One Hat Cyber Team

Edit File: awstats052025.parcel.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202505 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.parcel.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2053                
POS_TIME 2724                
POS_VISITOR 8278                
POS_DAY 10349               
POS_DOMAIN 3301                
POS_LOGIN 3647                
POS_ROBOT 3802                
POS_WORMS 4155                
POS_EMAILSENDER 4286                
POS_EMAILRECEIVER 4429                
POS_SESSION 10841               
POS_FILESIZE 11098               
POS_SIDER 11020               
POS_FILETYPES 4564                
POS_DOWNLOADS 4646                
POS_OS 4694                
POS_BROWSER 4899                
POS_SCREENSIZE 5450                
POS_UNKNOWNREFERER 5524                
POS_UNKNOWNREFERERBROWSER 6083                
POS_ORIGIN 6450                
POS_SEREFERRALS 6584                
POS_PAGEREFS 6749                
POS_SEARCHWORDS 6897                
POS_KEYWORDS 7049                
POS_MISC 2388                
POS_ERRORS 7108                
POS_CLUSTER 3503                
POS_SIDER_404 7205                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250602163015 1 0 6010943064969
FirstTime 20250501063656
LastTime 20250531074417
LastUpdate 20250603081702 1 0 0 0 0
TotalVisits 70                  
TotalUnique 53                  
MonthHostsKnown 0                   
MonthHostsUnknown 53                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
FlashSupport 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 0 0
JavascriptDisabled 0 0 0
DirectorSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 5 5 3115 4 8 498
1 2 2 1246 25 30 11214
2 0 0 0 2 2 623
3 0 0 0 12 17 0
4 3 3 1869 13 23 623
5 1 1 623 0 0 0
6 2 2 1246 3 3 0
7 1 1 623 0 2 0
8 3 3 1869 0 0 0
9 0 0 0 8 8 623
10 0 0 0 0 0 0
11 17 17 9968 46 53 3738
12 8 8 4984 3 3 1246
13 3 3 1869 2 2 0
14 6 6 3738 1 4 0
15 5 5 3115 3 5 623
16 2 2 1246 3 3 0
17 3 3 1869 0 0 0
18 4 4 2492 3 5 253
19 4 4 2492 0 0 0
20 2 2 1246 1 3 623
21 4 4 2492 7 10 3738
22 5 5 3115 1 5 623
23 4 4 2492 2 5 249
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 11
us 37 37 23051
de 21 21 13083
at 6 6 3738
ca 5 5 3115
in 4 4 2492
fr 4 4 2492
gb 2 2 1246
ru 2 2 623
za 1 1 623
be 1 1 623
gr 1 1 623
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 6
bot[\s_+:,\.\;\/\\-] 22 13706 20250530014532 0
no_user_agent 6 3738 20250525153648 0
Go\-http\-client/ 5 3115 20250503111124 0
scrapy 2 1246 20250503122958 0
survey 2 1246 20250510214257 0
FirePHP/ 1 623 20250521222902 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 84 51709 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
androidmarshmallow 2 2
linuxubuntu 2 2
androidpie 3 3
os/2 1 1
macosx15 3 3
linux 16 16
winxp 3 3
win10 31 31
ios_iphone 6 6
Unknown 17 17
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 26
chrome104.0.0.0 1 1
firefox24.0 1 1
chrome76.0.3809.89 2 2
chrome58.0.3029.110 2 2
firefox134.0 2 2
Unknown 8 8
chrome132.0.0.0 1 1
chrome86.0.4240.183 3 3
chrome135.0.0.0 8 8
chrome74.0.3729.169 3 3
safari17.4.1 4 4
chrome108.0.0.0 2 2
chrome72.0.3626.121 4 4
firefox136.0 7 7
netscape5.0 2 2
chrome117.0.0.0 2 2
safari18.3 2 2
mozilla 9 9
msie6.0 3 3
chrome52.0.8393.98 2 2
msie11.0 5 5
chrome77.0.3865.42 1 1
chrome116.0.0.0 1 1
chrome74.0.3729.157 3 3
chrome60.0.3112.113 4 4
chrome110.0.0.0 2 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250516232240
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250526231628
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250501063656
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250526231628
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 59 59
From1 0 0
From2 25 25
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_google_com 25 25
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 119 0
301 4 1000
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 41
/application/.env 2 -
/sellers.json 1 -
/ 2 -
/cgi-bin/ 10 -
/server-status 2 -
/actuator/env 2 -
/phpinfo.php 2 -
/assets/env.js 2 -
/config.json 4 -
/ads.txt 6 -
/robots.txt 5 -
/@vite/env 2 -
/s/131313e2739313e263e20353/_/ 2 -
/js/app.js 2 -
/api/.env 2 -
/about 2 -
/php_info.php 2 -
/telescope/requests 2 -
/_profiler/phpinfo 2 -
/login.action 2 -
/_all_dbs 2 -
/server 2 -
/.DS_Store 2 -
/api/config.js 2 -
/phpinfo 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/js/config.js 2 -
/env.js 2 -
/.env.prod 2 -
/settings.json 2 -
/debug/default/view 2 -
/%3FC%3DN%3BO%3DD 1 -
/info.php 4 -
/dev/.env 2 -
/sendgrid.env 3 -
/.env 6 -
/app-ads.txt 1 -
/.env.save 2 -
/.vscode/sftp.json 2 -
/.git/config 18 -
/v2/_catalog 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 53
81.217.18.182 6 6 3738 20250504145300
46.4.162.176 6 6 3738 20250503185455
138.201.103.158 5 5 3115 20250503211258
5.9.48.211 3 3 1869 20250503193856
54.173.10.72 3 3 1869 20250504215443
5.9.48.126 3 3 1869 20250503165452
116.202.166.126 2 2 1246 20250503122443
44.200.60.207 2 2 1246 20250505043252
86.104.252.57 2 2 1246 20250519083925
46.4.162.179 2 2 1246 20250503154451
167.94.146.54 2 2 1246 20250516232240
116.202.246.84 2 2 1246 20250503124245
104.164.173.94 2 2 1246 20250503111101
167.94.138.180 2 2 1246 20250506184730
167.94.138.182 2 2 1246 20250516003507
167.94.138.200 2 2 1246 20250515004813
144.76.57.4 2 2 1246 20250503134847
44.203.84.116 1 1 623 20250513173244
169.150.203.10 1 1 623 20250504112359
206.189.233.36 1 1 623 20250503111037
205.210.31.193 1 1 623 20250510013611
167.71.140.202 1 1 623 20250531074417
68.235.46.208 1 1 623 20250503223345
104.248.85.140 1 1 623 20250525221146
64.227.166.73 1 1 623 20250523155031
68.183.10.10 1 1 623 20250505152655
167.99.144.126 1 1 623 20250508114141
147.182.180.239 1 1 623 20250503045847
195.211.77.140 1 1 0 20250503111230
147.185.132.81 1 1 623 20250523055741
154.28.229.59 1 1 623 20250503111046
196.251.88.164 1 1 623 20250521222902
64.227.138.248 1 1 623 20250507231539
64.23.200.68 1 1 623 20250505222951
51.159.102.248 1 1 623 20250503115624
146.190.63.248 1 1 623 20250503111039
205.210.31.225 1 1 623 20250514001831
5.135.58.199 1 1 623 20250504195231
68.183.45.72 1 1 623 20250517040952
178.128.148.114 1 1 623 20250505215209
138.197.145.235 1 1 623 20250503211007
5.135.58.205 1 1 623 20250504195455
195.211.77.142 1 1 623 20250503111242
87.236.176.131 1 1 623 20250501063656
147.185.132.186 1 1 623 20250526231628
206.189.119.148 1 1 623 20250525142619
198.235.24.71 1 1 623 20250505152137
198.235.24.121 1 1 623 20250509191223
134.209.207.89 1 1 623 20250522013411
138.68.77.30 1 1 623 20250507141254
205.210.31.100 1 1 623 20250513084157
147.185.132.243 1 1 623 20250520124733
128.199.59.10 1 1 623 20250523221227
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 22
20250501 1 1 623 1
20250503 38 38 23051 31
20250504 11 11 6853 9
20250505 5 5 3115 5
20250506 2 2 1246 1
20250507 2 2 1246 2
20250508 1 1 623 1
20250509 1 1 623 1
20250510 1 1 623 1
20250513 2 2 1246 2
20250514 1 1 623 1
20250515 2 2 1246 1
20250516 4 4 2492 2
20250517 1 1 623 1
20250519 2 2 1246 1
20250520 1 1 623 1
20250521 1 1 623 1
20250522 1 1 623 1
20250523 3 3 1869 3
20250525 2 2 1246 2
20250526 1 1 623 1
20250531 1 1 623 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 4
30mn-1h 3
15mn-30mn 1
30s-2mn 3
0s-30s 63
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 84 51709 70 70
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
500-1K 121
100-500 4
0-44 150
END_FILESIZE