OwlCyberSecurity - MANAGER

Edit File: awstats052025.testtwo.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202505 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/ssl/awstats.testtwo.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2052                
POS_TIME 2726                
POS_VISITOR 7570                
POS_DAY 8991                
POS_DOMAIN 3280                
POS_LOGIN 3625                
POS_ROBOT 3780                
POS_WORMS 4050                
POS_EMAILSENDER 4181                
POS_EMAILRECEIVER 4324                
POS_SESSION 9197                
POS_FILESIZE 9443                
POS_SIDER 9365                
POS_FILETYPES 4459                
POS_DOWNLOADS 4561                
POS_OS 4640                
POS_BROWSER 4844                
POS_SCREENSIZE 5348                
POS_UNKNOWNREFERER 5422                
POS_UNKNOWNREFERERBROWSER 6056                
POS_ORIGIN 6461                
POS_SEREFERRALS 6593                
POS_PAGEREFS 6755                
POS_SEARCHWORDS 6930                
POS_KEYWORDS 7082                
POS_MISC 2389                
POS_ERRORS 7141                
POS_CLUSTER 3481                
POS_SIDER_404 7248                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250601032015 2 145 3706522854230
FirstTime 20250524160419
LastTime 20250530191833
LastUpdate 20250601170228 2 0 1 0 0
TotalVisits 40                  
TotalUnique 36                  
MonthHostsKnown 0                   
MonthHostsUnknown 36                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 29 0
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
PDFSupport 0 0 0
JavaEnabled 0 0 0
WindowsMediaPlayerSupport 0 0 0
RealPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 5 5 2468 2 6 2930
1 0 0 0 0 0 0
2 0 0 0 0 0 0
3 1 1 282 0 0 0
4 4 4 2492 0 8 5368
5 0 0 0 0 0 0
6 0 0 0 0 0 0
7 1 1 282 1 1 282
8 0 0 0 1 1 623
9 0 0 0 0 0 0
10 2 3 162216222 0 2 1342
11 0 0 0 0 0 0
12 0 0 0 0 0 0
13 0 0 0 0 0 0
14 2 3 54072498 1 4 988
15 1 1 280 0 0 0
16 3 3 905 22 23 12605
17 13 13 6794 2 7 3978
18 8 8 3655 0 3 671
19 2 2 634 2 3 671
20 3 3 1563 0 7 4697
21 0 0 0 0 0 0
22 3 3 564 1 2 953
23 1 1 0 0 0 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 11
us 25 25 12917
ru 6 6 1467
gb 5 5 1845
pk 3 5 162216552
ca 3 3 1257
il 2 2 1246
bd 1 1 623
ae 1 1 282
fr 1 1 0
rs 1 1 282
nl 1 1 282
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
no_user_agent 4 1845 20250531142507 0
Go\-http\-client/ 2 1246 20250524160514 0
scrapy 1 623 20250525082820 0
curl 1 282 20250526223826 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 49 21047 0 0
apk 2 162215706 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 1
/app-release.apk 2 2 162215706
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
ios_iphone 1 1
macosx13 1 1
androidmarshmallow 3 3
linuxubuntu 1 1
win7 2 2
linux 13 13
android10 4 1
win10 18 17
Unknown 9 9
macosx9 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 24
chrome104.0.0.0 1 1
chrome58.0.3029.110 1 1
firefox136.0 2 2
firefox134.0 1 1
chrome135.0.0.0 2 2
firefox83.0 1 1
Unknown 5 5
chrome136.0.0.0 9 5
chrome52.0.6247.98 1 1
chrome62.0.3202.94 1 1
mozilla 3 3
chrome122.0.0.0 1 1
netscape5.0 1 1
chrome33.0.1750.152 1 1
chrome131.0.0.0 1 1
chrome132.0.0.0 4 4
safari 1 1
chrome111.0.5563.65 1 1
firefox120.0 5 5
msie10.0 1 1
chrome98.0.4758.102 1 1
chrome108.0.0.0 4 4
chrome130.0.0.0 4 4
chrome110.0.0.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530191833
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250525004704
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250525155209
python-requests/2.31.0 20250524173323
Mozilla/5.0_zgrab/0.x 20250527001252
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
python-requests/2.31.0 20250524173323
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530191833
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 43 43
From1 0 0
From2 1 1
From3 2 2
From4 3 7
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_google_ie 1 1
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
https://onebox.pk:2083 2 2
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
500 26 12078
301 1 246
404 1 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 1
/ads.txt 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 36
40.80.158.10 4 4 2492 20250525042230
3.80.221.10 3 3 1869 20250524173323
52.16.245.145 3 3 1869 20250524180352
91.84.87.137 2 2 905 20250526164901
202.83.171.82 2 6 162216270 20250526141117
167.94.138.121 2 2 1246 20250525004704
212.143.94.254 2 2 1246 20250524175742
195.211.77.140 2 2 0 20250526224556
195.211.77.142 2 2 905 20250526224611
128.192.12.121 1 1 282 20250527001252
89.248.171.23 1 1 282 20250528031029
185.247.137.116 1 1 280 20250525155209
149.57.180.115 1 1 317 20250528184948
198.235.24.233 1 1 317 20250530002232
80.227.233.202 1 1 282 20250526103826
146.70.185.32 1 1 0 20250529232109
89.238.156.94 1 1 623 20250524172531
91.231.89.38 1 1 282 20250526174256
161.35.83.203 1 1 317 20250529191511
217.13.62.63 1 1 0 20250524160419
202.69.43.79 1 1 282 20250526220911
203.188.189.93 1 1 623 20250524174144
54.204.67.36 1 1 623 20250524201709
149.57.180.53 1 1 623 20250524183319
107.21.23.83 1 1 623 20250524201538
45.84.107.55 1 1 623 20250524173653
149.57.180.137 1 1 282 20250525181408
64.227.101.241 1 1 282 20250527144010
167.172.173.239 1 1 317 20250529201417
23.27.145.189 1 1 282 20250526183856
185.213.154.174 1 1 282 20250525174046
149.57.180.26 1 1 282 20250526071042
157.230.19.140 1 1 623 20250524160509
64.15.129.120 1 1 623 20250524170703
198.235.24.214 1 1 317 20250530191833
144.126.211.224 1 1 282 20250527180451
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 7
20250524 19 19 10591 14
20250525 10 10 5205 6
20250526 10 12 216290130 10
20250527 3 3 846 3
20250528 2 2 599 2
20250529 3 3 634 3
20250530 2 2 634 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
5mn-15mn 1
30s-2mn 1
0s-30s 38
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 49 21047 40 40
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 4
100-500 25
0-44 16
5K+ 4
500-1K 75
END_FILESIZE