AWSTATS DATA FILE 8.0 (build 20240604) # If you remove this file, all statistics for date 202512 will be lost/reset. # Last config file used to build this data file was /home/crealab/tmp/awstats/awstats.carweb.brainware.com.co.conf. # Position (offset in bytes) in this file for beginning of each section for # direct I/O access. If you made changes somewhere in this file, you should # also remove completely the MAP section (AWStats will rewrite it at next # update). BEGIN_MAP 28 POS_GENERAL 2090 POS_TIME 2765 POS_VISITOR 6955 POS_DAY 8297 POS_DOMAIN 3318 POS_LOGIN 3612 POS_ROBOT 3767 POS_WORMS 3932 POS_EMAILSENDER 4063 POS_EMAILRECEIVER 4206 POS_SESSION 8562 POS_FILESIZE 8965 POS_REQUESTTIME 9084 POS_SIDER 8709 POS_FILETYPES 4341 POS_DOWNLOADS 4472 POS_OS 4520 POS_BROWSER 4652 POS_SCREENSIZE 4884 POS_UNKNOWNREFERER 4958 POS_UNKNOWNREFERERBROWSER 5448 POS_ORIGIN 5847 POS_SEREFERRALS 5979 POS_PAGEREFS 6123 POS_SEARCHWORDS 6271 POS_KEYWORDS 6423 POS_MISC 2429 POS_ERRORS 6482 POS_CLUSTER 3468 POS_SIDER_404 6602 END_MAP # LastLine = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value # FirstTime = Date of first visit for history file # LastTime = Date of last visit for history file # LastUpdate = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped # TotalVisits = Number of visits # TotalUnique = Number of unique visitors # MonthHostsKnown = Number of hosts known # MonthHostsUnKnown = Number of hosts unknown BEGIN_GENERAL 8 LastLine 20251210231443 8 1369 14234482236631 FirstTime 20251201002408 LastTime 20251210231443 LastUpdate 20251211165323 8 0 8 0 0 TotalVisits 40 TotalUnique 31 MonthHostsKnown 0 MonthHostsUnknown 31 END_GENERAL # Misc ID - Pages - Hits - Bandwidth BEGIN_MISC 10 RealPlayerSupport 0 0 0 AddToFavourites 0 1 0 JavascriptDisabled 0 0 0 DirectorSupport 0 0 0 JavaEnabled 0 0 0 WindowsMediaPlayerSupport 0 0 0 FlashSupport 0 0 0 QuickTimeSupport 0 0 0 PDFSupport 0 0 0 TotalMisc 0 0 0 END_MISC # Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth BEGIN_TIME 24 0 5 5 8233 4 4 359478 1 0 0 0 0 0 0 2 0 0 0 0 0 0 3 0 0 0 0 0 0 4 0 0 0 0 0 0 5 2 2 115791 0 0 0 6 1 1 37512 0 0 0 7 2 2 37501 0 0 0 8 0 0 0 0 0 0 9 1 1 0 1 1 0 10 2 2 0 0 0 0 11 0 0 0 2 2 2013 12 1 1 7640 1 1 771 13 3 3 70600 1 1 0 14 2 2 37514 0 0 0 15 3 3 8448 2 3 1542 16 0 0 0 1 1 1242 17 0 0 0 0 0 0 18 0 0 0 0 0 0 19 3 3 37503 2 2 1242 20 0 0 0 0 0 0 21 2 2 2089 1 1 131394 22 5 5 141803 3 3 771 23 10 10 22861 6 6 771 END_TIME # Domain - Pages - Hits - Bandwidth # The 25 first Pages must be first (order not required for others) BEGIN_DOMAIN 6 id 19 19 43592 us 15 15 232351 ca 3 3 168895 my 3 3 7640 de 1 1 37514 in 1 1 37503 END_DOMAIN # Cluster ID - Pages - Hits - Bandwidth BEGIN_CLUSTER 0 END_CLUSTER # Login - Pages - Hits - Bandwidth - Last visit # The 10 first Pages must be first (order not required for others) BEGIN_LOGIN 0 END_LOGIN # Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt # The 25 first Hits must be first (order not required for others) BEGIN_ROBOT 1 survey 1 131394 20251205213904 0 END_ROBOT # Worm ID - Hits - Bandwidth - Last visit # The 5 first Hits must be first (order not required for others) BEGIN_WORMS 0 END_WORMS # EMail - Hits - Bandwidth - Last visit # The 20 first Hits must be first (order not required for others) BEGIN_EMAILSENDER 0 END_EMAILSENDER # EMail - Hits - Bandwidth - Last visit # The 20 first hits must be first (order not required for others) BEGIN_EMAILRECEIVER 0 END_EMAILRECEIVER # Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression BEGIN_FILETYPES 4 html 8 467815 0 0 cgi 5 24536 0 0 php 28 35144 0 0 Unknown 1 0 0 0 END_FILETYPES # Downloads - Hits - Bandwidth BEGIN_DOWNLOADS 0 END_DOWNLOADS # OS ID - Hits BEGIN_OS ID - Hits - Pages 6 linux 1 1 Unknown 16 16 win8 1 1 macosx15 1 1 unix 1 1 win10 22 22 END_OS # Browser ID - Hits - Pages BEGIN_BROWSER 9 chrome126.0.0.0 1 1 chrome28.0.1467.0 1 1 chrome27.0.1453.116 1 1 chrome136.0.7103.25 10 10 chrome120.0.0.0 3 3 chrome139.0.0.0 1 1 Unknown 14 14 mozilla 2 2 chrome141.0.7390.37 9 9 END_BROWSER # Screen size - Hits BEGIN_SCREENSIZE 0 END_SCREENSIZE # Unknown referer OS - Last visit date BEGIN_UNKNOWNREFERER 5 python-httpx/0.28.1 20251208140351 Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251204225007 WordPress/6.9;_https://carweb.brainware.com.co 20251208140354 Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20251210153723 WordPress/6.8.3;_https://carweb.brainware.com.co 20251202152308 END_UNKNOWNREFERER # Unknown referer Browser - Last visit date BEGIN_UNKNOWNREFERERBROWSER 4 python-httpx/0.28.1 20251208140351 Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20251204225007 WordPress/6.9;_https://carweb.brainware.com.co 20251208140354 WordPress/6.8.3;_https://carweb.brainware.com.co 20251202152308 END_UNKNOWNREFERERBROWSER # Origin - Pages - Hits BEGIN_ORIGIN 6 From0 41 41 From1 0 0 From2 0 0 From3 0 0 From4 1 1 From5 0 0 END_ORIGIN # Search engine referers ID - Pages - Hits BEGIN_SEREFERRALS 0 END_SEREFERRALS # External page referers - Pages - Hits # The 25 first Pages must be first (order not required for others) BEGIN_PAGEREFS 0 END_PAGEREFS # Search keyphrases - Number of search # The 10 first number of search must be first (order not required for others) BEGIN_SEARCHWORDS 0 END_SEARCHWORDS # Search keywords - Number of search # The 25 first number of search must be first (order not required for others) BEGIN_KEYWORDS 0 END_KEYWORDS # Errors - Hits - Bandwidth BEGIN_ERRORS 4 302 14 3855 403 3 3726 301 3 0 404 3 359478 END_ERRORS # URL with 404 errors - Hits - Last URL referrer BEGIN_SIDER_404 3 /webshell.php 1 - /shell 1 - /shell.php 1 - END_SIDER_404 # Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit] # [Start date of last visit] and [Last page of last visit] are saved only if session is not finished # The 25 first Hits must be first (order not required for others) BEGIN_VISITOR 31 170.10.164.108 9 9 0 20251208140354 101.99.88.90 3 3 7640 20251210122230 199.45.155.103 2 2 8448 20251210153723 198.235.24.195 1 1 131394 20251204225007 147.185.132.18 1 1 115791 20251202052000 103.28.116.61 1 1 2089 20251205234217 103.255.156.123 1 1 2048 20251204230358 3.138.185.30 1 1 37512 20251207063746 103.255.156.20 1 1 2048 20251207231553 114.79.6.245 1 1 2089 20251202230941 114.79.1.214 1 1 2089 20251209233107 103.255.156.13 1 1 2048 20251203002244 114.79.4.162 1 1 2048 20251201002408 103.28.116.21 1 1 4224 20251210224255 20251210224255 /cgi-sys/suspendedpage.cgi 114.10.79.95 1 1 2089 20251201235010 114.79.2.169 1 1 2089 20251201215711 34.58.22.107 1 1 35297 20251201133937 198.235.24.145 1 1 0 20251203003330 114.10.79.58 1 1 2089 20251208003331 114.79.7.107 1 1 4224 20251210231443 20251210231443 /cgi-sys/suspendedpage.cgi 103.255.156.103 1 1 2089 20251209224334 103.255.156.66 1 1 2048 20251203225857 114.10.77.25 1 1 2048 20251206001038 45.148.10.42 1 1 37503 20251204191929 114.79.6.254 1 1 2048 20251208224959 114.10.78.21 1 1 2048 20251204230314 114.10.77.22 1 1 2089 20251203234210 134.199.226.189 1 1 37501 20251204074828 136.115.252.147 1 1 35303 20251201133919 194.180.49.175 1 1 37514 20251208140351 103.255.156.65 1 1 2048 20251208233123 END_VISITOR # Date - Pages - Hits - Bandwidth - Visits BEGIN_DAY 10 20251201 6 6 76826 6 20251202 5 5 117880 5 20251203 4 4 6185 4 20251204 7 7 210494 7 20251205 2 2 2089 2 20251206 2 2 2048 2 20251207 2 2 39560 2 20251208 5 5 43699 5 20251209 2 2 4178 2 20251210 7 7 24536 5 END_DAY # Session range - Number of visits BEGIN_SESSION 1 0s-30s 38 END_SESSION # URL - Pages - Bandwidth - Entry - Exit # The 25 first Pages must be first (order not required for others) BEGIN_SIDER 7 /lrwit7bvakghhggw6jCakc.php 9 18637 9 9 /wp-cron.php 9 0 9 9 / 8 467815 8 8 /zz12.php 8 16507 8 8 /cgi-sys/suspendedpage.cgi 5 24536 4 2 /efy52pxl2qfywt4w3qyes4Cakc.php 2 0 1 1 /webshell 1 0 1 1 END_SIDER # Payload Range - Payload Frequency BEGIN_FILESIZE 5 500-1K 6 0-44 24 2K-5K 12 5K+ 13 1K-2K 12 END_FILESIZE # Request Time Range - Request Time Frequency BEGIN_REQUESTTIME 0 END_REQUESTTIME