One Hat Cyber Team

Edit File: awstats062023.invoice.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202306 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.invoice.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2017                
POS_TIME 2689                
POS_VISITOR 7613                
POS_DAY 8876                
POS_DOMAIN 3247                
POS_LOGIN 3582                
POS_ROBOT 3737                
POS_WORMS 3980                
POS_EMAILSENDER 4111                
POS_EMAILRECEIVER 4254                
POS_SESSION 9238                
POS_SIDER 9396                
POS_FILETYPES 4389                
POS_DOWNLOADS 4491                
POS_OS 4539                
POS_BROWSER 4698                
POS_SCREENSIZE 5022                
POS_UNKNOWNREFERER 5096                
POS_UNKNOWNREFERERBROWSER 5819                
POS_ORIGIN 6247                
POS_SEREFERRALS 6379                
POS_PAGEREFS 6523                
POS_SEARCHWORDS 6671                
POS_KEYWORDS 6823                
POS_MISC 2353                
POS_ERRORS 6882                
POS_CLUSTER 3438                
POS_SIDER_404 7003                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230701155853 1 0 15295485307864
FirstTime 20230601191236
LastTime 20230630143710
LastUpdate 20230702071521 1 0 0 0 0
TotalVisits 31                  
TotalUnique 31                  
MonthHostsKnown 0                   
MonthHostsUnknown 31                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 6 0
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
TotalMisc 0 0 0
JavascriptDisabled 0 0 0
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
DirectorSupport 0 0 0
RealPlayerSupport 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 0 0 0
1 2 2 4556 0 1 0
2 1 1 2278 1 1 6137
3 2 2 8411 0 1 0
4 2 2 4553 0 2 0
5 2 2 8478 0 1 24
6 0 0 0 1 1 6189
7 0 0 0 0 0 0
8 10 10 15728 17 17 43853
9 0 0 0 1 1 6137
10 0 0 0 0 0 0
11 0 0 0 0 0 0
12 5 5 20185 18 20 3925
13 1 1 2288 0 0 0
14 2 2 12274 0 1 24
15 2 2 8414 0 0 0
16 2 2 4566 0 0 0
17 0 0 0 1 1 6137
18 1 1 6189 0 0 0
19 1 1 6189 0 0 0
20 1 1 2288 0 0 0
21 1 1 6137 1 1 6189
22 0 0 0 0 0 0
23 1 1 2277 0 0 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 10
us 16 16 35463
ca 6 6 36926
id 3 3 6830
be 2 2 4565
ao 2 2 5625
jp 2 2 12274
cn 2 2 8478
eu 1 1 2289
zz 1 1 87
ma 1 1 2274
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
no_user_agent 6 36978 20230625023059 0
Go\-http\-client/ 2 4567 20230624083130 0
unknown 2 48 20230624142827 2
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
Unknown 6 3737 0 0
html 30 111074 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
macosx11 1 1
linux 4 4
win10 9 9
win7 2 2
androidmarshmallow 1 1
ios_iphone 2 2
Unknown 17 17
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 14
chrome52.0.3233.98 1 1
Unknown 9 9
mozilla 8 8
chrome112.0.5615.121 1 1
chrome83.0.4103.61 1 1
chrome78.0.3904.108 2 2
chrome79.0.3945.79 1 1
chrome108.0.0.0 3 3
safari 2 2
chrome63.0.3239.132 1 1
firefox47.0 1 1
chrome114.0.0.0 4 4
chrome106.0.0.0 1 1
chrome110.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 6
BDFetch 20230624142827
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230629041540
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230615235519
Cpanel-HTTP-Client/1.0 20230624082945
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230630143710
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20230624082959
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
BDFetch 20230624142827
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230630143710
Cpanel-HTTP-Client/1.0 20230624082945
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 34 34
From1 1 1
From2 0 0
From3 0 0
From4 1 1
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
406 18 4068
403 1 6083
404 12 26788
409 1 83
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 12
/.git/config 1 -
/v2/_catalog 1 -
/about 1 -
/config.json 1 -
/telescope/requests 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/_all_dbs 1 -
/debug/default/view 1 -
/.DS_Store 1 -
/.vscode/sftp.json 1 -
/s/3343e2231313e2538313e2239313/_/ 1 -
/login.action 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 31
102.176.94.158 2 2 4554 20230628160522
183.136.225.44 2 2 8478 20230608055032
43.159.61.31 2 2 12274 20230613123624
205.169.39.195 2 2 4574 20230624083202
192.185.112.43 2 2 128 20230624082945
198.235.24.44 1 1 6137 20230630143710
164.92.93.41 1 1 2289 20230625160755
87.236.176.137 1 1 2277 20230615235519
143.198.74.52 1 1 2278 20230622011309
104.131.162.117 1 1 2287 20230619080149
198.235.24.184 1 1 6189 20230601191236
167.248.133.49 1 1 2278 20230605015436
45.222.192.250 1 1 2274 20230629034025
87.236.176.4 1 1 2288 20230602130451
162.243.184.251 1 1 6189 20230624083055
65.154.226.168 1 1 2288 20230625201539
65.154.226.167 1 1 2278 20230625023115
205.210.31.34 1 1 6137 20230602031004
167.248.133.36 1 1 2286 20230625120643
154.160.4.11 1 1 2277 20230619122436
154.160.10.176 1 1 3348 20230619121234
138.199.15.157 1 1 2289 20230624083656
100.25.126.64 1 1 6137 20230624142827
167.248.133.189 1 1 2277 20230629041540
205.210.31.98 1 1 6137 20230605213010
34.222.153.98 1 1 87 20230624082959
102.176.94.247 1 1 2276 20230623045625
205.210.31.129 1 1 6189 20230612184605
198.235.24.197 1 1 6137 20230612154805
23.178.112.209 1 1 87 20230624082959
18.118.8.157 1 1 87 20230624082959
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 15
20230601 1 1 6189 1
20230602 2 2 8425 2
20230605 2 2 8415 2
20230608 2 2 8478 1
20230612 2 2 12326 2
20230613 2 2 12274 1
20230615 1 1 2277 1
20230619 3 3 7912 3
20230622 1 1 2278 1
20230623 1 1 2276 1
20230624 10 10 19578 8
20230625 4 4 9141 4
20230628 2 2 4554 1
20230629 2 2 4551 2
20230630 1 1 6137 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 29
5mn-15mn 2
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 5
/ 30 111074 26 26
/.well-known/acme-challenge/JW5bhnrb7HtHbtPrdqV3NI9Bbwniuwk8sdLuict6gU4 3 261 3 3
/.well-known/acme-challenge/RQ5WXF7VLKQQW269YC50-SR_6SMA3Z41 1 64 0 1
/login 1 3348 1 1
/.well-known/acme-challenge/O4VKDV_BOK6LZNO9EUV9VN2SJFNBL5-V 1 64 1 0
END_SIDER