OwlCyberSecurity - MANAGER

Edit File: awstats052025.testtwo.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202505 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.testtwo.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2048                
POS_TIME 2720                
POS_VISITOR 7766                
POS_DAY 9181                
POS_DOMAIN 3330                
POS_LOGIN 3675                
POS_ROBOT 3830                
POS_WORMS 4041                
POS_EMAILSENDER 4172                
POS_EMAILRECEIVER 4315                
POS_SESSION 9432                
POS_FILESIZE 10032               
POS_SIDER 9606                
POS_FILETYPES 4450                
POS_DOWNLOADS 4609                
POS_OS 4718                
POS_BROWSER 4922                
POS_SCREENSIZE 5379                
POS_UNKNOWNREFERER 5453                
POS_UNKNOWNREFERERBROWSER 6180                
POS_ORIGIN 6585                
POS_SEREFERRALS 6720                
POS_PAGEREFS 6864                
POS_SEARCHWORDS 7041                
POS_KEYWORDS 7193                
POS_MISC 2383                
POS_ERRORS 7252                
POS_CLUSTER 3531                
POS_SIDER_404 7383                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250601122323 1 0 3710767952983
FirstTime 20250524160356
LastTime 20250531103135
LastUpdate 20250601170227 1 0 0 0 0
TotalVisits 44                  
TotalUnique 34                  
MonthHostsKnown 0                   
MonthHostsUnknown 36                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 25 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 1 1 317
1 0 0 0 0 0 0
2 0 0 0 0 0 0
3 2 2 564 6 6 671
4 1 1 282 0 0 0
5 0 0 0 0 0 0
6 0 0 0 0 0 0
7 0 0 0 0 0 0
8 0 0 0 0 0 0
9 3 8 26022205 0 3 671
10 4 11 108162041 14 16 1342
11 7 21 179232798 0 15 16128917
12 6 20 253300536 2 5 671
13 5 5 2433 18 20 12749
14 3 5 181804262 0 5 1342
15 1 2 54072251 0 1 671
16 15 16 54076779 22 23 12605
17 11 11 6171 0 3 2013
18 5 5 2774 0 1 0
19 1 1 317 0 2 1342
20 2 2 599 1 2 1342
21 1 1 0 2 5 3355
22 0 0 0 0 0 0
23 2 2 1246 2 4 1587
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 10
us 46 84 526750439
pk 6 10 216289168
ca 5 5 2809
zz 3 3 651
sg 3 3 1869
bg 2 2 128
gb 2 2 599
ru 1 1 282
rs 1 1 282
sc 0 2 108143868
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
no_user_agent 2 940 20250531003719 0
Go\-http\-client/ 2 1246 20250524160513 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
apk 13 782089406 0 0
Unknown 16 202355 0 0
js 25 68868230 0 0
svg 6 8082 0 0
html 53 22022 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 2
/app-release.apk 12 1 654358263
/app-debug.apk 1 0 127731143
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
androidoreo 12 2
androidmarshmallow 1 1
win10 73 38
ios_iphone 4 4
macosx15 2 2
win8 1 1
Unknown 13 13
linuxubuntu 2 2
linux 5 5
win7 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 21
chrome58.0.3029.110 2 2
chrome137.0.0.0 6 2
chrome78.0.3904.108 3 3
safari15.4 4 4
chrome113.0.0.0 2 2
chrome52.0.6247.98 1 1
firefox136.0 1 1
firefox23.0 1 1
chrome117.0.5938.132 1 1
chrome136.0.7103.125 12 2
edge18 3 3
chrome136.0.0.0 57 26
mozilla 8 8
firefox134.0 1 1
chrome79.0.3945.79 1 1
netscape5.0 2 2
firefox89.0 1 1
chrome83.0.4103.61 1 1
chrome135.0.0.0 3 3
chrome125.0.6422.60 1 1
Unknown 3 3
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 6
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250526044412
Mozilla/5.0 20250527090815
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530112816
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250524235639
Cpanel-HTTP-Client/1.0 20250524160356
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20250524160413
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250530112816
Cpanel-HTTP-Client/1.0 20250524160356
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 50 50
From1 0 0
From2 0 0
From3 17 17
From4 2 47
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 1
https://onebox.pk:2083 17 17
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 5
301 1 245
503 7 0
404 11 0
500 50 26169
206 6 16124220
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 3
/ads.txt 1 -
/api/leaves 9 -
/app-release.apk 1 http://testtwo.onebox.pk/
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 36
139.135.36.251 20 59 526738055 20250531103135
202.83.171.82 5 9 216288851 20250530111439
54.187.174.221 3 3 1869 20250524174344
122.248.198.36 3 3 1869 20250525133145
205.169.39.95 2 2 1246 20250524160511
54.188.184.174 2 2 1246 20250524185533
170.39.217.3 2 2 564 20250526035236
172.245.241.123 2 2 564 20250527090815
37.60.246.20 2 2 128 20250524160356
35.85.32.97 2 2 1246 20250524184322
35.90.246.51 2 2 1246 20250524174343
167.94.138.121 2 2 1246 20250524235639
34.29.21.37 1 1 623 20250524164310
91.231.89.35 1 1 282 20250526173547
144.126.211.224 1 1 282 20250527180450
64.227.101.241 1 1 282 20250527144009
192.175.111.230 1 1 623 20250524170703
164.90.208.56 1 1 623 20250524160506
205.169.39.56 1 1 623 20250524161004
167.172.173.239 1 1 317 20250529201417
34.123.170.104 1 1 623 20250524160454
161.35.83.203 1 1 317 20250529191511
18.220.28.182 1 1 87 20250524160413
54.255.218.125 1 1 87 20250524160413
205.210.31.88 1 1 317 20250530112816
154.80.18.249 0 1 54071934 
154.80.53.96 0 1 54071934 
34.223.206.88 1 1 87 20250524160413
192.175.111.238 1 1 623 20250524170702
64.15.129.103 1 1 623 20250524170704
128.199.159.193 1 1 282 20250525205521
23.178.112.108 1 1 87 20250524160413
202.69.43.79 1 1 317 20250529150159
13.48.86.193 1 1 87 20250524160413
64.15.129.107 1 1 623 20250524170702
185.247.137.117 1 1 282 20250526044412
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 8
20250524 28 28 13646 20
20250525 9 11 181806675 6
20250526 9 12 162218010 6
20250527 3 3 846 3
20250528 9 34 270316299 1
20250529 8 18 26041404 5
20250530 2 5 162216436 2
20250531 1 2 54071942 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 4
30mn-1h 1
1h+ 2
5mn-15mn 1
0s-30s 40
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 7
/ 53 22022 37 36
/admin 7 183579 1 1
/.well-known/acme-challenge/9urYevdKuRAIIfUK7XjQcUdJgY1SaeQjQ5ZVYOUE3tU 5 435 5 5
/.well-known/acme-challenge/KZO54MYZWBMQ5LEHP97YGE1-_NUKYS8F 1 64 1 0
/.well-known/acme-challenge/6LI5WZ3D0ORHXHTOV0UIJWYB-GTUVQB3 1 64 0 1
/admin/api/resources/Employee/actions/list 1 1746 0 1
/admin/api/resources/Leave/actions/list 1 16467 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 7
500-1K 92
44-100 7
0-44 66
1K-2K 1
2K-5K 3
5K+ 30
100-500 27
END_FILESIZE