MOON
Server: Apache
System: Linux host.sunshiene.com 4.18.0-553.121.1.el8_10.x86_64 #1 SMP Thu Apr 30 09:06:34 EDT 2026 x86_64
User: clientsoftwares (1005)
PHP: 8.1.34
Disabled: system, exec, mail, shell_exec, passthru, popen, proc_open, pcntl_exec, dl, ini_alter, ini_restore, symlink, link, chown, posix_kill
Upload Files
File: /home/clientsoftwares/tmp/awstats/awstats022023.courier.clientsoftwares.com.txt
AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202302 will be lost/reset.
# Last config file used to build this data file was /home/clientsoftwares/tmp/awstats/awstats.courier.clientsoftwares.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2031                
POS_TIME 2703                
POS_VISITOR 11039               
POS_DAY 12395               
POS_DOMAIN 3254                
POS_LOGIN 3571                
POS_ROBOT 3726                
POS_WORMS 3967                
POS_EMAILSENDER 4098                
POS_EMAILRECEIVER 4241                
POS_SESSION 12792               
POS_SIDER 12959               
POS_FILETYPES 4376                
POS_DOWNLOADS 4476                
POS_OS 4524                
POS_BROWSER 4707                
POS_SCREENSIZE 4981                
POS_UNKNOWNREFERER 5055                
POS_UNKNOWNREFERERBROWSER 5755                
POS_ORIGIN 6160                
POS_SEREFERRALS 6292                
POS_PAGEREFS 6453                
POS_SEARCHWORDS 6601                
POS_KEYWORDS 6753                
POS_MISC 2367                
POS_ERRORS 6812                
POS_CLUSTER 3427                
POS_SIDER_404 6898                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230301040451 1 0 10477334053128
FirstTime 20230201134216
LastTime 20230227062116
LastUpdate 20230301173549 1 0 0 0 0
TotalVisits 52                  
TotalUnique 34                  
MonthHostsKnown 0                   
MonthHostsUnknown 34                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
QuickTimeSupport 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
FlashSupport 0 0 0
AddToFavourites 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
RealPlayerSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 977 28 29 0
1 0 0 0 14 14 0
2 2 2 1954 0 2 0
3 0 0 0 2 2 0
4 1 1 977 19 19 0
5 0 0 0 10 10 0
6 3 3 2103 56 56 0
7 1 1 977 1 1 0
8 0 0 0 3 3 0
9 9 9 6773 37 38 977
10 6 6 5862 1 5 0
11 1 1 977 0 0 0
12 0 0 0 0 0 0
13 8 8 6839 5 11 977
14 0 0 0 0 0 0
15 5 5 4885 5 7 0
16 11 11 7814 20 22 0
17 2 2 1954 0 2 0
18 2 2 1954 2 2 0
19 15 15 10159 20 29 1954
20 1 1 0 6 6 0
21 0 0 0 0 0 0
22 2 2 1954 6 8 977
23 1 1 977 1 2 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 39 39 35495
de 9 9 5796
es 8 8 5796
ca 6 6 5862
au 4 4 192
be 2 2 1954
fr 1 1 977
zz 1 1 87
ro 1 1 977
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
no_user_agent 3 2931 20230226135700 0
survey 1 977 20230202224327 0
Go\-http\-client/ 1 977 20230205190837 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 65 56683 0 0
Unknown 6 453 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
androidnougat 19 19
macosx15 30 30
win10 3 3
win8.1 1 1
Unknown 15 15
androidmarshmallow 1 1
win8 1 1
linuxubuntu 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 11
firefox58.0 1 1
mozilla 6 6
chrome52.0.1698.98 1 1
Unknown 9 9
chrome60.0.3112.107 19 19
chrome41.0.2226.0 1 1
chrome27.0.1500.55 1 1
chrome84.0.4147.105 1 1
chrome76.0.3809.71 1 1
netscape5.0 1 1
chrome96.0.4664.110 30 30
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230225133742
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230206194629
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20230205190726
Cpanel-HTTP-Client/1.0 20230205190411
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230225112843
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20230205190411
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230225112843
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 69 69
From1 0 0
From2 2 2
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_bing_com 2 2
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 232 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 125
/wp-includes/Requests/ 1 -
/wp-admin/menu-cron.php 1 www.google.com
/ALFA_DATA/ 5 -
/include/ 1 -
/wp-admin/xleet-shell.php 1 www.google.com
/upload/image/ 2 -
/wso112233.php 3 www.google.com
/wp-content/plugins/seoplugins/db.php 1 www.google.com
/admin/controller/extension/extension/ 1 -
/wp-content/ 5 -
/radio.php 1 www.google.com
/wp-content/plugins/ninja-forms/ 1 -
/in.php 1 www.google.com
/wp-includes/customize/ 1 -
/wp-admin/includes/ 1 -
/wp-includes/pomo/ 1 -
/wp-content/themes/seotheme/db.php 4 www.google.com
/wp-content/shell20211028.php 1 -
/assets/ 3 -
/wp-includes/fonts/ 1 -
/wp-content/plugins/ 5 -
/wp-admin/css/ 1 -
/wp-content/plugins/TOPXOH/OH.php 2 www.google.com
/Admin/uploads/ 3 -
/blog/wp-login.php 2 http://courier.clientsoftwares.com
/wp-admin/about-core.php 1 www.google.com
/wp-content/plugins/content-management/content.php 2 www.google.com
/debug/default/view 1 -
/wp-content/plugins/core-stab/index.php 5 -
/wp-content/RxR_givrj.php 1 -
/wp-content/mu-plugins/ 1 -
/wp-admin/field.php 1 www.google.com
/v2/_catalog 1 -
/wp-content/plugins/sid/xleet.php 1 www.google.com
/upload/ 3 -
/wp-content/plugins/linkpreview/db.php 2 www.google.com
/modules/mod_simplefileuploadv1.3/elements/ 1 -
/xleet-shell.php 3 www.google.com
/wp-content/plugins/rafda/xleet.php 1 www.google.com
/info.php 1 -
/wp-includes/widgets/ 1 -
/wp-content/upgrade/ 1 -
/wp-admin/meta/ 1 -
/s/537313e2834313e23353e2130313/_/ 1 -
/.git/config 1 -
/wp-login.php 12 http://courier.clientsoftwares.com
/uploads/ 3 -
/wp-includes/css/update.php 1 www.google.com
/bala.php 3 www.google.com
/vendor/phpunit/phpunit/src/Util/PHP/ 3 -
/wp-content/themes/classic/inc/index.php 5 -
/wp-admin/images/ 1 -
/R00T.php 1 www.google.com
/wp-admin/RxRgfybw.php 1 -
/wp-includes/Text/ 1 -
/wp-includes/rest-api/ 1 -
/wp-content/RxR_fudyk.php 1 -
/hehe.php 1 www.google.com
/wsoyanzorng.php 6 www.google.com
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 1 -
/wp-content/plugins/wordpresss3cll/up.php 3 www.google.com
/wp-includes/blocks/ 1 -
/wordpress/wp-login.php 2 http://courier.clientsoftwares.com
/wp-content/RxR_yonop.php 1 -
/ccx/index.php 1 www.google.com
/wp-content/plugins/ccx/index.php 9 www.google.com
/wp-includes/js/themes.php 1 www.google.com
/xleet.php 3 www.google.com
/about 1 -
/wp-admin/includes/xleet-shell.php 1 www.google.com
/wp-includes/IXR/ 1 -
/wp-content/plugins/anttt/simple.php 1 www.google.com
/wp-includes/wp-class.php 3 www.google.com
/wp-admin/maint/ 1 -
/wp-includes/ID3/ 1 -
/wp-admin/user/ 1 -
/wp-admin/ 5 -
/wp-includes/js/ 1 -
/components/ 1 -
/wp-content/plugins/xt/index.php 1 www.google.com
/.DS_Store 1 -
/wp-content/RxR_zjzho.php 1 -
/wp-content/uploads/ 5 -
/versions.php 1 -
/wp-content/themes/ 5 -
/files/ 1 -
/config.json 1 -
/xleetshell.php 1 www.google.com
/wp-admin/network/ 1 -
/wp-content/RxR_rdwou.php 1 -
/xt/index.php 1 www.google.com
/wp-includes/SimplePie/ 1 -
/wp-includes/certificates/ 1 -
/admin/editor/ 1 -
/robots.txt 1 -
/h.php 1 www.google.com
/wp-content/mu-plugins-old/ 1 -
/.well-knownold/ 1 -
/.well-known/pki-validation/ 4 -
/wp-content/themes/classic/inc/ 1 -
/wp-admin/images/class.api.php 1 www.google.com
/server-status 1 -
/admin/images/slider/ 1 -
/admin/uploads/ 3 -
/wp-content/plugins/TOPXOH/XleetSeller85.php 2 www.google.com
/xlt.php 1 www.google.com
/telescope/requests 1 -
/home/ 1 -
/wp-content/plugins/core-engine/index.php 5 -
/admin/uploads/images/ 1 -
/sites/default/files/ 1 -
/wp-includes/css/ 1 -
/wp-frame.php 1 www.google.com
/wp-includes/Text/Diff/Renderer/ 1 -
/wp-content/xleet.php 2 www.google.com
/wp-includes/ 5 -
/.vscode/sftp.json 1 -
/images/ 3 -
/wp/wp-login.php 2 http://courier.clientsoftwares.com
/.env 1 -
/login.action 1 -
/abc.php 1 www.google.com
/api/search 1 -
/admin/ 3 -
/wp-includes/images/ 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 34
85.215.104.172 8 8 5796 20230204092145
62.151.179.48 8 8 5796 20230221164538
209.141.36.112 5 5 4885 20230206105735
209.141.51.222 4 4 3908 20230219000028
65.108.234.170 3 3 2103 20230227062116
205.185.121.69 3 3 2931 20230215153417
101.53.148.175 3 3 192 20230205190411
205.185.122.184 3 3 2931 20230225191646
209.141.49.169 3 3 2931 20230215153420
209.141.36.231 3 3 2931 20230205175014
209.141.33.65 3 3 2931 20230205131542
209.141.34.187 2 2 1954 20230206105503
205.185.116.89 2 2 1954 20230203102806
35.217.40.76 1 1 977 20230223092019
34.216.145.89 1 1 87 20230205190724
198.235.24.184 1 1 977 20230221103236
91.41.194.45 1 1 0 20230225200849
205.210.31.154 1 1 977 20230215102739
51.255.62.2 1 1 977 20230207042917
65.154.226.166 1 1 977 20230226183803
198.235.24.130 1 1 977 20230225112843
159.223.106.55 1 1 977 20230205190837
167.94.138.120 1 1 977 20230206194629
23.178.112.203 1 1 87 20230205190726
139.59.31.218 1 1 0 20230201134216
87.236.176.159 1 1 977 20230225133742
205.210.31.35 1 1 977 20230218151706
209.141.35.128 1 1 977 20230209020417
89.46.223.134 1 1 977 20230226184443
87.236.176.27 1 1 977 20230217155010
18.188.230.230 1 1 87 20230205190724
205.210.31.10 1 1 977 20230218155228
209.141.55.120 1 1 977 20230225191646
198.235.24.183 1 1 977 20230215074357
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 17
20230201 3 3 1954 3
20230203 4 4 3908 4
20230204 8 8 5796 1
20230205 19 19 13154 16
20230206 3 3 2931 3
20230207 1 1 977 1
20230209 2 2 1954 2
20230213 2 2 1954 2
20230215 4 4 3908 4
20230217 1 1 977 1
20230218 3 3 2931 3
20230219 1 1 977 1
20230221 9 9 6773 2
20230223 1 1 977 1
20230225 5 5 3908 5
20230226 2 2 1954 2
20230227 3 3 2103 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
2mn-5mn 1
0s-30s 50
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 7
/ 46 42988 44 44
/.well-known/acme-challenge/ 10 6540 0 3
/.well-known/ 9 7155 3 0
/.well-known/acme-challenge/8aPADX3vkK5gPgjPdo5A2XOBD3bKQTCBJNa4K1VCsH8 3 261 3 3
/.well-known/acme-challenge/JE4_P73AMTKNMIXBX8JJ0FV5DMVS6JH- 1 64 1 1
/.well-known/acme-challenge/HUA27KLUW1DG558XRNABR1234QP67RLS 1 64 1 0
/.well-known/acme-challenge/RB8TX8W61HHEUDZL83WFVVUTOQ77KFKV 1 64 0 1
END_SIDER