One Hat Cyber Team

Edit File: awstats052025.portal.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202505 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.portal.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2053                
POS_TIME 2711                
POS_VISITOR 8766                
POS_DAY 10724               
POS_DOMAIN 3297                
POS_LOGIN 3609                
POS_ROBOT 3764                
POS_WORMS 4225                
POS_EMAILSENDER 4356                
POS_EMAILRECEIVER 4499                
POS_SESSION 11256               
POS_FILESIZE 11481               
POS_SIDER 11403               
POS_FILETYPES 4634                
POS_DOWNLOADS 4716                
POS_OS 4764                
POS_BROWSER 5008                
POS_SCREENSIZE 5555                
POS_UNKNOWNREFERER 5629                
POS_UNKNOWNREFERERBROWSER 6215                
POS_ORIGIN 6582                
POS_SEREFERRALS 6714                
POS_PAGEREFS 6858                
POS_SEARCHWORDS 7006                
POS_KEYWORDS 7158                
POS_MISC 2375                
POS_ERRORS 7217                
POS_CLUSTER 3465                
POS_SIDER_404 7313                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250602122536 1 0 4426523019010
FirstTime 0
LastTime 20250531001751
LastUpdate 20250603081702 1 0 0 0 0
TotalVisits 57                  
TotalUnique 50                  
MonthHostsKnown 0                   
MonthHostsUnknown 50                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
DirectorSupport 0 0 0
FlashSupport 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 0 0
QuickTimeSupport 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 6 6 3738 19 35 2492
1 2 2 1246 3 4 0
2 2 2 1246 2 4 623
3 1 1 623 0 0 0
4 4 4 2492 5 5 623
5 5 5 2492 22 25 1869
6 0 0 0 1 1 623
7 0 0 0 1 1 0
8 2 2 1246 2 3 1246
9 3 3 1869 26 38 3738
10 4 4 2492 14 24 0
11 1 1 623 7 10 1869
12 2 2 1246 1 4 0
13 2 2 1246 2 2 623
14 1 1 623 3 3 0
15 6 6 3738 3 10 623
16 0 0 0 4 7 1246
17 4 4 2492 7 11 2122
18 2 2 1246 3 3 0
19 2 2 1246 1 1 0
20 1 1 623 1 2 623
21 2 2 623 6 8 1246
22 6 6 3738 3 7 253
23 4 4 2492 1 4 623
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 22 22 13706
cn 18 18 11214
ca 11 11 6853
ru 5 5 1869
fr 3 3 1869
au 1 1 623
gb 1 1 623
za 1 1 623
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 9
no_user_agent 9 5607 20250531160259 0
bot[\s_+:,\.\;\/\\-] 7 4361 20250521091345 0
curl 4 2492 20250526150544 0
Go\-http\-client/ 4 2492 20250531001801 0
scrapy 2 1246 20250530111233 0
survey 2 1246 20250511040818 0
Dalvik/ 2 1246 20250513111144 0
(firefox/)([0-9]\.|[0-1][0]\.) 1 623 20250513005619 0
BW/ 1 623 20250506173035 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 62 37380 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 13
androidnougat 1 1
linux 12 12
win10 13 13
androidmarshmallow 1 1
win8.1 1 1
Unknown 17 17
macosx15 4 4
macosx11 2 2
winxp 1 1
win7 7 7
linuxubuntu 1 1
winlong 1 1
androidpie 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 25
chrome49.0.2623.112 1 1
opera12.14 1 1
msie11.0 1 1
chrome77.0.3865.18 1 1
chrome58.0.3029.110 5 5
chrome52.0.8393.98 1 1
chrome74.0.3729.61 1 1
chrome71.0.2623.112 2 2
firefox56.0 1 1
opera32.0.1948.25 1 1
chrome135.0.0.0 8 8
Unknown 10 10
chrome84.0.4131.4 1 1
chrome108.0.0.0 4 4
chrome59.0.3071.115 1 1
chrome96.0.4664.110 4 4
msie9.0 1 1
chrome79.0.3945.93 1 1
mozilla 5 5
netscape5.0 3 3
chrome110.0.0.0 1 1
chrome63.0.3239.132 2 2
firefox134.0 1 1
chrome47.0.2526.106 2 2
firefox136.0 3 3
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250512174457
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530040151
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250502193218
Mozilla/5.0 20250514143040
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530040151
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 62 62
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 151 0
301 2 506
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 58
/_fragment 2 -
/style.php 1 www.google.com
/actuator/env 1 -
/api/.env 3 -
/php_info.php 3 -
/dev/.env 3 -
/ 6 -
/robots.txt 17 -
/config.js 1 -
/ads.txt 4 -
/application/.env 3 -
/login.action 1 -
/runtime-env.js 1 -
/pms 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/phpinfo.php 3 -
/manifest.json 1 -
/_profiler/phpinfo 3 -
/.env 9 -
/settings.json 1 -
/v2/_catalog 1 -
/cgi-bin/ 10 https://www.portal.probitconsult.com:443/cgi-bin
/secrets.json 1 -
/assets/env.js 3 -
/.env.prod 3 -
/server 1 -
/_all_dbs 1 -
/api/config.js 2 -
/app-settings.js 1 -
/.vscode/sftp.json 1 -
/.git/config 20 -
/aws-exports.js 1 -
/@vite/env 1 -
/admin/config 1 -
/config.json 4 -
/assets/settings.js 1 -
/debug/default/view 1 -
/js/env.js 1 -
/js/config.js 3 -
/s/131313e2739313e263e20353/_/ 1 -
/js/app.js 3 -
/sendgrid.env 1 -
/telescope/requests 1 -
/js/settings.js 1 -
/core/misc/drupal.js 1 -
/assets/config.js 1 -
/.env.save 3 -
/server-status 1 -
/.DS_Store 1 -
/info.php 2 -
/env.js 3 -
/misc/drupal.js 1 -
/firebase.js 1 -
/phpinfo 3 -
/about 1 -
/firebase-config.js 1 -
/settings.js 1 -
/credentials.json 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 50
115.231.78.15 4 4 2492 20250530054551
124.236.100.56 4 4 2492 20250531001751
54.173.10.72 2 2 1246 20250504170903
199.45.154.119 2 2 1246 20250512174457
195.211.77.140 2 2 0 20250503211021
123.160.223.72 2 2 1246 20250525233737
167.94.145.102 2 2 1246 20250501225411
195.211.77.142 2 2 1246 20250503211047
205.210.31.174 1 1 623 20250509043833
104.248.243.114 1 1 623 20250522174432
208.100.26.249 1 1 623 20250520204437
117.81.180.249 1 1 623 20250513022224
27.150.163.48 1 1 623 20250519135912
198.235.24.82 1 1 623 20250502223615
86.104.252.57 1 1 623 20250519083925
198.235.24.122 1 1 623 20250530040151
196.251.88.164 1 1 623 20250520013257
165.227.220.22 1 1 623 20250528153225
209.97.180.8 1 1 623 20250503051033
208.100.26.248 1 1 623 20250516033208
185.247.137.116 1 1 623 20250502193218
59.110.140.219 1 1 623 20250509183610
139.59.77.171 1 1 623 20250506155602
137.184.0.133 1 1 623 20250525095400
142.93.214.77 1 1 623 20250508153917
121.237.36.30 1 1 623 20250513112643
111.7.96.169 1 1 623 20250506120429
143.110.176.138 1 1 623 20250528122846
88.127.166.182 1 1 623 20250514143040
208.100.26.247 1 1 623 20250508104612
205.210.31.239 1 1 623 20250502101232
134.199.232.3 1 1 623 20250524154315
137.184.229.191 1 1 623 20250526152130
180.106.196.11 1 1 623 20250513004806
111.7.106.104 1 1 623 20250517093326
209.38.79.205 1 1 623 20250506015023
143.198.144.234 1 1 623 20250504153303
44.200.60.207 1 1 623 20250504225125
5.135.58.202 1 1 623 20250505083500
121.237.36.31 1 1 623 20250513005535
198.235.24.64 1 1 623 20250514000256
146.190.22.177 1 1 623 20250514091134
198.235.24.95 1 1 623 20250508232026
193.32.127.209 1 1 623 20250504025210
205.210.31.107 1 1 623 20250526192727
147.185.132.76 1 1 623 20250513181203
198.235.24.45 1 1 623 20250505235035
208.100.26.233 1 1 623 20250530130258
198.235.24.199 1 1 623 20250523005641
64.227.96.219 1 1 623 20250510223440
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 24
20250501 2 2 1246 1
20250502 3 3 1869 3
20250503 5 5 1869 5
20250504 5 5 3115 5
20250505 2 2 1246 2
20250506 3 3 1869 3
20250508 3 3 1869 3
20250509 2 2 1246 2
20250510 1 1 623 1
20250512 3 3 1869 2
20250513 5 5 3115 5
20250514 3 3 1869 3
20250516 2 2 1246 2
20250517 2 2 1246 2
20250519 2 2 1246 2
20250520 2 2 1246 2
20250522 1 1 623 1
20250523 1 1 623 1
20250524 1 1 623 1
20250525 3 3 1869 2
20250526 2 2 1246 2
20250528 4 4 2492 3
20250530 4 4 2492 3
20250531 1 1 623 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 57
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 62 37380 57 57
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
0-44 180
500-1K 92
100-500 2
END_FILESIZE