One Hat Cyber Team

Edit File: awstats092023.dev.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202309 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.dev.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2013                
POS_TIME 2684                
POS_VISITOR 7979                
POS_DAY 9352                
POS_DOMAIN 3265                
POS_LOGIN 3591                
POS_ROBOT 3746                
POS_WORMS 3962                
POS_EMAILSENDER 4093                
POS_EMAILRECEIVER 4236                
POS_SESSION 9677                
POS_SIDER 9844                
POS_FILETYPES 4371                
POS_DOWNLOADS 4506                
POS_OS 4554                
POS_BROWSER 4737                
POS_SCREENSIZE 5097                
POS_UNKNOWNREFERER 5171                
POS_UNKNOWNREFERERBROWSER 5871                
POS_ORIGIN 6276                
POS_SEREFERRALS 6410                
POS_PAGEREFS 6554                
POS_SEARCHWORDS 6702                
POS_KEYWORDS 6854                
POS_MISC 2348                
POS_ERRORS 6913                
POS_CLUSTER 3447                
POS_SIDER_404 7048                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20231001112438 1 0 5892967239382
FirstTime 20230901103758
LastTime 20230929002636
LastUpdate 20231002072620 1 0 0 0 0
TotalVisits 34                  
TotalUnique 34                  
MonthHostsKnown 0                   
MonthHostsUnknown 34                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 6 0
FlashSupport 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
JavaEnabled 0 0 0
QuickTimeSupport 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 4597 0 0 0
1 1 1 1477 2 3 416
2 3 8 146868 2 2 416
3 0 0 0 2 2 617
4 0 0 0 2 3 1711
5 0 0 0 1 1 2536
6 0 0 0 0 0 0
7 0 0 0 0 0 0
8 10 15 146041 35 35 72414
9 4 4 9067 5 6 1458
10 11 16 175957 23 25 21760
11 1 1 4597 3 3 1054
12 2 2 9218 0 0 0
13 4 4 18436 0 0 0
14 1 1 1480 3 4 5251
15 1 1 1479 4 5 5657
16 2 2 2961 2 2 419
17 3 3 4434 3 4 627
18 0 0 0 0 0 0
19 0 0 0 1 1 208
20 1 1 1481 3 3 5214
21 0 0 0 2 2 419
22 0 0 0 1 1 211
23 0 0 0 1 1 406
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 26 36 319689
fr 4 4 18436
it 3 3 13815
ru 3 8 149989
ca 2 2 9194
gb 2 2 9242
zz 2 2 174
be 2 2 2957
za 1 1 4597
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
bot[\s_+:,\.\;\/\\-] 4 3008 20230929041344 2
no_user_agent 3 13839 20230930143759 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 4
html 1 0 0 0
Unknown 41 96357 0 0
css 15 216048 0 0
woff2 3 215688 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 9
macosx6 2 2
Unknown 18 18
android 3 3
androidnougat 1 1
win7 1 1
ios_iphone 3 3
win10 10 5
linuxubuntu 13 8
linux 9 4
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 16
mozilla 14 14
firefox115.0 6 6
chrome116.0.5845.187 7 2
Unknown 4 4
chrome60.0.3112.107 1 1
firefox112.0 2 2
chrome83.0.4103.61 1 1
chrome104.0.0.0 2 2
chrome84.0.4147.105 1 1
firefox113.0 8 3
safari15.1 2 2
chrome79.0.3945.79 7 2
chrome89.0.4389.82 2 2
chrome112.0.0.0 1 1
chrome113.0.0.0 1 1
safari16.4 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20230915083602
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230923095621
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230911170047
Cpanel-HTTP-Client/1.0 20230915083601
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230929002636
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20230915083601
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230929002636
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 30 30
From1 0 0
From2 0 0
From3 0 0
From4 15 30
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
404 31 75331
301 6 1491
406 3 678
302 48 14281
403 2 12166
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 19
/.git/HEAD 1 -
/telescope/requests 2 -
/public/backup 1 http://dev.probitconsult.com/backup/
/.DS_Store 2 -
/login.action 2 -
/public/OLD 1 http://dev.probitconsult.com/OLD/
/.vscode/sftp.json 2 -
/debug/default/view 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/_all_dbs 2 -
/v2/_catalog 2 -
/.git/config 2 -
/config.json 2 -
/about 2 -
/public/old 1 http://dev.probitconsult.com/old/
/public/wp 1 http://dev.probitconsult.com/wp/
/public/blog 1 http://dev.probitconsult.com/blog/
/public/wordpress 1 http://dev.probitconsult.com/wordpress/
/s/3343e2231313e2538313e2239313/_/ 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 34
205.169.39.110 3 8 146868 20230916025555
185.242.7.134 3 8 149989 20230915100343
65.154.226.171 2 7 145391 20230915085719
144.91.106.14 2 2 2963 20230914091718
35.90.125.194 2 2 174 20230915083602
64.145.76.9 2 2 4597 20230915100207
79.137.65.46 2 2 9218 20230921123649
192.185.112.43 2 2 128 20230915083601
51.81.167.146 2 2 9242 20230915101308
18.234.235.143 1 1 1479 20230920160035
18.117.80.94 1 1 87 20230915083601
167.248.133.38 1 1 1479 20230920152239
167.94.138.49 1 1 1480 20230901103758
34.224.97.177 1 1 1482 20230920160151
37.187.215.251 1 1 4597 20230921133248
84.17.42.5 1 1 4597 20230915100207
167.94.146.51 1 1 1477 20230922011621
87.236.176.69 1 1 1476 20230911170047
23.178.112.102 1 1 87 20230915083602
167.248.133.123 1 1 1483 20230923095621
162.142.125.217 1 1 1480 20230917140759
143.198.219.56 1 1 1479 20230917102010
87.236.176.67 1 1 1481 20230910200108
197.242.159.229 1 1 4597 20230915100213
205.210.31.206 1 1 4597 20230929002636
23.178.112.106 1 1 87 20230915083602
198.235.24.58 1 1 4597 20230926111350
37.187.215.255 1 1 4621 20230921133248
37.187.215.242 1 1 4597 20230921134949
128.90.173.236 1 1 4597 20230915100207
37.187.215.246 1 1 4621 20230921134949
35.215.42.70 1 1 1476 20230920173445
167.94.138.33 1 1 1482 20230915170844
18.224.212.15 1 1 87 20230915083602
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 13
20230901 1 1 1480 1
20230910 1 1 1481 1
20230911 1 1 1476 1
20230914 2 2 2963 1
20230915 21 31 325142 14
20230916 3 8 146868 1
20230917 2 2 2959 2
20230920 4 4 5916 4
20230921 6 6 27654 5
20230922 1 1 1477 1
20230923 1 1 1483 1
20230926 1 1 4597 1
20230929 1 1 4597 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
30mn-1h 1
30s-2mn 2
0s-30s 31
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 7
/admin/login 33 95707 27 25
/.well-known/acme-challenge/o7GoMBkEmizRvFq0QAu8EiaC-lL2PXSN_T84Ir2JMcU 3 261 2 3
/backend/vendors/font-awesome/fonts/fontawesome-webfont.woff2 3 215688 0 3
/.well-known/acme-challenge/hrpe3qx2In2wL9i704bMuU6VBfxWeDSsZpmlOfjsvp4 3 261 3 2
/ 1 0 1 0
/.well-known/acme-challenge/XZLXPOY9RY8CCMF2EC6_0XQBB5NQ1CWA 1 64 0 1
/.well-known/acme-challenge/3FKBX2_N6874JZY2_0S6UZJ5RLZ6BV5P 1 64 1 0
END_SIDER