OwlCyberSecurity - MANAGER

Edit File: awstats042026.testtwo.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202604 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.testtwo.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2048                
POS_TIME 2707                
POS_VISITOR 7181                
POS_DAY 8441                
POS_DOMAIN 3405                
POS_LOGIN 3708                
POS_ROBOT 3863                
POS_WORMS 4057                
POS_EMAILSENDER 4188                
POS_EMAILRECEIVER 4331                
POS_SESSION 8806                
POS_FILESIZE 9031                
POS_SIDER 8953                
POS_FILETYPES 4466                
POS_DOWNLOADS 4548                
POS_OS 4596                
POS_BROWSER 4719                
POS_SCREENSIZE 5056                
POS_UNKNOWNREFERER 5130                
POS_UNKNOWNREFERERBROWSER 5592                
POS_ORIGIN 5862                
POS_SEREFERRALS 5994                
POS_PAGEREFS 6138                
POS_SEARCHWORDS 6286                
POS_KEYWORDS 6438                
POS_MISC 2370                
POS_ERRORS 6497                
POS_CLUSTER 3564                
POS_SIDER_404 6620                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260503110531 1 0 8128100646552
FirstTime 0
LastTime 20260429071519
LastUpdate 20260503171548 1 0 0 0 0
TotalVisits 32                  
TotalUnique 32                  
MonthHostsKnown 0                   
MonthHostsUnknown 32                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
RealPlayerSupport 0 0 0
PDFSupport 0 0 0
QuickTimeSupport 0 0 0
AddToFavourites 0 10 0
WindowsMediaPlayerSupport 0 0 0
TotalMisc 0 0 0
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
DirectorSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 317 689 690 279140
1 4 4 1268 710 711 282425
2 1 1 317 16 17 8869
3 0 0 0 394 394 172110
4 0 0 0 293 293 129601
5 2 2 634 317 318 145605
6 0 0 0 106 107 41483
7 1 1 317 366 366 172670
8 1 1 317 0 0 0
9 0 0 0 284 284 134139
10 3 3 951 149 150 64287
11 3 3 951 317 318 138907
12 1 1 317 222 222 104186
13 6 6 1902 390 391 176684
14 3 3 951 0 1 711
15 1 1 317 531 532 225041
16 0 0 0 0 0 0
17 0 0 0 354 354 151086
18 5 5 1585 605 608 256759
19 1 1 317 100 100 39683
20 3 3 951 446 447 186848
21 2 2 634 769 770 322250
22 0 0 0 465 465 203129
23 1 1 317 579 579 271822
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 24 24 7608
ca 6 6 1902
nl 3 3 951
cn 2 2 634
lt 1 1 317
ru 1 1 317
az 1 1 317
be 1 1 317
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
checker 4 1268 20260426183855 0
survey 1 317 20260404024858 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 39 12363 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
macosx15 6 6
win7 1 1
win10 12 12
linux 6 6
Unknown 14 14
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 15
opera62.0.3331.116 1 1
chrome135.0.0.0 1 1
firefox138.0 1 1
chrome139.0.0.0 1 1
opera58.0.3135.107 1 1
chrome120.0.0.0 2 2
chrome83.0.4093.0 1 1
chrome142.0.0.0 3 3
chrome136.0.0.0 2 2
mozilla 6 6
firefox142.0 1 1
chrome78.0.3904.108 9 9
Unknown 8 8
chrome126.0.0.0 1 1
netscape5.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260429071519
RootEvidence/1.0 20260414100557
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260426004440
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260426232137
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
RootEvidence/1.0 20260414100557
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260429071519
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 39 39
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
500 1695 1205145
403 6370 2280460
404 37 13135
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 8
/index/lock.php 4 -
/index/chosen.php 7 -
/.well-known/pki-validation/pwnd.php 1 -
/.well-known/pki-validation/fm.php 1 -
/.well-known/pki-validation/index.php 2 -
/.well-known/pki-validation/siteindex.php 1 -
/index/function.php 16 -
/index/x.php 5 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 32
143.244.57.84 3 3 951 20260428133105
34.24.11.44 3 3 951 20260403200625
34.186.38.122 3 3 951 20260428011743
88.151.32.201 2 2 634 20260428130034
146.190.244.133 1 1 317 20260409180242
198.235.24.51 1 1 317 20260415101642
198.235.24.28 1 1 317 20260426143825
71.6.235.161 1 1 317 20260414100557
54.85.236.130 1 1 317 20260419182027
66.132.172.200 1 1 317 20260416180509
185.8.106.156 1 1 317 20260402113310
205.210.31.10 1 1 317 20260411130707
185.213.174.125 1 1 317 20260418182842
66.132.186.195 1 1 317 20260426004440
64.23.172.83 1 1 317 20260423100749
66.132.172.210 1 1 317 20260409112018
146.190.19.35 1 1 317 20260428184440
198.235.24.182 1 1 317 20260406050017
3.151.194.164 1 1 317 20260418191325
159.203.46.215 1 1 317 20260414140614
66.132.195.48 1 1 317 20260418210149
44.209.43.227 1 1 317 20260416151406
37.72.140.3 1 1 317 20260402082551
106.63.26.139 1 1 317 20260402013535
66.132.195.36 1 1 317 20260402053146
87.236.176.221 1 1 317 20260426232137
98.90.210.252 1 1 317 20260410141028
106.63.26.21 1 1 317 20260402020153
88.151.33.31 1 1 317 20260428111611
198.235.24.79 1 1 317 20260424215108
147.185.132.81 1 1 317 20260429071519
198.235.24.36 1 1 317 20260419122041
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 16
20260402 5 5 1585 5
20260403 3 3 951 1
20260406 1 1 317 1
20260409 2 2 634 2
20260410 1 1 317 1
20260411 1 1 317 1
20260414 2 2 634 2
20260415 1 1 317 1
20260416 2 2 634 2
20260418 3 3 951 3
20260419 2 2 634 2
20260423 1 1 317 1
20260424 1 1 317 1
20260426 3 3 951 3
20260428 10 10 3170 5
20260429 1 1 317 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 32
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 39 12363 32 32
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 2
100-500 6451
500-1K 1705
END_FILESIZE