One Hat Cyber Team

Edit File: awstats122024.invoice.probitconsult.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202412 will be lost/reset.
# Last config file used to build this data file was /home2/pb/tmp/awstats/awstats.invoice.probitconsult.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2017                
POS_TIME 2679                
POS_VISITOR 13478               
POS_DAY 15083               
POS_DOMAIN 3303                
POS_LOGIN 3646                
POS_ROBOT 3801                
POS_WORMS 4115                
POS_EMAILSENDER 4246                
POS_EMAILRECEIVER 4389                
POS_SESSION 15519               
POS_SIDER 15697               
POS_FILETYPES 4524                
POS_DOWNLOADS 4643                
POS_OS 4691                
POS_BROWSER 4849                
POS_SCREENSIZE 5441                
POS_UNKNOWNREFERER 5515                
POS_UNKNOWNREFERERBROWSER 6255                
POS_ORIGIN 6660                
POS_SEREFERRALS 6792                
POS_PAGEREFS 6936                
POS_SEARCHWORDS 7084                
POS_KEYWORDS 7236                
POS_MISC 2342                
POS_ERRORS 7295                
POS_CLUSTER 3502                
POS_SIDER_404 7462                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250101014753 5 890 16846612054862
FirstTime 0
LastTime 20241231205141
LastUpdate 20250101062447 5 0 4 0 0
TotalVisits 40                  
TotalUnique 40                  
MonthHostsKnown 0                   
MonthHostsUnknown 40                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 15 0
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
FlashSupport 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 3 3 31921 53 55 20864
1 1 1 13750 0 0 0
2 0 0 0 0 1 6603
3 1 1 4349 0 1 0
4 1 1 4325 0 2 2428
5 0 0 0 2 3 4598
6 1 1 4353 2 3 452
7 1 1 4328 1 3 9031
8 12 12 41135 22 30 83417
9 2 2 18100 4 5 7507
10 1 1 13750 2 3 476
11 1 1 4350 0 1 0
12 4 4 36269 25 27 165075
13 0 0 0 0 0 0
14 0 0 0 3 3 678
15 2 2 0 0 0 0
16 0 0 0 0 0 0
17 4 4 22826 7 7 8300
18 0 0 0 1 2 9031
19 0 0 0 27 30 178373
20 1 1 4352 1 4 15634
21 5 5 40596 3 6 9483
22 17 17 103929 786 788 1370299
23 10 10 83260 1086 1086 1896654
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 10
us 32 32 138627
gb 12 12 91941
in 8 8 55346
cn 5 5 40597
ca 3 3 41250
lt 2 2 27568
be 2 2 8677
nl 1 1 13750
ro 1 1 13750
zz 1 1 87
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 5
bot[\s_+:,\.\;\/\\-] 5 8747 20241218101818 3
no_user_agent 3 41318 20241229195551 0
unknown 2 48 20241217082552 2
Go\-http\-client/ 2 8704 20241225082456 0
curl 1 0 20241225083611 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
php 8 92243 0 0
Unknown 9 14711 0 0
html 50 324639 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
macosx15 4 4
android 1 1
win7 6 6
Unknown 20 20
win10 31 31
androidmarshmallow 1 1
linux 4 4
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 26
firefox45.0 2 2
chrome83.0.4103.97 2 2
chrome74.0.3729.157 1 1
chrome127.0.0.0 4 4
mozilla 16 16
chrome63.0.3239.132 2 2
chrome124.0.0.0 1 1
chrome122.0.0.0 1 1
chrome58.0.3029.110 7 7
chrome52.0.3233.98 1 1
chrome80.0.3987.149 1 1
chrome79.0.3945.130 2 2
chrome71.0.2623.112 2 2
chrome100.0.4896.60 1 1
firefox76.0 1 1
firefox74.0 1 1
Unknown 5 5
chrome78.0.3904.108 1 1
firefox77.0 1 1
opera70.0.3728.95 4 4
chrome118.0.5993.80 1 1
chrome84.0.4147.105 5 5
chrome129.0.0.0 2 2
chrome70.0.3538.77 1 1
chrome74.0.3729.169 1 1
firefox75.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 6
Cpanel-HTTP-Client/1.0 20241225082328
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20241231100730
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20241225082333
Mozilla/5.0_(compatible) 20241231205141
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20241227114019
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20241224221328
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20241225082328
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20241231100730
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 65 65
From1 0 0
From2 0 0
From3 0 0
From4 2 2
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 7
403 27 450891
409 13 1079
302 2 804
500 2 4864
404 457 2856504
301 1494 407582
406 37 8362
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 209
/.well-known/pki-validation/ 4 -
/checkbex.php 2 -
/network.php 2 -
/.well-known/acme-challenge/wso112233.php 1 -
/public/app 2 http://invoice.probitconsult.com/app/
/wp-2019.php 2 -
/mah.php 3 -
/testing 1 -
/wso.php 2 -
/login.action 1 -
/.well-known/acme-challenge/install.php 3 -
/wp 1 -
/themes.php 3 -
/class.api.php 2 -
/.well-known/about.php 3 -
/menu.php 3 -
/dropdown.php 3 -
/wp-mail.php 3 -
/aks.php 1 -
/wp-includes/install.php 3 -
/cgi-bin/inputs.php 1 -
/v2/_catalog 1 -
/alfa.php 1 -
/info.php 4 -
/api/shared/config/config.env 2 -
/wp-atom.php 3 -
/wp-content/plugins/fluid_forms/file-upload/server/php/index.php 1 -
/demo 1 -
/.well-known/index.php 5 -
/wp-content/index.php 6 -
/wp-admin/setup-config.php 1 -
/_profiler/phpinfo 2 -
/.well-known/acme-challenge/upfile.php 2 -
/wp-content/plugins/core/include.php 2 -
/bak.php 1 -
/1.php 2 -
/wp-content/themes/wp-classic/inc/index.php 2 -
/telescope/requests 1 -
/wp-content/plugins/index.php 2 -
/moon.php 3 -
/wp-settings.php 3 -
/wp-content/install.php 2 -
/wp-conf.php 6 -
/plugin.php 5 -
/.well-known/acme-challenge/plugins.php 3 -
/wp-content/plugins/background-image-cropper/ups.php 2 -
/themes/zMousse/otuz1.php 1 -
/.well-known/acme-challenge/content.php 1 -
/doc.php 1 -
/ws.php 3 -
/defaults.php 3 -
/ads.txt 6 -
/wp-content/themes/sketch/404.php 3 -
/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php 1 -
/_all_dbs 1 -
/atomlib.php 2 -
/php_info.php 2 -
/templates/hcapmaster_comps.php 3 -
/upload/upload.php 2 -
/wp-includes/admin.php 1 -
/wp-content/uploads/wp.php 1 -
/wp-includes/SimplePie/about.php 3 -
/.well-known/acme-challenge/license.php 2 -
/adminer.php 2 -
/404.php 6 -
/lock360.php 1 -
/wp-info.php 2 -
/css/load.php 2 -
/cms 1 -
/xl2023.php 1 -
/wp-includes/style-engine/about.php 1 -
/options.php 3 -
/wp-content/admin.php 2 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/phpinfo 2 -
/dir.php 3 -
/blog 1 -
/function.php 4 -
/wp-content/plugins/dzs-zoomsounds/admin/upload.php 1 -
/wp-admin/js/index.php 3 -
/wp-includes/ID3/index.php 1 -
/default.php 2 -
/bs1.php 3 -
/wp-login.php 3 -
/wp-includes/js/about.php 1 -
/wp-signup.php 2 -
/wordpress/wp-admin/includes 3 -
/about 1 -
/cgi-bin/xmrlpc.php 3 -
/wp-admin/maint/about.php 2 -
/index/function.php 2 -
/.DS_Store 1 -
/wp-trackback.php 2 -
/install.php 5 -
/wp-content/themes/travelscape/json.php 2 -
/.well-known/acme-challenge/about.php 2 -
/.well-known/acme-challenge/index.php 6 -
/wp-content/plugins/revslider/includes/external/page/index.php 3 -
/wp-admin/js/widgets/cloud.php 2 -
/edit.php 3 -
/config.php 3 -
/phpinfo.php 2 -
/file.php 3 -
/wp-admin/install.php 3 -
/wp-content/themes/pridmag/db.php 2 -
/.vscode/sftp.json 1 -
/wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php 2 -
/wp-includes/Text/about.php 1 -
/wp-content/plugins/pwnd/pwnd.php 3 -
/wp-content/plugins/fix/up.php 2 -
/wp-content/plugins/fix/as.php 2 -
/tiny.php 3 -
/wordpress 1 -
/x.php 3 -
/cgi-bin/admin.php 2 -
/test 1 -
/lock.php 3 -
/cong.php 3 -
/wp-content/themes/seotheme/mar.php 2 -
/wp-admin/network/index.php 6 -
/wp-admin/css/colors/blue/index.php 1 -
/test.php 4 -
/config.json 1 -
/new 1 -
/site 1 -
/lv.php 3 -
/debug/default/view 1 -
/wp-includes/ID3 3 -
/load.php 1 -
/wp-admin/includes/about.php 3 -
/wp-content/plugins/simple-forum/resources/jscript/ajaxupload/ajaxupload.js 1 -
/wp-admin/css/index.php 2 -
/classwithtostring.php 3 -
/wp-content/uploads/2023/05/404.php 3 -
/simple.php 2 -
/upload.php 2 -
/templates/atomic/templates.php 1 -
/bypass.php 2 -
/wp-content/plugins/wp-mailinglist/css/colorbox.css 1 -
/radio.php 3 -
/.well-known/install.php 2 -
/actuator/env 1 -
/karma.conf.json 2 -
/s/3343e2231313e2538313e2239313/_/ 1 -
/.AWS_/credentials 2 -
/chosen.php 3 -
/wp-content/plugins/wp-copysafe-pdf/lib/uploadify/uploadify.css 2 -
/wp-content/plugins/Tevolution/tmplconnector/monetize/templatic-custom_fields/css/jquery.lightbox-0.5.css 1 -
/wp-conflg.php 2 -
/wp-content/plugins/WordPressCore/include.php 3 -
/wp-admin/images/index.php 2 -
/.env.local 2 -
/newsite 1 -
/web 1 -
/up.php 2 -
/.well-known/plugins.php 1 -
/tmp 1 -
/portal 1 -
/wp-content/plugins/formcraft/file-upload/server/php/index.php 1 -
/wp-content/mah.php 3 -
/.well-known/pki-validation/install.php 2 -
/wp-content/plugins/front-end-editor/lib/aloha-editor/plugins/extra/draganddropfiles/demo/index.css 1 -
/web.php 2 -
/inc.php 1 -
/.well-known/acme-challenge/inputs.php 2 -
/dev 1 -
/wp-content/plugins/formcraft/file-upload/server/content/upload.php 1 -
/wp-includes/mah.php 2 -
/wp-includes/css/index.php 2 -
/server 1 -
/mini.php 1 -
/.well-known/acme-challenge/admin.php 3 -
/wp-admin/includes/cloud.php 2 -
/wp-content/uploads/index.php 3 -
/sellers.json 1 -
/wp-content/plugins/core-plugin/include.php 6 -
/.well-known/pki-validation/shell.php 2 -
/wp-includes/SimplePie/index.php 2 -
/wp-includes/class-wp-smtp-bar.php 2 -
/wp-content/about.php 2 -
/.git/config 3 -
/xleet.php 1 -
/wp.php 3 -
/.well-known/pki-validation/index.php 2 -
/ioxi002.php 2 -
/wp-content/plugins/pica-photo-gallery/css/style.css 1 -
/about.php 3 -
/.env.production 2 -
/.well-known/pki-validation/about.php 2 -
/admin.php 3 -
/old 2 -
/xp.php 2 -
/filemanager/dialog.php 1 -
/autoload_classmap.php 3 -
/main 1 -
/wp-content/languages/index.php 3 -
/wp-admin/images/Mhbgf.php 3 -
/randkeyword.php 6 -
/admin/function.php 2 -
/shell.php 2 -
/wp-content/plugins/formcraft/file-upload/server/php/upload.php 1 -
/public/contact 2 -
/wp-content/themes/about.php 2 -
/cgi-bin/cgi-bin/about.php 2 -
/wp-admin/maint/index.php 6 -
/.aws/credentials 2 -
/about/function.php 2 -
/app-ads.txt 1 -
/content.php 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 40
194.169.170.40 10 10 83260 20241228235321
140.245.108.111 6 6 26131 20241209222458
124.150.139.38 4 4 55346 20241227223338
124.150.139.86 4 4 0 20241227223840
89.117.41.150 2 2 27568 20241227122857
192.185.112.43 2 2 128 20241225082328
115.231.78.8 2 2 18171 20241213004945
115.231.78.6 2 2 18073 20241217082550
34.41.209.155 2 2 11387 20241214175924
56.155.3.188 2 2 0 20241205152528
34.59.7.244 2 2 11439 20241214174201
87.236.176.82 1 1 4326 20241214212826
134.122.38.154 1 1 4351 20241203210300
199.45.155.94 1 1 4351 20241207212828
23.178.112.211 1 1 87 20241225082332
36.49.87.130 1 1 4353 20241219061320
35.171.144.152 1 1 13818 20241211213856
18.116.234.171 1 1 87 20241225082332
209.38.209.3 1 1 4349 20241226125946
68.183.81.116 1 1 4351 20241217225636
13.51.200.201 1 1 87 20241225082332
144.126.211.122 1 1 4328 20241219071630
134.209.241.157 1 1 4352 20241228125507
149.36.50.178 1 1 13750 20241205095235
51.159.14.99 1 1 4353 20241225083623
167.99.210.137 1 1 13818 20241225082451
18.236.77.219 1 1 87 20241225082332
159.203.19.40 1 1 4325 20241205042534
198.199.85.10 1 1 4352 20241231205141
198.235.24.241 1 1 13750 20241231100730
62.197.144.85 1 1 13750 20241227012232
188.241.83.73 1 1 13750 20241229004856
199.45.154.142 1 1 4349 20241213030843
205.210.31.243 1 1 13750 20241205222700
52.221.229.81 1 1 87 20241225082333
54.218.56.244 1 1 4350 20241230092645
87.236.176.253 1 1 4351 20241224221328
88.99.26.177 1 1 4328 20241225083011
205.210.31.53 1 1 13750 20241204211027
199.45.154.123 1 1 4350 20241227114019
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 18
20241203 1 1 4351 1
20241204 1 1 13750 1
20241205 5 5 31825 4
20241207 1 1 4351 1
20241209 6 6 26131 1
20241211 1 1 13818 1
20241213 3 3 22520 2
20241214 5 5 27152 3
20241217 3 3 22424 2
20241219 2 2 8681 2
20241224 1 1 4351 1
20241225 10 10 23062 9
20241226 1 1 4349 1
20241227 12 12 101014 5
20241228 11 11 87612 2
20241229 1 1 13750 1
20241230 1 1 4350 1
20241231 2 2 18102 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 4
5mn-15mn 1
30s-2mn 1
0s-30s 35
2mn-5mn 3
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 10
/ 42 324639 33 29
/.well-known/acme-challenge/pFc2-dpx7feSN7gYgTZigyQFFPUYHOMAswNPqZbuPPc 5 435 5 5
/uploads/ 4 0 1 0
/files/ 4 0 0 2
/x/index.php 3 41735 0 0
/css/index.php 3 41735 0 0
/public/login 2 14148 0 2
/index.php 2 8773 0 1
/.well-known/acme-challenge/2OSHPO0VGMM3JM2ZYYPBHXTYX9QFXKR2 1 64 1 0
/.well-known/acme-challenge/JMFOES-0FTK8GKT7X5C6JKD6T-8NTO1U 1 64 0 1
END_SIDER