OwlCyberSecurity - MANAGER

Edit File: awstats072025.testone.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202507 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.testone.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2048                
POS_TIME 2721                
POS_VISITOR 8875                
POS_DAY 10471               
POS_DOMAIN 3318                
POS_LOGIN 3693                
POS_ROBOT 3848                
POS_WORMS 4257                
POS_EMAILSENDER 4388                
POS_EMAILRECEIVER 4531                
POS_SESSION 10972               
POS_FILESIZE 11445               
POS_SIDER 11119               
POS_FILETYPES 4666                
POS_DOWNLOADS 4815                
POS_OS 4863                
POS_BROWSER 5024                
POS_SCREENSIZE 5344                
POS_UNKNOWNREFERER 5418                
POS_UNKNOWNREFERERBROWSER 6190                
POS_ORIGIN 6630                
POS_SEREFERRALS 6762                
POS_PAGEREFS 6906                
POS_SEARCHWORDS 7054                
POS_KEYWORDS 7206                
POS_MISC 2384                
POS_ERRORS 7265                
POS_CLUSTER 3549                
POS_SIDER_404 7350                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250801141932 1 0 10879731215451
FirstTime 20250701141846
LastTime 20250730195148
LastUpdate 20250801181214 1 0 0 0 0
TotalVisits 40                  
TotalUnique 39                  
MonthHostsKnown 0                   
MonthHostsUnknown 41                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
DirectorSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
AddToFavourites 0 16 0
FlashSupport 0 0 0
JavaEnabled 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 1 3 887
1 2 3 716119 3 5 4690
2 0 0 0 0 0 0
3 1 1 753 0 0 0
4 1 1 753 1 2 820
5 0 0 0 2 3 1573
6 0 0 0 0 0 0
7 2 3 715858 1 2 820
8 2 2 1506 1 2 4623
9 4 4 3012 21 23 2393
10 5 6 718117 0 1 3870
11 4 6 722711 1 4 8560
12 2 3 716119 2 3 3870
13 1 2 6100 1 3 4690
14 4 7 19053 2 4 7740
15 6 9 729825 18 24 11610
16 0 0 0 0 0 0
17 10 10 2822 21 22 5376
18 0 0 0 0 1 67
19 2 2 1506 1 3 8493
20 2 2 984 1 1 753
21 0 0 0 1 1 753
22 0 0 0 2 3 1573
23 1 2 6100 1 2 3870
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 13
us 26 35 1483308
ir 4 6 1431716
ca 4 4 3012
gb 3 3 2259
zz 2 3 715453
za 2 2 984
ru 2 2 1506
bg 2 2 128
au 1 1 753
se 1 1 753
de 1 2 715366
cn 1 1 753
be 0 1 5347
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 8
MJ12bot/ 16 6560 20250727111756 8
no_user_agent 6 4518 20250724171956 0
unknown 3 201 20250729183939 3
checker 2 1506 20250725222752 0
bot[\s_+:,\.\;\/\\-] 1 67 20250730001056 1
survey 1 753 20250703010023 0
curl 1 753 20250724214430 0
Go\-http\-client/ 1 753 20250724172005 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
js 6 4287678 0 0
html 37 27861 0 0
Unknown 7 563 0 0
json 5 2460 0 0
png 8 42776 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 7
androidmarshmallow 2 2
Unknown 33 23
win7 1 0
linux 8 8
macosx15 2 2
androidpie 1 1
win10 16 13
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 14
safari18.3 1 1
chrome52.0.6247.98 1 1
netscape5.0 3 3
chrome121.0.0.0 2 1
chrome58.0.3029.110 8 6
chrome120.0.0.0 1 1
chrome76.0.3809.111 1 1
chrome78.0.3904.108 6 6
firefox41.0 1 0
firefox137.0 2 2
chrome53.0.2785.97 1 1
Unknown 10 8
mozilla 20 12
chrome137.0.0.0 6 6
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 7
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250712032633
Cpanel-HTTP-Client/1.0 20250724171813
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250703110831
python-httpx/0.28.1 20250725123036
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250715235716
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20250724171925
Mozilla/5.0_zgrab/0.x 20250727175140
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 3
python-httpx/0.28.1 20250725123036
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250712032633
Cpanel-HTTP-Client/1.0 20250724171813
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 49 63
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 65 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 44
/debug/default/view 1 -
/site/wp-includes/wlwmanifest.xml 2 -
/wp1/wp-includes/wlwmanifest.xml 2 -
/2018/wp-includes/wlwmanifest.xml 2 -
/xmlrpc.php 2 -
/website/wp-includes/wlwmanifest.xml 2 -
/news/wp-includes/wlwmanifest.xml 2 -
/@vite/env 1 -
/sito/wp-includes/wlwmanifest.xml 2 -
/wp-admin/setup-config.php 1 -
/wordpress/wp-admin/setup-config.php 1 -
/.DS_Store 1 -
/wordpress/wp-includes/wlwmanifest.xml 2 -
/2019/wp-includes/wlwmanifest.xml 2 -
/wp2/wp-includes/wlwmanifest.xml 2 -
/wp-admin/install.php 1 -
/telescope/requests 1 -
/actuator/env 1 -
/wp-includes/wlwmanifest.xml 2 -
/shop/wp-includes/wlwmanifest.xml 2 -
/server-status 1 -
/v2/_catalog 1 -
/s/0323e2634323e20363e27333/_/ 1 -
/_all_dbs 1 -
/cms/wp-includes/wlwmanifest.xml 2 -
/info.php 1 -
/web/wp-includes/wlwmanifest.xml 2 -
/login.action 1 -
/wiki 1 -
/manifest.js 1 -
/wp/wp-includes/wlwmanifest.xml 2 -
/about 1 -
/test/wp-includes/wlwmanifest.xml 2 -
/blog/wp-includes/wlwmanifest.xml 2 -
/media/wp-includes/wlwmanifest.xml 2 -
/login 2 -
/config.json 2 -
/sitemap.xml 1 -
/server 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/.git/config 1 -
/.env 1 -
/security.txt 2 -
/.vscode/sftp.json 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 41
146.70.194.246 3 3 2259 20250708152708
184.73.122.173 3 3 2259 20250725093741
31.57.219.254 2 3 715858 20250715072953
3.146.111.124 2 2 1506 20250727175140
172.94.96.146 2 3 715858 20250719111234
31.57.219.38 2 3 715858 20250718105757
37.60.246.20 2 2 128 20250724171813
196.251.88.59 2 2 984 20250725203549
199.45.155.75 1 2 6100 20250715235707
161.35.166.72 1 1 753 20250716082917
46.8.225.111 1 1 753 20250722081338
198.235.24.43 1 1 753 20250712032633
143.198.49.175 1 1 753 20250724104745
18.224.192.118 1 1 753 20250723015044
138.197.46.180 1 1 753 20250725122614
46.246.8.181 1 1 753 20250724172006
159.223.132.86 1 1 753 20250724171957
13.49.222.12 1 1 87 20250724171924
205.210.31.39 1 1 753 20250709100859
23.178.112.107 1 1 87 20250724171924
167.94.146.57 1 2 6100 20250712131337
206.168.34.45 1 2 6100 20250709144709
18.142.112.90 1 1 87 20250724171925
170.39.218.50 1 2 715366 20250707093939
206.168.34.89 1 3 11447 20250709144413
87.236.176.70 0 1 5347 
3.15.20.125 1 1 87 20250724171924
167.94.138.121 1 2 6100 20250715153558
185.247.137.179 1 1 753 20250703110830
209.97.185.255 1 1 753 20250727113436
147.185.132.210 1 1 753 20250704105724
180.163.220.126 1 1 753 20250717014158
194.233.88.108 1 2 715366 20250725123034
205.210.31.192 1 1 753 20250705143702
54.82.20.172 0 1 714613 
139.59.82.210 1 1 753 20250730195148
206.168.34.85 1 2 6100 20250709151820
68.183.18.137 1 1 753 20250702150522
143.198.230.29 1 1 753 20250710191920
198.235.24.178 1 1 753 20250701141846
35.94.51.127 1 1 87 20250724171925
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 22
20250701 1 1 753 1
20250702 1 1 753 1
20250703 1 2 6100 1
20250704 1 1 753 1
20250705 1 1 753 1
20250707 1 1 753 1
20250708 3 3 2259 1
20250709 4 8 24400 4
20250710 1 1 753 1
20250712 2 3 6853 2
20250715 4 7 728058 3
20250716 1 2 715366 1
20250717 1 1 753 1
20250718 2 3 715858 1
20250719 2 3 715858 1
20250720 1 1 753 1
20250722 1 1 753 1
20250723 1 1 753 1
20250724 10 10 2822 9
20250725 7 8 719362 4
20250727 2 3 716119 2
20250730 1 1 753 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 40
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 5
/ 37 27861 33 30
/manifest.json 5 2460 1 4
/.well-known/acme-challenge/QVRSuCQkCSKOuZRXW-SDJI5U-j29IpRgaDw9nf29-rQ 5 435 5 5
/.well-known/acme-challenge/6WSUAIPGVJ2V7L0EXIWC8W1EQIO1USSP 1 64 1 0
/.well-known/acme-challenge/EGZWBN2G_XGUGF62J3ZUN-8WKFU113OP 1 64 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 6
100-500 5
2K-5K 16
500-1K 56
0-44 65
5K+ 14
44-100 19
END_FILESIZE