OwlCyberSecurity - MANAGER

Edit File: awstats032026.akcpa.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202603 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.akcpa.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2046                
POS_TIME 2715                
POS_VISITOR 8787                
POS_DAY 12471               
POS_DOMAIN 3495                
POS_LOGIN 3886                
POS_ROBOT 4041                
POS_WORMS 4412                
POS_EMAILSENDER 4543                
POS_EMAILRECEIVER 4686                
POS_SESSION 13102               
POS_FILESIZE 13600               
POS_SIDER 13259               
POS_FILETYPES 4821                
POS_DOWNLOADS 4920                
POS_OS 4968                
POS_BROWSER 5153                
POS_SCREENSIZE 5752                
POS_UNKNOWNREFERER 5826                
POS_UNKNOWNREFERERBROWSER 6326                
POS_ORIGIN 6634                
POS_SEREFERRALS 6770                
POS_PAGEREFS 6914                
POS_SEARCHWORDS 7088                
POS_KEYWORDS 7240                
POS_MISC 2378                
POS_ERRORS 7299                
POS_CLUSTER 3742                
POS_SIDER_404 7436                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260401013957 274 28903 8282568672911
FirstTime 0
LastTime 20260331222211
LastUpdate 20260415203302 274 0 273 0 0
TotalVisits 101                 
TotalUnique 95                  
MonthHostsKnown 0                   
MonthHostsUnknown 95                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
WindowsMediaPlayerSupport 0 0 0
FlashSupport 0 0 0
QuickTimeSupport 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 25 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
RealPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
TotalMisc 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 5 5 10375 552 553 235554
1 9 9 10631 80 81 32379
2 20 20 23730 550 552 228144
3 1 1 2075 398 399 159449
4 4 4 8300 344 344 147119
5 4 4 8300 154 155 89415
6 14 14 18008 17 18 7702
7 15 15 18401 638 640 276768
8 2 2 2468 94 95 49091
9 1 1 2075 426 426 165103
10 3 3 6225 671 672 325941
11 7 7 8163 260 260 116212
12 15 15 18401 168 170 77189
13 4 4 6618 3812 4073 2669575
14 1 1 2075 105 105 56892
15 1 1 2075 727 728 291107
16 0 0 0 397 398 168528
17 18 18 21262 338 340 156746
18 9 9 8949 365 367 157995
19 17 17 19187 146 148 65892
20 18 18 19214 2048 2058 1115778
21 18 18 19580 414 416 199695
22 8 8 16600 159 160 78691
23 32 32 34588 35 38 12335
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 14
us 150 150 184592
cn 48 48 51336
in 5 5 10375
ca 5 5 10375
nl 4 4 6618
gb 3 3 2861
au 2 2 4150
ru 2 2 4150
bg 2 2 2468
az 1 1 2075
se 1 1 2075
de 1 1 2075
eu 1 1 2075
dk 1 1 2075
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 7
no_user_agent 42 29062 20260331200544 0
curl 29 56659 20260329201635 2
scanner 6 5722 20260301041329 0
Go\-http\-client/ 6 9086 20260323100312 0
unknown 3 951 20260327023243 3
checker 2 4150 20260308215346 0
survey 1 2075 20260307022627 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 222 285728 0 0
php 4 1572 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
win7 4 4
win8.1 1 1
win10 34 34
ios_ipad 2 2
linux 4 4
win11 2 2
Unknown 124 124
macosx15 5 5
macosx 5 5
macosx7 45 45
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 30
chrome133.0.0.0 1 1
firefox115 1 1
chrome121.0.0.0 3 3
firefox104.0 1 1
netscape5.0 1 1
chrome80.0.3987.149 5 5
firefox79.0 1 1
chrome116.0 1 1
mozilla 116 116
firefox128.0 1 1
firefox74.0 2 2
chrome117.0.5938.132 2 2
opera70.0.3728.95 1 1
Unknown 8 8
safari26.0 3 3
chrome120.0.0.0 6 6
firefox68.0 1 1
chrome79.0 3 3
chrome78.0.3904.108 9 9
firefox122.0 2 2
safari6.0 1 1
firefox70.0 1 1
chrome142.0.0.0 2 2
chrome95.0.4638.69 3 3
chrome17.0.963.56 45 45
safari17.1 1 1
firefox73.0 1 1
chrome119.0.0.0 2 2
chrome91.0.4472.124 1 1
firefox142.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260317070125
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260329075706
RootEvidence/1.0 20260323100312
python-requests/2.31.0 20260310150630
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260331052148
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
RootEvidence/1.0 20260323100312
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260331052148
python-requests/2.31.0 20260310150630
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 138 138
From1 1 1
From2 0 0
From3 1 1
From4 86 86
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
https://wordpress.org 1 1
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
500 5943 4213587
403 6975 2496202
301 104 29231
404 60 18850
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 29
/.well-known/pki-validation/rafa.php 2 -
/.well-known/pki-validation/server.php 1 -
/.well-known/acme-challenge/index.php 6 -
/ 6 -
/.well-known/pki-validation/kur.php 1 -
/.well-known/pki-validation/mariju.php 1 -
/plugins/function.php 1 -
/.well-known/pki-validation/moon.php 1 -
/.well-known/acme-challenge/content.php 1 -
/plugins/content/apismtp/apismtp.php 1 -
/.well-known/pki-validation/worksec.php 2 -
/.well-known/pki-validation/class_api.php 1 -
/.well-known/pki-validation/gu.php 2 -
/plugins/jquery.filer/uploads/ 1 -
/plugins/DaoZM.php 3 -
/.well-known/pki-validation/xmrlpc.php 4 -
/.well-known/pki-validation/about.php 2 -
/.well-known/pki-validation/1.php 1 -
/plugins/.env 2 -
/mailman/.env 2 -
/plugins/Cache/footer.php 5 -
/.well-known/pki-validation/2index.php 1 -
/.well-known/pki-validation/cloud.php 3 -
/.well-known/pki-validation/index.php 1 -
/product/.env.staging 2 -
/.well-known/pki-validation/install.php 1 -
/.well-known/pki-validation/admin.php 3 -
/robots/.env 2 -
/.well-known/pki-validation/webdb.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 95
66.132.172.205 7 7 8163 20260328063014
66.132.153.117 7 7 8163 20260313201819
162.142.125.119 7 7 8162 20260321232135
162.142.125.220 7 7 8163 20260304174150
66.132.153.126 7 7 8163 20260312010633
66.132.153.133 7 7 8163 20260307123501
66.132.195.61 7 7 8163 20260329075706
162.142.125.118 7 7 8163 20260307123950
199.45.155.85 7 7 8163 20260320230457
199.45.154.122 7 7 8163 20260314171128
66.132.172.130 6 6 6087 20260321233535
66.132.153.112 6 6 6088 20260314181159
66.132.172.110 6 6 6088 20260320230542
167.94.146.52 6 6 6088 20260328070311
167.94.138.37 6 6 6088 20260311232109
206.168.34.223 6 6 6088 20260307113104
66.132.172.213 5 5 5695 20260329063750
136.144.17.31 4 4 1572 20260303200728
45.38.16.80 3 3 6225 20260302203803
101.198.0.156 3 3 2861 20260326210749
167.94.138.52 3 3 2861 20260304173654
136.113.79.229 3 3 6225 20260308223407
34.41.136.17 3 3 6225 20260308223327
206.189.155.68 3 3 6225 20260311004902
45.149.173.227 3 3 6225 20260315045946
123.6.49.46 1 1 393 20260326193907
192.71.142.40 1 1 2075 20260329133328
158.101.39.212 2 2 2468 20260321212029
101.199.254.199 1 1 2075 20260327023307
123.6.49.6 2 2 2468 20260326193904
71.6.242.23 1 1 2075 20260323100312
45.148.10.23 2 2 4150 20260306042950
101.198.0.188 1 1 393 20260326210747
103.59.161.79 2 2 4150 20260331222211
46.101.241.245 1 1 2075 20260312101114
101.199.254.200 1 1 2441 20260327023317
71.6.235.45 1 1 2075 20260323095014
185.247.137.249 1 1 2075 20260317070125
198.235.24.164 1 1 2075 20260310055046
101.199.254.237 1 1 393 20260327023319
101.198.0.140 2 2 2468 20260326210811
101.199.254.233 1 1 393 20260327023305
101.199.254.239 1 1 393 20260327023313
101.199.254.231 1 1 393 20260327023257
123.6.49.14 1 1 393 20260326193905
37.72.140.3 1 1 2075 20260331001903
62.197.156.35 1 1 393 20260324181613
18.211.58.193 1 1 2075 20260322064544
136.61.33.107 1 1 2075 20260310123547
85.11.167.108 2 2 2468 20260318133511
217.60.3.203 1 1 2075 20260320205731
107.173.171.201 2 2 4150 20260329193540
104.168.28.15 1 1 2075 20260310172210
198.235.24.142 1 1 2075 20260322221628
159.65.158.69 1 1 2075 20260326082525
101.199.254.235 1 1 393 20260327023302
123.6.49.41 1 1 393 20260326193907
101.198.0.152 1 1 2075 20260326210757
3.82.234.136 1 1 2075 20260323011336
123.6.49.38 2 2 786 20260326193908
149.88.106.148 2 2 786 20260321080735
123.6.49.42 1 1 393 20260326193901
205.210.31.32 1 1 2075 20260304141525
123.6.49.4 1 1 2441 20260326193906
205.169.39.22 1 1 2075 20260315060855
205.210.31.14 1 1 2075 20260331052148
205.169.39.4 1 1 2075 20260315054956
101.198.0.183 2 2 786 20260326210809
145.220.91.19 2 2 4150 20260324022114
141.98.11.106 2 2 786 20260308023400
101.198.0.157 1 1 2075 20260326210753
141.98.11.181 1 1 2075 20260310004955
101.199.254.238 1 1 2075 20260327023310
64.225.29.60 1 1 2075 20260322131146
101.199.254.230 1 1 393 20260327023324
62.146.174.124 1 1 2075 20260310150630
101.199.254.207 1 1 393 20260327023326
138.199.22.151 1 1 2075 20260319074945
101.199.254.242 1 1 2441 20260327023255
101.198.0.172 1 1 393 20260326210737
101.198.0.155 2 2 2834 20260326210804
101.198.0.179 1 1 2441 20260326210742
123.6.49.17 2 2 4516 20260326193859
205.210.31.46 1 1 2075 20260328024946
101.198.0.134 1 1 393 20260326210816
123.6.49.9 2 2 2468 20260326193900
101.199.254.203 1 1 2075 20260327023219
101.199.254.201 1 1 393 20260327023321
98.87.188.21 1 1 2075 20260315183405
101.199.254.202 2 2 786 20260327023300
136.144.17.32 3 3 1179 20260303200910
101.199.254.234 1 1 2075 20260327023249
123.6.49.10 3 3 2861 20260326193909
101.198.0.133 1 1 393 20260326210814
185.247.137.62 1 1 2075 20260315022909
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 27
20260302 3 3 6225 1
20260303 7 7 2751 2
20260304 11 11 13099 3
20260305 1 1 2075 1
20260306 2 2 4150 2
20260307 21 21 22807 4
20260308 7 7 12843 3
20260309 1 1 2075 1
20260310 5 5 10375 5
20260311 9 9 12313 2
20260312 8 8 10238 2
20260313 7 7 8163 1
20260314 13 13 14251 2
20260315 7 7 14525 5
20260317 1 1 2075 1
20260318 2 2 2468 1
20260319 1 1 2075 1
20260320 15 15 16719 4
20260321 16 16 17110 4
20260322 3 3 6225 3
20260323 3 3 6225 3
20260324 2 2 2468 2
20260326 33 33 36299 22
20260327 16 16 17112 15
20260328 14 14 16326 3
20260329 15 15 20083 5
20260331 3 3 6225 3
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 97
30s-2mn 4
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 11
/ 90 186750 68 45
/wp-admin/ 31 12183 8 18
/wp-content/ 25 9825 5 8
/d19b7f/ 23 56141 4 9
/7889e/ 23 9039 6 6
/e4e358/ 23 9039 4 9
/wp-includes/ 7 2751 5 5
/wp-admin/mah.php 1 393 0 0
/wp-content/index.php 1 393 1 0
/wp-includes/index.php 1 393 0 1
/wp-admin/index.php 1 393 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 4
0-44 7
100-500 7289
500-1K 5970
2K-5K 156
END_FILESIZE