OwlCyberSecurity - MANAGER

Edit File: awstats052026.testthree.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202605 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/ssl/awstats.testthree.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2054                
POS_TIME 2732                
POS_VISITOR 7086                
POS_DAY 8462                
POS_DOMAIN 3423                
POS_LOGIN 3732                
POS_ROBOT 3887                
POS_WORMS 4156                
POS_EMAILSENDER 4287                
POS_EMAILRECEIVER 4430                
POS_SESSION 8909                
POS_FILESIZE 9157                
POS_SIDER 9066                
POS_FILETYPES 4565                
POS_DOWNLOADS 4663                
POS_OS 4711                
POS_BROWSER 4868                
POS_SCREENSIZE 5219                
POS_UNKNOWNREFERER 5293                
POS_UNKNOWNREFERERBROWSER 5755                
POS_ORIGIN 6025                
POS_SEREFERRALS 6161                
POS_PAGEREFS 6305                
POS_SEARCHWORDS 6453                
POS_KEYWORDS 6605                
POS_MISC 2396                
POS_ERRORS 6664                
POS_CLUSTER 3588                
POS_SIDER_404 6777                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260521090138 12 2182 11781694459991
FirstTime 20260501123643
LastTime 20260521090138
LastUpdate 20260521091650 12 0 12 0 0
TotalVisits 52                  
TotalUnique 33                  
MonthHostsKnown 0                   
MonthHostsUnknown 33                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavascriptDisabled 0 0 0
AddToFavourites 0 5 0
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavaEnabled 0 0 0
TotalMisc 0 0 0
PDFSupport 0 0 0
RealPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 2878 12 12 53256
1 2 2 5756 8 8 20630
2 3 3 8634 4 4 17752
3 2 2 5756 6 16 334262
4 9 12 51887 22 22 97636
5 0 0 0 5 6 23508
6 3 3 8634 9 11 44138
7 1 1 2878 12 14 55892
8 35 35 100730 4588 4591 20336374
9 39 39 112242 1473 1474 6537179
10 2 2 2878 4 4 16192
11 1 1 2878 1 1 4438
12 5 5 14390 5 6 26628
13 2 2 5756 2 2 8876
14 5 5 14390 7 8 33944
15 2 2 5756 215 216 957048
16 3 3 5756 4 4 17752
17 4 4 11512 4 5 22190
18 4 4 11512 7 9 36822
19 0 0 0 17 28 385958
20 0 0 0 3 4 16179
21 2 2 5756 16 21 77840
22 7 7 20146 13 26 572173
23 4 4 11512 16 16 71008
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 7
jp 69 69 198582
us 29 32 103691
de 23 23 66194
in 11 11 31658
ca 2 2 5756
ro 1 1 2878
ru 1 1 2878
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
bot[\s_+:,\.\;\/\\-] 43 1166327 20260520063139 0
robot 19 54682 20260520144338 0
crawl 2 5756 20260511011603 0
java 1 0 20260511011601 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
php 136 385652 0 0
js 3 25985 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
linux 9 8
macosx13 1 1
ios_ipad 1 1
Unknown 12 12
win10 107 107
macosx15 6 5
ios_iphone 3 2
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 17
firefox125.0 1 1
safari18.4 3 2
chrome128.0.0.0 1 1
chrome124.0 2 2
firefox149.0 1 0
chrome146.0.0.0 4 4
mozilla 9 9
netscape5.0 13 13
chrome147.0.0.0 24 24
chrome84.0.4147.89 1 1
chrome126.0.0.0 1 1
chrome131.0.0.0 70 70
Unknown 3 3
safari18.3 2 1
firefox142.0 2 2
firefox150.0 1 1
firefox115.0 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20260515222132
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260509162922
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20260516222722
RootEvidence/1.0 20260508094432
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20260509162922
RootEvidence/1.0 20260508094432
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 115 118
From1 0 0
From2 0 0
From3 0 0
From4 21 21
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
502 9 4968
302 6428 28513747
301 1 5
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 0
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 33
43.202.44.213 69 69 198582 20260519090743
103.153.183.126 10 10 28780 20260520124047
208.84.100.215 9 12 49009 20260514105515
176.65.139.168 7 7 20146 20260511220832
176.65.139.231 5 5 14390 20260520182249
176.65.139.229 3 3 8634 20260516132949
176.65.139.232 2 2 5756 20260517060633
167.94.146.53 2 2 5756 20260501220414
3.233.88.40 2 2 5756 20260515102231
167.94.146.58 2 2 5756 20260516222722
140.245.32.2 2 2 5756 20260519210956
199.45.154.114 2 2 5756 20260516120602
176.65.139.238 1 1 2878 20260518115207
34.193.251.180 1 1 2878 20260514025531
34.86.56.177 1 1 2878 20260508162225
71.6.235.220 1 1 2878 20260508094432
159.65.167.23 1 1 2878 20260509173556
176.65.139.234 1 1 2878 20260519042857
3.139.242.79 1 1 2878 20260502172849
34.155.122.53 1 1 2878 20260508010440
205.210.31.148 1 1 2878 20260509162922
165.22.29.129 1 1 2878 20260514091304
45.148.10.238 1 1 2878 20260509152536
66.132.186.173 1 1 2878 20260509060409
176.65.139.233 1 1 2878 20260521090138 20260521090138 /content.php
205.210.31.5 1 1 2878 20260505140935
176.65.139.239 1 1 2878 20260517074007
185.247.137.41 1 1 2878 20260515222132
66.132.172.186 1 1 2878 20260501123643
188.215.235.101 1 1 2878 20260506235630
176.65.139.237 1 1 2878 20260513011502
176.65.139.236 1 1 2878 20260514141707
23.95.96.140 1 1 0 20260517164347
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 19
20260501 3 3 8634 2
20260502 1 1 2878 1
20260503 2 2 5756 2
20260505 2 2 5756 2
20260506 9 12 51887 2
20260507 1 1 2878 1
20260508 3 3 8634 3
20260509 7 7 20146 7
20260511 1 1 2878 1
20260512 1 1 2878 1
20260513 2 2 5756 2
20260514 6 6 14390 6
20260515 2 2 5756 2
20260516 6 6 17268 4
20260517 3 3 5756 3
20260518 2 2 5756 2
20260519 76 76 218728 5
20260520 8 8 23024 5
20260521 1 1 2878 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 50
30mn-1h 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/content.php 136 385652 52 51
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 5
500-1K 16
0-44 7
1K-2K 4
2K-5K 6599
5K+ 21
END_FILESIZE