One Hat Cyber Team

Edit File: awstats042023.scl.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202304 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.scl.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2013                
POS_TIME 2674                
POS_VISITOR 7686                
POS_DAY 8610                
POS_DOMAIN 3235                
POS_LOGIN 3520                
POS_ROBOT 3675                
POS_WORMS 3918                
POS_EMAILSENDER 4049                
POS_EMAILRECEIVER 4192                
POS_SESSION 8931                
POS_SIDER 9088                
POS_FILETYPES 4327                
POS_DOWNLOADS 4427                
POS_OS 4475                
POS_BROWSER 4628                
POS_SCREENSIZE 4934                
POS_UNKNOWNREFERER 5008                
POS_UNKNOWNREFERERBROWSER 5708                
POS_ORIGIN 6113                
POS_SEREFERRALS 6245                
POS_PAGEREFS 6389                
POS_SEARCHWORDS 6537                
POS_KEYWORDS 6689                
POS_MISC 2338                
POS_ERRORS 6748                
POS_CLUSTER 3376                
POS_SIDER_404 6889                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230422200038 2 221 13420959908057
FirstTime 0
LastTime 20230422200038
LastUpdate 20230422230450 2 0 2 0 0
TotalVisits 23                  
TotalUnique 22                  
MonthHostsKnown 0                   
MonthHostsUnknown 22                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
DirectorSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 4 0
JavaEnabled 0 0 0
FlashSupport 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
QuickTimeSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 2301 0 1 0
1 0 0 0 1 1 6219
2 1 1 6167 0 0 0
3 0 0 0 2 2 309
4 0 0 0 1 1 83
5 1 1 2301 1 1 83
6 0 0 0 0 0 0
7 1 1 2314 1 2 83
8 9 9 9635 0 1 0
9 1 1 6219 19 19 21488
10 2 2 8519 1 2 107
11 2 2 2313 13 13 6468
12 0 0 0 0 0 0
13 1 1 2312 2 2 309
14 0 0 0 1 1 83
15 1 1 2298 4 4 831
16 0 0 0 6 6 498
17 0 0 0 3 3 392
18 1 1 2299 1 1 83
19 1 1 2298 1 2 6167
20 3 3 10833 6 6 1991
21 1 1 6219 0 0 0
22 0 0 0 5 5 1908
23 0 0 0 1 1 83
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 6
us 17 17 27987
ca 4 4 24824
be 2 2 4613
nl 1 1 2298
gb 1 1 6219
zz 1 1 87
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
no_user_agent 4 24824 20230415113258 0
Go\-http\-client/ 1 2314 20230402091250 0
unknown 1 24 20230415101031 1
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 21 65639 0 0
Unknown 5 389 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
Unknown 15 15
macosx15 1 1
win10 4 4
win8 1 1
linux 3 3
androidmarshmallow 1 1
win7 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 12
chrome111.0.5563.146 1 1
chrome29.0.1547.2 1 1
Unknown 6 6
chrome111.0.5563.64 1 1
chrome84.0.4147.105 1 1
chrome74.0.3729.169 1 1
chrome79.0.3945.79 1 1
chrome83.0.4103.61 1 1
chrome89.0.4389.82 2 2
chrome52.0.3233.98 1 1
mozilla 9 9
chrome110.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230420083954
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230412053407
Cpanel-HTTP-Client/1.0 20230402083723
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20230402083733
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230421104521
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230421104521
Cpanel-HTTP-Client/1.0 20230402083723
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 26 26
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 6
409 26 2158
403 1 6083
406 6 1356
302 2 0
404 25 9390
301 4 1036
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 22
/main 1 -
/.git/config 1 -
/bk 1 -
/wp 1 -
/v2/_catalog 1 -
/api/search 1 -
/wp-login.php 1 -
/login.action 1 -
/bc 1 -
/old 1 -
/debug/default/view 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/new 1 -
/.DS_Store 1 -
/s/3343e2231313e2538313e2239313/_/ 1 -
/about 1 -
/.vscode/sftp.json 1 -
/_ignition/health-check 4 http://scl.probitconsult.com/public/_ignition/health-check/
/config.json 1 -
/wordpress 1 -
/telescope/requests 1 -
/info.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 22
167.248.133.190 2 2 4601 20230420083954
144.91.106.14 2 2 4614 20230422200038 20230422200038 /
192.185.112.43 2 2 128 20230402083723
205.169.39.250 2 2 4628 20230402084011
69.167.12.37 1 1 0 20230411110556
34.168.250.231 1 1 2299 20230412185905
167.94.138.50 1 1 2298 20230408192535
198.235.24.131 1 1 6167 20230411025757
194.26.135.17 1 1 2298 20230410155248
23.178.112.103 1 1 87 20230402083733
198.235.24.55 1 1 6219 20230411213317
35.209.181.3 1 1 2300 20230415101029
65.154.226.170 1 1 2318 20230402083911
87.236.176.144 1 1 2301 20230412053407
205.210.31.94 1 1 6219 20230421104521
65.109.163.80 1 1 2313 20230403112706
167.172.232.142 1 1 6219 20230402091250
87.236.176.38 1 1 2312 20230402132642
35.167.0.98 1 1 87 20230402083733
205.210.31.39 1 1 6219 20230417202700
18.221.38.82 1 1 87 20230402083733
167.248.133.126 1 1 2314 20230414073757
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 13
20230402 10 10 15866 8
20230403 1 1 2313 1
20230408 1 1 2298 1
20230410 1 1 2298 1
20230411 3 3 12386 3
20230412 2 2 4600 2
20230413 1 1 2301 1
20230414 1 1 2314 1
20230415 1 1 2300 1
20230417 1 1 6219 1
20230420 1 1 2300 1
20230421 1 1 6219 1
20230422 2 2 4614 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 21
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/ 21 65639 19 18
/.well-known/acme-challenge/fqFQlZ6-GlMJi00l6GH3O27jQL8pKTs0GYEfrKT8lb0 3 261 3 3
/.well-known/acme-challenge/2GXHTY572V9I6-JPB5PFMH_-ZZ_0-4P6 1 64 1 0
/.well-known/acme-challenge/8BHSOGM9ZIMYY_KVLQE8HJTNRAH3D99G 1 64 0 1
END_SIDER