One Hat Cyber Team

Edit File: awstats072025.parcel.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202507 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.parcel.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2053                
POS_TIME 2730                
POS_VISITOR 8576                
POS_DAY 10685               
POS_DOMAIN 3333                
POS_LOGIN 3633                
POS_ROBOT 3788                
POS_WORMS 4109                
POS_EMAILSENDER 4240                
POS_EMAILRECEIVER 4383                
POS_SESSION 11196               
POS_FILESIZE 11431               
POS_SIDER 11353               
POS_FILETYPES 4518                
POS_DOWNLOADS 4600                
POS_OS 4648                
POS_BROWSER 4902                
POS_SCREENSIZE 5346                
POS_UNKNOWNREFERER 5420                
POS_UNKNOWNREFERERBROWSER 6172                
POS_ORIGIN 6695                
POS_SEREFERRALS 6827                
POS_PAGEREFS 6990                
POS_SEARCHWORDS 7138                
POS_KEYWORDS 7290                
POS_MISC 2394                
POS_ERRORS 7349                
POS_CLUSTER 3489                
POS_SIDER_404 7446                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250801052713 22 3504 5980777368216
FirstTime 20250701061541
LastTime 20250731175140
LastUpdate 20250801081430 22 0 21 0 0
TotalVisits 59                  
TotalUnique 54                  
MonthHostsKnown 0                   
MonthHostsUnknown 54                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
AddToFavourites 0 0 0
QuickTimeSupport 0 0 0
PDFSupport 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 1246 6 7 3115
1 4 4 2492 8 14 1752
2 7 7 4361 15 23 253
3 2 2 1246 8 10 0
4 4 4 2492 5 10 3115
5 0 0 0 0 0 0
6 6 6 3738 12 14 2492
7 2 2 1246 3 4 623
8 1 1 623 3 3 623
9 1 1 623 0 1 0
10 1 1 623 7 8 3738
11 4 4 2492 4 6 872
12 2 2 1246 5 5 0
13 4 4 2492 7 9 623
14 7 7 4361 15 21 3991
15 1 1 623 5 6 623
16 4 4 2492 2 3 623
17 3 3 1869 2 5 253
18 3 3 1869 4 6 253
19 0 0 0 5 6 3115
20 1 1 623 7 8 3115
21 4 4 2492 13 17 6483
22 1 1 623 10 12 6230
23 7 7 3738 27 29 2492
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 7
us 37 37 23051
ca 13 13 8099
cn 9 9 5607
ru 6 6 3115
gb 2 2 1246
de 2 2 1246
in 2 2 1246
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 5
bot[\s_+:,\.\;\/\\-] 53 33019 20250731224754 0
no_user_agent 9 5607 20250728065655 0
Go\-http\-client/ 2 1246 20250703231153 0
scrapy 2 1246 20250703062908 0
survey 2 1246 20250707160055 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 71 43610 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 14
macosx15 4 4
macosx9 1 1
androidmarshmallow 1 1
macosx7 6 6
macosx 1 1
linux 9 9
androidkitkat 1 1
androidoreo 1 1
win11 1 1
win10 8 8
macosx11 1 1
macosx13 1 1
Unknown 35 35
macosx14 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 20
chrome133.0.0.0 1 1
chrome122.0.0.0 1 1
chrome137.0.0.0 7 7
chrome123.0.0.0 1 1
chrome76.0.3809.111 1 1
safari7.0.6 1 1
chrome71.0.3578.99 1 1
chrome76.0.3809.100 1 1
chrome108.0.0.0 2 2
firefox102.0 1 1
mozilla 20 20
netscape5.0 2 2
chrome28.0.1469.0 1 1
chrome17.0.963.56 6 6
firefox137.0 3 3
firefox121.0 1 1
chrome52.0.8393.98 1 1
chrome120.0.0.0 5 5
Unknown 14 14
chrome75.0.3770.100 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250730045121
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250731175140
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250711042542
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250719145315
Mozilla/5.0_zgrab/0.x 20250721122556
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250730045121
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250711042542
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 70 70
From1 0 0
From2 1 1
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_google_com 1 1
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 120 0
301 8 2020
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 42
/.env.save 1 -
/.well-known/security.txt 1 -
/application/.env 1 -
/s/131313e2739313e263e20353/_/ 1 -
/env.js 1 -
/info.php 1 -
/login.action 1 -
/server-status 1 -
/.env 4 -
/phpinfo 1 -
/api/.env 1 -
/robots.txt 15 -
/js/config.js 1 -
/v2/_catalog 1 -
/cgi-bin/ 16 https://www.parcel.probitconsult.com:443/cgi-bin
/wiki 3 -
/phpinfo.php 1 -
/actuator/env 1 -
/.env.prod 1 -
/.git/config 27 -
/dev/.env 1 -
/@vite/env 1 -
/config.json 5 -
/api/config.js 1 -
/assets/env.js 1 -
/about 1 -
/old/ 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/sitemap.xml 4 -
/security.txt 2 -
/.DS_Store 1 -
/.git/HEAD 9 -
/debug/default/view 1 -
/server 1 -
/ 1 -
/.vscode/sftp.json 1 -
/telescope/requests 1 -
/_all_dbs 1 -
/wordpress/ 2 -
/_profiler/phpinfo 1 -
/js/app.js 1 -
/php_info.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 54
13.38.186.141 3 3 1869 20250720025313
101.198.0.155 3 3 1869 20250721134505
199.45.155.103 2 2 1246 20250731175140
101.198.0.181 2 2 1246 20250721134417
206.168.34.66 2 2 1246 20250713012559
185.241.208.52 2 2 1246 20250726123705
199.45.154.137 2 2 1246 20250713013102
199.45.155.75 2 2 1246 20250730112046
167.94.138.122 2 2 1246 20250702181029
167.94.138.201 2 2 1246 20250731025909
162.142.125.40 2 2 1246 20250730212958
45.148.10.80 2 2 1246 20250723062038
206.168.34.207 2 2 1246 20250731141957
194.163.152.77 2 2 1246 20250713075130
27.115.124.66 2 2 1246 20250723231752
157.230.229.126 1 1 623 20250706162659
198.235.24.220 1 1 623 20250704161945
207.154.255.132 1 1 623 20250703040823
165.22.215.238 1 1 623 20250726031645
165.154.254.143 1 1 623 20250711211156
198.235.24.221 1 1 623 20250710185539
167.94.138.164 1 1 623 20250731042740
185.247.137.31 1 1 623 20250714160415
35.88.35.179 1 1 623 20250714222604
35.87.205.207 1 1 623 20250706000545
198.235.24.227 1 1 623 20250725021505
27.115.124.112 1 1 623 20250723231658
34.217.60.213 1 1 623 20250713201530
147.185.132.57 1 1 623 20250704111601
161.35.115.115 1 1 623 20250717140738
134.122.63.219 1 1 623 20250712022746
159.203.38.2 1 1 623 20250708153447
128.199.182.77 1 1 623 20250703231140
198.235.24.96 1 1 623 20250726070322
195.211.77.140 1 1 0 20250703231035
3.140.182.19 1 1 623 20250721122556
101.198.0.157 1 1 623 20250704062210
198.235.24.78 1 1 623 20250716063730
147.185.132.9 1 1 623 20250721174736
205.210.31.132 1 1 623 20250730045121
3.22.104.232 1 1 623 20250710080452
205.210.31.75 1 1 623 20250707215751
185.247.137.171 1 1 623 20250719145315
98.159.36.22 1 1 623 20250704092832
198.235.24.3 1 1 623 20250716005140
167.71.4.212 1 1 623 20250704144321
134.209.24.86 1 1 623 20250731030237
198.235.24.66 1 1 623 20250721165222
198.235.24.196 1 1 623 20250711042542
195.211.77.142 1 1 623 20250703231052
198.235.24.147 1 1 623 20250708115045
23.234.88.154 1 1 623 20250703231141
205.210.31.204 1 1 623 20250701061541
194.164.107.6 1 1 623 20250720145013
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 23
20250701 1 1 623 1
20250702 2 2 1246 1
20250703 5 5 2492 5
20250704 7 7 4361 7
20250705 1 1 623 1
20250706 2 2 1246 2
20250707 1 1 623 1
20250708 2 2 1246 2
20250710 2 2 1246 2
20250711 2 2 1246 2
20250712 2 2 1246 2
20250713 6 6 3738 4
20250714 2 2 1246 2
20250716 2 2 1246 2
20250717 1 1 623 1
20250719 1 1 623 1
20250720 5 5 3115 3
20250721 6 6 3738 5
20250723 4 4 2492 3
20250725 1 1 623 1
20250726 3 3 1869 3
20250730 5 5 3115 3
20250731 8 8 4984 5
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 54
30s-2mn 5
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 71 43610 59 59
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
100-500 8
0-44 152
500-1K 138
END_FILESIZE