One Hat Cyber Team

Edit File: awstats012025.invoice.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202501 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/ssl/awstats.invoice.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2055                
POS_TIME 2727                
POS_VISITOR 12291               
POS_DAY 13741               
POS_DOMAIN 3370                
POS_LOGIN 3721                
POS_ROBOT 3876                
POS_WORMS 4300                
POS_EMAILSENDER 4431                
POS_EMAILRECEIVER 4574                
POS_SESSION 14278               
POS_FILESIZE 14547               
POS_SIDER 14446               
POS_FILETYPES 4709                
POS_DOWNLOADS 4833                
POS_OS 4881                
POS_BROWSER 5124                
POS_SCREENSIZE 5610                
POS_UNKNOWNREFERER 5684                
POS_UNKNOWNREFERERBROWSER 6283                
POS_ORIGIN 6650                
POS_SEREFERRALS 6784                
POS_PAGEREFS 6928                
POS_SEARCHWORDS 7076                
POS_KEYWORDS 7228                
POS_MISC 2390                
POS_ERRORS 7287                
POS_CLUSTER 3577                
POS_SIDER_404 7437                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250201144448 1 0 7918200584467
FirstTime 20250101014612
LastTime 20250131124303
LastUpdate 20250202061606 1 0 0 0 0
TotalVisits 42                  
TotalUnique 35                  
MonthHostsKnown 0                   
MonthHostsUnknown 35                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 13 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
PDFSupport 0 0 0
QuickTimeSupport 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 4354 1 2 2428
1 2 2 18101 15 71 166094
2 2 2 8703 123 195 316391
3 4 4 36221 0 0 0
4 1 1 4325 2 2 2654
5 58 58 423264 69 77 3744854
6 3 3 13003 1 2 13818
7 0 0 0 1 2 4376
8 2 2 8648 0 4 4856
9 3 3 13031 0 40 97120
10 57 57 398153 60 60 46352
11 0 0 0 0 0 0
12 3 3 22456 5 7 14654
13 2 2 18101 1 2 13818
14 2 2 18102 0 1 0
15 2 2 8679 4 44 115573
16 2 19 7394809 0 1 24
17 0 0 0 0 0 0
18 1 1 4324 0 0 0
19 5 5 31230 2 8 11128
20 0 0 0 2 2 27568
21 1 1 4352 0 1 0
22 2 2 8680 2 42 113298
23 4 4 26808 4 34 74578
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 10
au 110 110 780819
us 17 17 111631
ru 10 10 43419
cn 6 23 7421628
ca 5 5 68818
in 5 5 21704
nl 1 1 4324
be 1 1 4328
md 1 1 4349
gb 1 1 4324
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 8
BW/ 10 3698376 20250127051611 0
no_user_agent 7 96386 20250131202531 0
bot[\s_+:,\.\;\/\\-] 4 8725 20250115072123 2
curl 4 55272 20250125135430 0
unknown 2 48 20250105161249 2
(firefox/)([0-9]\.|[0-1][0]\.) 1 4327 20250120193024 0
Exabot/ 1 4326 20250117152514 0
link 1 4325 20250125020039 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
Unknown 110 780819 0 0
html 47 307793 0 0
js 17 7376732 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 14
ios_iphone 2 2
macosx5 1 1
win2003 1 1
androidpie 2 2
linux 1 1
macosx14 1 1
win10 115 115
macosx10 1 1
symbian 1 1
android 1 1
win7 22 5
Unknown 23 23
android12 2 2
win8.1 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 22
chrome73.0.3683.75 1 1
firefox129.0 110 110
chrome73.0.3683.86 1 1
safari 1 1
chrome78.0.3880.5 1 1
opera8.60 1 1
safari12.1.1 1 1
firefox33.0 1 1
chrome76.0.3809.100 1 1
chrome70.0.3538.67 1 1
chrome110.0.0.0 3 3
safari4.0 1 1
mozilla 14 14
chrome60.0.3112.113 1 1
msie11.0 1 1
chrome57.0.2987.108 1 1
chrome71.0.2623.112 2 2
chrome100.0.4896.75 2 2
chrome76.0.3809.111 1 1
chrome91.0.4472.77 1 1
Unknown 9 9
chrome63.0.3239.132 19 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250128003452
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250131124303
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250124103619
Mozilla/5.0_(compatible) 20250130082405
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250131124303
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 157 174
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 6
301 82 26892
405 2 1286
302 108 22572
409 1 83
406 21 4746
404 340 842220
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 68
//invoice.probitconsult.com/js/functions.js 10 -
//invoice.probitconsult.com/js/lang/en.js 10 -
//invoice.probitconsult.com/js/help-tour.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js 29 -
/.env.save 1 -
//www.invoice.probitconsult.com/js/documents_and_note.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//www.invoice.probitconsult.com/js/documents_and_note.js 19 -
//oss.maxcdn.com/respond/1.4.2/respond.min.js 26 -
/style.php 1 www.google.com
/.git/config 5 -
/.env.base-distante 2 -
/_profiler/phpinfo 1 -
//www.invoice.probitconsult.com/js/help-tour.js 17 -
//invoice.probitconsult.com/js/app.js/metadata/identity/oauth2/token 1 -
//www.invoice.probitconsult.com/js/vendor.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/phpinfo.php 1 -
//invoice.probitconsult.com/js/vendor.js/metadata/identity/oauth2/token 1 -
/.env.prod 1 -
//www.invoice.probitconsult.com/js/lang/en.js/metadata/identity/oauth2/token 1 -
//invoice.probitconsult.com/js/functions.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//invoice.probitconsult.com/js/lang/en.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//invoice.probitconsult.com/js/login.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//invoice.probitconsult.com/js/login.js/metadata/identity/oauth2/token 1 -
//www.invoice.probitconsult.com/js/help-tour.js/metadata/identity/oauth2/token 1 -
/phpinfo 1 -
//invoice.probitconsult.com/js/common.js 10 -
//oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js/metadata/identity/oauth2/token 2 -
//www.invoice.probitconsult.com/js/vendor.js/metadata/identity/oauth2/token 1 -
/ads.txt 3 -
//www.invoice.probitconsult.com/js/app.js 18 -
/admin 2 -
//invoice.probitconsult.com/js/common.js/metadata/identity/oauth2/token 1 -
//www.invoice.probitconsult.com/js/functions.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//www.invoice.probitconsult.com/js/help-tour.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//invoice.probitconsult.com/js/documents_and_note.js 10 -
//www.invoice.probitconsult.com/js/common.js/metadata/identity/oauth2/token 1 -
//oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js/computeMetadata/v1/instance/service-accounts/default/token 2 -
//invoice.probitconsult.com/js/app.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//www.invoice.probitconsult.com/js/lang/en.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/admin/.env 1 -
//oss.maxcdn.com/respond/1.4.2/respond.min.js/metadata/identity/oauth2/token 2 -
//www.invoice.probitconsult.com/js/common.js 19 -
/.env.base-locale 2 -
//invoice.probitconsult.com/js/vendor.js 10 -
//www.invoice.probitconsult.com/js/app.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//www.invoice.probitconsult.com/js/documents_and_note.js/metadata/identity/oauth2/token 1 -
/public/admin 2 -
//oss.maxcdn.com/respond/1.4.2/respond.min.js/computeMetadata/v1/instance/service-accounts/default/token 2 -
//www.invoice.probitconsult.com/js/functions.js 19 -
//invoice.probitconsult.com/js/help-tour.js/metadata/identity/oauth2/token 1 -
//www.invoice.probitconsult.com/js/login.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
/php_info.php 1 -
//www.invoice.probitconsult.com/js/lang/en.js 18 -
//www.invoice.probitconsult.com/js/common.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//www.invoice.probitconsult.com/js/login.js 16 -
//www.invoice.probitconsult.com/js/login.js/metadata/identity/oauth2/token 1 -
//invoice.probitconsult.com/js/common.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//www.invoice.probitconsult.com/js/app.js/metadata/identity/oauth2/token 1 -
//invoice.probitconsult.com/js/vendor.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//invoice.probitconsult.com/js/help-tour.js 10 -
//invoice.probitconsult.com/js/documents_and_note.js/metadata/identity/oauth2/token 1 -
//invoice.probitconsult.com/js/app.js 9 -
//invoice.probitconsult.com/js/documents_and_note.js/computeMetadata/v1/instance/service-accounts/default/token 1 -
//www.invoice.probitconsult.com/js/functions.js/metadata/identity/oauth2/token 1 -
//www.invoice.probitconsult.com/js/vendor.js 17 -
//invoice.probitconsult.com/js/lang/en.js/metadata/identity/oauth2/token 1 -
//invoice.probitconsult.com/js/functions.js/metadata/identity/oauth2/token 1 -
//invoice.probitconsult.com/js/login.js 9 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 35
139.59.42.14 110 110 780819 20250112104524
45.148.10.237 5 5 21704 20250125094222
185.138.166.36 3 3 13058 20250128234047
195.178.110.164 3 3 13031 20250117152517
115.231.78.8 2 19 7394809 20250105161248
54.88.179.33 2 2 8709 20250119091333
124.236.100.56 2 2 8648 20250109054104
115.231.78.6 2 2 18171 20250103192501
77.74.177.118 2 2 8650 20250130040808
159.203.5.200 1 1 4351 20250129125120
64.227.139.218 1 1 4351 20250125131043
198.235.24.193 1 1 13750 20250107143443
147.185.132.204 1 1 13818 20250103053835
159.223.3.91 1 1 4352 20250114192330
205.210.31.44 1 1 13750 20250131124303
205.210.31.74 1 1 13750 20250116135058
199.45.155.105 1 1 4352 20250124210115
206.168.34.214 1 1 4352 20250111142211
147.185.132.100 1 1 13750 20250128035509
162.142.125.194 1 1 4354 20250120022928
143.110.161.2 1 1 4355 20250127125212
147.185.132.153 1 1 13750 20250114010642
18.140.72.192 1 1 4351 20250101014612
199.45.154.119 1 1 4355 20250111191031
205.210.31.156 1 1 13750 20250103054347
93.159.230.85 1 1 4328 20250102035021
176.123.10.110 1 1 4349 20250125020044
167.172.157.110 1 1 4324 20250130082405
87.236.176.163 1 1 4328 20250109152050
205.210.31.223 1 1 13818 20250108030155
147.185.132.171 1 1 13750 20250110231957
167.94.138.190 1 1 4354 20250128003452
185.247.137.11 1 1 4352 20250124103619
167.99.148.213 1 1 4327 20250102064502
188.166.98.233 1 1 4324 20250116083112
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 23
20250101 1 1 4351 1
20250102 2 2 8655 2
20250103 4 4 45739 3
20250105 2 19 7394809 1
20250107 58 58 413802 3
20250108 3 3 22496 3
20250109 2 2 8652 2
20250110 1 1 13750 1
20250111 2 2 8707 2
20250112 55 55 389447 1
20250114 2 2 18102 2
20250116 3 3 22399 3
20250117 1 1 4351 1
20250119 1 1 4355 1
20250120 2 2 8706 2
20250122 2 2 8676 1
20250124 2 2 8704 2
20250125 4 4 17376 3
20250127 1 1 4355 1
20250128 5 5 31162 3
20250129 1 1 4351 1
20250130 2 2 8649 2
20250131 1 1 13750 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
5mn-15mn 1
0s-30s 38
30s-2mn 3
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 2
/login 110 780819 2 2
/ 47 307793 40 40
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
0-44 9
5K+ 12
1K-2K 2
100-500 80
2K-5K 254
500-1K 1
END_FILESIZE