MOON
Server: Apache
System: Linux host.sunshiene.com 4.18.0-553.121.1.el8_10.x86_64 #1 SMP Thu Apr 30 09:06:34 EDT 2026 x86_64
User: clientsoftwares (1005)
PHP: 8.1.34
Disabled: system, exec, mail, shell_exec, passthru, popen, proc_open, pcntl_exec, dl, ini_alter, ini_restore, symlink, link, chown, posix_kill
$ pwd: /home/clientsoftwares/tmp/awstats/
Upload Files
File: /home/clientsoftwares/tmp/awstats/awstats022023.myart.clientsoftwares.com.txt
AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202302 will be lost/reset.
# Last config file used to build this data file was /home/clientsoftwares/tmp/awstats/awstats.myart.clientsoftwares.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2029                
POS_TIME 2688                
POS_VISITOR 9171                
POS_DAY 10235               
POS_DOMAIN 3313                
POS_LOGIN 3645                
POS_ROBOT 3800                
POS_WORMS 4005                
POS_EMAILSENDER 4136                
POS_EMAILRECEIVER 4279                
POS_SESSION 10641               
POS_SIDER 10798               
POS_FILETYPES 4414                
POS_DOWNLOADS 4516                
POS_OS 4564                
POS_BROWSER 4712                
POS_SCREENSIZE 4910                
POS_UNKNOWNREFERER 4984                
POS_UNKNOWNREFERERBROWSER 5684                
POS_ORIGIN 6089                
POS_SEREFERRALS 6221                
POS_PAGEREFS 6365                
POS_SEARCHWORDS 6513                
POS_KEYWORDS 6665                
POS_MISC 2352                
POS_ERRORS 6724                
POS_CLUSTER 3501                
POS_SIDER_404 6815                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230301075830 1 0 11262324133394
FirstTime 0
LastTime 20230228090647
LastUpdate 20230301173608 1 0 0 0 0
TotalVisits 26                  
TotalUnique 25                  
MonthHostsKnown 0                   
MonthHostsUnknown 25                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
RealPlayerSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 0 0
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
DirectorSupport 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
PDFSupport 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 2 2 624048 4 4 4520
1 1 1 312024 0 0 0
2 0 0 0 12 12 13560
3 0 0 0 2 2 2260
4 1 1 312024 14 14 15820
5 0 0 0 21 21 23730
6 0 0 0 0 0 0
7 2 2 624048 2 2 2260
8 0 0 0 4 4 4520
9 1 1 312024 1 1 1130
10 1 1 312024 3 3 3390
11 2 2 624048 1 1 1130
12 8 8 5796 19 19 330104
13 5 5 15864 28 28 31640
14 2 2 624048 2 3 3390
15 2 2 624048 0 0 0
16 1 1 64 2 2 2260
17 0 0 0 2 2 2260
18 1 1 312024 0 0 0
19 8 8 936461 4 7 333368
20 0 0 0 1 1 1130
21 0 0 0 3 3 3390
22 0 0 0 2 2 2260
23 1 1 312024 8 8 319934
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 12 12 1576158
ca 9 9 2808216
es 8 8 5796
au 3 3 192
be 2 2 624048
zz 1 1 87
fr 1 1 312024
cn 1 1 312024
ro 1 1 312024
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
no_user_agent 3 639742 20230219122424 0
survey 1 312024 20230202194417 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
Unknown 6 453 0 0
html 32 5950116 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 6
win10 3 3
linux 1 1
androidnougat 13 13
macosx11 1 1
linuxubuntu 1 1
Unknown 19 19
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 8
mozilla 7 7
netscape5.0 1 1
chrome81.0.4044.129 1 1
firefox58.0 1 1
chrome60.0.3112.107 13 13
chrome84.0.4147.105 2 2
firefox47.0 1 1
Unknown 12 12
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20230205190748
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230225004322
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230227153807
Cpanel-HTTP-Client/1.0 20230205190410
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230228090647
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Cpanel-HTTP-Client/1.0 20230205190410
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230225004322
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 38 38
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 135 150290
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 70
/wp-content/xleet.php 1 www.google.com
/wp-content/plugins/TOPXOH/XleetSeller85.php 2 www.google.com
/wp-admin/xleet-shell.php 1 www.google.com
/uploads/ 1 -
/wp-admin/RxRtkdsd.php 1 -
/wp-content/plugins/ninja-forms/ 1 -
/wp-content/shell20211028.php 1 -
/wp-includes/IXR/ 1 -
/wp-content/uploads/ 3 -
/wp-includes/certificates/ 1 -
/vendor/phpunit/phpunit/src/Util/PHP/ 1 -
/wp-content/plugins/core-engine/index.php 5 -
/wp-content/themes/ 2 -
/wp-content/plugins/xt/index.php 1 www.google.com
/wp-admin/includes/xleet-shell.php 1 www.google.com
/wp-includes/images/ 1 -
/wp-content/mu-plugins-old/ 1 -
/wp-login.php 12 -
/xlt.php 1 www.google.com
/wp-includes/fonts/ 1 -
/wp-includes/ 3 -
/ALFA_DATA/ 3 -
/wp-content/plugins/content-management/content.php 1 www.google.com
/wp-includes/ID3/ 1 -
/wp-content/RxR_xabzd.php 1 -
/admin/uploads/ 1 -
/home/ 1 -
/.env 1 -
/wp-content/RxR_yypte.php 1 -
/versions.php 3 -
/xleet-shell.php 2 www.google.com
/wsoyanzorng.php 6 www.google.com
/wp-content/RxR_yscff.php 1 -
/wp-admin/RxRcefps.php 1 -
/upload/image/ 1 -
/.well-known/pki-validation/ 2 -
/robots.txt 2 -
/app-ads.txt 1 -
/wp-includes/css/ 1 -
/wp-includes/customize/ 1 -
/wp-includes/Requests/ 1 -
/ccx/index.php 3 www.google.com
/wp-includes/blocks/ 1 -
/wp-content/themes/classic/inc/ 1 -
/wp-includes/SimplePie/ 1 -
/ads.txt 1 -
/wp-includes/Text/ 1 -
/wso112233.php 1 -
/wp-content/ 2 -
/wp-content/mu-plugins/ 1 -
/wp-content/plugins/core-stab/index.php 7 -
/wp-content/plugins/TOPXOH/OH.php 2 www.google.com
/wp-content/RxR_aeywy.php 1 -
/wp-content/RxR_ejxep.php 1 -
/wp-content/themes/classic/inc/index.php 8 -
/wp-content/themes/seotheme/db.php 1 -
/xleetshell.php 1 www.google.com
/wp-admin/RxRgjdvo.php 1 -
/xleet.php 2 www.google.com
/wp-includes/wp-class.php 1 -
/wp-includes/Text/Diff/Renderer/ 1 -
/Admin/uploads/ 1 -
/wp-content/themes/ccx/index.php 2 -
/wp-admin/ 2 -
/images/ 1 -
/.well-knownold/ 1 -
/upload/ 1 -
/xt/index.php 1 www.google.com
/wp-content/plugins/ 2 -
/wp-content/plugins/ccx/index.php 12 www.google.com
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 25
62.151.179.48 8 8 5796 20230221123724
65.108.234.170 5 5 15864 20230227131002
101.53.148.175 3 3 192 20230205190410
51.255.62.7 1 1 312024 20230207042917
35.213.211.88 1 1 312024 20230224143434
198.235.24.167 1 1 312024 20230218110844
205.210.31.20 1 1 312024 20230210185828
198.235.24.36 1 1 312024 20230224190207
23.178.112.209 1 1 87 20230205190748
18.188.230.230 1 1 87 20230205190747
35.215.117.69 1 1 312024 20230204195248
87.236.176.73 1 1 312024 20230228090647
87.236.176.114 1 1 312024 20230212233228
198.235.24.47 1 1 312024 20230221152819
198.235.24.178 1 1 312024 20230225004322
198.235.24.41 1 1 312024 20230215112635
198.235.24.21 1 1 312024 20230222073837
101.68.211.2 1 1 312024 20230216071436
54.71.120.164 1 1 87 20230205190747
167.248.133.189 1 1 312024 20230227153807
198.235.24.141 1 1 312024 20230203141643
205.210.31.146 1 1 312024 20230217011514
167.94.138.47 1 1 312024 20230224104540
89.46.223.134 1 1 312024 20230227003612
161.97.117.104 1 1 312024 20230225190626
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 16
20230203 1 1 312024 1
20230204 1 1 312024 1
20230205 6 6 453 5
20230207 1 1 312024 1
20230210 1 1 312024 1
20230212 1 1 312024 1
20230215 1 1 312024 1
20230216 1 1 312024 1
20230217 1 1 312024 1
20230218 1 1 312024 1
20230221 9 9 317820 2
20230222 1 1 312024 1
20230224 3 3 936072 3
20230225 2 2 624048 2
20230227 7 7 639912 3
20230228 1 1 312024 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 25
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 9
/ 19 5928456 19 19
/.well-known/acme-challenge/ 6 3924 0 1
/.well-known/ 5 3975 2 0
/.well-known/acme-challenge/qc0DqEDgLyGcOQONUiSF9x3_73Y3wHinYzqeEEe7_Gw 3 261 3 3
/admin/ 1 13616 0 0
/.well-known/acme-challenge/KLXG54TWQSOC1T7ZQ3AUI6O21WAPWOKA 1 64 1 0
/.well-known/acme-challenge/-XK05N670ILQNH01PX18JZ-KMT_GL0TJ 1 64 0 1
/.well-known/acme-challenge/M99P8W5GTI_X8CGVX0ZJ6BM3CYBRZ0_B 1 64 1 1
/assets/ 1 145 0 1
END_SIDER
@ Telegram