.CZ z Proxy 20.12 – 28.12.2020

Protoze jsem uz na par mistech zminoval, ze do .CZ moc nedelam, opet jsem se rozhodl zverejnit nejakych par dat (dneska opravdu jen par 🙁 ), ktere by mohli byt pro nekoho zajimave, nebo motivaci.

Provozuji uz nekolik let public proxy server, ktery v posledni dobe zacal mit velky narust trafficu (az 4Gbit/s den), generujici na 80 milionu requestu denne. To uz jsou zajimave cisla pro nejaky statistiky.

Z proxy serveru ukladam jen nejnutnejsi udaje v ramci accesslogu pro budouci analyzy – nemam pristup a neukladam zadnym zpusobem komunikaci jako takovou. Uz i s ohledem na to ze vetsina provozu dneska tece v HTTPS a datovy tok je kolem X desitek TB bych to nemel ani kam dat, nehlede na tom ze me opravdu obsah komunikace absolutne nezajima. Jediny co z dat chci je mit informace o trafficu pro aktualne ci budouci volne domeny 🙂

Jak jsem zminil, jedna se o desitky milionu dat za jediny den. Nacpal jsem tedy do elasticu data od 20.12 do 28.12. U par dnu me zazlobila rotace logu, takze me proxy nejakou cast dne nejela, coz samozrejme zpusobilo ze v DB nemam 9*80M radku, ale i tak je tam aktualne 600.835.925 zaznamu, coz povazuju za naprosto luxusni 🙂

Obecne

Nejdrive se mrknem na celou proxy co vubec obsahuje – nejaky zakladnejsi stats 🙂

Kazdy radek logu ze Squida obsahuje informace o tom jaka domena byla navstivena, jaka URL, z jake IP (anonymizovano), user-agent a referer.

Pozadavky pak dale zpracovavam uz externim scriptem, kde dogenerovavam pro me dulezite informace a to predevsim: geoip, domena a tld z hostu (navstivene adresy), domena a tld z referera, a detaily o prohlizeci/stroji.

Pro ziskani domeny pouzivam perfektni knihovnu: https://github.com/usrflo/registered-domain-libs/tree/master/PHP

Z domeny askask.askask.google.com me udela google.com , z domeny www.neco.co.uk udela spravne neco.co.uk , proste presne ten vystup ktery potrebuji k overeni dostupnosti.

Par dni zpatky jsem resil znovu jak odfiltrovat vetsinu robotu, kterych je v trafficu bohuzel nejvic. Nakonec jsem zvolil cestu nejmensiho odporu a vyuzil funkci https://www.php.net/manual/en/function.get-browser.php a pro ni stahnul ten nejvetsi full_php_browscap.ini – krapet to znicilo performance zpracovani logu ale po par upravach z cachovanim jsem byl schopny pozadovany data vygenerovat.

Priklad takovyho logu pak je:

{
  "timestamp": 1608901467,
  "clientip": "118.193.0.0",
  "geoip": "HK",
  "req": {
    "bytes": 421,
    "method": "GET",
    "host": "www.vzdelanyvenkov.cz",
    "domain": "vzdelanyvenkov.cz",
    "tld": "cz",
    "uri": "/",
    "refhost": "http://www.vzdelanyvenkov.cz",
    "refdomain": "vzdelanyvenkov.cz"
  },
  "rcode": 0,
  "content-type": "text/html;charset=utf-8",
  "status": "TCP_MISS",
  "browser": {
    "ua": "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36",
    "os": "Win7",
    "os_ver": 6.1,
    "os_description": "Windows 7",
    "type": "Browser",
    "browser": "Chrome",
    "version": 52,
    "device_name": "Windows Desktop",
    "device_type": "Desktop",
    "device_poiting": "mouse",
    "cookies": 1,
    "javascript": 1
  }
}

V logu vidime radek, kde clovek z HK sel na adresu vzdelanyvenkov.cz, primo na / , a mel zrejme Chrome na Windows 7 – a to v tom lepsim pripade 🙂 V tom horsim to byl fake User-Agent, a jedna se o shit traffic, ale to uz nerozlisime.

Logy jsem tedy nacpal primo do ES a mohl udelat vhodny dotaz. Nez se k nemu dostanem, tak jeste par stats z celyho obdobi:

Pocet unikatnich domen na kterych byly pozadavky: 315.265

TOP 5 TLD:

com: 136.186 domen
net: 14.579 domen
org: 11.251 domen
com.mx: 7.795 domen
ru: 6.700 domen

TOP 5 GeoIP:

MX: 350.445.367
MA: 95.119.370
DE: 43.920.735
ZA: 34.650.317
US: 17.910.876

(ZA me hodne tesi, nebot obecne mam rad co.za domeny, mam i par vydelenych a ZA traffic je dobre placenej).

TOP 6 OS:

unknown: 302.689.062 (neznamy prohlizec = na 99% nekonverzni traffic)
Win10: 199.316.521
Win7: 49.862.400
Win8.1: 14.434.388
Android: 10.360.206
iOS: 8.819.585

TOP 8 Kategorii Prohlizecu

Browser: 286.640.948
unknown: 234.416.350 => shit traffic
Bot/Crawler: 69.073.440 => shit traffic
Application: 9.924.112 => obcas konvertovatelny
Multimedia Player: 477.023 => reklamy, konfigurace, playlisty = shit traffic
Email Client: 303.731 => traffic na 80% spamersky domeny = shit traffic
Offline Browser: 219
Feed Reader: 102

Vyhledavani

Abych vybral co nejlepsi seznam pro clanek, zameril jsem se tedy na .CZ domeny, ktere ja moc neresim, protoze vetsinou za CZ traffic neni moc $$$ – ty se spise hodi affilakum nebo na primy prodej reklamy/trafficu nekomu kdo ho chce. Coz me tak napada, ze bych mohl udelat testy s .CZ domenama pres Zeropark … uvidime.

Kazdopadne, jsem tedy pouzil nasledujici vyber:

tld  => cz  (chceme vybrat jen CZ domeny)
rcode => 0  (toto je HTTP StatusCode co vratil cilovy server. Zde chci vybrat nulu, coz znamena, ze v 99% komunikace vubec neprobehla = pravdepodobne nefunkcni domena)
browser.type => Browser  (toto jsem vybral pro filtraci kategorie prohlizecu na Prohlizec, cimz jsem vyhodil veskere nezname pristupy a detekovatelne roboty)

V prehledu z 20.12.2020 – 28.12.2020 jsem nasel 1462 domen. Drtiva vetsina jich bude obsazena, a to z nekolika duvodu.

– u SSL spojeni nedojde k zalogovani vsech udaju, protoze se vytvori tunel mezi klientem a cilovym serverem, a v takovem okamziku ja se nedozvim ani o URI, ani o StatusCode – toto je bohuzel drtiva vetsina pristupu s rcode=0
– mnoho domen je expirovanych/expirujicich a uz nefunkcnich, ale stale registrovanych
– rcode 0 s neexistenci DNS muze vratit i neexistujici subdomena v ramci existujici domeny

Napriklad, nejvetsi domenou na teto proxy s vyse uvedenym dotazem je:

google.cz: 1.131.766
dialtelecom.cz: 8.042
cznet.cz: 7.926
synottip.cz: 3.849
universal.cz: 1.997

Coz jsou proste domeny funguji na HTTPS, s tim se neda nic delat.

Nicmene, overit necelych 1500 domen neni tak sileny, a tak z toho vyjel relativne hodne kratky seznam domen ktere jsou volne:

Pocty pristupu pro tyhle domeny v tomto tydnu jsou:

ramydoaut.cz: 12
agenturabene.cz: 10
vzdelanyvenkov.cz: 4
behforum.cz: 4
dt-sport.cz: 2
lushforum.cz: 3

Nejsou to teda nejak zavratne hodnoty, ale na druhou stranu proc nemit domenu co ma 12 pristupu/tyden = 600 pristupu/rok ?

Jenze ono to neni tak jednoduche 🙁 Bohuzel, ze domena ma nejaky pristup neznamena, ze ten pristup bude kvalitni – a proto i po zjisteni volnych domen je nutne prozkoumat traffic detailne. Vyse uvedene domeny vygenerovali dohromady 35 pristupu za dane obdobi. Rozhodl jsem se tedy prilozit cely JSON, a muzete si zkusit udelat analyzu a rozhodnout se, jestli je nejaka zajimava.

{"timestamp":1608621598,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":509,"method":"GET","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/themes/minimable/admin/throws.types.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Chrome","version":74,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621699,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":553,"method":"POST","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/themes/twentythirteen/js/success.tools.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Firefox","version":67,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621594,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":523,"method":"POST","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/success.modes.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Chrome","version":74,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621579,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":488,"method":"GET","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/themes/startbootstrap/font-awesome/tool.requests.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS_ABORTED","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Firefox","version":66,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621664,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":557,"method":"POST","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/themes/twentyfifteen/languages/methods.using.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Firefox","version":66,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621557,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":479,"method":"GET","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/themes/minimable/admin/fonts/img.exception.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Firefox","version":67,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621617,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":521,"method":"POST","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/internal.class.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Chrome","version":74,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621518,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":494,"method":"GET","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/plugins/wordpress-importer/languages/reset.suspected.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:68.0) Gecko/20100101 Firefox/68.0","os":"macOS","os_ver":10.14,"os_description":"macOS","type":"Browser","browser":"Firefox","version":68,"device_name":"Macintosh","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621606,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":523,"method":"POST","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/clases.conflict.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0","os":"Win10","os_ver":10,"os_description":"Windows 10","type":"Browser","browser":"Firefox","version":66,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608621576,"clientip":"193.106.0.0","geoip":"UA","req":{"bytes":574,"method":"POST","host":"agenturabene.cz","domain":"agenturabene.cz","tld":"cz","uri":"/domains/akrobatickesaly.cz/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/sys.http.php","refhost":"-","refdomain":"-"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:68.0) Gecko/20100101 Firefox/68.0","os":"macOS","os_ver":10.14,"os_description":"macOS","type":"Browser","browser":"Firefox","version":68,"device_name":"Macintosh","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808030,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":443,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/blog_edit.php","refhost":"http://www.ramydoaut.cz/account/submit/add-blog","refdomain":"http://www.ramydoaut.cz/account/submit/add-blog"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608807890,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":406,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/","refhost":"http://www.ramydoaut.cz","refdomain":"ramydoaut.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608815538,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":559,"method":"POST","host":"behforum.cz","domain":"behforum.cz","tld":"cz","uri":"/for.php","refhost":"http://www.behforum.cz","refdomain":"behforum.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808028,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":451,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/account/submit/add-blog","refhost":"http://www.ramydoaut.cz/wp-admin/post-new.php","refdomain":"http://www.ramydoaut.cz/wp-admin/post-new.php"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808064,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":412,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/kosik","refhost":"http://www.ramydoaut.cz/","refdomain":"http://www.ramydoaut.cz/"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808005,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":433,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/profile_blog_new.php","refhost":"http://www.ramydoaut.cz/obchod","refdomain":"http://www.ramydoaut.cz/obchod"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808038,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":445,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/blogs.php?action=new_post","refhost":"http://www.ramydoaut.cz/blog_edit.php","refdomain":"http://www.ramydoaut.cz/blog_edit.php"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808063,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":406,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/","refhost":"http://www.ramydoaut.cz","refdomain":"ramydoaut.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608807962,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":451,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/manager/add_entry.php","refhost":"http://www.ramydoaut.cz/index.php?do=/blog/add/","refdomain":"http://www.ramydoaut.cz/index.php?do=/blog/add/"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608815541,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":421,"method":"GET","host":"behforum.cz","domain":"behforum.cz","tld":"cz","uri":"/posting.php?mode=post&f=24","refhost":"http://www.behforum.cz","refdomain":"behforum.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608807929,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":427,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/prihlaseni","refhost":"http://www.ramydoaut.cz/prihlaseni","refdomain":"http://www.ramydoaut.cz/prihlaseni"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608815528,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":395,"method":"GET","host":"behforum.cz","domain":"behforum.cz","tld":"cz","uri":"/","refhost":"http://www.behforum.cz","refdomain":"behforum.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808008,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":448,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/wp-admin/post-new.php","refhost":"http://www.ramydoaut.cz/profile_blog_new.php","refdomain":"http://www.ramydoaut.cz/profile_blog_new.php"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808050,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":454,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/blogs.php?action=write","refhost":"http://www.ramydoaut.cz/blogs.php?action=new_post","refdomain":"http://www.ramydoaut.cz/blogs.php?action=new_post"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608815540,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":414,"method":"GET","host":"behforum.cz","domain":"behforum.cz","tld":"cz","uri":"/self_help/login.php","refhost":"http://www.behforum.cz","refdomain":"behforum.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608808060,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":429,"method":"GET","host":"www.ramydoaut.cz","domain":"ramydoaut.cz","tld":"cz","uri":"/","refhost":"http://www.ramydoaut.cz/blogs.php?action=write","refdomain":"http://www.ramydoaut.cz/blogs.php?action=write"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608997572,"clientip":"151.106.0.0","geoip":"FR","req":{"bytes":416,"method":"GET","host":"www.dt-sport.cz","domain":"dt-sport.cz","tld":"cz","uri":"/html/add.html","refhost":"http://www.dt-sport.cz","refdomain":"dt-sport.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608997556,"clientip":"151.106.0.0","geoip":"FR","req":{"bytes":403,"method":"GET","host":"www.dt-sport.cz","domain":"dt-sport.cz","tld":"cz","uri":"/","refhost":"http://www.dt-sport.cz","refdomain":"dt-sport.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608908261,"clientip":"151.106.0.0","geoip":"FR","req":{"bytes":407,"method":"GET","host":"www.lushforum.cz","domain":"lushforum.cz","tld":"cz","uri":"/","refhost":"http://www.lushforum.cz/","refdomain":"http://www.lushforum.cz/"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608901468,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":421,"method":"GET","host":"www.vzdelanyvenkov.cz","domain":"vzdelanyvenkov.cz","tld":"cz","uri":"/","refhost":"http://www.vzdelanyvenkov.cz","refdomain":"vzdelanyvenkov.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608901458,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":421,"method":"GET","host":"www.vzdelanyvenkov.cz","domain":"vzdelanyvenkov.cz","tld":"cz","uri":"/","refhost":"http://www.vzdelanyvenkov.cz","refdomain":"vzdelanyvenkov.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608908251,"clientip":"151.106.0.0","geoip":"FR","req":{"bytes":406,"method":"GET","host":"www.lushforum.cz","domain":"lushforum.cz","tld":"cz","uri":"/","refhost":"http://www.lushforum.cz","refdomain":"lushforum.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608901470,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":422,"method":"GET","host":"www.vzdelanyvenkov.cz","domain":"vzdelanyvenkov.cz","tld":"cz","uri":"/","refhost":"http://www.vzdelanyvenkov.cz/","refdomain":"http://www.vzdelanyvenkov.cz/"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608901467,"clientip":"118.193.0.0","geoip":"HK","req":{"bytes":421,"method":"GET","host":"www.vzdelanyvenkov.cz","domain":"vzdelanyvenkov.cz","tld":"cz","uri":"/","refhost":"http://www.vzdelanyvenkov.cz","refdomain":"vzdelanyvenkov.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}
{"timestamp":1608908249,"clientip":"151.106.0.0","geoip":"FR","req":{"bytes":406,"method":"GET","host":"www.lushforum.cz","domain":"lushforum.cz","tld":"cz","uri":"/","refhost":"http://www.lushforum.cz","refdomain":"lushforum.cz"},"rcode":0,"content-type":"text/html;charset=utf-8","status":"TCP_MISS","browser":{"ua":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36","os":"Win7","os_ver":6.1,"os_description":"Windows 7","type":"Browser","browser":"Chrome","version":52,"device_name":"Windows Desktop","device_type":"Desktop","device_poiting":"mouse","cookies":1,"javascript":1}}

Zaver

Je to prace s daty … s velkymi daty, a proto me to bavi. Ale i na tomto malym kousku je videt, ze je relativne hodne narocny najit pekny a vhodny domeny (pro me k parkingu). Samozrejme se nespokojim jen s temito daty, takze jeste vysledek filtruju pres Majestic, Semrush, Alexu a dat z dalsich zdroju o kterych napisu trebas priste 🙂

Pokud nekdo bude registrovat nejakou z vyse uvedenych domen, budu rad za notify v komentarich a trebas se i casem pochlubit jestli se podarilo domenu zmonetizovat