MOON
Server: Apache
System: Linux host.sunshiene.com 4.18.0-553.121.1.el8_10.x86_64 #1 SMP Thu Apr 30 09:06:34 EDT 2026 x86_64
User: clientsoftwares (1005)
PHP: 8.1.34
Disabled: system, exec, mail, shell_exec, passthru, popen, proc_open, pcntl_exec, dl, ini_alter, ini_restore, symlink, link, chown, posix_kill
$ pwd: /home/clientsoftwares/tmp/awstats/
Upload Files
File: /home/clientsoftwares/tmp/awstats/awstats022023.vms.clientsoftwares.com.txt
AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202302 will be lost/reset.
# Last config file used to build this data file was /home/clientsoftwares/tmp/awstats/awstats.vms.clientsoftwares.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2027                
POS_TIME 2701                
POS_VISITOR 9215                
POS_DAY 10232               
POS_DOMAIN 3241                
POS_LOGIN 3561                
POS_ROBOT 3716                
POS_WORMS 3958                
POS_EMAILSENDER 4089                
POS_EMAILRECEIVER 4232                
POS_SESSION 10529               
POS_SIDER 10676               
POS_FILETYPES 4367                
POS_DOWNLOADS 4467                
POS_OS 4515                
POS_BROWSER 4660                
POS_SCREENSIZE 4842                
POS_UNKNOWNREFERER 4916                
POS_UNKNOWNREFERERBROWSER 5616                
POS_ORIGIN 6021                
POS_SEREFERRALS 6153                
POS_PAGEREFS 6297                
POS_SEARCHWORDS 6445                
POS_KEYWORDS 6597                
POS_MISC 2365                
POS_ERRORS 6656                
POS_CLUSTER 3417                
POS_SIDER_404 6742                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230301075956 2 349 11303247123328
FirstTime 20230201002843
LastTime 20230228191334
LastUpdate 20230301173613 2 0 1 0 0
TotalVisits 26                  
TotalUnique 25                  
MonthHostsKnown 0                   
MonthHostsUnknown 25                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
RealPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
FlashSupport 0 0 0
DirectorSupport 0 0 0
TotalMisc 0 0 0
WindowsMediaPlayerSupport 0 0 0
AddToFavourites 0 0 0
QuickTimeSupport 0 0 0
PDFSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 623 1 1 0
1 1 1 623 2 2 623
2 0 0 0 11 11 0
3 0 0 0 1 1 0
4 0 0 0 2 2 0
5 0 0 0 21 21 0
6 0 0 0 3 3 0
7 1 1 623 4 4 623
8 1 1 623 1 1 0
9 0 0 0 0 0 0
10 0 0 0 1 1 623
11 12 12 9144 65 65 0
12 2 2 1246 3 3 623
13 1 1 623 3 3 0
14 0 0 0 5 5 623
15 1 1 623 3 3 1246
16 13 13 3765 34 34 2492
17 0 0 0 0 0 0
18 1 1 623 0 0 0
19 1 1 623 0 0 0
20 3 3 1869 0 0 0
21 12 12 9144 15 15 0
22 0 0 0 4 4 0
23 0 0 0 1 1 0
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
es 12 12 9144
de 12 12 9144
us 11 11 4709
ca 8 8 4984
zz 2 2 174
au 2 2 128
be 1 1 623
cn 1 1 623
ro 1 1 623
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
no_user_agent 6 3738 20230225103252 0
Go\-http\-client/ 4 2492 20230218150132 0
survey 1 623 20230203013301 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 2
html 42 29502 0 0
Unknown 8 650 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
macosx11 1 1
win10 2 2
androidnougat 24 24
androidmarshmallow 2 2
Unknown 21 21
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 7
chrome60.0.3112.107 24 24
netscape5.0 1 1
Unknown 10 10
mozilla 11 11
chrome52.0.1698.98 2 2
firefox47.0 1 1
chrome76.0.3809.71 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230225120501
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230228191334
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230221072410
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20230205160727
Cpanel-HTTP-Client/1.0 20230205160507
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230228191334
Cpanel-HTTP-Client/1.0 20230205160507
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 50 50
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 169 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 78
/wso112233.php 2 www.google.com
/wp-content/RxR_ufukp.php 1 -
/wp-admin/includes/xleet-shell.php 1 www.google.com
/admin/ 2 -
/admin/editor/ 2 -
/admin/uploads/ 2 -
/.env 2 -
/wp-content/xleet.php 1 www.google.com
/wp-includes/css/ 1 -
/telescope/requests 2 -
/xleet.php 2 www.google.com
/admin/controller/extension/extension/ 2 -
/wp-content/RxR_xffws.php 1 -
/modules/ 2 -
/.DS_Store 2 -
/api/search 2 -
/versions.php 1 -
/info.php 2 -
/xleetshell.php 1 www.google.com
/assets/ 2 -
/admin/uploads/images/ 2 -
/include/ 2 -
/vendor/phpunit/phpunit/src/Util/PHP/ 2 -
/wp-content/themes/classic/inc/index.php 2 -
/sites/default/files/ 2 -
/wp-content/plugins/ 4 -
/components/ 2 -
/wp-content/RxR_rnrxj.php 1 -
/wp-content/themes/ 4 -
/xlt.php 1 www.google.com
/wp-content/RxR_bvogh.php 1 -
/wp-admin/ 4 -
/wp-content/ 4 -
/site/wp-includes/ 2 -
/wp-content/plugins/TOPXOH/XleetSeller85.php 1 www.google.com
/wp-content/RxR_lkahl.php 1 -
/xleet-shell.php 2 www.google.com
/wp-content/plugins/xt/index.php 1 www.google.com
/wp-content/plugins/core-engine/index.php 3 -
/wp-content/plugins/TOPXOH/OH.php 1 www.google.com
/about 2 -
/.git/config 2 -
/images/ 2 -
/wp-includes/ 5 -
/upload/ 2 -
/files/ 2 -
/config.json 2 -
/ALFA_DATA/ 4 -
/Admin/uploads/ 2 -
/wp-content/shell20211028.php 1 -
/login.action 2 -
/wp-content/themes/seotheme/db.php 1 -
/wp-content/plugins/content-management/content.php 1 www.google.com
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 2 -
/wp-content/plugins/core-stab/index.php 3 -
/wp-content/uploads/ 5 -
/wordpress/wp-includes/ 2 -
/ccx/index.php 1 www.google.com
/wp-admin/RxRhfemt.php 1 -
/wp-admin/xleet-shell.php 1 www.google.com
/css/ 2 -
/modules/mod_simplefileuploadv1.3/elements/ 2 -
/cgi-bin/ 3 -
/xt/index.php 1 www.google.com
/v2/_catalog 2 -
/upload/image/ 2 -
/wp-login.php 14 -
/wsoyanzorng.php 3 www.google.com
/uploads/ 2 -
/admin/images/slider/ 2 -
/bala.php 1 www.google.com
/wp-content/plugins/ccx/index.php 5 www.google.com
/.vscode/sftp.json 2 -
/wp-includes/wp-class.php 2 www.google.com
/server-status 2 -
/s/537313e2834313e23353e2130313/_/ 2 -
/home/ 2 -
/debug/default/view 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 25
85.215.104.172 12 12 9144 20230204110053
62.151.179.48 12 12 9144 20230221214220
101.53.148.175 2 2 128 20230205160507
34.216.145.89 2 2 174 20230205160726
162.142.125.222 2 2 1246 20230211203456
87.236.176.68 1 1 623 20230221072410
205.210.31.155 1 1 623 20230217014756
18.188.230.230 1 1 87 20230205160726
23.178.112.202 1 1 87 20230205160727
162.243.172.62 1 1 623 20230205160852
3.145.59.233 1 1 87 20230205160726
198.235.24.51 1 1 623 20230221182134
101.68.211.2 1 1 623 20230204204834
23.178.112.209 1 1 87 20230205160726
167.248.133.43 1 1 623 20230225081600
198.235.24.17 1 1 623 20230204132240
198.235.24.178 1 1 623 20230228191334
198.235.24.143 1 1 623 20230201002843
198.235.24.53 1 1 623 20230218120843
65.154.226.169 1 1 623 20230226155234
205.210.31.128 1 1 623 20230225160306
104.236.193.132 1 1 623 20230205160852
89.46.223.134 1 1 623 20230225162345
205.210.31.33 1 1 623 20230222164359
167.248.133.120 1 1 623 20230225120501
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 12
20230201 1 1 623 1
20230202 1 1 623 1
20230204 14 14 10390 3
20230205 10 10 1896 8
20230211 1 1 623 1
20230217 1 1 623 1
20230218 1 1 623 1
20230221 14 14 10390 3
20230222 1 1 623 1
20230225 4 4 2492 4
20230226 1 1 623 1
20230228 1 1 623 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 26
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 8
/ 18 11214 18 18
/.well-known/ 8 7824 2 0
/.well-known/pki-validation/ 8 5232 0 0
/.well-known/acme-challenge/ 8 5232 0 2
/.well-known/acme-challenge/Q5hQbcTDUmMEqIC_tkTkKMuPvGUpm0Z6prjX7GE9PCY 3 261 2 3
/.well-known/acme-challenge/x3IWN9n-eKBmHScGQjzJtnW2vpbgwlgqHAnU7Z0X87I 3 261 3 2
/.well-known/acme-challenge/_W9-DIW3JKUM4K_9CP9OL19N-AFUYO8S 1 64 0 1
/.well-known/acme-challenge/CIYQHM6ECACDM147QYK5E465BBLDF-3O 1 64 1 0
END_SIDER
@ Telegram