One Hat Cyber Team

View File Name : awstats022025.forig.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202502 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.forig.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2049                
POS_TIME 2727                
POS_VISITOR 8993                
POS_DAY 9994                
POS_DOMAIN 3334                
POS_LOGIN 3627                
POS_ROBOT 3782                
POS_WORMS 4027                
POS_EMAILSENDER 4158                
POS_EMAILRECEIVER 4301                
POS_SESSION 10458               
POS_FILESIZE 11171               
POS_SIDER 10664               
POS_FILETYPES 4436                
POS_DOWNLOADS 4620                
POS_OS 4668                
POS_BROWSER 4827                
POS_SCREENSIZE 5124                
POS_UNKNOWNREFERER 5198                
POS_UNKNOWNREFERERBROWSER 5640                
POS_ORIGIN 5888                
POS_SEREFERRALS 6023                
POS_PAGEREFS 6167                
POS_SEARCHWORDS 6555                
POS_KEYWORDS 6707                
POS_MISC 2391                
POS_ERRORS 6766                
POS_CLUSTER 3483                
POS_SIDER_404 6916                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250301033630 26 4346 14077895828949
FirstTime 20250206042358
LastTime 20250228201802
LastUpdate 20250301062405 26 0 25 0 0
TotalVisits 89                  
TotalUnique 18                  
MonthHostsKnown 0                   
MonthHostsUnknown 28                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
RealPlayerSupport 0 0 0
AddToFavourites 0 6 0
WindowsMediaPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
TotalMisc 0 0 0
PDFSupport 0 0 0
DirectorSupport 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 16 16 0 121 123 396810
1 1 1 0 1 1 0
2 3 3 0 50 50 1676482
3 1 1 0 24 24 60684
4 37 48 332964 79 79 321194
5 4 4 0 9 12 4119
6 3 3 0 47 48 473002
7 3 5 8238 12 14 0
8 4 4 0 69 69 1660098
9 10 11 4119 11 12 0
10 2 2 0 7 7 0
11 7 7 0 33 37 166713
12 1 1 0 2 2 0
13 3 3 0 9 9 54075
14 3 4 4119 2 3 0
15 2 2 0 50 50 1651328
16 6 6 0 29 29 3616
17 1 3 536278 3 3 226
18 5 5 0 5 5 0
19 5 5 0 6 9 27031
20 7 7 0 7 7 0
21 6 8 536278 8 8 0
22 7 10 540397 8 9 30269
23 6 6 0 29 29 439417
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 6
us 136 148 233224
gb 3 4 57784
ca 2 4 58258
zz 2 2 174
cn 0 6 1608834
eu 0 1 4119
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
Go\-http\-client/ 10 6819 20250220042459 0
no_user_agent 3 49933 20250217020712 0
unknown 1 119 20250216112735 1
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 7
woff2 2 107200 0 0
Unknown 12 998 0 0
css 5 10093 0 0
png 5 20595 0 0
js 12 1653624 0 0
html 9 169883 0 0
php 120 0 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
linux 7 2
ios_ipad 2 2
androidmarshmallow 1 1
win7 7 1
Unknown 133 132
android 3 3
win10 12 2
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 12
chrome52.0.3233.98 1 1
chrome125.0.6422.60 7 2
chrome79.0.3945.79 7 2
chrome118.0.5993.80 3 3
safari11.0 2 2
chrome49.0.2623.112 6 0
chrome126.0.0.0 2 0
chrome106.0.0.0 1 0
chrome83.0.4103.61 1 1
Unknown 122 122
chrome132.0.0.0 2 0
mozilla 11 10
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250226222053
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20250206042400
WordPress/6.7.1;_https://forig.probitconsult.com 20250211040940
Cpanel-HTTP-Client/1.0 20250206042358
WordPress/6.7.2;_https://forig.probitconsult.com 20250228201802
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
WordPress/6.7.2;_https://forig.probitconsult.com 20250228201802
WordPress/6.7.1;_https://forig.probitconsult.com 20250211040940
Cpanel-HTTP-Client/1.0 20250206042358
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 141 142
From1 0 0
From2 0 0
From3 0 6
From4 2 17
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 6
http://manage.vpscore.webcomum.com 0 1
https://a.gentleforest-f7b3a3f9.centralus.azurecontainerapps.io 0 1
http://o69iay0p.zx.chinapower.com 0 1
https://www.wuxirs.com 0 1
https://www.secure.marcial.ru 0 1
https://sophypublications.com 0 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 6
403 38 92581
503 1 428
406 131 29606
409 3 1349
404 175 6784229
301 271 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 82
/actuator/env 5 -
/phpinfoposmeta.php 1 -
/admin/.env 2 -
/php-info.php 1 -
/developer.php 1 -
/_profiler/phpinfo/info.php 1 -
/v2/_catalog 5 -
/.env.json 2 -
/admin/phpinfo.php 1 -
/phpinfo.php 3 -
/phpinfo 1 -
/.phpinfo 1 -
/cache.php 1 -
/backend/phpinfo.php 1 -
/backend/web/phpinfo.php 1 -
/admincontrol/sys_phpinfo.php 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 5 -
/dashboard/test.php 1 -
/wp 2 www.google.com
/dashboard/i.php 1 -
/api/env 2 -
/.env.save 2 -
/phpinfo2.php 1 -
/admin/server_info.php 1 -
/about 1 -
/public/phpinfo.php 1 -
/application-dev.properties 2 -
/test.php 1 -
/debug/default/view 5 -
/adminphp.php 1 -
/server 5 -
/telescope/requests 5 -
/s/3343e2231313e2538313e2239313/_/ 5 -
/server-info.php 1 -
/.vscode/sftp.json 10 -
/frontend_dev.php/$ 1 -
/_profiler/phpinfo 3 -
/admin/info.php 1 -
/config.json 6 -
/apache/info.php 1 -
/wordpress/wp-admin/setup-config.php 1 -
/adminphp.php/configuration.php 1 -
/apache.php 1 -
/debug.php 1 -
/apache2.php 1 -
/login.action 5 -
/wordpress 2 www.google.com
/admin/sys_phpinfo.php 1 -
/info.php 8 -
/config/php.ini 2 -
/dashboard/phpinfo.php 1 -
/config/cache.php 1 -
/phpinfo/config.php 1 -
/dashboard/info.php 1 -
/.DS_Store 5 -
/phpinfo3.php 1 -
/db_config.php 2 -
/ 1 -
/phpinfo4.php 1 -
/devs.php 1 -
/server_info.php 1 -
/php_info.php 2 -
/ads.txt 2 -
/.AWS_/credentials 2 -
/tool/phpinfo.php 1 -
/.env.development 2 -
/apache/i.php 1 -
/_all_dbs 5 -
/karma.conf.json 2 -
/.git/config 8 -
/admin_phpinfo.php 1 -
/build.php 1 -
/apache/phpinfo.php 1 -
/wp-content/plugins/wp-automatic/inc/csv.php 1 -
/package.json 2 -
/in.php 1 -
/.json 2 -
/_profiler/phpinfo/phpinfo.php 1 -
/deploy.php 1 -
/sftp-config.json 5 -
/ppinfo.php 1 -
/.env.production 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 28
192.185.112.43 122 122 128 20250228201802
205.169.39.251 3 8 106956 20250206042609
88.99.26.177 3 3 53665 20250206044138
154.28.222.214 1 1 13257 20250206042537
54.245.2.19 1 1 87 20250206042359
13.60.86.217 1 1 87 20250206042359
23.178.112.107 1 1 87 20250206042359
18.119.127.74 1 1 87 20250206042359
3.143.224.65 1 1 87 20250206042359
47.129.14.232 1 1 87 20250206042400
13.60.242.94 1 1 87 20250206042359
154.28.222.41 1 1 13257 20250206042539
35.86.82.130 1 1 87 20250206042359
23.178.112.103 1 1 87 20250206042359
34.122.147.229 1 2 16505 20250206042552
159.89.12.166 1 1 49933 20250206042409
54.255.176.89 1 1 87 20250206042400
104.197.69.115 1 2 54799 20250206042554
64.15.129.107 0 1 4119 
106.75.146.146 0 2 536278 
34.123.170.104 0 3 22395 
205.169.39.46 0 1 1199 
51.178.81.195 0 1 4119 
106.75.175.130 0 2 536278 
138.199.47.238 0 1 4119 
106.75.166.28 0 2 536278 
162.142.125.125 0 1 4119 
64.15.129.126 0 1 4119 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 23
20250206 43 64 1958274 24
20250207 13 13 0 6
20250208 5 5 0 4
20250209 2 2 0 2
20250210 6 6 0 3
20250211 15 15 0 3
20250212 6 6 0 3
20250213 3 3 0 3
20250214 4 4 0 4
20250215 1 1 0 1
20250216 5 5 0 3
20250217 4 4 0 3
20250218 3 3 0 2
20250219 3 3 0 2
20250220 4 4 0 4
20250221 4 4 0 3
20250222 4 4 0 3
20250223 4 4 0 3
20250224 2 2 0 2
20250225 2 2 0 2
20250226 3 4 4119 3
20250227 5 5 0 4
20250228 2 2 0 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 7
5mn-15mn 7
0s-30s 70
1h+ 1
15mn-30mn 1
30s-2mn 1
2mn-5mn 1
30mn-1h 8
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 7
/wp-cron.php 120 0 71 72
/ 9 169883 6 5
/.well-known/acme-challenge/k2cAWe2wZm75SZI4mBZYTOjStZLEAJDLsdEyKMDeg98 5 435 5 5
/.well-known/acme-challenge/aKcHdBcETlIbKi6ZJug6EpO7vJJX1bZIR3nqIwuhB-4 5 435 5 5
/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 2 107200 1 2
/.well-known/acme-challenge/BW1I678K6--M7DN97834RQT4_VUC-ZUB 1 64 1 0
/.well-known/acme-challenge/ZT569PE-J7P0AAW7LHAJ8OEAPOKCIKYB 1 64 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
100-500 169
0-44 399
44-100 14
1K-2K 6
5K+ 208
2K-5K 8
END_FILESIZE