OwlCyberSecurity - MANAGER

Edit File: awstats042026.testthree.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202604 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.testthree.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2050                
POS_TIME 2724                
POS_VISITOR 7695                
POS_DAY 8887                
POS_DOMAIN 3545                
POS_LOGIN 3824                
POS_ROBOT 3979                
POS_WORMS 4430                
POS_EMAILSENDER 4561                
POS_EMAILRECEIVER 4704                
POS_SESSION 9275                
POS_FILESIZE 9512                
POS_SIDER 9422                
POS_FILETYPES 4839                
POS_DOWNLOADS 4955                
POS_OS 5003                
POS_BROWSER 5193                
POS_SCREENSIZE 5623                
POS_UNKNOWNREFERER 5697                
POS_UNKNOWNREFERERBROWSER 6159                
POS_ORIGIN 6429                
POS_SEREFERRALS 6563                
POS_PAGEREFS 6707                
POS_SEARCHWORDS 6855                
POS_KEYWORDS 7007                
POS_MISC 2387                
POS_ERRORS 7066                
POS_CLUSTER 3680                
POS_SIDER_404 7173                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260501130131 4 605 8695843161713
FirstTime 20260401141651
LastTime 20260430201726
LastUpdate 20260501184821 4 0 3 0 0
TotalVisits 29                  
TotalUnique 29                  
MonthHostsKnown 0                   
MonthHostsUnknown 29                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
AddToFavourites 0 11 0
WindowsMediaPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
QuickTimeSupport 0 0 0
RealPlayerSupport 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
JavaEnabled 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 4638 4638 20307324
1 0 0 0 5438 5438 23762564
2 0 0 0 1881 1884 8258232
3 0 0 0 6675 6675 29068290
4 1 1 2878 5167 5168 22366184
5 0 0 0 2559 2559 11230482
6 2 2 5756 1262 1263 5391474
7 1 1 2878 2497 2498 10810004
8 0 0 0 2235 2235 9555425
9 2 2 5756 3013 3014 13159292
10 0 0 0 459 459 1976202
11 1 1 2878 300 301 1253158
12 1 1 2878 25 27 118266
13 3 3 8634 9317 9318 39830358
14 9 23 481957 2805 2807 12384146
15 1 1 2878 6129 6129 26397102
16 1 1 2878 1423 1424 5876672
17 1 1 2878 6195 6196 26581640
18 4 4 11512 5328 5329 22813942
19 0 0 0 3085 3085 12836338
20 25 27 71796 4046 4057 17357654
21 1 1 2878 3215 3215 13670690
22 0 0 0 414 414 1673532
23 0 0 0 13377 13377 58510917
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 5
us 29 43 536639
nl 14 16 43016
cn 6 6 17268
ca 3 3 8634
be 1 1 2878
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 9
no_user_agent 6977 20077746 20260428204422 0
bot[\s_+:,\.\;\/\\-] 4 8480 20260426202831 0
checker 3 8634 20260426183854 0
robot 2 5756 20260426175906 0
survey 1 2866 20260404080436 0
SemrushBot/ 1 2878 20260426202801 0
Applebot/ 1 2878 20260426202830 0
crawl 1 2878 20260426202822 0
DuckDuckBot 1 2878 20260426202824 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
php 53 149656 0 0
js 12 302202 0 0
css 4 156577 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
macosx15 12 11
win10 23 13
win7 6 1
android 2 2
linux 8 8
macosx 2 2
ios_ipad 1 1
Unknown 12 12
macosx10 1 1
ios_iphone 2 2
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 20
chrome83.0.4093.0 1 1
safari18.3 3 2
mozilla 9 9
chrome83.0.4103.61 6 1
chrome79.0.3945.79 10 1
firefox133.0 3 3
chrome130.0.0.0 2 2
firefox132.0 1 1
chrome131.0.0.0 5 5
chrome126.0.0.0 1 1
firefox142.0 3 3
Unknown 3 3
firefox138.0 3 3
chrome86.0.4240.193 1 1
chrome37.0.2062.124 1 1
chrome135.0.0.0 1 1
chrome120.0.0.0 6 6
chrome142.0.0.0 2 2
chrome136.0.0.0 7 6
safari18.1 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260414130229
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260424061718
RootEvidence/1.0 20260414094318
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260420143558
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260420143558
RootEvidence/1.0 20260414094318
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 16 18
From1 0 0
From2 0 0
From3 0 0
From4 37 51
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
302 84503 375024301
404 5 1775
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 5
/.well-known/pki-validation/fm.php 1 -
/.well-known/pki-validation/dropdown.php 1 -
/.well-known/pki-validation/siteindex.php 1 -
/.well-known/pki-validation/index.php 1 -
/.well-known/pki-validation/pwnd.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 29
88.151.32.195 11 13 34382 20260427202945
208.84.101.224 11 11 28780 20260426202847
205.169.39.134 2 16 461811 20260401141703
167.94.146.63 2 2 5756 20260416204319
66.132.224.237 2 2 5756 20260401182243
66.132.172.189 2 2 5756 20260424061718
87.236.176.98 1 1 2878 20260414130229
106.63.26.14 1 1 2878 20260410141557
104.248.197.214 1 1 2878 20260425162609
66.132.172.33 1 1 2878 20260409125211
134.122.120.150 1 1 2878 20260411092921
106.63.26.131 1 1 2878 20260410133936
88.151.32.220 1 1 2878 20260418185518
106.63.26.15 1 1 2878 20260410141601
44.209.43.227 1 1 2878 20260416145846
106.63.26.132 1 1 2878 20260410133942
198.235.24.54 1 1 2878 20260420143558
205.210.31.36 1 1 2878 20260411172720
106.63.26.141 1 1 2878 20260410141606
66.132.195.36 1 1 2878 20260424044602
54.85.236.130 1 1 2878 20260419182026
98.95.152.161 1 1 2878 20260410140956
34.170.41.148 1 1 2878 20260420214430
159.203.21.134 1 1 2878 20260430201726
3.139.242.79 1 1 2878 20260406153138
106.63.26.20 1 1 2878 20260410141610
134.199.238.235 1 1 2878 20260416070705
46.101.121.22 1 1 2878 20260402111240
139.162.161.95 1 1 2878 20260414094318
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 16
20260401 4 18 467567 2
20260402 1 1 2878 1
20260406 1 1 2878 1
20260409 1 1 2878 1
20260410 7 7 20146 7
20260411 2 2 5756 2
20260414 2 2 5756 2
20260416 4 4 11512 3
20260418 1 1 2878 1
20260419 1 1 2878 1
20260420 2 2 5756 2
20260424 3 3 8634 2
20260425 1 1 2878 1
20260426 11 11 28780 1
20260427 11 13 34382 1
20260430 1 1 2878 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 29
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/content.php 53 149656 29 29
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
500-1K 6
1K-2K 4
0-44 1
5K+ 8
2K-5K 91555
100-500 5
END_FILESIZE