One Hat Cyber Team

View File Name : awstats042023.scl.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202304 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/ssl/awstats.scl.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2017                
POS_TIME 2678                
POS_VISITOR 7339                
POS_DAY 8208                
POS_DOMAIN 3235                
POS_LOGIN 3501                
POS_ROBOT 3656                
POS_WORMS 3870                
POS_EMAILSENDER 4001                
POS_EMAILRECEIVER 4144                
POS_SESSION 8490                
POS_SIDER 8637                
POS_FILETYPES 4279                
POS_DOWNLOADS 4413                
POS_OS 4461                
POS_BROWSER 4619                
POS_SCREENSIZE 4900                
POS_UNKNOWNREFERER 4974                
POS_UNKNOWNREFERERBROWSER 5533                
POS_ORIGIN 5900                
POS_SEREFERRALS 6033                
POS_PAGEREFS 6177                
POS_SEARCHWORDS 6325                
POS_KEYWORDS 6477                
POS_MISC 2342                
POS_ERRORS 6536                
POS_CLUSTER 3357                
POS_SIDER_404 6645                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230422200041 3 344 13420842532825
FirstTime 0
LastTime 20230422200041
LastUpdate 20230422230451 3 0 3 0 0
TotalVisits 19                  
TotalUnique 19                  
MonthHostsKnown 0                   
MonthHostsUnknown 21                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
FlashSupport 0 0 0
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 4 0
RealPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
JavaEnabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 6219 2 2 452
1 0 0 0 0 0 0
2 0 0 0 0 0 0
3 1 1 2314 0 1 0
4 0 0 0 1 1 6167
5 0 0 0 1 1 6219
6 0 0 0 1 1 2313
7 0 0 0 0 0 0
8 1 27 11177953 2 2 8533
9 1 1 6219 18 18 23634
10 0 0 0 0 0 0
11 2 2 0 1 1 6219
12 0 0 0 0 0 0
13 1 1 2299 1 2 2312
14 2 2 8519 1 2 2313
15 0 0 0 0 0 0
16 1 1 6219 1 1 2313
17 1 1 0 1 1 6167
18 1 1 2312 0 0 0
19 1 1 6167 0 0 0
20 4 4 9230 0 2 1164
21 0 0 0 0 0 0
22 1 1 6167 0 0 0
23 3 3 10764 0 1 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 4
us 10 36 11187914
ca 9 9 47948
gb 1 1 6219
be 1 1 2301
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
Go\-http\-client/ 7 16191 20230406164111 0
no_user_agent 6 37210 20230422080258 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 4
html 19 72596 0 0
Unknown 2 0 0 0
css 2 282932 0 0
js 24 10888854 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
win10 12 3
win7 8 0
androidmarshmallow 1 1
macosx15 1 1
Unknown 12 12
linux 12 3
android 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 11
chrome79.0.3945.79 9 0
chrome52.0.3233.98 1 1
chrome111.0.5563.64 9 0
chrome89.0.4389.82 2 2
chrome103.0.5060.114 1 1
mozilla 6 6
chrome83.0.4103.61 8 0
chrome92.0.4515.131 1 1
chrome74.0.3729.169 2 2
Unknown 7 7
safari15.6.1 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230411200044
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230420133434
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230420194210
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230420194210
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 19 19
From1 0 0
From2 0 0
From3 0 0
From4 2 28
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
403 1 6083
404 15 7644
406 3 678
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 15
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/config.json 1 -
/static/admin/javascript/hetong.js 1 -
/.vscode/sftp.json 1 -
/.DS_Store 1 -
/.git/config 1 -
/info.php 1 -
/s/3343e2231313e2538313e2239313/_/ 1 -
/about 1 -
/telescope/requests 1 -
/v2/_catalog 1 -
/api/search 1 -
/debug/default/view 1 -
/login.action 1 -
/Public/home/js/check.js 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 21
144.91.106.14 2 2 4618 20230422200041 20230422200041 /
69.167.12.37 2 2 0 20230411110557
205.210.31.25 1 1 6167 20230407080525
162.142.125.12 1 1 2299 20230420133434
167.94.138.49 1 1 2299 20230408230136
87.236.176.250 1 1 2301 20230411200044
198.235.24.42 1 1 6219 20230404142907
47.254.25.10 1 1 2311 20230402204121
52.91.234.19 1 1 0 20230414175730
167.248.133.185 1 1 2314 20230414034734
47.242.105.176 1 1 2312 20230402185918
205.210.31.223 1 1 6167 20230420194210
205.210.31.176 1 1 6167 20230411232319
35.180.47.78 1 1 2298 20230419235217
198.235.24.116 1 1 6167 20230418220423
167.94.138.125 1 1 2300 20230412144316
205.210.31.24 1 1 6219 20230412005941
205.210.31.186 1 1 6219 20230414164222
167.172.20.95 1 1 6219 20230402091250
65.154.226.170 0 9 3771084 
205.169.39.250 0 17 7400702 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 11
20230402 3 29 11182628 3
20230404 1 1 6219 1
20230407 1 1 6167 1
20230408 1 1 2299 1
20230411 4 4 8468 3
20230412 2 2 8519 2
20230414 3 3 8533 3
20230418 1 1 6167 1
20230419 1 1 2298 1
20230420 2 2 8466 2
20230422 2 2 4618 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 18
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 2
/ 19 72596 18 17
/login 2 0 1 1
END_SIDER