OwlCyberSecurity - MANAGER

Edit File: awstats072025.testtwo.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202507 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.testtwo.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2048                
POS_TIME 2721                
POS_VISITOR 7596                
POS_DAY 9689                
POS_DOMAIN 3309                
POS_LOGIN 3635                
POS_ROBOT 3790                
POS_WORMS 4049                
POS_EMAILSENDER 4180                
POS_EMAILRECEIVER 4323                
POS_SESSION 10192               
POS_FILESIZE 10721               
POS_SIDER 10339               
POS_FILETYPES 4458                
POS_DOWNLOADS 4559                
POS_OS 4607                
POS_BROWSER 4730                
POS_SCREENSIZE 4959                
POS_UNKNOWNREFERER 5033                
POS_UNKNOWNREFERERBROWSER 5964                
POS_ORIGIN 6563                
POS_SEREFERRALS 6695                
POS_PAGEREFS 6839                
POS_SEARCHWORDS 6987                
POS_KEYWORDS 7139                
POS_MISC 2384                
POS_ERRORS 7198                
POS_CLUSTER 3491                
POS_SIDER_404 7287                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250801011059 1 0 14949210355647
FirstTime 20250701231602
LastTime 20250731094808
LastUpdate 20250801181216 1 0 0 0 0
TotalVisits 55                  
TotalUnique 54                  
MonthHostsKnown 0                   
MonthHostsUnknown 54                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
AddToFavourites 0 47 0
PDFSupport 0 0 0
RealPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 317 0 3 2013
1 4 4 1268 18 18 11407
2 1 1 317 0 0 0
3 1 1 317 2 4 2330
4 0 0 0 1 1 317
5 0 0 0 0 0 0
6 0 0 0 0 1 671
7 1 1 317 0 0 0
8 3 3 951 1 3 2013
9 5 5 1585 18 20 12749
10 1 1 317 2 2 1342
11 3 3 951 0 0 0
12 2 2 634 1 3 2013
13 3 3 951 1 6 4026
14 3 3 951 2 8 5368
15 5 5 1585 1 12 8052
16 7 7 2219 3 20 13420
17 12 12 998 2 2 634
18 1 1 317 1 2 988
19 2 2 634 0 2 1342
20 1 1 317 1 4 2330
21 1 1 317 2 4 2330
22 1 1 317 1 2 988
23 3 3 951 1 2 671
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 10
us 43 43 12021
ca 4 4 1268
zz 3 3 491
pt 3 3 951
ir 2 2 634
bg 2 2 128
gb 1 1 87
ru 1 1 317
de 1 1 317
be 1 1 317
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 4
no_user_agent 4 1268 20250726042214 0
checker 2 634 20250725222808 0
curl 1 317 20250724214430 0
survey 1 317 20250703031944 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 49 15533 0 0
Unknown 12 998 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
Unknown 41 41
win10 11 11
linux 7 7
macosx15 1 1
win7 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 10
firefox29.0 1 1
chrome137.0.0.0 4 4
Unknown 7 7
chrome58.0.3029.110 4 4
mozilla 32 32
chrome78.0.3904.108 6 6
netscape5.0 2 2
firefox137.0 3 3
chrome121.0.0.0 1 1
safari18.3 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 8
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20250724171939
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250716165702
Cpanel-HTTP-Client/1.0 20250724171813
python-requests/2.32.4 20250715150731
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250704020711
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250726234745
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250729235316
Mozilla/5.0_zgrab/0.x 20250726111045
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 4
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250729235316
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250704020711
python-requests/2.32.4 20250715150731
Cpanel-HTTP-Client/1.0 20250724171813
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 61 61
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
500 64 40931
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 0
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 54
82.102.18.220 3 3 951 20250707010730
184.73.122.173 3 3 951 20250725094020
37.60.246.20 2 2 128 20250724171813
206.168.34.64 2 2 634 20250716152120
54.179.105.136 2 2 174 20250724171939
206.168.34.80 1 1 317 20250705125857
104.199.66.147 1 1 317 20250715150731
3.148.254.221 1 1 87 20250724171939
35.85.223.30 1 1 87 20250724171939
167.94.138.184 1 1 317 20250716144345
162.142.125.212 1 1 317 20250702163223
167.94.138.186 1 1 317 20250716082429
199.45.155.95 1 1 317 20250702135253
3.143.226.217 1 1 87 20250724171939
199.45.154.143 1 1 317 20250716160038
167.94.138.124 1 1 317 20250709200515
167.94.138.45 1 1 317 20250709144147
137.184.73.236 1 1 317 20250703192938
35.94.51.127 1 1 87 20250724171938
170.39.218.50 1 1 317 20250710080627
199.45.155.78 1 1 317 20250716151846
46.8.225.111 1 1 317 20250722081350
198.235.24.226 1 1 317 20250701231602
206.168.34.57 1 1 317 20250716000656
205.210.31.233 1 1 317 20250704020711
162.142.125.200 1 1 317 20250702161830
51.20.188.87 1 1 87 20250724171938
167.94.145.107 1 1 317 20250709152303
162.142.125.120 1 1 317 20250716030355
206.189.186.158 1 1 317 20250728185618
104.236.192.209 1 1 317 20250722090814
162.142.125.217 1 1 317 20250715134923
87.236.176.141 1 1 317 20250726234745
23.178.112.108 1 1 87 20250724171938
199.45.155.69 1 1 317 20250716165702
172.94.96.146 1 1 317 20250719111234
23.178.112.105 1 1 87 20250724171938
3.146.99.138 1 1 317 20250715113454
167.94.138.191 1 1 317 20250716161324
162.142.125.221 1 1 317 20250715215214
194.233.88.108 1 1 317 20250725134536
143.110.190.204 1 1 317 20250726191854
159.223.145.194 1 1 317 20250708225642
31.57.219.38 1 1 317 20250718105758
31.57.219.254 1 1 317 20250715072954
167.94.145.101 1 1 317 20250712141110
34.56.58.205 1 1 317 20250720123558
198.235.24.254 1 1 317 20250729235316
13.53.199.173 1 1 87 20250724171938
159.223.22.100 1 1 317 20250731094808
167.94.138.38 1 1 317 20250702160051
18.224.192.118 1 1 317 20250726111045
198.235.24.221 1 1 317 20250726015107
138.68.96.40 1 1 317 20250717164653
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 23
20250701 1 1 317 1
20250702 4 4 1268 4
20250703 1 1 317 1
20250704 1 1 317 1
20250705 1 1 317 1
20250707 3 3 951 1
20250708 1 1 317 1
20250709 4 4 1268 4
20250710 1 1 317 1
20250712 1 1 317 1
20250715 5 5 1585 5
20250716 9 9 2853 9
20250717 1 1 317 1
20250718 1 1 317 1
20250719 1 1 317 1
20250720 1 1 317 1
20250722 2 2 634 2
20250724 12 12 998 10
20250725 4 4 1268 2
20250726 4 4 1268 4
20250728 1 1 317 1
20250729 1 1 317 1
20250731 1 1 317 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 55
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 5
/ 49 15533 45 45
/.well-known/acme-challenge/u1_QlwRZTFnLk94b1LVPAKbIg0YHhChEAvTnly0wP1E 5 435 5 4
/.well-known/acme-challenge/hb9yr1YjJzqvi309sV0iLRebwtMvogLEW4JMM_RGIBM 5 435 4 5
/.well-known/acme-challenge/680ZTW2O5QQL5KFCMW907RIUG-LJP-6A 1 64 0 1
/.well-known/acme-challenge/YTOOD1IFYAIG81Q51R_7ZCDTXN2H8B1C 1 64 1 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 4
100-500 57
44-100 12
0-44 3
500-1K 108
END_FILESIZE