One Hat Cyber Team

Edit File: awstats012025.parcel.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202501 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.parcel.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2050                
POS_TIME 2724                
POS_VISITOR 8086                
POS_DAY 8789                
POS_DOMAIN 3322                
POS_LOGIN 3595                
POS_ROBOT 3750                
POS_WORMS 3882                
POS_EMAILSENDER 4013                
POS_EMAILRECEIVER 4156                
POS_SESSION 8930                
POS_FILESIZE 9442                
POS_SIDER 9077                
POS_FILETYPES 4291                
POS_DOWNLOADS 4437                
POS_OS 4485                
POS_BROWSER 4607                
POS_SCREENSIZE 4830                
POS_UNKNOWNREFERER 4904                
POS_UNKNOWNREFERERBROWSER 5167                
POS_ORIGIN 5322                
POS_SEREFERRALS 5455                
POS_PAGEREFS 5599                
POS_SEARCHWORDS 5747                
POS_KEYWORDS 5899                
POS_MISC 2388                
POS_ERRORS 5958                
POS_CLUSTER 3451                
POS_SIDER_404 6097                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250201033837 4 597 12875179084074
FirstTime 20250101082348
LastTime 20250101082350
LastUpdate 20250201062321 4 0 3 0 0
TotalVisits 10                  
TotalUnique 10                  
MonthHostsKnown 0                   
MonthHostsUnknown 21                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
PDFSupport 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 7 7 35346
1 0 0 0 5 6 52465
2 0 0 0 10 15 46067
3 0 0 0 0 0 0
4 0 0 0 0 0 0
5 0 0 0 1 1 17108
6 0 0 0 6 6 40751
7 0 0 0 79 84 651293
8 12 31 77957 57 66 351692
9 0 0 0 8 9 53376
10 0 0 0 3 3 9580
11 0 0 0 7 8 27829
12 0 0 0 5 8 57633
13 0 0 0 5 5 24332
14 0 2 2382 48 51 217229
15 0 0 0 23 26 108227
16 0 0 0 1 2 4903
17 0 0 0 23 26 94616
18 0 1 1191 25 29 113356
19 0 1 1191 2 5 21520
20 0 0 0 4 8 40034
21 0 0 0 7 10 67902
22 0 0 0 4 4 35357
23 0 0 0 1 1 17108
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 5
us 10 27 75401
zz 2 2 174
bg 0 1 1191
ao 0 1 1191
gb 0 4 4764
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
jpg 3 13005 0 0
js 10 11910 0 0
gif 7 2091 0 0
png 3 54717 0 0
Unknown 12 998 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
ios_ipad 1 0
Unknown 14 12
win10 14 0
linux 5 0
win7 1 0
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 9
mozilla 10 10
chrome125.0.6422.60 5 0
chrome106.0.0.0 1 0
Unknown 4 2
chrome124.0.0.0 2 0
opera62.0.3331.116 1 0
chrome83.0.4103.61 1 0
safari 1 0
chrome117.0.5938.132 10 0
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
python-httpx/0.28.1 20250111140259
Cpanel-HTTP-Client/1.0 20250101082348
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20250101082350
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20250101082348
python-httpx/0.28.1 20250111140259
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 12 19
From1 0 0
From2 0 0
From3 0 0
From4 0 16
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
404 132 1059982
101 6 0
406 117 26442
403 95 1000636
409 8 664
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 73
/php-info.php 1 -
/phpinfo.php 4 -
/feed/ 8 -
/server 2 -
/old_phpinfo.php 1 -
/admin/server_info.php 1 -
/admin/wp-config 1 -
/.env.save 1 -
/config.json 2 -
/s/3343e2231313e2538313e2239313/_/ 2 -
/config/aws.yml 1 -
/phpinfo.php5 1 -
/application/config/constants.php 1 -
/.envrc 1 -
/phpinfo.php3 1 -
/config/app.php 1 -
/wordpress/wp-admin/setup-config.php 1 -
/wp-content/ 2 -
/api/config.env 1 -
/symfony/public/_profiler/phpinfo 1 -
/.DS_Store 2 -
/login 1 -
/api/shared/config.env 1 -
/config.js 1 -
/info.php 4 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/config/settings.py 1 -
/.env.stage 1 -
/symfony/_profiler/phpinfo 1 -
/.env.php 1 -
/about 2 -
/debug/default/view 3 -
/.env.docker.dev 1 -
/config/config.json 1 -
//code.jquery.com/jquery-3.3.1.min.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/.vscode/sftp.json 2 -
/.env.docker 1 -
/server/settings.py 1 -
/symfony/public 1 -
/actuator/env 2 -
//code.jquery.com/jquery-3.3.1.min.js 5 -
/app-ads.txt 2 -
/admin/server.js 1 -
/login.action 2 -
/install/index.php 1 -
/phpinfo 4 -
/telescope/requests 2 -
/index.php/phpinfo 1 -
/v2/_catalog 2 -
/pinfo.php 1 -
/api/config.js 1 -
/admin/.env 1 -
/wp-admin/setup-config.php 1 -
/_all_dbs 2 -
/wp-includes/ID3/license.txt 8 -
/appsettings.json 1 -
/storage/logs/laravel.log 1 -
/server_info.php 1 -
/.aws/credentials 1 -
/ads.txt 7 -
/test.php 2 -
/php.php 1 -
/config.env 1 -
/sellers.json 2 -
/php_info.php 3 -
/_profiler/phpinfo 2 -
/.env.production 1 -
/admincontrol/sys_phpinfo.php 1 -
/api/shared/config/config.env 1 -
/tool/view/phpinfo.view.php 1 -
/admin/app.js 1 -
/.git/config 6 -
/.env.local 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 21
23.178.112.109 2 2 174 20250101082349
192.185.112.43 2 2 128 20250101082348
16.171.182.173 1 1 87 20250101082350
13.60.76.224 1 1 87 20250101082350
54.190.105.13 1 1 87 20250101082350
34.216.114.198 1 1 87 20250101082350
3.144.127.167 1 1 87 20250101082350
13.212.47.2 1 1 87 20250101082350
3.140.1.137 1 1 87 20250101082350
13.214.149.148 1 1 87 20250101082350
205.169.39.21 0 1 120 
51.158.205.64 0 1 1191 
51.159.14.99 0 1 1191 
154.216.18.100 0 1 1191 
205.169.39.171 0 1 1191 
205.169.39.14 0 5 24422 
87.120.126.158 0 1 1191 
205.169.39.7 0 5 24422 
46.250.238.33 0 2 2382 
34.72.176.129 0 3 18896 
34.123.170.104 0 2 5526 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 4
20250101 12 27 54726 10
20250104 0 1 1191 0
20250111 0 2 2382 0
20250122 0 5 24422 0
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 10
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/.well-known/acme-challenge/kwHScBsgXLU1fi3gFizz2V9VkOgnJXfaXDdY422UTmE 5 435 5 4
/.well-known/acme-challenge/wnhfgrpg6tgBxO3XaDOgvI2uf9EQBWy7D99KTTvZroA 5 435 4 5
/.well-known/acme-challenge/-6IN-P8SYPM34-MFRAT-MO71-DUD3JP_ 1 64 1 0
/.well-known/acme-challenge/V8KAHV__AGFOSM-KP9R2_PBL_-B2O7EO 1 64 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
5K+ 75
500-1K 1
2K-5K 11
100-500 34
1K-2K 1
0-44 4
END_FILESIZE