One Hat Cyber Team

Edit File: awstats012025.invoice.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202501 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.invoice.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2051                
POS_TIME 2711                
POS_VISITOR 10564               
POS_DAY 11766               
POS_DOMAIN 3331                
POS_LOGIN 3647                
POS_ROBOT 3802                
POS_WORMS 4057                
POS_EMAILSENDER 4188                
POS_EMAILRECEIVER 4331                
POS_SESSION 12192               
POS_FILESIZE 12450               
POS_SIDER 12349               
POS_FILETYPES 4466                
POS_DOWNLOADS 4564                
POS_OS 4612                
POS_BROWSER 4730                
POS_SCREENSIZE 4954                
POS_UNKNOWNREFERER 5028                
POS_UNKNOWNREFERERBROWSER 5627                
POS_ORIGIN 5994                
POS_SEREFERRALS 6126                
POS_PAGEREFS 6270                
POS_SEARCHWORDS 6418                
POS_KEYWORDS 6570                
POS_MISC 2374                
POS_ERRORS 6629                
POS_CLUSTER 3503                
POS_SIDER_404 6796                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250201184047 1 0 12430011917408
FirstTime 0
LastTime 20250131190003
LastUpdate 20250202061605 1 0 0 0 0
TotalVisits 30                  
TotalUnique 29                  
MonthHostsKnown 0                   
MonthHostsUnknown 29                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
RealPlayerSupport 0 0 0
AddToFavourites 0 15 0
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
TotalMisc 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 4353 1 3 2654
1 0 0 0 4 8 23370
2 0 0 0 2 5 7736
3 2 2 18104 8 8 23370
4 0 0 0 2 2 6829
5 0 0 0 10 12 26430
6 1 1 4329 50 52 362132
7 1 1 13750 0 0 0
8 2 2 8651 3 11 36124
9 2 2 8704 1 2 0
10 1 1 4351 8 8 21171
11 2 2 27568 0 0 0
12 2 2 8706 1 3 13750
13 1 1 4351 2 3 452
14 6 6 26136 27 27 43670
15 0 0 0 0 0 0
16 2 2 18073 4 7 16339
17 0 0 0 3 3 7055
18 0 0 0 7 7 21551
19 9 9 95601 31 36 22438
20 2 2 8705 5 7 27408
21 1 1 4353 8 10 52846
22 3 3 31926 3 3 15634
23 3 3 13008 4 5 1738
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 18 18 125290
gb 8 8 34814
ca 5 5 68886
cn 4 4 36244
ru 3 3 13005
be 1 1 4354
nl 1 1 4326
cz 1 1 13750
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
no_user_agent 7 96593 20250131201455 0
unknown 2 48 20250105161246 2
BW/ 2 4352 20250127051610 1
curl 1 0 20250108081829 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 39 291893 0 0
php 2 8776 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 4
win10 14 14
win7 4 4
androidkitkat 2 2
Unknown 21 21
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 9
firefox45.0 1 1
mozilla 15 15
chrome71.0.2623.112 2 2
Unknown 6 6
chrome58.0.3029.110 6 6
chrome63.0.3239.132 2 2
android 2 2
chrome100.0.4896.75 3 3
chrome80.0.3987.149 4 4
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Mozilla/5.0_(compatible) 20250130082403
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250124030733
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250129233359
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250131112839
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250131112839
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 41 41
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 8
301 5 1322
409 3 249
406 59 13334
101 2 0
405 2 1286
403 4 68432
500 2 4864
404 118 542217
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 95
/include/wp-configs.php 1 -
/vendor/laravel-filemanager/js/script.js 1 -
/wp-includes/style.php 1 -
//www.invoice.probitconsult.com/js/login.js 2 -
/ads.txt 6 -
/simple.php 3 -
/chosen.php 2 -
/about.php7 1 -
/public/wp-content/plugins/wp-file-manager/lib/files 1 -
/wp-content/plugins/super-forms/uploads/php/index.php 1 -
/install.php 1 -
/berlin.php 1 -
/assets/jquery-file-upload/server/php/index.php 1 -
/wp-content/plugins/superlogoshowcase-wp/sls-wp-admin/pages/exportAjax.php 1 -
/wp-content/plugins/super-interactive-maps/sim-wp-admin/pages/manage-maps.php 1 -
/wp-includes/images/smilies/index.php 1 -
/up.php 1 -
/wp-content/plugins/secure-file-manager/vendor/elfinder/php/connector.minimal.php 1 -
/wp-includes/wp-includes/about.php 1 -
/admin/plugins/elrte/src/elrte.src.html 1 -
/_profiler/phpinfo 2 -
/sites/all/libraries/elfinder/src/connectors/php/connector.php 1 -
/bitrix/admin/htmleditor2/simple.php 2 -
/wp-content/plugins/pwnd-1/pwnd.php 1 -
/public/vendor/laravel-filemanager/js/script.js 1 -
/alfa-rex2.php7 1 -
/nf_tracking.php 1 -
/wp-content/themes/SqueezeTheme/style.css 1 -
/.git/config 2 -
/wp-content/plugins/pwnd/pwnd.php 1 -
/.AWS_/credentials 2 -
/wp-admin/css/colors/blue/lock.php 1 -
/.aws/credentials 3 -
/wp-content/mu-plugins/index.php 1 -
/.well-known/pki-validation/xmrlpc.php 1 -
/plugins/elrte/src/elrte.src.html 1 -
/aws.yml 1 -
/wp-includes/fonts/admin.php 1 -
/avaa.php 1 -
/.env.local 2 -
/wp-content/uploads/wp-conflg.php 1 -
//www.invoice.probitconsult.com/js/vendor.js 1 -
/wp-includes/index.php 1 -
/public/contact 2 -
//invoice.probitconsult.com/js/app.js 1 -
/karma.conf.json 2 -
/wp-admin/js/wp-conflg.php 1 -
/wp-mail.php/wp-includes/ID3/rnEPv9.php 1 -
/makeasmtp.php 1 -
/bypass.php 1 -
/wp-admin/user/admin.php 1 -
/sites/all/libraries/plupload/examples/upload.php 1 -
/wp-content/themes/twenty/twenty.php 1 -
/wp-mail.php/wp-includes/ID3/class-config.php 1 -
/admin/editor/engine.php 1 -
/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php 1 -
/wp-content/plugins/fix/up.php 2 -
/api/shared/config/config.env 2 -
/wp-content/plugins/advanced_file_manager_5/php/connector.minimal.php 1 -
/.env.production 2 -
/wp-content/plugins/superstorefinder-wp/css/ssf-wp-pop.css 1 -
/media/system/js/core.js 1 -
/wp-includes/css/wp-conflg.php 1 -
/sites/all/libraries/elfinder/connectors/php/connector.php 1 -
/wp-content/uploads/json.php 1 -
/wp-admin/network/wp-conflg.php 1 -
/wp-content/plugins/dummyyummy/wp-signup.php 1 -
//oss.maxcdn.com/respond/1.4.2/respond.min.js 2 -
/info.php 1 -
/wp-content/themes/wp-pridmag/lock.php 1 -
/js/plupload/plupload.js 1 -
/wp-signup.php 1 -
/wp-admin/css/wp-conflg.php 1 -
/wp-content/themes/konzept/includes/uploadify/upload.php 1 -
/wp-mail.php/wp-includes/ID3/esyfvxgmdq.php 1 -
/wp-admin/includes/wp-conflg.php 1 -
/wp-content/style.php 1 -
/classsmtps.php 1 -
/wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php 1 -
/assets/plugins/elfinder/php/connector.minimal.php 1 -
/style.php 2 -
/plugins/elfinder/php/connector.php 1 -
/test.php 1 -
/modules/mod_simplefileuploadv1.3/elements/wcg9LbOHD14.php 1 -
/wp-content/themes/seotheme/classwithtostring.php 1 -
/phpinfo 1 -
/wp-includes/js/jquery/jquery.js 1 -
/cong.php 1 -
/phpinfo.php 1 -
/403.php 1 -
/wp-includes/sodium_compat/index.php 1 -
/wp-admin/style.php 1 -
//invoice.probitconsult.com/js/login.js 1 -
/updates.php 1 -
/wp-includes/Text/Diff/about.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 29
46.250.238.33 6 6 26136 20250111140422
45.55.241.136 4 4 55000 20250106195053
115.231.78.6 2 2 18171 20250103192334
199.45.155.98 2 2 8682 20250129233359
115.231.78.8 2 2 18073 20250105161245
185.181.10.94 2 2 8678 20250102233451
205.210.31.149 1 1 13750 20250107221018
162.142.125.198 1 1 4353 20250127211638
167.172.157.110 1 1 4325 20250130082403
185.247.137.239 1 1 4327 20250120194257
159.223.3.91 1 1 4353 20250114192326
167.94.138.206 1 1 4354 20250120091444
35.171.144.152 1 1 4350 20250119091335
64.227.139.218 1 1 4351 20250125131039
79.127.224.106 1 1 13750 20250131190003
143.110.161.2 1 1 4352 20250127125209
147.185.132.222 1 1 13750 20250131112839
205.210.31.47 1 1 13750 20250103075148
198.235.24.118 1 1 13818 20250103112435
87.236.176.205 1 1 4354 20250124030733
159.203.5.200 1 1 4354 20250129125117
167.172.191.20 1 1 4353 20250129003331
205.210.31.43 1 1 13818 20250106223251
54.88.179.33 1 1 4351 20250108103120
167.94.146.54 1 1 4353 20250124200722
167.99.148.213 1 1 4329 20250102064459
198.235.24.183 1 1 13750 20250128035918
54.152.114.116 1 1 4358 20250130224008
188.166.98.233 1 1 4326 20250116083108
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 18
20250102 3 3 13007 2
20250103 4 4 45739 3
20250105 2 2 18073 1
20250106 5 5 68818 2
20250107 1 1 13750 1
20250108 1 1 4351 1
20250111 7 7 30488 2
20250114 1 1 4353 1
20250116 1 1 4326 1
20250119 1 1 4350 1
20250120 2 2 8681 2
20250124 2 2 8707 2
20250125 1 1 4351 1
20250127 2 2 8705 2
20250128 1 1 13750 1
20250129 3 3 13037 3
20250130 2 2 8683 2
20250131 2 2 27500 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 29
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 2
/ 39 291893 30 29
/index.php 2 8776 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 5
0-44 12
2K-5K 29
44-100 3
100-500 16
5K+ 60
END_FILESIZE