One Hat Cyber Team

View File Name : awstats102023.invoice.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202310 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.invoice.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2017                
POS_TIME 2691                
POS_VISITOR 7505                
POS_DAY 8772                
POS_DOMAIN 3268                
POS_LOGIN 3554                
POS_ROBOT 3709                
POS_WORMS 3993                
POS_EMAILSENDER 4124                
POS_EMAILRECEIVER 4267                
POS_SESSION 9096                
POS_SIDER 9253                
POS_FILETYPES 4402                
POS_DOWNLOADS 4519                
POS_OS 4567                
POS_BROWSER 4726                
POS_SCREENSIZE 4991                
POS_UNKNOWNREFERER 5065                
POS_UNKNOWNREFERERBROWSER 5687                
POS_ORIGIN 6115                
POS_SEREFERRALS 6247                
POS_PAGEREFS 6391                
POS_SEARCHWORDS 6539                
POS_KEYWORDS 6691                
POS_MISC 2355                
POS_ERRORS 6750                
POS_CLUSTER 3410                
POS_SIDER_404 6895                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20231101050208 2 391 27721145152521
FirstTime 20231001085215
LastTime 20231031162633
LastUpdate 20231101072847 2 0 1 0 0
TotalVisits 32                  
TotalUnique 31                  
MonthHostsKnown 0                   
MonthHostsUnknown 31                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 6 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
JavaEnabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 2 2 8335
1 2 2 8323 2 2 7852
2 0 0 0 0 0 0
3 1 1 6017 0 1 24
4 1 1 2269 0 0 0
5 2 2 8333 2 4 885
6 1 1 2267 0 1 0
7 0 0 0 0 0 0
8 9 9 17049 18 19 43692
9 1 1 2270 1 1 6017
10 2 2 15220 19 19 4167
11 3 3 10541 3 4 6326
12 0 0 0 2 2 6100
13 0 0 0 2 2 166
14 2 2 8284 2 2 861
15 1 1 2269 3 4 408
16 4 4 16617 2 2 166
17 2 2 4534 2 2 6148
18 1 1 6017 3 3 249
19 2 2 8284 0 1 0
20 0 0 0 1 1 83
21 2 2 9870 20 20 4250
22 0 0 0 0 0 0
23 0 0 0 0 0 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 6
us 22 22 64664
ca 8 8 44532
cn 3 3 14350
ao 1 1 2264
zz 1 1 87
nl 1 1 2267
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
no_user_agent 7 43856 20231030121458 0
Go\-http\-client/ 3 4530 20231024083114 0
unknown 2 48 20231025035855 2
archive\.org_bot 1 2270 20231030001932 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
Unknown 5 389 0 0
cgi 3 22830 0 0
html 28 104945 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
win7 2 2
win10 4 4
ios_iphone 2 2
macosx11 2 2
androidmarshmallow 1 1
Unknown 17 17
linux 8 8
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 11
chrome117.0.5938.88 1 1
chrome108.0.0.0 7 7
firefox47.0 2 2
chrome52.0.3233.98 1 1
chrome79.0.3945.79 1 1
chrome63.0.3239.132 1 1
mozilla 7 7
safari 2 2
chrome83.0.4103.61 1 1
chrome78.0.3904.108 3 3
Unknown 10 10
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Cpanel-HTTP-Client/1.0 20231024082929
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20231028191620
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20231024082933
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20231031162633
BDFetch 20231025035855
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
Cpanel-HTTP-Client/1.0 20231024082929
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20231031162633
BDFetch 20231025035855
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 35 35
From1 1 1
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 6
404 12 26788
302 4 968
403 1 6083
406 38 8588
409 16 1328
405 2 1270
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 12
/.vscode/sftp.json 1 -
/telescope/requests 1 -
/about 1 -
/debug/default/view 1 -
/s/3343e2231313e2538313e2239313/_/ 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/v2/_catalog 1 -
/login.action 1 -
/.git/config 1 -
/_all_dbs 1 -
/.DS_Store 1 -
/config.json 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 31
206.189.82.46 3 3 22830 20231007215606
101.68.211.2 2 2 8333 20231021052251
205.169.39.97 2 2 4535 20231024160406
192.185.112.43 2 2 128 20231024082929
198.235.24.177 1 1 6017 20231028113011
198.235.24.198 1 1 6017 20231031162633
65.154.226.171 1 1 2270 20231024091133
183.136.225.5 1 1 6017 20231024195917
205.210.31.130 1 1 6065 20231025165425
23.178.112.102 1 1 87 20231024082933
167.248.133.127 1 1 2269 20231020151938
205.210.31.178 1 1 6017 20231023144546
154.160.20.197 1 1 2264 20231001085215
137.184.150.177 1 1 2260 20231011212530
198.235.24.151 1 1 6065 20231018084636
167.248.133.186 1 1 2258 20231020115012
35.91.244.51 1 1 87 20231024082933
205.210.31.253 1 1 6017 20231020181547
159.223.22.138 1 1 2268 20231002173736
199.45.155.33 1 1 2267 20231028191620
207.154.240.169 1 1 6065 20231024083026
3.226.198.37 1 1 6017 20231025035855
159.89.109.179 1 1 2269 20231025043902
138.197.102.171 1 1 2266 20231002171734
165.232.104.24 1 1 2258 20231026015322
146.190.72.153 1 1 2266 20231011113721
206.204.33.193 1 1 2266 20231024083753
205.210.31.234 1 1 6065 20231020010500
162.142.125.11 1 1 2267 20231024065226
188.166.22.96 1 1 2267 20231025142030
3.142.82.96 1 1 87 20231024082933
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 13
20231001 1 1 2264 1
20231002 2 2 4534 2
20231007 3 3 22830 2
20231011 2 2 4526 2
20231018 1 1 6065 1
20231020 4 4 16609 4
20231021 2 2 8333 1
20231023 1 1 6017 1
20231024 12 12 23809 10
20231025 4 4 16618 4
20231026 1 1 2258 1
20231028 2 2 8284 2
20231031 1 1 6017 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 31
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 5
/ 28 104945 26 26
/.well-known/acme-challenge/HkVNlaSGNAH9z-BTJyyRpjgtDsVQI7uXA7FDz23ymzE 3 261 3 3
/cgi-sys/suspendedpage.cgi 3 22830 2 2
/.well-known/acme-challenge/IZVX52LB0NITG7S_E8B_4CIT0KO6J50V 1 64 1 0
/.well-known/acme-challenge/Q10WGAKYA2_4O6J2LY34FNW7KLBVUTZ2 1 64 0 1
END_SIDER