896.60 2 2
edge12 4 4
safari16.3 2 2
chrome108.0.0.0 8 8
safari16.6 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Cpanel-HTTP-Client/1.0 20240223083133
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20240223083137
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20240227014445
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20240228054626
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20240223083133
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20240227014445
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 54 54
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
404 13 29216
403 1 6083
406 1 226
409 18 1494
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 13
/config.json 1 -
/about 1 -
/wp-login.php 1 -
/v2/_catalog 1 -
/.git/config 1 -
/.vscode/sftp.json 1 -
/telescope/requests 1 -
/login.action 1 -
/debug/default/view 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/.DS_Store 1 -
/s/3343e2231313e2538313e2239313/_/ 1 -
/_all_dbs 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 41
51.195.90.123 5 5 24068 20240223211954
101.68.211.2 4 4 16666 20240221205406
139.99.237.35 3 3 12034 20240223150520
183.136.225.45 2 2 8332 20240209025217
183.136.225.14 2 2 8273 20240206033745
205.169.39.197 2 2 4533 20240223083326
192.185.112.43 2 2 128 20240223083133
205.210.31.26 1 1 6017 20240214021443
159.223.182.131 1 1 2268 20240226135733
199.45.154.48 1 1 2269 20240220101220
164.92.226.53 1 1 2257 20240215025050
205.210.31.176 1 1 6017 20240202075658
183.136.225.46 1 1 6065 20240203131214
134.122.46.126 1 1 2256 20240228233056
199.45.154.16 1 1 2267 20240218062637
199.45.154.50 1 1 2257 20240228054626
102.129.153.112 1 1 2267 20240223233902
206.189.135.251 1 1 2270 20240224131439
62.12.114.54 1 1 2268 20240223233904
54.88.179.33 1 1 6065 20240213104032
142.93.158.96 1 1 6065 20240223083254
199.45.155.48 1 1 2269 20240218132851
199.45.154.18 1 1 2254 20240225214140
88.99.26.177 1 1 2259 20240223083718
24.199.120.133 1 1 2268 20240228134740
45.88.97.246 1 1 2267 20240223233902
199.45.154.49 1 1 2258 20240220095155
23.178.112.203 1 1 87 20240223083137
35.171.144.152 1 1 6065 20240206144858
198.235.24.245 1 1 6017 20240222211229
37.156.216.131 1 1 2268 20240223233902
198.235.24.246 1 1 6017 20240227014445
159.89.114.90 1 1 2267 20240228061043
65.154.226.168 1 1 2268 20240223083247
198.235.24.196 1 1 6017 20240209230552
64.23.168.25 1 1 2268 20240213234426
198.235.24.144 1 1 6017 20240207062523
3.138.186.53 1 1 87 20240223083137
152.42.136.207 1 1 2259 20240201060349
34.219.50.209 1 1 87 20240223083137
167.94.138.126 1 1 2257 20240204223511
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 21
20240201 1 1 2259 1
20240202 1 1 6017 1
20240203 1 1 6065 1
20240204 1 1 2257 1
20240206 3 3 14338 2
20240207 1 1 6017 1
20240209 3 3 14349 2
20240210 2 2 8335 1
20240213 2 2 8333 2
20240214 1 1 6017 1
20240215 1 1 2257 1
20240218 2 2 4536 2
20240220 2 2 4527 2
20240221 2 2 8331 1
20240222 1 1 6017 1
20240223 22 22 60686 14
20240224 1 1 2270 1
20240225 1 1 2254 1
20240226 1 1 2268 1
20240227 1 1 6017 1
20240228 4 4 9048 4
END_DAY

# Session range - Number of visits
BEGIN_SESSION 4
30s-2mn 2
0s-30s 38
2mn-5mn 1
5mn-15mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/ 49 181809 38 38
/.well-known/acme-challenge/ZneIEUhia5eE6r5AilToO2ZuRDMTWGNKAdu82vbTsic 3 261 3 3
/.well-known/acme-challenge/UCQY4Z-POG0N2Z-VJ3QIP4OBQ5BAJJ1_ 1 64 0 1
/.well-known/acme-challenge/HU3LDF7Q5_MZGWXA2IC9G_O3E7WYE540 1 64 1 0
END_SIDER