OwlCyberSecurity - MANAGER

Edit File: awstats012026.testthree.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202601 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/ssl/awstats.testthree.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2054                
POS_TIME 2726                
POS_VISITOR 7277                
POS_DAY 8496                
POS_DOMAIN 3402                
POS_LOGIN 3708                
POS_ROBOT 3863                
POS_WORMS 4180                
POS_EMAILSENDER 4311                
POS_EMAILRECEIVER 4454                
POS_SESSION 9007                
POS_FILESIZE 9264                
POS_SIDER 9174                
POS_FILETYPES 4589                
POS_DOWNLOADS 4705                
POS_OS 4753                
POS_BROWSER 4914                
POS_SCREENSIZE 5398                
POS_UNKNOWNREFERER 5472                
POS_UNKNOWNREFERERBROWSER 5929                
POS_ORIGIN 6167                
POS_SEREFERRALS 6301                
POS_PAGEREFS 6445                
POS_SEARCHWORDS 6655                
POS_KEYWORDS 6807                
POS_MISC 2389                
POS_ERRORS 6866                
POS_CLUSTER 3564                
POS_SIDER_404 6968                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260201074348 1 0 8229582257738
FirstTime 20260101054247
LastTime 20260131112839
LastUpdate 20260201185043 1 0 0 0 0
TotalVisits 35                  
TotalUnique 29                  
MonthHostsKnown 0                   
MonthHostsUnknown 30                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
RealPlayerSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 11 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
JavaEnabled 0 0 0
DirectorSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 5756 4 5 22190
1 0 0 0 1 2 7316
2 2 14 437649 6 6 26628
3 4 4 11512 8 8 33944
4 1 1 2878 10 12 50136
5 1 1 2878 2 2 8876
6 4 4 11512 17 25 106760
7 3 3 8634 3 5 20630
8 0 0 0 9 11 41018
9 4 4 11512 10 11 42820
10 0 0 0 6 7 23495
11 6 6 17268 39 42 152210
12 3 3 8634 10 10 44380
13 12 17 181397 46 49 217462
14 14 19 190031 51 54 239652
15 0 0 0 4 4 17752
16 1 1 2878 6 7 27946
17 1 1 2878 5 19 84322
18 1 1 2878 5 6 23508
19 0 0 0 14 17 66086
20 3 3 8634 64 67 293558
21 2 2 5756 15 23 85156
22 2 7 155495 10 12 48576
23 1 3 5602 6 16 334262
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 7
us 34 41 250315
ru 26 36 371428
ca 2 2 5756
de 2 14 437649
au 1 1 2878
my 1 1 2878
hk 1 1 2878
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 5
bot[\s_+:,\.\;\/\\-] 24 349486 20260130191853 0
robot 19 54682 20260130191858 0
crawl 2 5756 20260130084842 0
Feedfetcher\-Google 1 2878 20260117233310 0
scrapy 1 2878 20260123035932 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
css 7 282154 0 0
php 67 189948 0 0
js 22 601680 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
macosx11 10 1
linux 28 20
unix 1 1
macosx13 1 0
macosx15 10 7
Unknown 8 8
winxp 1 0
win10 37 30
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 23
chrome134.0.0.0 1 1
chrome143.0.0.0 7 7
chrome131.0.0.0 27 18
chrome75.0.3770.142 1 0
firefox141.0 2 2
chrome81.0.4044.129 13 8
chrome103.0.0.0 11 2
chrome121.0.0.0 1 1
chrome133.0.0.0 1 1
Unknown 1 1
chrome137.0.0.0 1 1
firefox133.0 8 7
mozilla 6 6
msie6.0 1 0
chrome126.0.0.0 1 1
chrome120.0.0.0 3 0
chrome91.0.4472.124 3 3
firefox142.0 2 2
chrome139.0.0.0 1 1
firefox139.0 1 1
chrome142.0.0.0 2 2
firefox104.0 1 1
netscape5.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260124235922
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260127095258
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260127124940
Mozilla/5.0 20260112071534
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260127095258
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 33 53
From1 0 0
From2 0 0
From3 2 2
From4 32 41
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 2
https://37.60.246.20 1 1
https://37.60.246.20/favicon.ico 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
400 2 898
302 360 1553287
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 0
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 30
195.178.110.132 25 35 368550 20260129145154
104.248.243.8 4 9 161251 20260111224530
207.154.219.217 4 4 11512 20260129034839
3.89.175.16 3 3 8634 20260129111333
4.157.253.247 3 3 8634 20260127224830
100.25.198.201 2 2 5756 20260103070650
167.94.138.182 2 2 5756 20260105203024
100.52.3.146 2 2 5756 20260119114325
5.9.50.77 2 14 437649 20260128023009
162.142.125.127 1 1 2878 20260127124940
34.61.110.114 1 1 2878 20260127005049
18.224.192.118 1 1 2878 20260112120028
113.255.48.178 1 1 2878 20260112071531
45.55.146.12 1 1 2878 20260122212309
142.93.156.247 1 1 2878 20260103200652
199.45.155.96 1 1 2878 20260101054247
34.45.218.41 1 1 2878 20260126142957
165.227.113.58 1 1 2878 20260117064839
71.6.134.234 1 1 2878 20260106060149
205.210.31.9 1 1 2878 20260127095258
172.190.240.176 1 1 2878 20260125065347
185.247.137.24 1 1 2878 20260124235922
44.196.29.182 1 1 2878 20260128174407
34.171.226.229 1 1 2878 20260121044739
199.45.154.118 1 1 2878 20260113004246
98.80.124.47 0 2 2724 
175.136.140.32 1 1 2878 20260112071534
159.203.164.101 1 1 2878 20260126065755
209.97.143.114 1 1 2878 20260108214215
139.59.166.194 1 1 2878 20260131112839
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 22
20260101 2 2 5756 2
20260103 2 2 5756 2
20260105 2 2 5756 1
20260106 1 1 2878 1
20260108 1 1 2878 1
20260109 3 3 8634 1
20260111 1 6 152617 1
20260112 3 3 8634 3
20260113 1 1 2878 1
20260115 1 1 2878 1
20260117 1 3 5602 1
20260119 2 2 5756 2
20260121 1 1 2878 1
20260122 1 1 2878 1
20260123 1 1 2878 1
20260124 13 18 184275 2
20260125 1 1 2878 1
20260126 2 2 5756 2
20260127 4 4 11512 4
20260128 3 15 440527 2
20260129 20 25 207299 3
20260131 1 1 2878 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
0s-30s 33
30mn-1h 1
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/content.php 67 189948 35 35
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
0-44 11
100-500 1
500-1K 10
5K+ 20
2K-5K 468
1K-2K 6
END_FILESIZE