One Hat Cyber Team

Edit File: awstats062025.invoice.probitconsult.com.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202506 will be lost/reset.
# Last config file used to build this data file was /home/pb/tmp/awstats/ssl/awstats.invoice.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2054                
POS_TIME 2714                
POS_VISITOR 14983               
POS_DAY 15977               
POS_DOMAIN 3370                
POS_LOGIN 3713                
POS_ROBOT 3868                
POS_WORMS 4249                
POS_EMAILSENDER 4380                
POS_EMAILRECEIVER 4523                
POS_SESSION 16491               
POS_FILESIZE 16770               
POS_SIDER 16648               
POS_FILETYPES 4658                
POS_DOWNLOADS 4833                
POS_OS 4881                
POS_BROWSER 5044                
POS_SCREENSIZE 5376                
POS_UNKNOWNREFERER 5450                
POS_UNKNOWNREFERERBROWSER 5923                
POS_ORIGIN 6290                
POS_SEREFERRALS 6423                
POS_PAGEREFS 6567                
POS_SEARCHWORDS 6715                
POS_KEYWORDS 6867                
POS_MISC 2378                
POS_ERRORS 6926                
POS_CLUSTER 3569                
POS_SIDER_404 7051                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250701005740 4 378 6168484430508
FirstTime 0
LastTime 20250628061924
LastUpdate 20250701081034 4 0 3 0 0
TotalVisits 28                  
TotalUnique 20                  
MonthHostsKnown 0                   
MonthHostsUnknown 25                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 8 0
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
RealPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 3 31739 1 1 6603
1 1 1 13750 2 3 27592
2 0 0 0 0 0 0
3 2 2 27500 1 33 218443
4 2 3 5570 5 5 33015
5 1 1 13750 0 0 0
6 2 2 13750 2 2 20353
7 0 7 8749173 2 3 27660
8 2 10 8789373 0 2 6603
9 5 5 82382 6 14 8857100
10 2 17 18284025 1 2 6603
11 0 0 0 0 0 0
12 5 5 87156 463 491 3237109
13 5 20 9894260 34 56 346014
14 0 0 0 1 1 6603
15 1 15 9658754 0 1 0
16 0 0 0 0 0 0
17 1 1 13750 2 2 45412
18 0 0 0 3 3 52015
19 1 4 215428 14 18 106916
20 1 1 13750 0 0 0
21 0 0 0 2 2 20353
22 1 3 25137 1 51 336753
23 2 2 27568 26 65 21675658
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 12 12 110068
ru 9 9 142224
gh 8 47 29025792
zz 2 20 17560654
cn 2 8 8772631
be 1 1 13750
ca 1 1 13818
au 1 1 13818
bg 0 3 294060
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 7
bot[\s_+:,\.\;\/\\-] 60 30434725 20250627232300 6
no_user_agent 7 150054 20250630125552 0
survey 2 27568 20250607074337 0
validator 1 13750 20250609030304 0
scrapy 1 13750 20250628212142 0
unknown 1 24 20250612233242 1
curl 1 13818 20250602123918 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 6
css 12 2246001 0 0
php 2 27846 0 0
html 26 302908 0 0
Unknown 8 182242 0 0
png 3 330330 0 0
js 51 52857488 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
macosx15 11 2
win7 6 0
Unknown 3 3
linuxubuntu 1 1
linux 7 4
macosx 1 1
android12 2 2
win10 71 23
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 15
chrome110.0.0.0 2 2
chrome135.0.0.0 2 2
mozilla 2 2
chrome58.0.3029.110 5 5
opera12.16 1 1
safari17.6 1 1
chrome91.0.4472.124 8 8
firefox137.0 1 1
chrome81.0.4044.129 3 0
chrome137.0.0.0 48 9
chrome63.0.3239.132 6 0
Unknown 1 1
chrome120.0.0.0 10 1
itunes 1 1
chrome121.0.0.0 11 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 2
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250604105631
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250626191106
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250626191106
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 30 57
From1 0 0
From2 0 0
From3 0 0
From4 6 45
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
302 4 1624
301 5 1273
405 3 3033
404 662 4371186
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 298
/Terraform 2 -
/config/environments/production.rb 2 -
/bucket-name/config/.env 2 -
/assets/settings.js 1 -
/config/environments/development.rb 2 -
/config.f90 2 -
/api/config/tsconfig.json 2 -
/ecs-params.yml 2 -
/config.R 2 -
/api/.env 5 -
/frontend_dev.php/$ 2 -
/bucket-name/config/config.yaml 2 -
/lib/my-stack.ts 2 -
/test.php 2 -
/bin/app.pl 2 -
/aws-exports.js 1 -
/config.nim 2 -
/src/main/resources/appsettings.yml 2 -
/Sources/App/routes.swift 2 -
/cdk.json 2 -
/CloudFormation 2 -
/css/images/ui-icons_777777_256x240.png 1 -
/project/settings.py 2 -
/config/config.jl 2 -
/config/applicationContext.xml 2 -
/config/settings.py 2 -
/ui.R 2 -
/etc/profile.d 2 -
/config/config.js 2 -
/settings.js 1 -
/pubspec.yaml 2 -
//www.invoice.probitconsult.com/js/login.js 5 -
/src/main/resources/application.properties 2 -
/Info.plist 2 -
/fonts/ionicons.woff 1 -
/config/app.yaml 2 -
/config/database.yml 2 -
//invoice.probitconsult.com/js/lang/en.js 3 -
/kubernetes/deployment.yaml 2 -
//invoice.probitconsult.com/js/documents_and_note.js 3 -
/resources/application.conf 2 -
/web.config 2 -
/app.js 2 -
/test2.php 2 -
/index.php/phpinfo 2 -
/php-info.php 2 -
/pipeline.yml 2 -
/.env 10 -
/Application.cfm 2 -
/config/app.php 2 -
/config.js 3 -
/src/main.rs 2 -
/bin/app.ts 2 -
/.aws/config 2 -
/config/development.nim 2 -
/Application.cfc 2 -
/src/config.nim 2 -
/cloudformation-template.yaml 2 -
/rel/sys.config 2 -
/src/main/java/com/example/config/Config.kt 2 -
/config/config.cfc 2 -
/config.json 6 -
//www.invoice.probitconsult.com/js/vendor.js 5 -
/local.properties 2 -
/src/config/config.yaml 2 -
/App/Info.plist 2 -
/secrets/appsettings.json 2 -
/config/environment.cfc 2 -
/_profiler/phpinfo.php 2 -
/.env.save 3 -
/config/config.go 2 -
/Environment.xcconfig 2 -
/main.tf 2 -
/config.properties 2 -
/sitemap.xml 1 -
/assets/config.js 1 -
/gulpfile.js 2 -
/Rocket.toml 2 -
/config.dart 2 -
/backend/.env 1 -
/kubernetes/service.yaml 2 -
/serverless.yml 2 -
/README.md 2 -
/src/config.rs 2 -
//oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js 8 -
/src/main/resources/application-prod.properties 2 -
/stepfunctions/state-machine-definition.yaml 2 -
/php.php 2 -
/config/application.rb 2 -
/public/.git 1 https://www.invoice.probitconsult.com/.git/
/admin/config 2 -
/server.js 2 -
/fonts/ionicons.svg 1 -
/amplify/.config/project-config.json 2 -
/config/initializers/devise.rb 2 -
/grails-app/conf/application.groovy 2 -
/amplify/backend/config.json 2 -
/phpinfo.php 5 -
/grails-app/conf/logback.groovy 2 -
//www.invoice.probitconsult.com/js/common.js 5 -
/config/database.jl 2 -
/credentials.json 1 -
/php_info.php 3 -
/img/loading.gif 1 -
/bucket-name/config/config.json 2 -
/src/routes.nim 2 -
/config.cbl 2 -
/config/secrets.yml 2 -
/Config.plist 2 -
/config/config.json 2 -
/variables.tf 2 -
/admin/.env 3 -
/amplify/backend/environment-parameters.json 2 -
/home/ec2-user/.bashrc 2 -
/environments/production.yml 2 -
/config/test.json 2 -
/etc/caddy/Caddyfile 2 -
/fonts/ionicons.eot 1 -
/app/etc/env.php 2 -
/grails-app/conf/bootstrap.groovy 2 -
/js/config.js 5 -
/.profile 2 -
/appspec.yml 2 -
/config/constants.js 2 -
/css/images/ui-icons_cc0000_256x240.png 1 -
/.elasticbeanstalk/config.yml 2 -
/wp-config.php 2 -
/appsettings.Production.json 2 -
/config/production.lua 2 -
/env.js 3 -
/environments/development.yml 2 -
/app/routes.py 2 -
/app.config.js 2 -
/_profiler/phpinfo 5 -
/server.R 2 -
/js/env.js 1 -
/info.php 2 -
/css/images/ui-icons_444444_256x240.png 1 -
/config/secrets.json 2 -
/terraform.tfvars 2 -
/conf/development.conf 2 -
/firebase-config.js 1 -
/config/dev.exs 2 -
/js/'%20+%20%20%20%20%20%20%20%20src%20+%20%20%20%20%20%20%20%20' 2 -
/config.yaml 2 -
//www.invoice.probitconsult.com/js/lang/en.js 5 -
/config/production.cr 2 -
/config/packages/prod/doctrine.yaml 2 -
/Resources/Config 2 -
/cloudformation/template.json 2 -
/config/routes.cr 2 -
/js/settings.js 1 -
/config.lua 2 -
/api/config.js 2 -
/k8s/deployment.yaml 2 -
/scripts/start_server.sh 2 -
/config.m 2 -
//www.invoice.probitconsult.com/js/help-tour.js 5 -
/.aws/credentials 2 -
/buildspec.yml 2 -
/grails-app/conf/application.properties 2 -
/config/production.jl 2 -
/project/plugins.sbt 2 -
//invoice.probitconsult.com/js/common.js 3 -
/src/aws-exports.js 2 -
/config/releases.exs 2 -
/localstack/config.json 2 -
/.env.production.local 2 -
/.env.prod 5 -
/info 3 -
/config/config.exs 2 -
/appsettings.json 2 -
/kubernetes/secrets.yaml 2 -
/_fragment 2 -
/config/db.lua 2 -
/config/sys.config 2 -
/config/production.json 2 -
/phpinfo 5 -
/appsettings.Development.json 2 -
/app.pl 2 -
/application/config/constants.php 2 -
/config/development.jl 2 -
/lambda_function.py 2 -
/css/images/ui-icons_777620_256x240.png 1 -
/cloudformation/template.yaml 2 -
/.env.example 3 -
/config/routes.lua 2 -
/style.php 1 www.google.com
/runtime-env.js 1 -
//invoice.probitconsult.com/js/vendor.js 3 -
/test1.php 2 -
/docs/deployment.md 2 -
/.env.bak 2 -
/Sources/App/configure.swift 2 -
/css/images/ui-icons_ffffff_256x240.png 1 -
/assets/env.js 3 -
/dev/.env 3 -
/app_dev.php/_profiler/phpinfo 2 -
/application/.env 3 -
/.lein-env 2 -
/src/config/config.json 2 -
//www.invoice.probitconsult.com/js/documents_and_note.js 5 -
//www.invoice.probitconsult.com/js/functions.js 5 -
/config/database.json 2 -
/app/.env 2 -
/config/services.yaml 2 -
/config/application.yml 2 -
/config/runtime.exs 2 -
/Dockerfile 2 -
/fonts/glyphicons-halflings-regular.svg 1 -
/config/routes.jl 2 -
/config/prod.exs 2 -
/.env.stage 2 -
/index.html 2 -
/Config.xcconfig 2 -
/build.sbt 2 -
/ebextensions.config 2 -
/config/Config.toml 2 -
/.ebextensions/myconfig.config 2 -
/src/config/environment.js 2 -
/main.js 2 -
/ads.txt 4 -
/config.php 2 -
/CodePipeline 2 -
/.env.old 2 -
/css/images/ui-icons_555555_256x240.png 1 -
/config/settings.json 2 -
/config/application.cr 2 -
/src/config.ml 2 -
/.git/config 11 -
/src/server/server.ml 2 -
/App/Config.swift 2 -
/project.clj 2 -
/ecosystem.config.js 2 -
/grails-app/conf/application.yml 2 -
/samconfig.toml 2 -
/manifest.json 3 -
/firebase.js 1 -
/public/config 2 -
/img/loading-sm.gif 1 -
/global.R 2 -
/config.yml 2 -
/config/development.cr 2 -
/config/application.json 2 -
/conf/application.conf 2 -
/rel/vm.args 2 -
/.flaskenv 2 -
/meshes/mesh_config.json 2 -
/cloudformation-template.json 2 -
/home/ec2-user/.aws/credentials 2 -
/template.yaml 2 -
/config/config.cr 2 -
/conf/production.conf 2 -
//oss.maxcdn.com/respond/1.4.2/respond.min.js 8 -
/config/application.lua 2 -
/.env.local 2 -
/configs/application.ini 2 -
/index.js 2 -
/etc/environment 2 -
/Program.cs 2 -
/config/cache.php 2 -
//invoice.probitconsult.com/js/app.js 3 -
//www.invoice.probitconsult.com/js/app.js 5 -
/config/development.lua 2 -
/application.properties 2 -
/app.R 2 -
/config/config.yaml 2 -
/apps/.env 2 -
/settings.json 2 -
/home/ec2-user/.aws/config 2 -
/config/default.json 2 -
/config/production.nim 2 -
/config/database.php 2 -
/src/config.clj 2 -
/config/aws.json 2 -
/test 2 -
/config.ini 2 -
/config/settings.cfc 2 -
/debug/default 2 -
/kubernetes/configmap.yaml 2 -
/docker-compose.yml 2 -
/config/config.ini 2 -
//invoice.probitconsult.com/js/functions.js 3 -
/src/main/resources/application-dev.properties 2 -
//invoice.probitconsult.com/js/login.js 3 -
/scripts/install_dependencies.sh 2 -
/.cfconfig.json 2 -
/src/main/assets/config.json 2 -
/config/config.yml 2 -
/config/development.yaml 2 -
/apprunner.yaml 2 -
/app-settings.js 1 -
/fonts/glyphicons-halflings-regular.eot 1 -
//invoice.probitconsult.com/js/help-tour.js 3 -
/resources/config.edn 2 -
/sendgrid.env 1 -
/config/config.php 2 -
/secrets.json 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 25
197.251.194.80 8 47 29025792 20250618133310
185.177.72.104 4 4 73338 20250615120628
45.80.158.39 4 4 27500 20250628061924
170.39.218.61 2 11 8793347 20250624033040
45.80.158.101 2 2 27500 20250622014642
45.80.158.38 2 2 0 20250614040100
101.199.254.208 1 1 13818 20250612233226
159.203.3.245 1 1 13818 20250618120302
185.247.137.188 1 1 13818 20250604082917
198.235.24.45 1 1 13818 20250626191106
87.236.176.253 1 1 13750 20250604105631
124.236.100.56 1 1 13750 20250628002908
94.159.108.209 1 1 13750 20250604134940
64.227.191.189 1 1 13750 20250605031517
77.74.177.114 1 1 13750 20250605060447
139.59.31.225 1 1 13818 20250604081413
195.178.110.75 1 1 13818 20250616221915
162.243.171.57 1 1 13750 20250619130644
45.80.158.30 1 1 13750 20250605130220
93.159.230.84 1 1 13750 20250619052642
170.39.218.60 0 1 5570 
93.123.109.81 0 2 196040 
170.39.218.62 0 8 8761737 
93.123.109.101 0 1 98020 
115.231.78.8 0 6 8745063 
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 21
20250601 0 1 5570 0
20250602 4 4 82382 1
20250604 4 4 55136 4
20250605 4 19 9692690 4
20250606 1 16 18270275 1
20250607 0 1 4239 0
20250608 0 4 126333 0
20250612 1 1 13818 1
20250613 1 1 13750 1
20250614 3 3 13750 2
20250615 4 5 171358 1
20250616 1 1 13818 1
20250618 3 16 9670788 2
20250619 4 5 139270 4
20250621 1 1 13750 1
20250622 1 1 13750 1
20250623 0 8 8761737 0
20250624 1 2 111770 1
20250625 0 6 8745063 0
20250626 1 1 13818 1
20250628 2 2 13750 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
30s-2mn 1
0s-30s 27
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 3
/ 26 302908 25 23
/login 8 182242 3 4
/index.php 2 27846 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 5
2K-5K 16
100-500 9
0-44 19
5K+ 810
500-1K 3
END_FILESIZE