OwlCyberSecurity - MANAGER

Edit File: awstats042025.welcomeindiatravel.com.juragankeripik.online.txt

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202504 will be lost/reset.
# Last config file used to build this data file was /home/juralptl/tmp/awstats/ssl/awstats.welcomeindiatravel.com.juragankeripik.online.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2079                
POS_TIME 2746                
POS_VISITOR 8036                
POS_DAY 8680                
POS_DOMAIN 3408                
POS_LOGIN 3713                
POS_ROBOT 3868                
POS_WORMS 4180                
POS_EMAILSENDER 4311                
POS_EMAILRECEIVER 4454                
POS_SESSION 9012                
POS_FILESIZE 9332                
POS_SIDER 9159                
POS_FILETYPES 4589                
POS_DOWNLOADS 4718                
POS_OS 4801                
POS_BROWSER 4996                
POS_SCREENSIZE 5283                
POS_UNKNOWNREFERER 5357                
POS_UNKNOWNREFERERBROWSER 5924                
POS_ORIGIN 6291                
POS_SEREFERRALS 6423                
POS_PAGEREFS 6567                
POS_SEARCHWORDS 6715                
POS_KEYWORDS 6867                
POS_MISC 2409                
POS_ERRORS 6926                
POS_CLUSTER 3569                
POS_SIDER_404 7056                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250427124338 96 17279 12771673319289
FirstTime 0
LastTime 20250427020448
LastUpdate 20250427135137 96 0 96 0 0
TotalVisits 17                  
TotalUnique 15                  
MonthHostsKnown 0                   
MonthHostsUnknown 15                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavaEnabled 0 0 0
TotalMisc 0 0 0
QuickTimeSupport 0 0 0
JavascriptDisabled 0 0 0
AddToFavourites 0 13 0
RealPlayerSupport 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 5 6 7607 90 129 109832
1 0 0 0 65 92 72345
2 2 2 1420 45 72 57465
3 0 0 0 46 65 49746
4 1 1 1516 56 89 70293
5 0 0 0 100 128 102250
6 0 0 0 98 136 108666
7 0 1 726 58 84 65460
8 0 0 0 57 86 68478
9 0 0 0 45 72 58590
10 0 0 0 70 111 82431
11 1 1 710 56 83 70089
12 0 0 0 44 79 62913
13 1 1 710 58 88 76942
14 0 0 0 67 106 84504
15 2 2 1420 60 93 81339
16 0 0 0 54 89 70451
17 3 3 3468 80 110 88587
18 1 1 726 46 76 60434
19 6 6 4363 51 78 61788
20 1 2 1538 58 98 76320
21 1 1 813 46 73 57029
22 0 0 0 72 97 77313
23 0 0 0 52 76 60519
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
in 9 12 8584
us 5 5 4630
ru 4 4 6068
ca 2 2 2089
bg 1 1 710
zz 1 1 710
nl 1 1 1516
gb 1 1 710
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 5
no_user_agent 4 5927 20250420040153 1
scrapy 1 710 20250423180723 0
survey 1 1379 20250407074043 0
Firefox/1\.5 1 1517 20250404000906 0
bot[\s_+:,\.\;\/\\-] 1 722 20250408162048 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 4
png 1 726 0 0
html 20 16771 0 0
js 2 1452 0 0
Unknown 4 6068 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 1
/.well-known/security.txt 1 0 1516
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
Unknown 9 9
win8.1 1 1
winunknown 1 1
macosx15 7 4
macosx 1 1
androidjellybean 1 1
linuxubuntu 1 1
winxp 1 1
win10 1 1
linux 4 4
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 14
firefox71.0 1 1
chrome81.0.4044.129 2 2
opera8.52 1 1
chrome98.0.4758.102 1 1
firefox128.0 2 2
mozilla 7 7
firefox49.0 1 1
safari17.6 1 1
chrome74.0.3729.169 1 1
chrome120.0.0.0 4 1
safari17.4 1 1
safari17.5 2 2
android 1 1
Unknown 2 2
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250407172751
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250426202124
Mozilla/5.0_(Mobile;_rv:49.0)_Gecko/49.0_Firefox/49.0 20250404000902
Mozilla/5.0_(compatible) 20250427020448
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers&#39;_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20250407172751
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 24 27
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
301 2064 1613850
508 3 2487
404 65 81315
403 46 57132
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 35
/application/.env 2 -
/.env.save 2 -
/js/app.js 2 -
/assets/env.js 2 -
/RDWeb/ 1 -
/config.json 2 -
/phpinfo 2 -
/ads.txt 2 -
/env.js 2 -
/php_info.php 2 -
/logon/LogonPoint/custom.html 1 -
/global-protect/login.esp 2 -
/js/config.js 2 -
/auth.html 1 -
/+CSCOE+/logon.html 5 -
/cgi-bin/welcome 1 -
/sslvpn_logon.shtml 1 -
/sslvpnLogin.html 1 -
/.DS_Store 1 -
/.env 2 -
/logon/LogonPoint/index.html 1 -
/dana-na/auth/url_default/welcome.cgi 1 -
/sonicui/7/login/ 2 -
/login 2 -
/phpinfo.php 2 -
/api/config.js 2 -
/vpn/index.html 1 -
/api/.env 2 -
/cgi-bin/login 2 -
/dev/.env 2 -
/.env.prod 2 -
/RDWeb/Pages/ 1 -
/robots.txt 5 -
/_profiler/phpinfo 2 -
/remote/login 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 15
45.142.193.196 5 5 3550 20250415193927
78.153.140.222 4 4 6068 20250404000907
45.142.193.251 3 3 2130 20250406150251
198.235.24.123 1 1 1379 20250403171452
170.39.218.53 1 1 710 20250411130652
45.148.10.235 1 4 2904 20250412180456
199.45.155.70 1 1 813 20250420211959
206.168.34.58 1 1 813 20250423191534
147.185.132.51 1 1 1379 20250407172751
93.123.109.81 1 1 710 20250423150842
94.102.49.193 1 1 1516 20250420040121
134.199.232.36 1 1 710 20250427020448
162.142.125.196 1 1 812 20250426202124
199.45.154.148 1 1 813 20250406001559
128.199.30.84 1 1 710 20250413020835
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 14
20250403 2 2 2089 2
20250404 4 4 6068 1
20250405 1 1 710 1
20250406 2 2 1523 2
20250407 1 1 1379 1
20250411 1 2 1436 1
20250412 1 2 1452 1
20250413 1 1 710 1
20250415 5 5 3550 1
20250420 2 2 2329 2
20250421 0 1 726 0
20250423 2 2 1523 2
20250426 1 1 812 1
20250427 1 1 710 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 17
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 4
/ 20 16771 16 16
/.aws/credentials 2 3034 1 0
/app_dev.php/_profiler/phpinfo 1 1517 0 0
/credentials 1 1517 0 1
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 3
1K-2K 135
0-44 36
500-1K 2066
END_FILESIZE