OwlCyberSecurity - MANAGER

Edit File: awstats112025.testtwo.onebox.pk.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202511 will be lost/reset.
# Last config file used to build this data file was /home/oneboxpk/tmp/awstats/awstats.testtwo.onebox.pk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2048                
POS_TIME 2730                
POS_VISITOR 6711                
POS_DAY 7193                
POS_DOMAIN 3377                
POS_LOGIN 3677                
POS_ROBOT 3832                
POS_WORMS 4033                
POS_EMAILSENDER 4164                
POS_EMAILRECEIVER 4307                
POS_SESSION 7365                
POS_FILESIZE 7589                
POS_SIDER 7512                
POS_FILETYPES 4442                
POS_DOWNLOADS 4523                
POS_OS 4571                
POS_BROWSER 4696                
POS_SCREENSIZE 4938                
POS_UNKNOWNREFERER 5012                
POS_UNKNOWNREFERERBROWSER 5341                
POS_ORIGIN 5579                
POS_SEREFERRALS 5711                
POS_PAGEREFS 5855                
POS_SEARCHWORDS 6003                
POS_KEYWORDS 6155                
POS_MISC 2394                
POS_ERRORS 6214                
POS_CLUSTER 3533                
POS_SIDER_404 6333                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20251201043227 179 19976 14177536140552
FirstTime 20251101033150
LastTime 20251111212236
LastUpdate 20251201095120 179 0 178 0 0
TotalVisits 11                  
TotalUnique 11                  
MonthHostsKnown 0                   
MonthHostsUnknown 11                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 7 0
JavascriptDisabled 0 0 0
DirectorSupport 0 0 0
JavaEnabled 0 0 0
RealPlayerSupport 0 0 0
FlashSupport 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
QuickTimeSupport 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 292 292 1178932
1 3 3 951 18 18 18363
2 0 0 0 1 1 7309
3 1 1 317 189 189 1381401
4 0 0 0 238 238 722033
5 1 1 317 112 112 185251
6 0 0 0 91 91 31762
7 0 0 0 2 3 14935
8 0 0 0 217 217 1586053
9 4 4 1268 41 44 181491
10 0 0 0 85 85 56053
11 0 0 0 0 1 671
12 1 1 317 1 1 318
13 1 1 317 0 0 0
14 0 0 0 143 143 55642
15 0 0 0 341 341 159056
16 0 0 0 3 3 21927
17 1 1 317 17 18 31639
18 0 0 0 145 145 56278
19 1 1 317 198 201 1455833
20 0 0 0 415 417 2001320
21 1 1 317 3 4 22598
22 1 1 317 1 1 317
23 0 0 0 9 9 24188
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 6 6 1902
in 3 3 951
cn 1 1 317
it 1 1 317
se 1 1 317
ca 1 1 317
bg 1 1 317
gb 1 1 317
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
no_user_agent 6 15886 20251130191231 0
survey 1 317 20251104091337 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 15 4755 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
linux 3 3
ios_iphone 1 1
Unknown 2 2
win10 8 8
macosx15 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 10
safari 1 1
firefox139.0 2 2
chrome92.0.4515.107 1 1
Unknown 1 1
chrome120.0.0.0 1 1
mozilla 1 1
chrome81.0.4044.129 1 1
chrome88.0.4240.193 3 3
chrome95.0.4638.69 1 1
chrome78.0.3904.108 3 3
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 2
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251101033150
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20251106190442
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251101033150
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 15 15
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 3
403 1182 375876
404 2 630
500 1376 8769412
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 2
/index/function.php 1 -
/.well-known/pki-validation/dropdown.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 11
45.149.173.195 3 3 951 20251101092223
165.22.96.130 3 3 951 20251106013527
111.7.100.22 1 1 317 20251110222157
167.94.138.179 1 1 317 20251106190442
84.17.60.251 1 1 317 20251109170108
91.92.241.199 1 1 317 20251110122738
159.203.6.218 1 1 317 20251111212236
198.235.24.238 1 1 317 20251101033150
3.146.111.124 1 1 317 20251104133735
128.199.46.208 1 1 317 20251106092855
185.12.150.17 1 1 317 20251106054632
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 6
20251101 4 4 1268 2
20251104 1 1 317 1
20251106 6 6 1902 4
20251109 1 1 317 1
20251110 2 2 634 2
20251111 1 1 317 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 11
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 15 4755 11 11
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
500-1K 197
5K+ 1188
100-500 1204
END_FILESIZE