One Hat Cyber Team

Edit File: awstats062025.dev.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202506 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.dev.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2050                
POS_TIME 2710                
POS_VISITOR 8003                
POS_DAY 9393                
POS_DOMAIN 3297                
POS_LOGIN 3591                
POS_ROBOT 3746                
POS_WORMS 4096                
POS_EMAILSENDER 4227                
POS_EMAILRECEIVER 4370                
POS_SESSION 9804                
POS_FILESIZE 10039               
POS_SIDER 9961                
POS_FILETYPES 4505                
POS_DOWNLOADS 4587                
POS_OS 4635                
POS_BROWSER 4793                
POS_SCREENSIZE 5199                
POS_UNKNOWNREFERER 5273                
POS_UNKNOWNREFERERBROWSER 5731                
POS_ORIGIN 6098                
POS_SEREFERRALS 6230                
POS_PAGEREFS 6374                
POS_SEARCHWORDS 6522                
POS_KEYWORDS 6674                
POS_MISC 2374                
POS_ERRORS 6733                
POS_CLUSTER 3447                
POS_SIDER_404 6830                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250701001454 2 254 9638162048732
FirstTime 0
LastTime 20250628003808
LastUpdate 20250701081034 2 0 1 0 0
TotalVisits 36                  
TotalUnique 35                  
MonthHostsKnown 0                   
MonthHostsUnknown 35                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 0 0
WindowsMediaPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
JavaEnabled 0 0 0
TotalMisc 0 0 0
QuickTimeSupport 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
FlashSupport 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 1246 4 4 0
1 0 0 0 0 0 0
2 4 4 2492 9 14 3365
3 2 2 1246 2 5 246
4 1 1 623 0 0 0
5 2 2 623 13 20 623
6 3 3 1869 2 6 246
7 0 0 0 1 1 623
8 5 5 3115 5 9 492
9 5 5 3115 14 24 6476
10 2 2 1246 4 8 250
11 4 4 2492 5 7 3115
12 1 1 623 17 22 1869
13 2 2 1246 6 9 246
14 0 0 0 2 3 623
15 2 2 623 14 16 6853
16 1 1 623 0 0 0
17 1 1 623 4 4 0
18 2 2 1246 7 10 1246
19 1 1 623 10 12 4607
20 0 0 0 0 0 0
21 0 0 0 30 49 8099
22 3 3 1869 5 7 623
23 4 4 2492 8 12 3115
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 7
us 29 29 16821
ca 8 8 4984
cn 6 6 3738
zz 1 1 623
ru 1 1 623
au 1 1 623
de 1 1 623
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 6
bot[\s_+:,\.\;\/\\-] 47 29281 20250628212033 0
curl 6 3738 20250625141044 0
no_user_agent 5 3115 20250629224826 0
Go\-http\-client/ 3 1869 20250625112905 0
survey 2 1246 20250607072719 0
scrapy 2 1246 20250604124144 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 47 28035 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
macosx15 3 3
win10 3 3
macosx7 2 2
win7 3 3
linux 7 7
win8.1 1 1
android10 1 1
Unknown 27 27
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 18
chrome17.0.963.56 2 2
chrome137.0.0.0 3 3
chrome122.0.0.0 2 2
chrome78.0.3904.108 1 1
firefox136.0 1 1
firefox138.0 1 1
chrome120.0.0.0 1 1
chrome135.0.0.0 1 1
Unknown 7 7
opera60.0.3255.70 1 1
mozilla 20 20
chrome78.0.3904.62 1 1
chrome83.0.4103.61 1 1
chrome121.0.0.0 1 1
chrome63.0.3239.132 1 1
chrome71.0.2623.112 1 1
chrome84.0.4115.0 1 1
msie11 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250628003808
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250621103759
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250628003808
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 47 47
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 137 0
301 9 2222
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 49
/manifest.json 1 -
/core/misc/drupal.js 1 -
/js/env.js 1 -
/ 3 -
/.well-known/security.txt 3 -
/firebase-config.js 1 -
/@fs/etc/hosts 1 -
/app-settings.js 1 -
/aws-exports.js 1 -
/phpinfo.php 3 -
/application/.env 3 -
/misc/drupal.js 1 -
/config.json 4 -
/js/config.js 3 -
/firebase.js 1 -
/@fs/C:/boot.ini 1 -
/credentials.json 1 -
/settings.js 1 -
/js/app.js 3 -
/ads.txt 5 -
/.env.prod 3 -
/wiki 3 -
/.env 4 -
/sitemap.xml 2 -
/dev/.env 3 -
/.git/HEAD 4 -
/secrets.json 1 -
/login 2 -
/phpinfo 3 -
/assets/config.js 1 -
/assets/env.js 3 -
/.git/ 1 -
/@fs/etc/passwd 2 -
/.hg/hgrc 2 -
/runtime-env.js 1 -
/.git/config 10 -
/_profiler/phpinfo 3 -
/php_info.php 3 -
/js/settings.js 1 -
/.env.save 3 -
/security.txt 1 -
/robots.txt 13 -
/assets/settings.js 1 -
/cgi-bin/ 18 -
/@fs/C:/windows/win.ini 1 -
/api/config.js 2 -
/config.js 1 -
/api/.env 3 -
/env.js 3 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 35
115.231.78.8 2 2 1246 20250625112918
167.94.138.116 2 2 1246 20250615083850
199.45.155.70 2 2 1246 20250615063829
162.142.125.39 2 2 1246 20250606235155
162.142.125.212 2 2 1246 20250621095339
167.94.138.204 2 2 1246 20250618190024
199.45.155.81 2 2 1246 20250621030150
206.168.34.115 2 2 1246 20250621103759
206.168.34.203 2 2 1246 20250618085909
199.45.155.99 2 2 1246 20250621023900
167.94.138.183 2 2 1246 20250615134826
205.210.31.248 2 2 1246 20250624125938
27.115.124.41 1 1 623 20250609224758
18.222.37.12 1 1 0 20250611052901
159.89.113.231 1 1 623 20250611021207
208.100.26.249 1 1 623 20250619005207
205.210.31.243 1 1 623 20250620152247
205.210.31.54 1 1 623 20250624231651
139.59.12.30 1 1 623 20250625094200
137.184.40.109 1 1 623 20250611181630
198.235.24.51 1 1 623 20250627025357
208.100.26.236 1 1 623 20250604092642
27.115.124.97 1 1 623 20250609224748
198.235.24.145 1 1 623 20250628003808
159.223.136.66 1 1 623 20250603093853
106.54.200.247 1 1 623 20250608174729
170.39.218.61 1 1 623 20250622115700
172.233.156.98 1 1 623 20250625161209
3.145.200.8 1 1 0 20250609155547
198.235.24.26 1 1 623 20250620085612
94.159.108.209 1 1 623 20250604064554
31.220.0.86 1 1 623 20250612040758
27.115.124.66 1 1 623 20250609224715
208.100.26.248 1 1 623 20250612115205
161.35.126.107 1 1 623 20250617055541
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 18
20250603 2 2 1246 2
20250604 2 2 1246 2
20250606 2 2 1246 1
20250608 1 1 623 1
20250609 4 4 1869 4
20250611 3 3 1246 3
20250612 2 2 1246 2
20250615 6 6 3738 3
20250617 1 1 623 1
20250618 4 4 2492 2
20250619 1 1 623 1
20250620 2 2 1246 2
20250621 8 8 4984 4
20250622 1 1 623 1
20250624 2 2 1246 2
20250625 4 4 2492 3
20250627 1 1 623 1
20250628 1 1 623 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 30
30s-2mn 6
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 47 28035 36 36
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
0-44 170
500-1K 110
100-500 9
END_FILESIZE