One Hat Cyber Team

Edit File: awstats082025.parcel.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202508 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.parcel.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2053                
POS_TIME 2712                
POS_VISITOR 9066                
POS_DAY 10577               
POS_DOMAIN 3406                
POS_LOGIN 3764                
POS_ROBOT 3919                
POS_WORMS 4242                
POS_EMAILSENDER 4373                
POS_EMAILRECEIVER 4516                
POS_SESSION 10968               
POS_FILESIZE 11486               
POS_SIDER 11157               
POS_FILETYPES 4651                
POS_DOWNLOADS 4829                
POS_OS 4911                
POS_BROWSER 5215                
POS_SCREENSIZE 5900                
POS_UNKNOWNREFERER 5974                
POS_UNKNOWNREFERERBROWSER 6468                
POS_ORIGIN 6706                
POS_SEREFERRALS 6838                
POS_PAGEREFS 7001                
POS_SEARCHWORDS 7179                
POS_KEYWORDS 7331                
POS_MISC 2375                
POS_ERRORS 7390                
POS_CLUSTER 3620                
POS_SIDER_404 7514                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250901120219 1 0 8588575633145
FirstTime 0
LastTime 20250821143103
LastUpdate 20250902081846 1 0 0 0 0
TotalVisits 51                  
TotalUnique 39                  
MonthHostsKnown 0                   
MonthHostsUnknown 39                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 20 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
DirectorSupport 0 0 0
RealPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 1246 14 15 399467
1 2 2 623 30 49 53100
2 8 8 74332 487 490 3552267
3 2 2 31 707 712 5503631
4 2 2 1246 1266 1272 9239292
5 2 2 31 340 343 2354837
6 2 2 1611 16 22 582660
7 1 1 623 12 13 17857
8 4 4 2234 22 25 30612
9 2 4 0 18 21 558916
10 1 1 0 9 13 58596
11 6 6 4103 16 22 5562
12 1 1 0 14 16 539485
13 0 0 0 9 9 22051
14 5 5 1611 12 16 39784
15 4 4 1869 21 23 527225
16 4 4 1611 9 13 45224
17 3 3 2964 37 41 43705
18 1 1 988 16 20 465973
19 4 4 1246 13 17 65874
20 6 6 623 33 38 168200
21 0 0 0 35 46 543608
22 6 6 24429 15 21 48937
23 6 6 24925 18 24 69242
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 13
us 32 32 13813
jp 17 17 120891
in 9 9 6186
ca 3 3 1246
fr 2 4 0
bg 2 2 0
gb 2 2 988
nc 2 2 0
za 1 1 988
de 1 1 623
au 1 1 0
ru 1 1 623
be 1 1 988
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 5
bot[\s_+:,\.\;\/\\-] 192 3701710 20250821161355 6
no_user_agent 5 4210 20250817175156 0
scrapy 2 1246 20250801053453 0
Go\-http\-client/ 2 1976 20250817175204 0
survey 1 623 20250811032332 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 8
html 50 25455 0 0
env 1 0 0 0
bak 1 0 0 0
xml 3 93 0 0
json 1 0 0 0
Unknown 4 0 0 0
txt 2 0 0 0
php 14 120798 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 2
/app-ads.txt 1 0 0
/ads.txt 1 0 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 17
linux 12 10
macosx15 2 2
macosx13 2 2
androiddonut 1 1
androidpie 2 2
linuxgentoo 1 1
ios_iphone 2 2
android10 1 1
androidmarshmallow 2 2
symbian 2 2
macosx 1 1
winxp 1 1
Unknown 18 18
win10 24 24
androidoreo 1 1
win7 1 1
linuxubuntu 3 3
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 34
firefox124.0 1 1
firefox48.0 1 1
chrome76.0.3809.100 1 1
chrome76.0.3809.111 2 2
netscape5.0 4 4
mozilla 11 11
chrome137.0.0.0 1 1
Unknown 3 3
chrome76.0.3809.89 1 1
chrome67.0.3396.87 1 1
chrome104.0.0.0 1 1
chrome36.0.1985.125 1 1
opera10.61 1 1
iphone 1 1
firefox139.0 1 1
chrome36.0.1985.67 1 1
chrome133.0.0.0 1 1
chrome125.0.0.0 1 1
firefox135.0 1 1
galeon 1 1
chrome72.0.3626.121 1 1
chrome75.0.3770.142 1 1
sonyericsson 1 1
chrome71.0.3578.98 1 1
chrome131.0.0.0 2 2
chrome52.0.8393.98 1 1
safari 2 2
chrome132.0.0.0 4 2
chrome130.0.0.0 2 2
chrome139.0.0.0 20 20
firefox112.0 1 1
firefox28.0 2 2
chrome127.0.0.0 1 1
nokia 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_zgrab/0.x 20250820142648
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250819191856
Mozilla/5.0 20250807083252
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250806113146
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250816062516
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250819191856
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 65 67
From1 0 0
From2 1 1
From3 1 1
From4 7 7
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_google_com 1 1
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
https://zp43ha.lstood.top 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
403 18 0
301 4 1004
404 131 0
500 2893 21137628
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 61
/_all_dbs 1 -
/cgi-bin/ 6 https://www.parcel.probitconsult.com:443/cgi-bin
/aws-exports.js 1 -
/s/131313e2739313e263e20353/_/ 1 -
/wp-json/wp/v2/users/1 2 -
/backend/.env 3 -
/credentials.json 1 -
/xmlrpc.php 1 -
/firebase-config.js 1 -
/wiki 1 -
/.vscode/sftp.json 1 -
/js/env.js 1 -
/php_info.php 3 -
/js/settings.js 1 -
/secrets.json 1 -
/js/app.js 1 -
/env.js 1 -
/phpinfo 3 -
/assets/config.js 1 -
/debug/default/view 1 -
/api/.env 3 -
/.env.example 3 -
/admin/.env 3 -
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 3 -
/about 1 -
/app-settings.js 1 -
/.DS_Store 1 -
/ 3 -
/sendgrid.env 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/server-status 1 -
/config.js 1 -
/.env.save 3 -
/@vite/env 1 -
/_profiler/phpinfo 3 -
/settings.js 1 -
/.git/config 13 -
/_ignition/execute-solution 1 -
/sitemap.xml 2 -
/dev/.env 3 -
/.well-known/security.txt 1 -
/firebase.js 1 -
/runtime-env.js 1 -
/actuator/env 1 -
/.env 11 -
/login.action 1 -
/_fragment 1 -
/assets/settings.js 1 -
/info 3 -
/manifest.json 1 -
/server 1 -
/phpinfo.php 3 -
/robots.txt 11 -
/js/config.js 1 -
/info.php 1 -
/telescope/requests 1 -
/.env.prod 3 -
/application/.env 3 -
/v2/_catalog 1 -
/config.json 2 -
/assets/env.js 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 39
39.110.230.56 17 17 120891 20250818050837
45.148.10.80 8 8 6186 20250819104251
18.117.219.199 4 4 2492 20250807083252
198.23.210.59 2 2 0 20250819193236
62.210.90.212 2 4 0 20250820095833
206.168.34.222 2 2 1246 20250806044602
37.156.216.142 2 2 0 20250820205142
206.168.34.42 2 2 1246 20250804232440
167.94.138.120 2 2 1246 20250806112736
44.249.166.219 2 2 623 20250818032352
167.94.145.109 2 2 1246 20250806113146
206.168.34.199 2 2 1246 20250805002126
45.131.155.101 1 1 0 20250819021903
206.217.139.205 1 1 0 20250820204826
198.235.24.120 1 1 623 20250814160551
198.44.138.179 1 1 0 20250820204826
68.183.143.195 1 1 0 20250821143103
205.210.31.206 1 1 623 20250811153037
198.235.24.156 1 1 0 20250819191856
143.110.213.72 1 1 988 20250817175157
3.87.8.212 1 1 988 20250815182420
213.209.143.116 1 1 623 20250806203256
67.220.94.150 1 1 0 20250818161615
87.236.176.201 1 1 988 20250816062516
35.153.141.19 1 1 623 20250803192316
93.123.109.7 1 1 0 20250818081330
3.146.111.124 1 1 0 20250820142648
196.251.88.64 1 1 988 20250817221459
54.242.223.171 1 1 0 20250818141024
138.197.19.136 1 1 623 20250809060442
176.126.245.48 1 1 0 20250820204826
203.55.131.3 1 1 0 20250819051835
45.55.216.12 1 1 0 20250819151839
185.177.72.24 1 1 623 20250807111925
157.245.70.184 1 1 623 20250814012453
198.55.98.68 1 1 623 20250807142504
143.198.44.164 1 1 0 20250819162208
93.123.109.79 1 1 0 20250819010034
193.32.248.243 1 1 988 20250817175158
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 17
20250803 1 1 623 1
20250804 2 2 1246 1
20250805 2 2 1246 1
20250806 10 10 6230 6
20250807 4 4 2492 3
20250809 1 1 623 1
20250811 1 1 623 1
20250812 1 1 623 1
20250813 1 1 623 1
20250814 2 2 1246 2
20250815 1 1 988 1
20250816 4 4 3952 4
20250817 13 13 51437 6
20250818 13 13 74394 6
20250819 9 9 0 9
20250820 8 10 0 6
20250821 1 1 0 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 5
30s-2mn 4
30mn-1h 1
0s-30s 44
2mn-5mn 1
15mn-30mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 11
/ 50 25455 42 41
/wp-cron.php 7 46497 1 0
/wp-confiq.php 6 74301 1 1
/.git/config 3 0 3 3
/testsitemap.xml 2 62 1 2
/sellers.json 1 0 0 1
//testsitemap.xml 1 31 0 0
/.env.bak 1 0 1 1
/_fragment 1 0 1 1
/wp-includes/blocks/paragraph/wp-login.php 1 0 0 0
/.env 1 0 1 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 5
1K-2K 6
500-1K 88
100-500 7
5K+ 2941
0-44 315
END_FILESIZE