One Hat Cyber Team

Edit File: awstats052025.dev.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202505 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.dev.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2050                
POS_TIME 2721                
POS_VISITOR 8274                
POS_DAY 10714               
POS_DOMAIN 3299                
POS_LOGIN 3619                
POS_ROBOT 3774                
POS_WORMS 4122                
POS_EMAILSENDER 4253                
POS_EMAILRECEIVER 4396                
POS_SESSION 11211               
POS_FILESIZE 11467               
POS_SIDER 11389               
POS_FILETYPES 4531                
POS_DOWNLOADS 4613                
POS_OS 4661                
POS_BROWSER 4893                
POS_SCREENSIZE 5513                
POS_UNKNOWNREFERER 5587                
POS_UNKNOWNREFERERBROWSER 6146                
POS_ORIGIN 6513                
POS_SEREFERRALS 6645                
POS_PAGEREFS 6789                
POS_SEARCHWORDS 6937                
POS_KEYWORDS 7089                
POS_MISC 2385                
POS_ERRORS 7148                
POS_CLUSTER 3475                
POS_SIDER_404 7245                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250601121634 1 0 4547277302770
FirstTime 20250502044801
LastTime 20250531042253
LastUpdate 20250602081708 1 0 0 0 0
TotalVisits 70                  
TotalUnique 63                  
MonthHostsKnown 0                   
MonthHostsUnknown 63                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
PDFSupport 0 0 0
JavaEnabled 0 0 0
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
AddToFavourites 0 0 0
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
RealPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 4 4 1869 8 10 869
1 0 0 0 1 1 0
2 2 2 1246 5 5 623
3 2 2 1246 3 5 0
4 4 4 1246 2 2 0
5 1 1 623 1 1 0
6 1 1 623 1 1 0
7 1 1 623 3 3 0
8 5 5 3115 4 8 0
9 5 5 2492 4 4 1246
10 0 0 0 1 1 0
11 12 12 4361 48 53 4984
12 2 2 1246 3 6 1246
13 7 7 4361 7 11 623
14 5 5 3115 7 11 623
15 3 3 1869 0 0 0
16 5 5 3115 3 6 873
17 5 5 3115 1 3 623
18 1 1 623 0 0 0
19 5 5 3115 5 9 496
20 7 7 4361 4 10 250
21 4 4 2492 5 8 869
22 5 5 3115 6 10 1738
23 3 3 1869 0 3 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 48 48 29904
gb 9 9 1869
cn 9 9 5607
ru 8 8 3115
ca 6 6 3738
fr 4 4 2492
bg 3 3 1869
za 1 1 623
vn 1 1 623
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 6
no_user_agent 6 3738 20250530225812 0
Go\-http\-client/ 5 3115 20250519111100 0
curl 4 2492 20250528123827 0
bot[\s_+:,\.\;\/\\-] 2 1246 20250513165746 0
survey 2 1246 20250511025404 0
scrapy 2 1246 20250511111644 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 89 49840 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 12
linuxubuntu 2 2
winphone 1 1
win7 5 5
win10 26 26
Unknown 27 27
wince 1 1
ios_iphone 2 2
android10 2 2
androidmarshmallow 2 2
linux 15 15
androidpie 2 2
macosx15 4 4
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 30
chrome127.0.0.0 1 1
chrome132.0.0.0 2 2
chrome67.0.3396.87 1 1
firefox134.0 2 2
chrome129.0.0.0 1 1
chrome108.0.0.0 7 7
chrome104.0.0.0 4 4
chrome52.0.8393.98 2 2
chrome58.0.3029.110 8 8
firefox127.0 1 1
safari 1 1
chrome117.0.0.0 3 3
firefox136.0 6 6
msie11.0 2 2
firefox80.0 1 1
iphone 1 1
chrome131.0.0.0 1 1
chrome96.0.4664.110 3 3
chrome110.0.0.0 1 1
chrome130.0.0.0 1 1
netscape5.0 2 2
chrome80.0.3987.132 1 1
msie6.0 1 1
chrome71.0.2623.112 2 2
chrome81.0.4044.92 1 1
chrome135.0.0.0 3 3
chrome84.0.4147.111 1 1
chrome63.0.3239.132 2 2
mozilla 18 18
Unknown 9 9
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530211051
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250531042253
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250523212118
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530211051
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 89 89
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
301 8 1980
404 105 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 33
/sellers.json 1 -
/misc/drupal.js 1 -
/@vite/env 2 -
/_all_dbs 2 -
/info.php 2 -
/cgi-bin/ 13 https://www.dev.probitconsult.com:443/cgi-bin
/wp-admin/install.php 1 -
/server 2 -
/debug/default/view 1 -
/config.json 2 -
/.vscode/sftp.json 2 -
/%3FC%3DN%3BO%3DD 1 -
/about 1 -
/installer.php 1 -
/s/131313e2739313e263e20353/_/ 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/_fragment 2 -
/app-ads.txt 1 -
/ads.txt 5 -
/s3cmd.ini 1 -
/.git/config 36 -
/.env 4 -
/login.action 2 -
/.svn/wc.db 1 -
/robots.txt 4 -
/server-status 2 -
/telescope/requests 2 -
/v2/_catalog 2 -
/actuator/env 2 -
/.aws/credentials 1 -
/core/misc/drupal.js 1 -
/.DS_Store 2 -
/wp-admin/setup-config.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 63
146.70.185.32 6 6 0 20250522043118
195.211.77.142 5 5 1869 20250522000902
162.142.125.47 4 4 2492 20250515224747
115.231.78.6 4 4 2492 20250505131722
91.134.91.17 3 3 1869 20250522115112
86.104.252.57 2 2 1246 20250519083925
206.168.34.64 2 2 1246 20250523212118
104.164.173.110 2 2 1246 20250519140058
199.45.155.80 2 2 1246 20250516225937
162.142.125.205 2 2 1246 20250518193121
199.45.154.125 2 2 1246 20250502160548
162.142.125.214 2 2 1246 20250520195756
208.100.26.248 2 2 1246 20250515023452
167.94.146.50 2 2 1246 20250523203641
44.203.74.53 1 1 623 20250517200014
198.235.24.121 1 1 623 20250514024757
45.12.136.67 1 1 623 20250519140024
138.68.86.32 1 1 623 20250519111048
104.131.161.96 1 1 623 20250528032918
123.160.223.73 1 1 623 20250506120434
51.158.205.50 1 1 623 20250519111307
198.235.24.68 1 1 623 20250523055109
185.247.137.5 1 1 623 20250531033137
165.232.119.72 1 1 623 20250526204049
209.38.4.240 1 1 623 20250519140025
146.190.197.169 1 1 623 20250519140024
111.7.96.178 1 1 623 20250525233727
42.58.35.94 1 1 623 20250508151944
185.247.137.34 1 1 623 20250531042253
147.185.132.237 1 1 623 20250508184035
138.197.114.199 1 1 623 20250530203416
196.251.88.164 1 1 623 20250522172340
165.227.173.41 1 1 623 20250519111048
151.115.89.145 1 1 623 20250519111235
123.160.223.74 1 1 623 20250517093330
198.235.24.185 1 1 623 20250509061420
216.81.248.13 1 1 623 20250517093057
59.58.43.250 1 1 623 20250519220155
165.227.224.113 1 1 623 20250514080914
44.210.142.112 1 1 623 20250527072146
195.211.77.140 1 1 0 20250519111207
44.192.59.227 1 1 623 20250513160946
205.210.31.69 1 1 623 20250530211051
171.244.43.14 1 1 623 20250520144548
159.65.197.72 1 1 623 20250528200943
205.210.31.172 1 1 623 20250527162206
147.185.132.153 1 1 623 20250527233839
149.22.81.215 1 1 623 20250520130807
5.135.58.194 1 1 623 20250520173858
51.81.245.138 1 1 623 20250519111206
208.100.26.243 1 1 623 20250528170858
154.28.229.145 1 1 623 20250519135759
44.213.121.41 1 1 623 20250513160946
208.100.26.249 1 1 623 20250502044801
54.245.42.144 1 1 623 20250520080943
198.235.24.27 1 1 623 20250513150630
167.71.107.88 1 1 623 20250506082726
69.55.49.139 1 1 623 20250519231946
165.22.118.155 1 1 623 20250527211952
159.203.33.131 1 1 623 20250529205046
208.100.26.244 1 1 623 20250520173300
5.135.58.206 1 1 623 20250520173701
147.185.132.27 1 1 623 20250530095923
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 22
20250502 3 3 1869 2
20250505 4 4 2492 1
20250506 4 4 2492 3
20250508 3 3 1869 3
20250509 1 1 623 1
20250513 3 3 1869 3
20250514 2 2 1246 2
20250515 3 3 1869 2
20250516 2 2 1246 1
20250517 3 3 1869 3
20250518 4 4 1869 2
20250519 23 23 11214 18
20250520 8 8 4984 7
20250522 6 6 1869 4
20250523 5 5 3115 3
20250525 1 1 623 1
20250526 1 1 623 1
20250527 4 4 2492 4
20250528 3 3 1869 3
20250529 1 1 623 1
20250530 3 3 1869 3
20250531 2 2 1246 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 4
0s-30s 65
30s-2mn 3
2mn-5mn 1
5mn-15mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 89 49840 70 70
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
100-500 8
500-1K 101
0-44 151
END_FILESIZE