One Hat Cyber Team

View File Name : awstats102025.dev.probitconsult.com.txt

AWSTATS DATA FILE 8.0 (build 20240604)
# If you remove this file, all statistics for date 202510 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.dev.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2087                
POS_TIME 2766                
POS_VISITOR 14405               
POS_DAY 16531               
POS_DOMAIN 3718                
POS_LOGIN 4165                
POS_ROBOT 4320                
POS_WORMS 4726                
POS_EMAILSENDER 4857                
POS_EMAILRECEIVER 5000                
POS_SESSION 16818               
POS_FILESIZE 17436               
POS_REQUESTTIME 17587               
POS_SIDER 17014               
POS_FILETYPES 5135                
POS_DOWNLOADS 5236                
POS_OS 5284                
POS_BROWSER 5562                
POS_SCREENSIZE 6455                
POS_UNKNOWNREFERER 6529                
POS_UNKNOWNREFERERBROWSER 7080                
POS_ORIGIN 7434                
POS_SEREFERRALS 7568                
POS_PAGEREFS 7712                
POS_SEARCHWORDS 7860                
POS_KEYWORDS 8012                
POS_MISC 2429                
POS_ERRORS 8071                
POS_CLUSTER 4021                
POS_SIDER_404 8189                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20251101071800 22 4070 10583037547037
FirstTime 20251001013840
LastTime 20251031224814
LastUpdate 20251101081058 22 0 21 0 0
TotalVisits 73                  
TotalUnique 54                  
MonthHostsKnown 0                   
MonthHostsUnknown 54                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
PDFSupport 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
TotalMisc 0 0 0
AddToFavourites 0 14 0
QuickTimeSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
JavaEnabled 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 2521 9022 9145 444432438
1 17 17 15354 9329 9451 408457016
2 7 7 15503 9542 9671 674855384
3 16 16 23526 10877 11011 750654291
4 5 5 3531 11678 11792 705037942
5 6 6 18916 11857 11979 562630140
6 5 5 1944 11848 11965 1194274824
7 6 6 488 11404 11523 458638592
8 6 6 67032 11844 11968 685728438
9 7 7 56427 11747 11875 1046100357
10 2 2 15433 11594 11724 774731863
11 2 2 18828 11386 11517 1104944655
12 3 3 30533 10031 10154 268044757
13 1 1 15153 10864 10990 858186809
14 3 3 30285 10575 10688 490947579
15 29 29 96616 10587 10711 658617770
16 7 7 28846 10290 10409 867131271
17 5 5 39943 10459 10569 2303178949
18 3 3 13568 10201 10332 2260463041
19 3 3 13568 14660 14791 3165151277
20 3 3 3836795 14800 14924 779228625
21 3 3 4049 12095 12226 939820901
22 5 5 2532 10581 10707 744252513
23 0 0 0 9536 9663 230757558
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 19
us 65 65 4255747
cn 22 22 26140
in 18 18 12738
gb 17 17 22237
ru 6 6 5394
be 3 3 4409
nc 2 2 10717
ca 2 2 1266
fr 1 1 1708
bg 1 1 633
rs 1 1 1708
id 1 1 0
nl 1 1 1708
jp 1 1 1888
vn 1 1 1888
de 1 1 633
za 1 1 1888
ie 1 1 56
ch 1 1 633
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 7
GPTBot/ 214084 22173955492 20251031113553 0
Googlebot/ 36 303734 20251003225109 0
Go\-http\-client/ 7 6422 20251028221343 0
no_user_agent 3 3686 20251028221329 0
scrapy 2 3416 20251003053651 0
BW/ 1 633 20251031082049 0
(firefox/)([0-9]\.|[0-1][0]\.) 1 795 20251002021008 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
php 58 4265602 0 0
html 88 85789 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 16
macosx14 1 1
winlong 10 10
win10 13 13
win8 1 1
linuxubuntu 2 2
linux 21 21
win7 11 11
Unknown 29 29
ios_ipad 1 1
macosx15 4 4
androidmarshmallow 47 47
android10 2 2
win8.1 1 1
winxp 1 1
wince 1 1
ios_iphone 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 44
msie11.0 1 1
safari18.1.1 1 1
chrome132.0.0.0 15 15
chrome3.0.195.17 1 1
chrome100.0.4896.127 1 1
msie6.0 1 1
chrome3.0.195.1 1 1
chrome115.0.0.0 1 1
firefox139.0 1 1
chrome126.0.0.0 1 1
chrome140.0.7339.207 45 45
chrome20.0.1092.0 1 1
chrome3.0.195.3 1 1
firefox134.0 2 2
safari15.6.1 1 1
firefox43.0 1 1
chrome12.0.742.100 1 1
firefox130.0 1 1
msie10.0 5 5
chrome17.0.963.66 1 1
chrome135.0.0.0 1 1
chrome52.0.8393.98 2 2
netscape5.0 1 1
chrome137.0.0.0 3 3
firefox111.0 1 1
chrome13.0.782.1 1 1
opera48.0.2685.35 1 1
chrome108.0.0.0 4 4
chrome17.0.963.12 1 1
chrome58.0.3029.110 1 1
chrome104.0.0.0 3 3
safari6.0 1 1
chrome11.0.696.3 1 1
mozilla 5 5
chrome139.0.0.0 3 3
chrome4.0.213.1 1 1
chrome4.0.202.0 1 1
safari 1 1
Unknown 23 23
chrome4.0.212.0 1 1
chrome49.0.2623.112 3 3
chrome4.0.207.0 1 1
chrome4.0.211.2 2 2
chrome134.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 7
Mozilla/5.0_zgrab/0.x 20251028193530
Mozilla/5.0_(compatible;_Google-Test;) 20251026050527
python-requests/2.32.4 20251025173357
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20251030052732
python-requests/2.32.5 20251031163457
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251028182010
Python/3.9_aiohttp/3.8.1 20251002030749
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 4
python-requests/2.32.5 20251031163457
python-requests/2.32.4 20251025173357
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251028182010
Python/3.9_aiohttp/3.8.1 20251002030749
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 146 146
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
421 2 644
404 27983 0
500 27630 201903816
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 277
/api-docs/swagger.json 1 -
/admin/classes/ 1 -
/admin/amd/build/themeselector/ 1 -
/actuator/env 2 -
/install/ 1 -
/server 2 -
/.git/config 15 -
/swagger/index.html 1 -
/application/ 2 -
/Modules/ 2 -
/public/javascripts 1 https://duckduckgo.com/
/addons/ 1 -
/ 4 -
/course/ 1 -
/group/ 1 -
/out/ 1 -
/inc/ 1 -
/license/ 1 -
/config/ 1 -
/database 1 https://yandex.com/
/.git/info/ 3 -
/concrete/config 1 https://www.google.com/
/notification 2 https://www.google.com/
/sboepler.php 2 -
/calendar/ 2 -
/quazfvlt.php 9 -
/docs/ 1 -
/blog/ 2 -
/wp-content 1 https://www.google.com/
/h5p/ 1 -
/admin/language 1 https://duckduckgo.com/
/.github/workflows/ 2 -
/config 1 https://duckduckgo.com/
/documentation-gsoc/ 1 -
/.gitlab-ci/ 3 -
/efhxhtmx.php 9 -
/appsettings.json 1 -
/fonts/ 1 -
/.git/ 4 -
/fuel/ 1 -
/mod/ 2 -
/v2/_catalog 2 -
/shared 1 https://www.google.com/
/.vscode/ 7 -
/v2/api-docs 1 -
/apps/ 2 -
/message/ 1 -
/build/ 2 -
/donjo-app/ 1 -
/ads.txt 2 -
/bin/ 2 -
/app/ 2 -
/tools 1 https://duckduckgo.com/
/.DS_Store 2 -
/oauth2/ 1 -
/blocks/ 2 -
/core/ 1 -
/include/ 1 -
/img 1 https://search.yahoo.com/
/pdf 1 https://yandex.com/
/_all_dbs 2 -
/v3/api-docs 1 -
/pmd 1 https://duckduckgo.com/
/content/data 1 https://search.yahoo.com/
/layouts/ 2 -
/customfield/ 1 -
/enrol/ 1 -
/build 1 https://search.yahoo.com/
/images/ 1 -
/blocks 1 https://www.google.com/
/dev/ 1 -
/doc/ 1 -
/maintenance/ 1 -
/api/ 2 -
/plugins/paymethod 1 https://www.bing.com/
/lang/ 1 -
/bootstrap 1 https://www.google.com/
/sellers.json 2 -
/Make/ 2 -
/config.json 2 -
/.well-known/acme-challenge/.well-known/ 12 -
/local 1 https://duckduckgo.com/
/media/ 1 -
/graphql 1 -
/css/ 1 -
/modules/ 1 -
/addons/ripcord/docs/ 1 -
/data/ 1 -
/log/ 1 -
/donjo-app 1 https://search.yahoo.com/
/.circleci/ 2 -
/licenses/ 1 -
/contentbank 2 https://www.bing.com/
/fileadmin/ 1 -
/admin/classes/external/ 1 -
/communication/ 2 -
/wp-content/uploads/wc-logs 1 https://search.yahoo.com/
/examples/ 1 -
/public/images 1 https://www.google.com/
/webjars/swagger-ui/index.html 1 -
/composer/ 1 -
/.github/ 6 -
/info.php 2 -
/misc/ 2 -
/generated/ 1 -
/sitemap.xml 1 -
/Packages/ 2 -
/wp-admin/ 3 -
/.well-known/pki-validation/ 4 -
/typo3temp 1 https://www.bing.com/
/bootstrap/ 2 -
/plugin/ 1 -
/availability/ 2 -
/swagger/swagger-ui.html 1 -
/.git/refs/ 3 -
/desa 1 https://www.bing.com/
/analytics/ 2 -
/admin.php 3 -
/outgoing/ 1 -
/templates 1 https://www.google.com/
/lib/ 1 -
/__tests__/ 2 -
/addons/ripcord/docs/media/images/ 1 -
/libs/ 1 -
/swagger-ui.html 1 -
/libraries 1 https://search.yahoo.com/
/s/131313e2739313e263e20353/_/ 2 -
/admin/classes/admin/ 1 -
/phpmyadmin 1 https://www.bing.com/
/system/logs 1 https://duckduckgo.com/
/includes/ 1 -
/quazfvlt.php.suspected 9 -
/contrib 1 https://duckduckgo.com/
/local/ 1 -
/app-ads.txt 2 -
/swagger.json 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/comment/ 2 -
/routes 1 https://yandex.com/
/dbscripts/ 1 -
/@vite/env 2 -
/jobs/ 1 -
/efhxhtmx.php.suspected 9 -
/PMAStandard/ 2 -
/controllers/ 1 -
/logs/ 1 -
/plugins 1 https://search.yahoo.com/
/.config/ 2 -
/js/ 1 -
/PMAStandard 1 https://search.yahoo.com/
/controllers 1 https://www.google.com/
/admin/classes/local/ 1 -
/admin/classes/local/externalpage/ 1 -
/robots.txt 914 -
/swagger/v1/swagger.json 1 -
/admin/amd/ 1 -
/components 1 https://www.bing.com/
/admin/classes/form/ 1 -
/docSQL 1 https://yandex.com/
/api/gql 1 -
/cache 1 https://yandex.com/
/api/graphql 1 -
/assets/fonts 1 https://duckduckgo.com/
/notification/ 1 -
/wp-includes 1 https://yandex.com/
/wp-admin 1 https://search.yahoo.com/
/docSQL/ 1 -
/l10n/ 2 -
/.gitignore 1 -
/graphql/api 1 -
/cypress/ 1 -
/classes/ 2 -
/mails 1 https://duckduckgo.com/
/backup_inkremental/ 2 -
/completion 1 https://yandex.com/
/download/ 1 -
/manual/ 1 -
/installation/ 1 -
/admin/amd/src/ 1 -
/function.php 26600 -
/telescope/requests 2 -
/completion/ 1 -
/server-status 2 -
/cache/ 2 -
/error/ 1 -
/login.action 2 -
/framework/ 1 -
/apps 1 https://www.google.com/
/assets/ 2 -
/editor/ 1 -
/dist/ 1 -
/badges/ 2 -
/b2-img/ 2 -
/override/ 1 -
/core/misc/drupal.js 1 -
/mnet/ 2 -
/editor 1 https://www.google.com/
/assets 1 https://duckduckgo.com/
/translations 1 https://search.yahoo.com/
/__mocks__/ 2 -
/badges 1 https://search.yahoo.com/
/mails/ 1 -
/module/ 1 -
/contentbank/ 1 -
/backup/ 2 -
/themes 1 https://yandex.com/
/components/ 1 -
/contrib/ 1 -
/addons/ripcord/ 1 -
/dataformat/ 1 -
/notes 1 https://duckduckgo.com/
/framework 1 https://www.google.com/
/layout/ 1 -
/var 1 https://www.google.com/
/.git-credentials 1 -
/module/*/view 1 https://search.yahoo.com/
/admin/amd/src/themeselector/ 1 -
/changelogs/ 2 -
/pma 1 https://duckduckgo.com/
/auth/ 2 -
/api 1 -
/addons/ripcord/docs/Ripcord/ 1 -
/about 2 -
/version 1 https://www.bing.com/
/.vscode 1 https://www.bing.com/
/help/ 1 -
/my/ 1 -
/_fragment 3 -
/.git/logs/ 3 -
/api/swagger.json 1 -
/cgi-bin/ 7 -
/image/ 1 -
/.cache/ 4 -
/img/ 1 -
/pdf/ 1 -
/node_modules/ 1 -
/grade/ 1 -
/misc/drupal.js 1 -
/typo3_src 2 https://www.bing.com/
/.git/credentials 1 -
/database/ 1 -
/calendar 1 https://www.bing.com/
/b2-include/ 2 -
/license 1 https://search.yahoo.com/
/app/design/frontend 1 https://www.bing.com/
/files/ 1 -
/addons/ripcord/docs/media/ 1 -
/favourites/ 1 -
/.git/objects/ 3 -
/app/Listeners 1 https://yandex.com/
/b2-include 2 https://search.yahoo.com/
/filter/ 1 -
/admin/ 3 -
/administrator/ 2 -
/mysite/ 1 -
/manage/ 1 -
/desa/ 1 -
/h5p 1 https://search.yahoo.com/
/xmlrpc.php 2 -
/contribute/ 1 -
/notes/ 1 -
/efhxhtmx.php.malware 8 -
/cohort/ 2 -
/.env 7 -
/monitoring/ 1 -
/competency/ 1 -
/iplookup/ 2 -
/debug/default/view 2 -
/cohort 1 https://www.bing.com/
/login/ 1 -
/Manual_files/ 2 -
/.vscode/sftp.json 2 -
/quazfvlt.php.malware 8 -
/changelogs 1 https://www.google.com/
/cli/ 2 -
/.vscode/extensions/ 3 -
/admin/amd/build/ 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 54
66.249.68.65 20 20 169810 20251001194536
106.74.80.6 18 18 16992 20251002030749
103.186.30.230 17 17 12105 20251002033319
66.249.68.66 16 16 3965292 20251001201448
51.159.101.251 13 13 17200 20251001154051
66.249.68.64 9 9 94931 20251001200956
3.222.165.167 2 2 1266 20251025152022
37.156.216.158 2 2 10717 20251002030030
195.211.77.142 2 2 3053 20251028221405
195.211.77.140 2 2 0 20251028221339
57.129.46.185 2 2 3776 20251002030250
167.99.181.249 1 1 2420 20251001153929
134.122.77.44 1 1 633 20251031224814
31.97.153.61 1 1 2063 20251001174616
167.172.232.142 1 1 633 20251028221329
3.237.85.107 1 1 633 20251031165235
185.247.137.84 1 1 633 20251026111142
173.244.56.172 1 1 0 20251025173357
66.249.92.1 1 1 633 20251024030624
128.90.173.243 1 1 10661 20251002030053
51.159.99.243 1 1 633 20251028221439
66.249.92.2 1 1 633 20251025043747
198.211.116.17 1 1 633 20251029050347
202.155.8.15 1 1 0 20251025161720
146.70.107.201 1 1 1708 20251002092411
91.231.89.122 1 1 1708 20251002144033
66.249.92.129 1 1 633 20251026050527
106.75.167.138 1 1 2420 20251001154056
3.237.93.88 1 1 633 20251028203725
172.237.128.200 1 1 633 20251031105358
185.33.101.84 1 1 1708 20251003011130
198.235.24.124 1 1 633 20251027154744
196.251.84.17 1 1 1888 20251001193828
18.224.192.118 1 1 633 20251028193530
106.75.133.148 1 1 2420 20251001154052
81.17.20.98 1 1 633 20251029124822
195.178.110.223 1 1 1708 20251003212841
171.244.43.14 1 1 1888 20251002064006
198.235.24.209 1 1 633 20251028182010
134.122.89.110 1 1 633 20251029213722
18.141.225.240 1 1 633 20251030093724
164.92.148.4 1 1 1708 20251003215946
185.18.222.147 1 1 56 20251002025944
45.131.155.100 1 1 633 20251027034655
87.236.176.182 1 1 633 20251030052732
176.65.149.195 1 1 633 20251024001810
133.242.174.119 1 1 1888 20251001185155
15.235.171.5 1 1 0 20251031163457
106.75.157.207 1 1 2420 20251001154117
51.254.49.109 1 1 1708 20251002160730
93.123.109.214 1 1 633 20251031081649
172.233.62.72 1 1 2063 20251001165804
124.236.100.56 1 1 1888 20251002021004
35.175.127.180 1 1 633 20251029093054
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 11
20251001 78 78 4274339 28
20251002 36 36 56103 14
20251003 3 3 5124 3
20251024 2 2 1266 2
20251025 5 5 1899 4
20251026 2 2 1266 2
20251027 2 2 1266 2
20251028 7 7 3798 7
20251029 4 4 2532 4
20251030 2 2 1266 2
20251031 5 5 2532 5
END_DAY

# Session range - Number of visits
BEGIN_SESSION 6
30mn-1h 8
0s-30s 58
5mn-15mn 2
1h+ 3
15mn-30mn 1
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 15
/ 68 73039 51 50
/function.php 36 4263972 15 15
/.well-known/acme-challenge/ 10 6540 0 4
/.well-known/ 7 5565 4 0
/sboepler.php 5 224 1 2
/wp-blog-header.php 4 0 0 0
/wp-cron.php 4 0 1 1
/quazfvlt.php 3 112 0 0
/admin.php 2 1294 0 0
/ap.html 2 426 1 0
/sziibixe.php 1 0 0 0
/bqazwgjj.php 1 0 0 0
/drjtwcac.php 1 0 0 0
/pst.html 1 219 0 1
/jydackeg.php 1 0 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 7
44-100 11
100-500 10
0-44 28055
1K-2K 24
5K+ 160949
500-1K 61
2K-5K 80821
END_FILESIZE

# Request Time Range - Request Time Frequency
BEGIN_REQUESTTIME 0
END_REQUESTTIME