One Hat Cyber Team

View File Name : awstats072025.portal.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202507 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.portal.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2053                
POS_TIME 2725                
POS_VISITOR 9124                
POS_DAY 11068               
POS_DOMAIN 3311                
POS_LOGIN 3621                
POS_ROBOT 3776                
POS_WORMS 4151                
POS_EMAILSENDER 4282                
POS_EMAILRECEIVER 4425                
POS_SESSION 11615               
POS_FILESIZE 11850               
POS_SIDER 11772               
POS_FILETYPES 4560                
POS_DOWNLOADS 4642                
POS_OS 4690                
POS_BROWSER 4927                
POS_SCREENSIZE 5487                
POS_UNKNOWNREFERER 5561                
POS_UNKNOWNREFERERBROWSER 6313                
POS_ORIGIN 6836                
POS_SEREFERRALS 6968                
POS_PAGEREFS 7131                
POS_SEARCHWORDS 7279                
POS_KEYWORDS 7431                
POS_MISC 2389                
POS_ERRORS 7490                
POS_CLUSTER 3477                
POS_SIDER_404 7586                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250801225501 1 0 11080954377927
FirstTime 20250702021235
LastTime 20250731201558
LastUpdate 20250802081542 1 0 0 0 0
TotalVisits 53                  
TotalUnique 50                  
MonthHostsKnown 0                   
MonthHostsUnknown 50                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
RealPlayerSupport 0 0 0
AddToFavourites 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
JavascriptDisabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
TotalMisc 0 0 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
DirectorSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 4 4 2492 6 7 623
1 2 2 1246 1 2 0
2 3 3 1869 4 5 0
3 1 1 623 4 5 0
4 1 1 623 1 1 623
5 0 0 0 4 4 0
6 11 11 6853 15 22 1499
7 2 2 1246 5 5 1246
8 0 0 0 20 35 0
9 2 2 1246 0 1 0
10 1 1 623 4 5 0
11 1 1 623 10 12 3738
12 0 0 0 3 3 623
13 0 0 0 9 10 3738
14 0 0 0 22 37 0
15 4 4 2492 2 4 1246
16 5 5 3115 7 14 876
17 0 0 0 6 6 623
18 1 1 623 7 8 3115
19 3 3 1869 3 9 1246
20 4 4 2492 3 5 623
21 3 3 1869 34 53 3738
22 3 3 1869 13 14 4984
23 5 5 2492 23 24 1869
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 23 23 14329
ca 13 13 8099
cn 9 9 5607
ru 5 5 2492
ro 2 2 1246
in 2 2 1246
be 1 1 623
de 1 1 623
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 6
bot[\s_+:,\.\;\/\\-] 31 19313 20250729184519 0
no_user_agent 9 5607 20250728121550 0
Go\-http\-client/ 3 1869 20250723065821 0
scrapy 2 1246 20250731111323 0
survey 2 1246 20250707155426 0
(firefox/)([0-9]\.|[0-1][0]\.) 1 623 20250712061338 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 56 34265 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 13
macosx 1 1
Unknown 21 21
androidmarshmallow 1 1
macosx7 4 4
android10 3 3
win10 7 7
linuxubuntu 1 1
macosx15 3 3
winxp 1 1
win7 3 3
ios_ipad 2 2
androidoreo 1 1
linux 8 8
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 26
chrome120.0.0.0 2 2
chrome71.0.2623.112 1 1
chrome58.0.3029.110 1 1
firefox137.0 3 3
chrome63.0.3239.132 1 1
chrome60.0.3112.90 1 1
firefox123.0 1 1
chrome30.0.1551.0 1 1
safari12.2.0.0.1 1 1
Unknown 14 14
chrome17.0.963.56 4 4
chrome119.0.0.0 1 1
chrome137.0.0.0 5 5
firefox20.0 1 1
netscape5.0 2 2
safari17.3.1 1 1
chrome52.0.8393.98 1 1
chrome84.0.4147.89 1 1
chrome78.0.3904.62 2 2
mozilla 5 5
chrome109.0.0.0 1 1
chrome108.0.0.0 2 2
firefox45.9 1 1
safari9.0 1 1
firefox121.0 1 1
chrome72.0.3626.121 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250729151545
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250705111821
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250711215953
Mozilla/5.0_zgrab/0.x 20250714152414
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250722060103
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250711215953
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250729151545
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 55 55
From1 0 0
From2 1 1
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_google_com 1 1
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 227 0
301 2 506
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 64
/admin/API/users 1 -
/api/.env 3 -
/core/misc/drupal.js 1 -
/security.txt 1 -
/js/config.js 3 -
/debug/default/view 1 -
/info.php 1 -
/config.js 3 -
/firebase-config.js 3 -
/sitemap.xml 2 -
/phpinfo.php 3 -
/info 3 -
/login.action 1 -
/assets/config.js 3 -
/.DS_Store 1 -
/ 3 -
/application/.env 3 -
/config.json 6 -
/server-status 1 -
/cgi-bin/ 4 -
/phpinfo 3 -
/php_info.php 3 -
/actuator/env 1 -
/server 1 -
/s/131313e2739313e263e20353/_/ 1 -
/.env.prod 3 -
/app-settings.js 3 -
/.env.example 3 -
/.git/config 41 -
/sendgrid.env 3 -
/.git/HEAD 22 -
/js/env.js 3 -
/js/app.js 3 -
/wordpress/ 1 -
/.vscode/sftp.json 1 -
/old/ 1 -
/admin/API/system/config 1 -
/runtime-env.js 3 -
/dev/.env 3 -
/.env 6 -
/_all_dbs 1 -
/secrets.json 3 -
/.env.save 3 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/misc/drupal.js 1 -
/env.js 3 -
/admin/API/mnt/Session/ActiveList 1 -
/credentials.json 3 -
/manifest.json 3 -
/about 1 -
/firebase.js 3 -
/@vite/env 1 -
/js/settings.js 3 -
/telescope/requests 1 -
/admin/.env 3 -
/backend/.env 3 -
/admin/API/config/node 1 -
/assets/settings.js 3 -
/robots.txt 23 -
/settings.js 3 -
/_profiler/phpinfo 3 -
/aws-exports.js 3 -
/assets/env.js 3 -
/v2/_catalog 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 50
162.142.125.201 2 2 1246 20250704161502
205.210.31.84 2 2 1246 20250715015935
172.96.160.216 2 2 1246 20250729075652
45.148.10.80 2 2 1246 20250721224246
162.142.125.210 2 2 1246 20250722060103
115.231.78.8 2 2 1246 20250728192437
147.185.132.48 1 1 623 20250716034113
208.100.26.244 1 1 623 20250703043836
192.81.217.231 1 1 623 20250723025532
165.154.254.143 1 1 623 20250711213705
198.235.24.184 1 1 623 20250723061421
101.198.0.150 1 1 623 20250723065455
35.87.205.207 1 1 623 20250705181516
195.211.77.142 1 1 623 20250703231051
123.6.49.49 1 1 623 20250723063653
123.6.49.14 1 1 623 20250723063524
64.227.188.42 1 1 623 20250709002250
134.209.25.199 1 1 623 20250703231136
198.235.24.206 1 1 623 20250725195921
35.94.177.95 1 1 623 20250731163820
123.6.49.9 1 1 623 20250723063633
3.146.111.124 1 1 623 20250708204205
205.210.31.228 1 1 623 20250718061451
205.210.31.64 1 1 623 20250711215953
198.235.24.69 1 1 623 20250707160819
205.210.31.91 1 1 623 20250729151545
35.88.35.179 1 1 623 20250714223623
157.245.126.48 1 1 623 20250707151342
101.198.0.188 1 1 623 20250723065524
195.211.77.140 1 1 0 20250703231034
208.100.26.248 1 1 623 20250711061804
208.100.26.247 1 1 623 20250717071633
150.158.45.24 1 1 623 20250715221035
205.210.31.217 1 1 623 20250711023410
68.183.42.44 1 1 623 20250720015324
101.198.0.157 1 1 623 20250723065530
89.37.63.112 1 1 623 20250703231141
194.163.152.77 1 1 623 20250713091643
147.185.132.91 1 1 623 20250719000342
205.210.31.37 1 1 623 20250721160755
143.110.223.159 1 1 623 20250706104036
198.235.24.109 1 1 623 20250729003510
94.159.110.45 1 1 623 20250731201558
185.241.208.52 1 1 623 20250715200111
205.210.31.253 1 1 623 20250703230252
3.140.182.19 1 1 623 20250714152414
188.241.177.44 1 1 623 20250704092850
124.220.171.34 1 1 623 20250709200401
185.247.137.160 1 1 623 20250705111821
64.225.57.172 1 1 623 20250705150319
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 25
20250702 1 1 623 1
20250703 6 6 3115 6
20250704 3 3 1869 2
20250705 3 3 1869 3
20250706 1 1 623 1
20250707 2 2 1246 2
20250708 1 1 623 1
20250709 2 2 1246 2
20250711 4 4 2492 4
20250713 1 1 623 1
20250714 2 2 1246 2
20250715 3 3 1869 3
20250716 1 1 623 1
20250717 1 1 623 1
20250718 1 1 623 1
20250719 1 1 623 1
20250720 2 2 1246 2
20250721 2 2 1246 2
20250722 2 2 1246 1
20250723 8 8 4984 8
20250724 1 1 623 1
20250725 1 1 623 1
20250728 2 2 1246 1
20250729 3 3 1869 3
20250731 2 2 1246 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
30s-2mn 2
0s-30s 51
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 56 34265 53 53
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
100-500 2
0-44 242
500-1K 103
END_FILESIZE