OwlCyberSecurity - MANAGER

Edit File: awstats122025.akcpa.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202512 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.akcpa.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2046                
POS_TIME 2712                
POS_VISITOR 9419                
POS_DAY 13089               
POS_DOMAIN 3490                
POS_LOGIN 3883                
POS_ROBOT 4038                
POS_WORMS 4418                
POS_EMAILSENDER 4549                
POS_EMAILRECEIVER 4692                
POS_SESSION 13510               
POS_FILESIZE 14437               
POS_SIDER 13678               
POS_FILETYPES 4827                
POS_DOWNLOADS 4945                
POS_OS 4993                
POS_BROWSER 5203                
POS_SCREENSIZE 5992                
POS_UNKNOWNREFERER 6066                
POS_UNKNOWNREFERERBROWSER 6800                
POS_ORIGIN 7153                
POS_SEREFERRALS 7289                
POS_PAGEREFS 7433                
POS_SEARCHWORDS 7581                
POS_KEYWORDS 7733                
POS_MISC 2375                
POS_ERRORS 7792                
POS_CLUSTER 3739                
POS_SIDER_404 7938                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20260101003709 15 2371 11343974049759
FirstTime 0
LastTime 20251231232216
LastUpdate 20260101150115 15 0 14 0 0
TotalVisits 110                 
TotalUnique 96                  
MonthHostsKnown 0                   
MonthHostsUnknown 96                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 23 0
PDFSupport 0 0 0
JavascriptDisabled 0 0 0
QuickTimeSupport 0 0 0
RealPlayerSupport 0 0 0
FlashSupport 0 0 0
JavaEnabled 0 0 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 4115 291 291 218081
1 3 3 6225 193 193 106428
2 17 17 19191 1194 1196 8659289
3 16 16 17116 11 13 19345
4 13 13 8162 1472 1472 835074
5 12 12 17226 185 186 1131297
6 3 3 6225 270 273 1769285
7 2 2 2468 196 196 111738
8 29 29 27938 104 109 76515
9 0 0 0 16 17 87315
10 18 18 21231 5 8 5869
11 16 16 25123 249 251 199139
12 2 2 4080 187 187 152044
13 2 2 2075 217 217 102375
14 9 9 18675 113 113 47734
15 1 1 2075 349 349 2540373
16 24 24 33716 50 53 54583
17 22 22 32930 89 96 108006
18 9 9 18675 388 389 1328566
19 0 0 0 225 225 104381
20 7 7 8165 177 178 1212549
21 0 0 0 16 18 90986
22 10 10 20750 656 658 3327960
23 30 30 47848 102 104 77852
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 14
us 126 126 191255
cn 65 65 70539
ru 14 14 27298
in 13 13 9809
ca 9 9 16687
rs 4 4 8300
lt 4 4 3219
nl 3 3 6225
af 2 2 4150
bg 2 2 128
zz 2 2 174
be 1 1 2075
se 1 1 2075
gb 1 1 2075
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 7
Googlebot/ 49 99995 20251222123028 0
Go\-http\-client/ 27 24168 20251222081938 4
no_user_agent 18 17131 20251231014809 0
checker 11 22825 20251228151907 0
scanner 6 5652 20251203190309 0
unknown 4 1268 20251228100626 4
robot 2 634 20251228210922 2
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
html 230 341605 0 0
php 5 1406 0 0
Unknown 12 998 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 11
macosx15 8 8
macosx 1 1
Unknown 81 81
win7 3 3
ios_ipad 1 1
linux 11 11
android 1 1
androidkitkat 1 1
win10 75 75
linuxubuntu 5 5
macosx7 60 60
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 38
firefox117.0 1 1
mozilla 72 72
chrome69.0.3497.100 1 1
safari16.1 1 1
chrome80.0.3987.149 3 3
chrome139.0.0.0 2 2
chrome17.0.963.56 60 60
firefox121.0 3 3
chrome95.0.4638.69 1 1
firefox139.0 1 1
chrome79.0.3945.130 1 1
chrome72.0.3626.121 1 1
chrome81.0.4044.129 1 1
chrome134.0.0.0 1 1
chrome104.0.0.0 1 1
chrome113.0.0.0 1 1
chrome74.0.3729.169 1 1
firefox74.0 1 1
chrome45.0.2454.84 1 1
safari 1 1
netscape5.0 5 5
firefox79.0 2 2
firefox45.0 1 1
firefox123 1 1
chrome78.0.3904.108 46 46
firefox142.0 1 1
chrome120.0 1 1
chrome120.0.0.0 6 6
firefox134.0 4 4
Unknown 5 5
chrome37.0.2062.94 1 1
chrome126.0.0.0 1 1
chrome124.0.0.0 9 9
chrome114.0.5735.110 1 1
firefox122.0 1 1
chrome142.0.0.0 4 4
firefox143.0 1 1
chrome58.0.3029.110 2 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 8
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251230175543
Mozilla/5.0_(l9scan/2.0.0323e2634323e20363e27333;__https://leakix.net) 20251222082010
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20251231232216
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20251222133609
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20251224182607
python-httpx/0.28.1 20251226225805
Python/3.14_aiohttp/3.13.2 20251203003354
Cpanel-HTTP-Client/1.0 20251222081804
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 4
python-httpx/0.28.1 20251226225805
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251230175543
Python/3.14_aiohttp/3.13.2 20251203003354
Cpanel-HTTP-Client/1.0 20251222081804
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 210 210
From1 0 0
From2 0 0
From3 0 0
From4 37 37
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
500 4516 21396002
400 1 226
403 2021 722718
404 68 20640
301 46 12898
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 29
/.well-known/pki-validation/classwithtostring.php 1 -
/plugins/function.php 1 -
/.well-known/acme-challenge/index.php 6 -
/.well-known/pki-validation/afnew.php 1 -
/.well-known/pki-validation/cloud.php 3 -
/ 24 -
/.well-known/pki-validation/doc.php 1 -
/.well-known/pki-validation/angu.php 1 -
/.well-known/pki-validation/wp-login.php 2 -
/.well-known/pki-validation/2index.php 1 -
/.well-known/pki-validation/shell.php 1 -
/.well-known/pki-validation/xmrlpc.php 3 -
/.well-known/pki-validation/index.php 1 -
/.well-known/pki-validation/file.php 1 -
/.well-known/pki-validation/admin.php 2 -
/.well-known/acme-challenge/ 1 -
/.well-known/pki-validation/autoload_classmap.php 1 -
/plugins/Cache/footer.php 2 -
/.well-known/pki-validation/about.php 3 -
/.well-known/pki-validation/aewso.php 1 -
/.well-known/pki-validation/ssl.php 1 -
/.well-known/pki-validation/install.php 1 -
/.well-known/pki-validation/infos.php 1 -
/.well-known/acme-challenge/content.php 1 -
/.well-known/pki-validation/worksec.php 3 -
/plugins/jquery.filer/uploads/ 1 -
/.well-known/pki-validation/atomlib.php 1 -
/.well-known/pki-validation/BSTI.php 1 -
/.well-known/pki-validation/scripts.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 96
185.177.72.24 11 11 22825 20251229140353
65.87.7.112 10 10 10375 20251222133609
103.163.220.170 9 9 4908 20251230043710
199.45.154.143 7 7 8165 20251230201812
199.45.155.67 7 7 8165 20251231232216
167.94.146.54 7 7 8165 20251221234334
167.94.138.196 7 7 8165 20251230170421
66.132.153.132 7 7 8165 20251223110152
206.168.34.45 7 7 8165 20251229051836
1.192.192.4 6 6 9822 20251228100639
142.248.80.123 6 6 12450 20251225114352
123.6.49.14 6 6 4408 20251227024147
199.45.154.148 6 6 6090 20251230170543
34.16.177.2 6 6 12450 20251222234601
123.6.49.6 5 5 7379 20251227024146
1.192.192.8 4 4 3254 20251228100642
123.6.49.49 4 4 3622 20251227024146
123.6.49.46 4 4 4936 20251227024138
35.196.30.227 3 3 6225 20251228160642
35.195.62.207 3 3 6225 20251222230102
34.121.74.122 3 3 6225 20251223183231
34.86.129.155 3 3 6225 20251229182926
101.198.0.183 3 3 6593 20251224034802
123.6.49.10 3 3 6593 20251227024144
34.21.94.191 3 3 6225 20251223225924
159.89.187.43 1 1 2075 20251224171025
45.131.155.102 1 1 2040 20251204082028
1.192.195.5 2 2 786 20251228100644
123.6.49.17 1 1 393 20251224163830
18.212.198.88 1 1 2075 20251221230712
35.247.190.158 1 1 2075 20251224000919
46.101.202.111 1 1 2075 20251225065642
87.251.78.138 2 2 4080 20251201120946
87.236.176.31 1 1 2075 20251224182607
91.231.89.38 1 1 2075 20251222084359
18.236.226.159 1 1 87 20251222081909
159.223.170.32 1 1 2075 20251227063433
141.98.11.181 1 1 2075 20251222111556
91.231.89.121 1 1 2075 20251222084726
38.127.60.232 2 2 4150 20251219231427
145.220.91.19 1 1 2075 20251223023950
3.140.182.19 1 1 2075 20251227054424
101.198.0.133 1 1 393 20251224034806
143.110.217.244 2 2 4150 20251222082010
101.198.0.141 1 1 2075 20251224034730
205.210.31.202 1 1 2075 20251230175543
194.126.177.15 1 1 2075 20251223102514
123.6.49.41 1 1 2075 20251224163829
91.231.89.36 1 1 2075 20251222085327
13.48.68.78 1 1 87 20251222081908
192.241.133.102 1 1 2075 20251228061018
123.6.49.9 3 3 1179 20251227024149
45.131.155.100 1 1 2075 20251219161641
167.94.138.54 3 3 4911 20251229050517
101.198.0.188 1 1 393 20251224034801
101.198.0.142 2 2 786 20251224034808
34.67.5.153 3 3 6225 20251224221521
167.99.210.137 2 2 4150 20251222082010
192.71.224.240 1 1 2075 20251229154334
165.232.131.61 3 3 6225 20251226010041
47.130.5.212 1 1 87 20251222081910
101.198.0.157 1 1 393 20251224034804
101.198.0.182 1 1 393 20251224034759
101.198.0.179 2 2 786 20251224034808
103.163.220.169 2 2 786 20251230043755
101.198.0.171 1 1 2443 20251224034805
23.178.112.107 1 1 87 20251222081908
101.198.0.135 1 1 393 20251224034758
167.71.99.99 1 1 2075 20251218185648
3.21.76.53 2 2 174 20251222081910
121.127.34.106 2 2 4150 20251222045829
136.115.66.75 3 3 6225 20251223175243
23.178.112.108 1 1 87 20251222081908
101.198.0.187 1 1 2075 20251224034803
161.35.156.194 1 1 2075 20251222175707
18.143.145.245 1 1 87 20251222081910
1.192.192.6 2 2 2468 20251228100633
123.6.49.36 2 2 786 20251227024148
54.187.27.19 1 1 87 20251222081908
35.233.232.182 3 3 6225 20251228160247
91.224.92.24 2 2 786 20251204041936
164.92.123.167 1 1 2040 20251204105042
167.99.187.92 1 1 2075 20251223053233
123.6.49.42 1 1 393 20251227024142
91.224.92.184 2 2 2433 20251203113003
37.60.246.20 2 2 128 20251222081804
123.6.49.38 2 2 2468 20251227024137
13.53.172.35 1 1 87 20251222081908
1.192.195.8 2 2 786 20251228100643
131.186.47.110 1 1 2040 20251203003354
91.231.89.39 1 1 2075 20251222085358
35.194.90.250 3 3 6225 20251230171040
101.198.0.170 2 2 2468 20251224163941
185.169.4.152 1 1 393 20251220073214
34.74.90.81 3 3 6225 20251222230217
34.125.194.83 3 3 6225 20251223224835
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 17
20251201 2 2 4080 1
20251203 4 4 4866 3
20251204 3 3 4473 3
20251218 2 2 4150 2
20251219 3 3 6225 2
20251220 1 1 393 1
20251221 8 8 10240 2
20251222 45 45 59098 24
20251223 22 22 39290 8
20251224 42 42 54982 27
20251225 4 4 8300 2
20251226 4 4 8300 2
20251227 18 18 21266 11
20251228 23 23 31641 8
20251229 24 24 42126 6
20251230 35 35 36414 7
20251231 7 7 8165 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
30s-2mn 5
0s-30s 104
2mn-5mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 18
/ 135 269540 71 58
/wp-admin/ 20 7860 7 9
/7889e/ 16 6288 6 8
/d19b7f/ 16 39088 4 4
/wp-content/ 16 6288 3 9
/e4e358/ 15 5895 5 5
/wp-includes/ 9 3537 3 7
/.well-known/acme-challenge/sUsJSa3AHBRlDKO-FY6dUCdYJzzLr6XjUyCWLZ73jD8 5 435 5 4
/.well-known/acme-challenge/TYKdPos0L9qHBozGDv_IBErQmXXEfsWDjcYIPh4jv4s 5 435 4 5
/.well-known/pki-validation/ 2 2096 0 0
/wp-admin/index.php 1 393 1 0
/wp-includes/mah.php 1 164 0 0
/.well-known/pki-validation/content.php 1 63 0 0
/.well-known/acme-challenge/8DCMH6UJ-MYB1CZ8J30KGWP43D2F-5J5 1 64 0 1
/.well-known/ 1 1013 0 0
/.well-known/acme-challenge/RNRWZKITEBY-A_WMF6FRVT0BSN4DD2A0 1 64 1 0
/wp-includes/index.php 1 393 0 0
/wp-content/mah.php 1 393 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 7
500-1K 1759
44-100 13
5K+ 2763
0-44 37
100-500 2242
2K-5K 161
1K-2K 64
END_FILESIZE