One Hat Cyber Team

View File Name : awstats072025.dev.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202507 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.dev.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2050                
POS_TIME 2721                
POS_VISITOR 9623                
POS_DAY 12309               
POS_DOMAIN 3325                
POS_LOGIN 3688                
POS_ROBOT 3843                
POS_WORMS 4315                
POS_EMAILSENDER 4446                
POS_EMAILRECEIVER 4589                
POS_SESSION 12784               
POS_FILESIZE 13009               
POS_SIDER 12931               
POS_FILETYPES 4724                
POS_DOWNLOADS 4806                
POS_OS 4854                
POS_BROWSER 5119                
POS_SCREENSIZE 5759                
POS_UNKNOWNREFERER 5833                
POS_UNKNOWNREFERERBROWSER 6689                
POS_ORIGIN 7232                
POS_SEREFERRALS 7364                
POS_PAGEREFS 7508                
POS_SEARCHWORDS 7656                
POS_KEYWORDS 7808                
POS_MISC 2385                
POS_ERRORS 7867                
POS_CLUSTER 3544                
POS_SIDER_404 7964                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250801222226 1 0 9102119383793
FirstTime 20250701001454
LastTime 20250731223731
LastUpdate 20250802081541 1 0 0 0 0
TotalVisits 76                  
TotalUnique 69                  
MonthHostsKnown 0                   
MonthHostsUnknown 69                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
PDFSupport 0 0 0
JavascriptDisabled 0 0 0
AddToFavourites 0 0 0
TotalMisc 0 0 0
JavaEnabled 0 0 0
DirectorSupport 0 0 0
QuickTimeSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
FlashSupport 0 0 0
RealPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 623 2 3 0
1 4 4 2492 1 1 0
2 3 3 1869 10 12 1246
3 0 0 0 6 7 3738
4 0 0 0 25 41 2492
5 1 1 623 1 1 0
6 2 2 1246 3 3 623
7 4 4 2492 12 14 0
8 2 2 1246 2 2 0
9 2 2 1246 4 4 0
10 7 7 4361 13 18 250
11 12 12 6853 64 68 6230
12 2 2 1246 6 6 0
13 10 10 6230 14 21 4607
14 7 7 4361 19 21 4361
15 1 1 623 8 10 3115
16 5 5 3115 6 11 246
17 7 7 3115 5 9 1492
18 2 2 1246 3 4 623
19 1 1 623 5 7 3115
20 2 2 1246 3 5 0
21 2 2 1246 21 27 11464
22 5 5 3115 6 12 3115
23 4 4 2492 5 6 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 13
us 46 46 28658
ca 8 8 4984
cn 8 8 4984
ru 7 7 3738
in 5 5 3115
de 3 3 1869
gb 2 2 0
rs 2 2 1246
bg 1 1 623
vn 1 1 623
be 1 1 623
pa 1 1 623
zz 1 1 623
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 10
bot[\s_+:,\.\;\/\\-] 50 31150 20250731215501 0
no_user_agent 7 4361 20250727214758 0
Go\-http\-client/ 4 2492 20250719111111 0
curl 3 1869 20250716112139 0
scanner 2 1246 20250719111213 0
survey 2 1246 20250707152634 0
scrapy 2 1246 20250705023532 0
link 1 623 20250721185047 0
php 1 623 20250712062058 0
Googlebot/ 1 623 20250724034242 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 86 51709 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 14
androidmarshmallow 2 2
Unknown 26 26
ios_iphone 1 1
macosx7 5 5
linuxubuntu 2 2
win8.1 1 1
android10 1 1
androidpie 1 1
macosx12 1 1
win10 17 17
androidoreo 1 1
ios_ipad 1 1
macosx15 6 6
linux 21 21
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 30
firefox134.0 2 2
chrome120.0.0.0 5 5
firefox121.0 1 1
chrome75.0.3770.101 1 1
firefox124.0 3 3
chrome58.0.3029.110 2 2
chrome75.0.3770.143 1 1
netscape5.0 2 2
chrome122.0.0.0 1 1
safari5.1 1 1
chrome137.0.0.0 9 9
chrome123.0.0.0 1 1
chrome79.0.3945.130 1 1
firefox137.0 4 4
chrome78.0.3904.87 1 1
mozilla 13 13
chrome41.0.2227.0 1 1
chrome108.0.0.0 2 2
chrome52.0.8393.98 2 2
chrome17.0.963.56 5 5
chrome75.0.3730.0 1 1
chrome117.0.0.0 3 3
Unknown 11 11
chrome76.0.3809.89 1 1
chrome121.0.0.0 2 2
chrome116.0.0.0 6 6
chrome83.0.4103.97 1 1
safari12.0 1 1
chrome76.0.3809.100 1 1
sec\- 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 7
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250721132006
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250705055127
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250709084643
SEC-SGHX820/1.0_NetFront/3.2_Profile/MIDP-2.0_Configuration/CLDC-1.1 20250720130631
Mozilla/5.0_zgrab/0.x 20250730125438
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250731223731
node 20250719111320
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250705055127
node 20250719111320
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250731223731
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 86 86
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 206 0
301 5 1238
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 68
/ 1 -
/php_info.php 1 -
/server-status 2 -
/credentials.json 1 -
/.vscode/sftp.json 2 -
/assets/settings.js 1 -
/config.js 1 -
/js/app.js 1 -
/sendgrid.env 1 -
/api/.env 1 -
/.git/HEAD 14 -
/secrets.json 1 -
/aws-exports.js 1 -
/.DS_Store 2 -
/settings.js 1 -
/telescope/requests 2 -
/wp-admin/install.php 1 -
/v2/_catalog 2 -
/assets/config.js 1 -
/runtime-env.js 1 -
/phpinfo.php 1 -
/.git/config 49 -
/dev/.env 1 -
/.env.example 1 -
/%3FC%3DM%3BO%3DA 3 -
/%3FC%3DD%3BO%3DA 3 -
/about 2 -
/robots.txt 20 -
/firebase-config.js 1 -
/installer.php 1 -
/misc/drupal.js 1 -
/core/misc/drupal.js 1 -
/s/131313e2739313e263e20353/_/ 2 -
/manifest.json 1 -
/actuator/env 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/_all_dbs 2 -
/server 2 -
/app-settings.js 1 -
/.env.save 1 -
/@vite/env 2 -
/js/settings.js 1 -
/wp-admin/setup-config.php 1 -
/_profiler/phpinfo 1 -
/firebase.js 1 -
/.well-known/security.txt 2 -
/js/env.js 1 -
/cgi-bin/ 15 https://dev.probitconsult.com:443/cgi-bin
/.env.prod 1 -
/.env 11 -
/info 1 -
/login.action 2 -
/phpinfo 1 -
/debug/default/view 2 -
/assets/env.js 1 -
/sitemap.xml 4 -
/env.js 1 -
/backend/.env 1 -
/admin/.env 1 -
/security.txt 1 -
/wordpress/ 2 -
/old/ 2 -
/application/.env 1 -
/info.php 2 -
/config.json 6 -
/%3FC%3DS%3BO%3DA 3 -
/%3FC%3DN%3BO%3DD 3 -
/js/config.js 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 69
199.45.155.103 2 2 1246 20250717213753
146.70.185.32 2 2 0 20250719174423
3.237.61.108 2 2 1246 20250720062054
103.196.9.105 2 2 1246 20250719111338
104.252.191.58 2 2 1246 20250719231409
199.45.155.99 2 2 1246 20250720100415
107.172.195.224 2 2 1246 20250719143738
199.45.154.143 2 2 1246 20250702173110
18.220.168.89 2 2 1246 20250719075545
45.148.10.80 2 2 1246 20250720113315
185.189.45.204 2 2 1246 20250720192536
172.96.160.216 2 2 1246 20250729012248
208.100.26.247 2 2 1246 20250709171126
213.209.143.116 2 2 1246 20250730144318
185.241.208.52 2 2 1246 20250727085344
206.168.34.70 2 2 1246 20250703161250
162.142.125.209 2 2 1246 20250721132006
195.211.77.140 1 1 0 20250719111130
104.252.191.125 1 1 623 20250719231409
206.81.24.74 1 1 623 20250719111104
101.199.254.207 1 1 623 20250703100400
205.210.31.69 1 1 623 20250705055127
91.134.91.17 1 1 623 20250719131149
87.236.176.149 1 1 623 20250703145140
164.92.165.134 1 1 623 20250723105506
167.235.250.30 1 1 623 20250719111231
101.198.0.181 1 1 623 20250721132444
27.115.124.33 1 1 623 20250720074740
162.220.234.12 1 1 623 20250719111320
103.4.250.93 1 1 623 20250719111327
64.227.187.3 1 1 623 20250701001454
64.227.149.245 1 1 623 20250720202420
205.210.31.213 1 1 623 20250718141722
179.43.149.114 1 1 623 20250721121734
198.235.24.155 1 1 623 20250726064647
164.90.158.203 1 1 623 20250723203656
195.211.77.142 1 1 623 20250719111136
170.39.218.62 1 1 623 20250701130443
101.198.0.189 1 1 623 20250721132507
198.235.24.140 1 1 623 20250723014558
198.235.24.165 1 1 623 20250717151901
162.55.173.215 1 1 623 20250719111221
101.199.254.199 1 1 623 20250703100356
147.185.132.102 1 1 623 20250731223731
172.233.156.98 1 1 623 20250717092444
3.146.111.124 1 1 623 20250711012637
198.235.24.254 1 1 623 20250701141913
205.210.31.229 1 1 623 20250721163539
185.247.137.236 1 1 623 20250709084643
91.231.89.120 1 1 623 20250720184907
143.110.222.231 1 1 623 20250722222537
155.94.155.152 1 1 623 20250720093323
143.110.225.122 1 1 623 20250721220003
205.210.31.74 1 1 623 20250731222956
174.138.95.121 1 1 623 20250715160353
171.244.43.14 1 1 623 20250720135442
162.220.234.19 1 1 623 20250719111319
104.164.126.113 1 1 623 20250719143728
27.115.124.96 1 1 623 20250720074704
194.163.152.77 1 1 623 20250720014326
3.138.185.30 1 1 623 20250730125438
64.227.139.202 1 1 623 20250719230249
101.199.254.198 1 1 623 20250703100332
138.197.163.44 1 1 623 20250709020518
101.198.0.180 1 1 623 20250721132349
209.38.208.202 1 1 623 20250719111104
91.231.89.124 1 1 623 20250720183838
134.209.27.108 1 1 623 20250728223823
198.55.98.91 1 1 623 20250721173536
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 21
20250701 3 3 1869 3
20250702 2 2 1246 1
20250703 7 7 4361 6
20250705 1 1 623 1
20250709 3 3 1869 3
20250711 1 1 623 1
20250714 1 1 623 1
20250715 1 1 623 1
20250717 4 4 2492 3
20250718 2 2 1246 2
20250719 24 24 13083 19
20250720 15 15 9345 14
20250721 9 9 5607 8
20250722 1 1 623 1
20250723 3 3 1869 3
20250726 1 1 623 1
20250727 1 1 623 1
20250728 1 1 623 1
20250729 1 1 623 1
20250730 3 3 1869 3
20250731 2 2 1246 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 76
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 86 51709 76 76
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
100-500 5
500-1K 156
0-44 238
END_FILESIZE