OwlCyberSecurity - MANAGER

Edit File: awstats052026.akcpa.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202605 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.akcpa.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2046                
POS_TIME 2728                
POS_VISITOR 7685                
POS_DAY 9477                
POS_DOMAIN 3444                
POS_LOGIN 3760                
POS_ROBOT 3915                
POS_WORMS 4362                
POS_EMAILSENDER 4493                
POS_EMAILRECEIVER 4636                
POS_SESSION 9930                
POS_FILESIZE 10411               
POS_SIDER 10077               
POS_FILETYPES 4771                
POS_DOWNLOADS 4870                
POS_OS 4918                
POS_BROWSER 5091                
POS_SCREENSIZE 5651                
POS_UNKNOWNREFERER 5725                
POS_UNKNOWNREFERERBROWSER 6086                
POS_ORIGIN 6356                
POS_SEREFERRALS 6490                
POS_PAGEREFS 6634                
POS_SEARCHWORDS 6782                
POS_KEYWORDS 6934                
POS_MISC 2391                
POS_ERRORS 6993                
POS_CLUSTER 3616                
POS_SIDER_404 7137                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260521083148 837 96168 3646444759699
FirstTime 20260501012518
LastTime 20260521054942
LastUpdate 20260521091536 837 0 837 0 0
TotalVisits 46                  
TotalUnique 45                  
MonthHostsKnown 0                   
MonthHostsUnknown 45                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
DirectorSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
TotalMisc 0 0 0
FlashSupport 0 0 0
QuickTimeSupport 0 0 0
AddToFavourites 0 15 0
PDFSupport 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 3 3 6225 53 53 25011
1 1 1 2075 470 554 344261
2 4 4 8300 450 450 190373
3 0 0 0 71 73 35573
4 2 2 2075 265 265 105042
5 22 22 29562 120 125 85346
6 1 1 2075 20 20 11021
7 8 8 10238 372 387 263007
8 8 8 10238 135 136 54869
9 2 2 4150 1 1 358
10 0 0 0 277 277 129911
11 22 22 21518 108 109 58703
12 0 0 0 1 1 358
13 1 1 2075 123 124 45796
14 4 4 8300 20 20 14879
15 5 5 8300 20 21 14222
16 2 2 4150 0 2 1418
17 14 14 16326 16 18 6465
18 9 9 12313 312 313 143932
19 2 2 4150 43 43 17535
20 1 1 2075 11 15 16099
21 10 10 14388 193 194 90775
22 1 1 2075 1 1 2075
23 9 9 12104 306 314 167776
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 101 101 137152
ca 15 15 23081
nl 8 8 7954
gb 3 3 6225
se 1 1 2075
mt 1 1 2075
lt 1 1 2075
de 1 1 2075
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 9
no_user_agent 21 13919 20260521083148 0
curl 5 8693 20260521010516 0
unknown 4 1268 20260521054937 4
survey 2 2075 20260505035415 0
checker 2 4150 20260518223313 0
Go\-http\-client/ 1 393 20260505191008 0
[\s_+:,\.\;\/\\-]bot 1 393 20260515150001 0
Baiduspider/ 1 393 20260515145958 0
crawl 1 2075 20260515145955 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
php 3 1179 0 0
html 128 181533 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
winxp 1 1
win10 35 35
linux 14 14
Unknown 64 64
android 1 1
androidnougat 3 3
ios_iphone 2 2
macosx15 11 11
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 27
chrome131.0.0.0 3 3
chrome146.0.0.0 3 3
firefox110.0 2 2
chrome95.0.4638.69 1 1
Unknown 6 6
chrome41.0.2224.3 1 1
chrome145.0.0.0 1 1
chrome126.0.0.0 2 2
chrome80.0.3987.149 3 3
chrome147.0.0.0 6 6
chrome60.0.3112.107 3 3
firefox142.0 2 2
safari17.1 1 1
chrome78.0.3904.108 12 12
firefox132.0 1 1
firefox150.0 1 1
firefox149.0 6 6
chrome121.0.0.0 1 1
safari18.4 3 3
mozilla 58 58
chrome122.0.0.0 1 1
chrome103.0.0.0 1 1
safari18.3 2 2
chrome91.0.4472.124 1 1
chrome79.0 3 3
chrome142.0.0.0 5 5
safari18.1 2 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260520214600
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260519155859
RootEvidence/1.0 20260508092813
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260519155859
RootEvidence/1.0 20260508092813
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 86 86
From1 0 0
From2 0 0
From3 0 0
From4 45 45
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
400 1 226
404 16 4280
403 1831 655074
500 1560 1106040
301 55 15191
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 9
/%2fpublic%2f.env 1 -
/.well-known/pki-validation/index.php 1 -
/.well-known/acme-challenge/index.php 4 -
/ 4 -
/plugins/Cache/footer.php 2 -
/plugins/payments/stripe.json 1 -
/%2f.aws%2fcredentials 1 -
/%2f.env 1 -
/%2fbackend%2f.env 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 45
208.84.101.72 9 9 10631 20260521054942
142.248.80.6 9 9 10631 20260519052414
66.132.195.90 7 7 8163 20260501084337
199.45.155.77 7 7 8163 20260508110458
66.132.195.87 7 7 8163 20260520214600
167.94.146.50 7 7 8163 20260515173233
66.132.172.108 6 6 6088 20260515173527
199.45.154.138 6 6 6088 20260508114503
167.94.146.63 6 6 6088 20260517181544
88.151.33.221 6 6 5879 20260513234400
167.94.146.62 6 6 6088 20260503073010
66.132.195.112 6 6 6088 20260510114137
136.119.156.171 3 3 6225 20260518232431
143.244.57.92 3 3 6225 20260503142722
162.243.233.83 3 3 6225 20260519025936
159.65.82.37 3 3 1179 20260504113050
146.190.253.181 3 3 6225 20260519050308
136.111.111.3 3 3 6225 20260518212004
146.70.40.68 3 3 6225 20260502151808
3.151.194.164 2 2 4150 20260520023822
67.205.155.47 2 2 2075 20260501045312
71.6.242.116 1 1 2075 20260508092813
205.210.31.11 1 1 2075 20260504190554
198.235.24.46 1 1 2075 20260511165536
209.38.70.190 1 1 2075 20260505182023
198.211.106.82 1 1 2075 20260517172222
198.235.24.31 1 1 2075 20260519155859
104.248.174.184 1 1 2075 20260503131421
34.55.187.39 1 1 2075 20260506004838
3.233.88.40 1 1 2075 20260512085030
165.232.64.168 1 1 2075 20260508051949
93.158.108.146 1 1 2075 20260513004126
5.198.254.244 1 1 2075 20260511223650
164.90.199.100 1 1 2075 20260507071615
91.224.92.99 1 1 2075 20260501012518
208.84.100.196 1 1 2075 20260512140001
205.210.31.147 1 1 2075 20260511191734
5.255.122.176 1 1 0 20260514152738
71.6.240.184 1 1 2075 20260508092150
192.109.200.215 1 1 2075 20260502062543
159.89.84.139 1 1 2075 20260507200946
107.173.171.201 1 1 2075 20260502165506
208.84.100.11 1 1 2075 20260508001906
142.93.47.222 1 1 2075 20260506073037
88.151.33.81 1 1 2075 20260502183040
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 19
20260501 10 10 12313 3
20260502 6 6 12450 4
20260503 10 10 14388 3
20260504 5 5 5329 3
20260505 1 1 2075 1
20260506 2 2 4150 2
20260507 2 2 4150 2
20260508 17 17 22551 6
20260510 6 6 6088 1
20260511 3 3 6225 3
20260512 2 2 4150 2
20260513 7 7 7954 2
20260514 1 1 0 1
20260515 13 13 14251 2
20260517 7 7 8163 2
20260518 6 6 12450 2
20260519 16 16 25156 4
20260520 8 8 10238 2
20260521 9 9 10631 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 46
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 11
/ 66 132800 45 35
/e4e358/ 12 4716 0 2
/7889e/ 12 4716 0 0
/d19b7f/ 12 29292 0 4
/wp-admin/ 11 4323 0 4
/wp-content/ 11 4323 0 0
/wp-includes/ 3 1179 0 0
/wp-content/index.php 1 393 1 0
/wp-includes/index.php 1 393 0 1
/trmcos.html 1 184 0 0
/wp-admin/index.php 1 393 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 4
500-1K 1576
2K-5K 87
0-44 8
100-500 1976
END_FILESIZE