LeakIX - Host bannongsaischool.com

Domain bannongsaischool.com

Thailand

CS LOXINFO Public Company Limited.

Software information

Apache Apache 2

tcp/443

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: ftp.bannongsaischool.com
Port: 443
URL: https://ftp.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-02 15:21
Open for 470 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e360278fcc4

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 22:21:36 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  28 days 12 hours 20 minutes 15 seconds
Server load: 2.00 2.00 2.00
Total accesses: 1850047 - Total Traffic: 23.8 GB - Total Duration: 2141120341
CPU Usage: u233.74 s124.26 cu32089.3 cs2210.25 - 1.41% CPU load
.751 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.33 ms/request
1 requests currently being processed, 127 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes032000
229661no0yes032000
329394no0yes131000
529374no0yes032000
Sum400 1127000

________________________________................................
______________________________________________W_________________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/53/14801_
19.017780160260990.00.17193.80
162.243.161.105http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/50/15293_
19.0130139013530.00.12198.97
138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/52/14865_
19.2210150309560.00.18192.75
139.59.65.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/49/15042_
19.047810145875120.00.10185.98
104.236.193.132http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/49/14947_
19.047790147711730.00.18185.45
159.89.83.196http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/43/15170_
19.0470156649160.00.13188.54
139.59.65.144h2localhost:443[0/0] Software caused connection abort

0-92293730/41/14841_
18.7478712145588710.00.18200.28
162.243.161.105http/1.1localhost:443GET /server-status HTTP/1.1

0-92293730/43/15150_
19.027860150182070.00.10187.60
139.59.182.142http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/45/15112_
19.2230145226980.00.11229.90
139.59.65.144http/1.1localhost:443GET / HTTP/1.1

0-92293730/51/15245_
19.027870148853440.00.20194.92
142.93.64.15http/1.1localhost:443GET /v2/_catalog HTTP/1.1

0-92293730/49/14809_
19.017790154393430.00.12200.71
139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/46/14819_
19.027870147156350.00.10195.46
104.236.193.132http/1.1localhost:80GET /config.json HTTP/1.1

0-92293730/58/14689_
18.827770137182770.00.19185.55
146.190.98.165http/1.1localhost:80GET /.env HTTP/1.1

0-92293730/49/14840_
19.007830169086540.00.11186.04
138.68.163.10http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/49/15795_
19.057820141615380.00.15187.81
139.59.182.142http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/52/14844_
19.067810165341250.00.12182.51
142.93.64.15http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/58/14897_
18.997850143405110.00.13206.39
159.89.83.196http/1.1localhost:443GET /v2/_catalog HTTP/1.1

0-92293730/51/14958_
19.067810144940050.00.15189.33
161.35.176.95http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/46/14774_
19.057870160388360.00.07200.55
137.184.162.65http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/51/14996_
19.057830144639390.00.17193.84
142.93.64.15http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/52/14989_
19.057870181496030.00.20193.46
161.35.176.95http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/48/15013_
19.057850147053790.00.14204.11
137.184.162.65http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/52/15470_
19.02785720150756110.00.18188.31
159.65.138.217http/1.1www.chonlateemeet.com:443GET /config.json HTTP/1.1

0-92293730/44/14675_
19.0510138765330.00.16190.21
139.59.182.142http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/60/14984_
19.067800162205890.00.13186.91
161.35.176.95http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/53/14656_
18.827780135981670.00.20197.05
159.65.138.217http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/49/15156_
19.027850144713510.00.08194.53
139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/52/14937_
19.047800159195730.00.07213.32
138.68.163.10http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/54/14741_
18.927850152174680.00.13175.94
178.128.151.41http/1.1localhost:80GET /v2/_catalog HTTP/1.1

0-92293730/37/15185_
19.067790135139140.00.11225.15
142.93.64.15http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/56/14675_
19.057830155573080.00.07199.15
161.35.176.95http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/46/14936_
19.057880145815200.00.20185.19
159.89.83.196http/1.1localhost:443GET /.env HTTP/1.1

1-92-0/0/15731.
0.00652810138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.00652810136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.00652810174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.00652810150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.00652810146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.00652810134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.00652810172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.00652810165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.00652810127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.00652810152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.00652810148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.00652810159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.00652810159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-

Found on 2024-02-02 15:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e36a5fbab31

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 13:47:41 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  2 days 3 hours 46 minutes 20 seconds
Server load: 2.84 2.99 2.97
Total accesses: 866683 - Total Traffic: 11.7 GB - Total Duration: 1075418476
CPU Usage: u132.06 s13.61 cu14756 cs775.09 - 8.41% CPU load
4.65 requests/sec - 65.6 kB/second - 14.1 kB/request - 1240.84 ms/request
3 requests currently being processed, 61 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
14311no3yes032012
215008no6yes329013
Sum209 361025

................................________________________________
___W________________R____R______................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-7-0/0/6891.
0.00591092123140.00.00101.02
203.170.192.183http/1.1www.chonlateeaa.com:443POST /wp-cron.php?doing_wp_cron=1704609224.54213690757751464843

0-7-0/0/7350.
0.00591112572282630.00.00102.14
66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1

0-7-0/0/6939.
0.0059189178790990.00.00100.26
192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%

0-7-0/0/7174.
0.00591214775847660.00.0092.54
85.208.96.210http/1.1www.chonlateeboi.com:443GET /47585lrvyeti.html HTTP/1.1

0-7-0/0/7138.
0.00591105876261220.00.0089.56
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /jwyfijs-12086litems/etidm52w.html HTTP/1.1

0-7-0/0/7275.
0.0059184188932560.00.0096.14
192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%

0-7-0/0/7088.
0.0059183970622910.00.00106.56
3.224.220.101http/1.1www.chonlateeboi.com:443GET /2017idtuitems/eti HTTP/1.1

0-7-0/0/7166.
0.0059184673910630.00.0093.68
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ivxfijs-30857keti.html HTTP/1.1

0-7-0/0/7317.
0.0059190575885040.00.00143.62
40.77.167.2h2www.chonlateefbc.com:443GET /?m=cma-dishmachines-180uc-high-temp-undercounter-dishwashe

0-7-0/0/7203.
0.0059188878309230.00.0090.77
66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1

0-7-0/0/6992.
0.0059144528187048130.00.00111.98
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-7-0/0/6758.
0.005911184189200.00.0087.93
66.249.71.36http/1.1www.mgrandstructure.com:443GET /ofpm/project-sekai-mod-apk.html HTTP/1.1

0-7-0/0/6811.
0.0059185063912670.00.0090.61
52.70.240.171http/1.1www.chonlateeboi.com:443GET /2045idtuetidm25.html HTTP/1.1

0-7-0/0/7015.
0.0059184094751170.00.0095.78
47.128.57.61http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/logo_Home.png HTTP/2.0

0-7-0/0/7685.
0.0059176672332400.00.0096.84
192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%

0-7-0/0/6875.
0.0059188994028910.00.0088.35
114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97

0-7-0/0/7000.
0.0059184175194130.00.0090.50
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cfrfijs-30435eitems/etidm.htm HTTP/1.1

0-7-0/0/7105.
0.0059184871642070.00.0094.88
23.22.35.162http/1.1www.chonlateeboi.com:443GET /19415rbhsetidm36ts.html HTTP/1.1

0-7-0/0/7067.
0.0059191788661280.00.0088.94
185.191.171.19http/1.1www.chonlateefood.com:443GET /getid/zeo12115nheeitems HTTP/1.1

0-7-0/0/7136.
0.0059184774949870.00.0096.17
192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B8%AD%E0%

0-7-0/0/7171.
0.00591845115334180.00.0099.43
192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95

0-7-0/0/6851.
0.00591105678741500.00.0091.77
185.191.171.19http/1.1www.chonlateeboi.com:443GET /6178zvqcetid HTTP/1.1

0-7-0/0/7407.
0.0059184486534200.00.0098.18
3.224.220.101http/1.1www.chonlateeboi.com:443GET /19448rbhsitems/etidm98arp.html HTTP/1.1

0-7-0/0/6945.
0.0059169070103160.00.0098.07
192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%

0-7-0/0/6996.
0.0059144092090520.00.0088.48
208.109.224.138http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1

0-7-0/0/7163.
0.0059184463458100.00.0091.23
47.128.57.61h2www.xn--12cx2bef7bl0boq4ch6gugw[2/2] done: stream 3, GET /wp-content/uploads/2021/01/logo_Home

0-7-0/0/6983.
0.0059184177138920.00.0099.07
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qifivak-4293sitems/etidm68.htm HTTP/1.1

0-7-0/0/7033.
0.00591123687774620.00.00120.10
149.91.122.223http/1.1www.chonlateefood.com:443POST /wp-login.php HTTP/1.1

0-7-0/0/6856.
0.0059184776147840.00.0086.02
114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97

0-7-0/0/7160.
0.005911078931820.00.00125.06
203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704609224.08053588867187500000

0-7-0/0/6794.
0.0059184484918420.00.0098.44
3.224.220.101http/1.1www.chonlateeboi.com:443GET /30278lrvyitems/etidm57o.html HTTP/1.1

0-7-0/0/7169.
0.0059190676482950.00.0091.69
192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%

1-743110/204/7015_
91.722078304850.02.0590.68
104.234.53.230h2www.chonlateedesign.com:443[0/0] init

1-743110/244/6787_
91.921198378938440.02.9486.45
104.234.53.230h2www.chonlateedesign.com:443[1/1] done: stream 1, GET /M1.php

1-743110/172/6732_
91.4204287105611330.01.6886.14
31.184.236.42http/1.1

1-743110/202/6496_
92.33036084015070.01.8585.32
66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=china-50cc-scooter-for-sale-50cc-scooter-for-sale-11-ii

1-743110/181/6665_
92.20340380324750.01.8398.58
173.236.140.156http/1.1www.pokaorganize.com:443POST /wp-login.php HTTP/1.1

1-743110/253/6768_
91.493101678310350.04.4090.72
104.234.53.245h2www.chonlateedesign.com:443[0/0] init

1-743110/256/6776_
92.33085497335380.04.6888.10
52.70.240.171http/1.1www.chonlateeboi.com:443GET /21585tlkaitems/eti.htm HTTP/1.1

1-743110/181/6800_
92.082207790770810.01.7190.12
63.135.161.106http/1.1www.chonlateedesign.com:443GET /fm1.php HTTP/2.0

1-743110/244/6906_
92.09184760970880.01.9788.09
146.190.98.165h2localhost:443[0/0] Software caused connection abort

1-743110/160/6717_
92.21385483356780.01.6892.75
23.22.35.162http/1.1www.chonlateeboi.com:443GET /45317bzlnetidm40.html HTTP/1.1

1-743110/119/6441_
92.330091092730.01.3690.92
104.234.53.230h2www.chonlateedesign.com:443GET /M1.php HTTP/2.0

1-743110/192/6

Found on 2024-01-07 06:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e3635845cc1

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Saturday, 06-Jan-2024 11:29:30 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime:  1 day 1 hour 28 minutes 9 seconds
Server load: 2.70 2.72 2.68
Total accesses: 449099 - Total Traffic: 6.1 GB - Total Duration: 486967798
CPU Usage: u187.98 s13.15 cu7492.56 cs394.11 - 8.82% CPU load
4.9 requests/sec - 69.8 kB/second - 14.3 kB/request - 1084.32 ms/request
10 requests currently being processed, 54 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
122697no3yes626000
210107no10yes428004
Sum2013 1054004

................................_R________R______W__W__W______W_
_____W__________W______WW_______................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-3-0/0/3965.
0.0090791355292120.00.0061.62
52.70.240.171http/1.1www.chonlateeboi.com:443GET /30986xhlfitems/etid.html HTTP/1.1

0-3-0/0/4192.
0.00907037878030.00.0055.01
101.108.189.228http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /?wc-ajax=get_refreshed_fragments HTTP/2.0

0-3-0/0/3938.
0.00907051758620.00.0062.93
209.97.169.176http/1.1www.ozonepluswater.net:80GET /discount.php HTTP/1.1

0-3-0/0/4195.
0.00907040430450.00.0053.34
209.97.169.176http/1.1www.ozonepluswater.net:80GET /_.php HTTP/1.1

0-3-0/0/4041.
0.00907036008760.00.0050.67
209.97.169.176http/1.1www.ozonepluswater.net:80GET /pinuseren.php HTTP/1.1

0-3-0/0/4290.
0.0090790747433530.00.0056.94
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /lnaarie-8968netidm50yan HTTP/1.1

0-3-0/0/4064.
0.00907036984370.00.0065.16
209.97.169.176http/1.1www.ozonepluswater.net:80GET /above.php HTTP/1.1

0-3-0/0/4073.
0.0090784534192900.00.0052.90
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?sjqecaw-347391ditems/etid.html HTTP/1.1

0-3-0/0/4116.
0.00907254736825230.00.0095.09
66.249.69.227http/1.1www.chonlateenextbiz.com:443GET /g2387339.shtml HTTP/1.1

0-3-0/0/4053.
0.00907032110740.00.0052.44
209.97.169.176http/1.1www.ozonepluswater.net:80GET /cut.php HTTP/1.1

0-3-0/0/3912.
0.00907037630350.00.0049.29
209.97.169.176http/1.1www.ozonepluswater.net:80GET /minik.php HTTP/1.1

0-3-0/0/3831.
0.00907051760850.00.0048.55
209.97.169.176http/1.1www.ozonepluswater.net:80GET /smm.php HTTP/1.1

0-3-0/0/3886.
0.00907033092150.00.0052.28
209.97.169.176http/1.1www.ozonepluswater.net:80GET /zkmtq.php HTTP/1.1

0-3-0/0/4114.
0.00907049269370.00.0056.12
209.97.169.176http/1.1www.ozonepluswater.net:80GET /wp-fdd.php HTTP/1.1

0-3-0/0/4493.
0.00907038428650.00.0056.88
209.97.169.176http/1.1www.ozonepluswater.net:80GET /filter.php HTTP/1.1

0-3-0/0/3828.
0.00907054677010.00.0048.96
209.97.169.176http/1.1www.ozonepluswater.net:80GET /versions.php HTTP/1.1

0-3-0/0/4016.
0.00907038511310.00.0051.44
209.97.169.176http/1.1www.ozonepluswater.net:80GET /9837wes.php7 HTTP/1.1

0-3-0/0/4264.
0.00907033736740.00.0055.57
209.97.169.176http/1.1www.ozonepluswater.net:80GET /dropdown.php7 HTTP/1.1

0-3-0/0/4091.
0.00907031815170.00.0052.67
209.97.169.176http/1.1www.ozonepluswater.net:80GET /credits.php7 HTTP/1.1

0-3-0/0/3998.
0.00907037414430.00.0056.95
209.97.169.176http/1.1www.ozonepluswater.net:80GET /403.php HTTP/1.1

0-3-0/0/3971.
0.00907046565820.00.0059.29
209.97.169.176http/1.1www.ozonepluswater.net:80GET /style.php HTTP/1.1

0-3-0/0/3926.
0.00907052688400.00.0054.40
209.97.169.176http/1.1www.ozonepluswater.net:80GET /mfi.php HTTP/1.1

0-3-0/0/4374.
0.0090789738128240.00.0056.21
66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?eychlzs-380345petidm2 HTTP/1.1

0-3-0/0/3976.
0.0090785931750120.00.0051.18
3.224.220.101http/1.1www.chonlateeboi.com:443GET /6158ztiaitems/etidm11w.html HTTP/1.1

0-3-0/0/3915.
0.0090736005737275560.00.0049.64
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-3-0/0/4072.
0.00907032694990.00.0052.17
209.97.169.176http/1.1www.ozonepluswater.net:80GET /zeal.php HTTP/1.1

0-3-0/0/4013.
0.00907035745160.00.0061.11
209.97.169.176http/1.1www.ozonepluswater.net:80GET /use.php HTTP/1.1

0-3-0/0/3988.
0.0090783841346100.00.0081.50
85.208.96.210http/1.1www.chonlateeboi.com:443GET /17038mydsetidm89i HTTP/1.1

0-3-0/0/3840.
0.00907115236274330.00.0049.35
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /jvyarie-37254letidm98w.htm HTTP/1.1

0-3-0/0/4206.
0.00907037339910.00.0089.14
209.97.169.176http/1.1www.ozonepluswater.net:80GET /wp-class.php HTTP/1.1

0-3-0/0/3940.
0.00907034807890.00.0058.66
209.97.169.176http/1.1www.ozonepluswater.net:80GET /masss.php HTTP/1.1

0-3-0/0/4302.
0.00907034843350.00.0053.79
209.97.169.176http/1.1www.ozonepluswater.net:80GET /92e4f6b2.php HTTP/1.1

1-3226970/253/3624_
132.05184638269260.03.0747.39
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /rmguzzo-1954tetid HTTP/1.1

1-3226970/206/3424R
131.41584238490400.02.5343.75
185.191.171.3http/1.1

1-3226970/227/3396_
131.63185159124300.02.5445.20
147.182.168.210h2localhost:443[0/0] Software caused connection abort

1-3226970/265/3352_
131.97284141831620.03.1143.38
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?htkggdh-245460xetidm3 HTTP/1.1

1-3226970/251/3400_
132.04184452232280.02.7347.23
23.22.35.162http/1.1www.chonlateeboi.com:443GET /34487qbkeetidm81le.html HTTP/1.1

1-3226970/266/3591_
131.84083727321650.03.6347.06
3.224.220.101http/1.1www.chonlateeboi.com:443GET /3223qbkeitems/etidm93ze HTTP/1.1

1-3226970/280/3523_
131.923427894050.03.1443.45
203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704515366.90994501113891601562

1-3226970/244/3570_
131.72384143955150.02.7747.67
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /lvaarie-23710netidm77y HTTP/1.1

1-3226970/271/3591_
132.11084828488010.03.1546.78
176.124.32.105http/1.1www.xn--m3cbp0adb4cva5bee03a.coGET / HTTP/1.0

1-3226970/283/3469_
131.93383834377480.03.5044.58
114.119.144.178http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2

1-3226970/219/3479R
131.86584132912390.02.7449.01
23.22.35.162http/1.1

1-3226970/262/3680_
131.560134428975030.03.0350.45
176.124.32.105http/1.1www.xn--m3cbp0adb4cva5bee03a.coGET / HTTP/1.0

1-3226970/315/3484_
131.68083545185000.03.1144.89
147.182.168.210h2localhost:443[0/0

Found on 2024-01-06 04:29

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e369238fb63

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:24:05 ICT
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 58 seconds
Server load: 1.01 1.26 0.96
Total accesses: 142878 - Total Traffic: 1.9 GB - Total Duration: 187836490
CPU Usage: u10.83 s2.93 cu2343.01 cs124.29 - 4.47% CPU load
2.57 requests/sec - 35.7 kB/second - 13.9 kB/request - 1314.66 ms/request
18 requests currently being processed, 174 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
43868no1yes527000
53869no1yes329000
63887no0yes527000
73890no8yes230007
83891no0yes329000
93894no0yes032000
Sum7111 18174007

.........................................................G......
................................................................
___W__________W___R__W______R______W___________________W_______R
__W____R___R_R_____________W_______W__________________________W_
__W__________W_________________R________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00811136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00806331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.008025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00806889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00806403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0088637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0089806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0089747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00806913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00810786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00806878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00807274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00806975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00811106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00811617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0089056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00806839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0089207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00810777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0089246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00806592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00807034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00807004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00806504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00810857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0089006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00810786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00811166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00806337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00807123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0089487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00807132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0010014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.0010011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.0010010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.0010112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.001008160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.001009262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.0010011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.00104889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.001009736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.00108949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0086111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf.htm HTTP/1.1

1-1-0/0/1315.
0.0010904

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31845655b1845655b1ed95777e

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:46 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 37 seconds
Server load: 1.09 1.04 1.23
Total accesses: 167183 - Total Traffic: 1.4 GB - Total Duration: 222821302
CPU Usage: u756.02 s1258.59 cu12423800 cs2986320 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1332.8 ms/request
23 requests currently being processed, 0 idle workers
CCWCWCCCCCCWCCCCCCCCRRC...........................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247291/87/12535C
35.1711163066401.30.98102.63
104.248.168.29http/1.1localhost:443GET /about HTTP/1.1

1-421250911/33/12648C
16.3812164731031.30.28124.03
104.248.168.29http/1.1localhost:443GET /login.action HTTP/1.1

2-421259040/31/12504W
7.6700164895180.00.1199.58
89.248.165.195http/1.1www.dtacbusiness.com:80GET /wp-login.php HTTP/1.0

3-421248181/74/12434C
27.1911164253331.30.5092.43
104.248.168.29http/1.1localhost:443GET /config.json HTTP/1.1

4-421268880/2/11823W
0.5400160208700.00.01129.29
27.254.96.168http/1.1www.dtacbusiness.com:80POST /wp-cron.php?doing_wp_cron=1666252666.64241003990173339843

5-421248471/54/11499C
31.1211149082252.70.4697.73
139.162.139.31http/1.1localhost:443GET /info.php HTTP/1.1

6-421246001/99/11423C
39.3821146145872.71.36100.64
104.248.168.29http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

7-421259461/20/11196C
7.5700149101542.70.0983.94
45.79.48.136http/1.1localhost:443GET /.env HTTP/1.1

8-421268811/10/10419C
1.0300138226342.70.0269.49
45.79.48.136http/1.1localhost:443GET /.DS_Store HTTP/1.1

9-421266871/24/10232C
2.6311132854742.70.0389.24
139.162.139.31http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

10-421249151/52/8792C
20.5611118575012.70.3076.56
139.162.139.31http/1.1localhost:443GET /telescope/requests HTTP/1.1

11-421268890/6/8712W
1.4600115644980.00.0161.88
45.79.48.136http/1.1localhost:443GET /server-status HTTP/1.1

12-421269081/3/7481C
0.4711101886142.70.0156.32
139.162.139.31http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

13-421269091/4/5792C
0.401180146542.70.0157.41
139.162.139.31http/1.1localhost:443GET /.git/config HTTP/1.1

14-421269111/4/4130C
0.750059524062.70.0129.19
45.79.48.136http/1.1localhost:443GET /telescope/requests HTTP/1.1

15-421269141/2/3699C
0.060152456091.30.0037.78
139.162.139.31http/1.1localhost:443GET /config.json HTTP/1.1

16-421269441/1/2816C
0.011237702752.70.0024.80
139.162.139.31http/1.1localhost:443GET /.env HTTP/1.1

17-421269571/2/1948C
0.010127282612.70.0119.67
45.79.48.136http/1.1localhost:443GET /info.php HTTP/1.1

18-421269581/1/1518C
0.020224024562.70.007.28
45.79.48.136http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

19-421269701/1/1005C
0.000115341262.70.005.16
45.79.48.136http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

20-421269720/1/1176R
0.010216577890.00.008.98
45.79.48.136http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

21-421269780/1/836R
0.000111428850.00.004.63
45.79.48.136http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1

22-421269881/1/789C
0.000211318042.70.003.42
45.79.48.136http/1.1localhost:443GET /.git/config HTTP/1.1

23-421-0/0/787.
0.001639011185000.00.0018.86
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-421-0/0/356.
0.00169304758130.00.002.96
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

25-421-0/0/204.
0.00169202702970.00.0045.99
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-421-0/0/196.
0.00154702258210.00.001.31
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

27-421-0/0/103.
0.00170701463500.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-421-0/0/3.
0.001706012070.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-421-0/0/64.
0.00144901086510.00.000.51
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-421-0/0/4.
0.00169605000.00.000.09
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

31-421-0/0/19.
0.001644096110.00.000.44
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-421-0/0/3.
0.001705080.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-421-0/0/1.
0.001714000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-421-0/0/1.
0.001713010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-421-0/0/11.
0.001680064400.00.000.05
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-421-0/0/1.
0.001712010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-421-0/0/7.
0.001688032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421-0/0/3.
0.001703036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421-0/0/9.
0.001682028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421-0/0/4.
0.00169509810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 22subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 220 seconds, (range: 31...292)index usage: 0%, cache usage: 1%total entries stored since starting: 6420total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23296 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: ftp.bannongsaischool.com
Port: 80
URL: http://ftp.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-01 23:21
Open for 469 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e362075bd65

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 06:22:02 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  27 days 20 hours 20 minutes 41 seconds
Server load: 2.00 2.00 2.00
Total accesses: 1844439 - Total Traffic: 23.8 GB - Total Duration: 2140712957
CPU Usage: u176.62 s105.21 cu32089.3 cs2210.25 - 1.44% CPU load
.767 requests/sec - 10.4 kB/second - 13.5 kB/request - 1160.63 ms/request
2 requests currently being processed, 126 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes032000
229661no0yes032000
329394no0yes230000
529374no0yes032000
Sum400 2126000

________________________________................................
____________________________________W__________________R________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/11/14759_
2.364130160256550.00.01193.64
45.55.193.222http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/10/15253_
2.584130139008950.00.03198.88
128.199.195.68http/1.1localhost:80GET /.git/config HTTP/1.1

0-92293730/13/14826_
2.72681150306110.00.03192.60
52.151.238.95http/1.1localhost:80POST / HTTP/1.1

0-92293730/8/15001_
2.8110145868950.00.01185.88
142.93.64.15http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-92293730/10/14908_
2.7340147705720.00.03185.30
128.199.61.251http/1.1localhost:443GET / HTTP/1.1

0-92293730/10/15137_
2.594080156638040.00.01188.42
198.199.121.22http/1.1localhost:80GET / HTTP/1.1

0-92293730/11/14811_
2.0200145587210.00.01200.11
128.199.61.251h2localhost:443[0/0] Software caused connection abort

0-92293730/8/15115_
2.274090150176780.00.03187.52
138.68.163.10http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/12/15079_
2.654110145223140.00.01229.81
138.68.163.10http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/12/15206_
2.6130148852860.00.07194.79
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/12/14772_
2.286816154280500.00.01200.61
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-92293730/13/14786_
2.3720147116910.00.01195.38
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/16/14647_
2.6120137181680.00.03185.40
128.199.61.251http/1.1

0-92293730/15/14806_
2.3525169077150.00.03185.96
138.197.88.136http/1.1

0-92293730/13/15759_
2.7430141537910.00.03187.69
142.93.64.15http/1.1localhost:80GET / HTTP/1.1

0-92293730/13/14805_
2.274100165338300.00.01182.40
159.223.102.13http/1.1localhost:80GET /.git/config HTTP/1.1

0-92293730/11/14850_
2.6410143397160.00.01206.27
138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/16/14923_
2.644120144891050.00.03189.21
159.223.102.13http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/8/14736_
2.3640160243150.00.01200.49
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-92293730/13/14958_
2.8020144636770.00.03193.71
142.93.64.15http/1.1localhost:80GET /about HTTP/1.1

0-92293730/9/14946_
2.274100181441040.00.01193.27
161.35.190.56http/1.1localhost:443GET / HTTP/1.1

0-92293730/11/14976_
2.6410147004650.00.01203.99
128.199.61.251h2localhost:443[0/0] Software caused connection abort

0-92293730/13/15431_
2.35216150748190.00.05188.17
128.199.61.251http/1.1

0-92293730/9/14640_
2.234040138763940.00.01190.06
164.92.192.25http/1.1

0-92293730/13/14937_
2.2828162204850.00.01186.79
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/11/14614_
2.644120135973540.00.03196.88
138.68.163.10http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/9/15116_
2.254130144712700.00.01194.45
162.243.184.251http/1.1localhost:80GET /.env HTTP/1.1

0-92293730/11/14896_
2.574130159153240.00.01213.25
128.199.195.68http/1.1localhost:80\x16\x03\x01\x01\x10\x01

0-92293730/10/14697_
2.6410152163320.00.03175.84
138.197.88.136http/1.1

0-92293730/11/15159_
2.664100135117410.00.01225.05
159.223.102.13http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/16/14635_
2.364080155554100.00.02199.09
161.35.190.56http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/10/14900_
2.664070145814280.00.01185.00
159.223.102.13http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15731.
0.0077080138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.0077080136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.0077080174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.0077080150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.0077080146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.0077080134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.0077080172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.0077080165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.0077080127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.0077080152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.0077080148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.0077080159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.0077080159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15189.
0.0077080137016410.00.00183.04
159.223.102.13http/1.1localhost:80GET /config.json HTTP/1.1

1-92-0/0/15367.
0.007708013

Found on 2024-02-01 23:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e36d1dc5424

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 07:46:26 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  1 day 21 hours 45 minutes 5 seconds
Server load: 2.54 3.13 2.92
Total accesses: 780784 - Total Traffic: 10.6 GB - Total Duration: 956009435
CPU Usage: u162.69 s13.94 cu13326.1 cs698.67 - 8.62% CPU load
4.74 requests/sec - 67.5 kB/second - 14.2 kB/request - 1224.42 ms/request
4 requests currently being processed, 124 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
08425no2yes032001
111360no1yes131000
216287no0yes230000
316453no2yes131001
Sum405 4124002

___________________________________________________________W____
_____W__________________R_________W_____________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-784250/138/6026_
88.481384583173540.01.9789.50
52.70.240.171http/1.1www.chonlateeboi.com:443GET /37805yxnoetidm57.html HTTP/1.1

0-784250/152/6504_
88.071183460671530.01.4385.89
85.208.96.210http/1.1www.chonlateeadmin.com:443GET /zkoxzet-42340betidm4 HTTP/1.1

0-784250/137/6041_
88.18684472347050.01.8490.14
3.224.220.101http/1.1www.chonlateeboi.com:443GET /13691ztiaetidm.html HTTP/1.1

0-784250/170/6378_
88.501184070069730.01.7882.77
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ygnktze-27909aitems/etidm14.htm HTTP/1.1

0-784250/152/6097_
88.416066906860.01.5778.84
46.101.103.192http/1.1localhost:443GET /login.action HTTP/1.1

0-784250/212/6458_
88.5011078172460.03.0285.18
46.101.103.192http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-784250/157/6264_
88.20098158961860.02.0396.45
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1

0-784250/140/6298_
88.63090467740960.01.5482.39
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?ntoggdh-195104betidm55a HTTP/1.1

0-784250/202/6316_
87.860172362744330.01.98124.83
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1

0-784250/190/6233_
88.341184371765390.01.9680.20
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /crrktze-36831eitems/etidm32pe.htm HTTP/1.1

0-784250/125/5986_
88.4813076504920.01.4276.63
46.101.103.192http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-784250/136/5942_
88.261598775605330.01.6377.44
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?sephsbr-147399citems/eti HTTP/1.1

0-784250/147/6006_
87.64083453369170.01.7679.69
52.167.144.229h2www.chonlateefbl.com:443[1/1] done: stream 1, GET /rare-vintage-disney-masterpiece-fant

0-784250/149/6214_
88.630081935320.01.7984.08
159.65.138.217http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-784250/130/6649_
86.2315227456887810.01.4785.89
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /rmgktze-7570tetid HTTP/1.1

0-784250/218/5993_
88.301483783435860.01.9678.31
66.249.65.40http/1.1www.chonlateeboi.com:443GET /trust.php?88771himsitems/eti.htm HTTP/1.1

0-784250/158/6154_
88.231546264800860.01.7280.39
64.227.190.219http/1.1www.pennungmarket.com:443GET / HTTP/1.1

0-784250/150/6301_
88.4515059258920.01.4881.86
46.101.103.192http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-784250/143/6306_
88.46151162245030.01.6180.41
203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704588370.42790603637695312500

0-784250/130/6066_
88.620104868807720.01.5785.40
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /jmyktze-14894litems/etidm89w.html HTTP/1.1

0-784250/229/6346_
88.001584490375040.02.1988.38
3.224.220.101http/1.1www.chonlateeboi.com:443GET /2160ymuietidm97cyr.htm HTTP/1.1

0-784250/127/6035_
88.620071156990.01.4482.16
159.65.138.217http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-784250/139/6619_
88.63084573810710.01.7588.31
23.22.35.162http/1.1www.chonlateeboi.com:443GET /19275khrritems/etidm.htm HTTP/1.1

0-784250/155/6120_
88.44085663169420.01.6388.58
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /yrnktze-36151aitems/etidm39le HTTP/1.1

0-784250/207/6018_
87.731488475386540.01.9975.43
85.208.96.210http/1.1www.chonlateefood.com:443GET /geti/krz44626csrtitems HTTP/1.1

0-784250/132/6140_
88.2615057674720.01.4979.62
46.101.103.192http/1.1localhost:443GET / HTTP/1.1

0-784250/145/6163_
88.417056811350.01.6789.55
51.15.17.105http/1.1www.siamsolarrooftop.com:80GET /wp-includes/IXR/wp-login.php HTTP/1.1

0-784250/142/6138_
88.56674770665570.01.84109.94
185.191.171.11http/1.1www.chonlateefood.com:443GET /items/lea26921kevytid.html HTTP/1.1

0-784250/150/6086_
87.801283454330410.01.5976.96
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?jumhsbr-366804zetidm9 HTTP/1.1

0-784250/146/6245_
88.55788572739320.01.69114.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /19223khrretidm90jr.html HTTP/1.1

0-784250/120/6031_
88.56684167437570.01.3989.05
85.208.96.202http/1.1www.chonlateeboi.com:443GET /1746ztiaetid.htm HTTP/1.1

0-784250/142/6343_
87.831183965294640.01.7781.53
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?pipvrsm-372036citems/eti HTTP/1.1

1-7113600/94/6198_
58.497218372908950.01.0780.64
40.77.167.78h2www.thaidaoherb.com:443GET /bzolo5/cute-goat-drawings-sketches-with-pencil-free-easy-s

1-7113600/122/5986_
58.10085066596260.01.3876.34
40.77.167.78h2www.thaidaoherb.com:443[0/0] init

1-7113600/88/5963_
58.850093340180.01.0177.24
159.65.138.217http/1.1localhost:80GET / HTTP/1.1

1-7113600/90/5650_
58.81362476012370.01.2975.12
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-7113600/90/5902_
58.71863775262280.01.1187.87
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?ytcqgmy-264665petid HTTP/1.1

1-7113600/88/5961_
58.59284164707160.01.0578.52
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-36121witems/eti HTTP/1.1

1-7113600/84/6016_
58.121084265341430.01.0776.31
23.22.35.162http/1.1www.chonlateeboi.com:443GET /13707ztiaitems/etidm.htm HTTP/1.1

1-7113600/92/6091_
58.70984876422540.01.4481.30
52.70.240.171http/1.1www.chonlateeboi.com:443GET /29676mywgetidm9.htm HTTP/1.1

1-7113600/96/6043_
57.30868255492410.01.2377.95
40.77.167.78h2www.thaidaoherb.com:443[1/1] done: stream 1, GET /bzolo5/cute-goat-drawings-sketches-w

1-7113600/91/6009_
58.543069749280.00.9784.20
46.101.103.192http/1.1localhost:443GET /.env HTTP/1.1

1-7113600/85/5801_
58.83284476249590.01.2183.43
85.208.96.197http/1.1www.chonlateeboi.

Found on 2024-01-07 00:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e367b1545c9

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Saturday, 06-Jan-2024 09:59:11 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime:  23 hours 57 minutes 50 seconds
Server load: 3.63 3.33 3.00
Total accesses: 420511 - Total Traffic: 5.8 GB - Total Duration: 446341579
CPU Usage: u114.37 s8.54 cu7122.88 cs375.23 - 8.83% CPU load
4.87 requests/sec - 70.2 kB/second - 14.4 kB/request - 1061.43 ms/request
14 requests currently being processed, 50 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
027257no6yes626001
330342no9yes824001
Sum2015 1450002

______R__W_WW___W____W__________................................
................................_______W_________WRW____WW___WR_
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-3272570/111/3663_
61.41163846976390.01.3753.00
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /hawejnl-25890jetid.htm HTTP/1.1

0-3272570/105/3996_
60.92183829298800.01.2752.32
161.35.155.246http/1.1

0-3272570/100/3658_
60.02090642141490.01.2460.46
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/125/3934_
61.51263635351150.01.6550.05
185.191.171.6http/1.1www.krongthongsecurity.com:443GET /reune.php?oncpahm287093petidm21b.htm HTTP/1.1

0-3272570/156/3810_
61.70084033360870.01.7647.97
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?vzyqgmy-296798letidm28i.htm HTTP/1.1

0-3272570/110/3982_
61.16184644889800.01.6050.80
52.70.240.171http/1.1www.chonlateeboi.com:443GET /8700eslwetidm6.htm HTTP/1.1

0-3272570/116/3797R
61.45381429574060.01.4862.68
23.22.35.162http/1.1www.chonlateeboi.com:443

0-3272570/127/3835_
61.35184431888400.01.5149.49
164.92.192.25http/1.1

0-3272570/105/3879_
61.440034349050.01.3491.99
161.35.155.246h2localhost:443[0/0] Software caused connection abort

0-3272571/119/3826W
61.180029680910.01.6449.61
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /dzsmbwb-5944fetidm34qmf HTTP/1.1

0-3272570/103/3701_
61.01284635283010.01.3346.33
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-3272571/130/3586W
61.370046843900.01.2745.55
23.22.35.162http/1.1www.chonlateeboi.com:443GET /9221sstyetidm60.html HTTP/1.1

0-3272571/116/3655W
61.460029759680.01.5649.45
134.122.89.242http/1.1localhost:80GET /server-status HTTP/1.1

0-3272570/103/3902_
61.51263241608070.01.2853.64
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?kqnqxjd-213223aetidm45xd.html HTTP/1.1

0-3272570/123/3992_
61.29285835965370.01.5553.21
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qyfejnl-25899sitems/etidm.htm HTTP/1.1

0-3272570/119/3602_
61.680052120040.01.4246.35
134.122.89.242http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-3272571/93/3717W
60.720036460610.01.1547.70
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?uqxqxjd-253663ketidm23hd.html HTTP/1.1

0-3272570/100/3962_
60.24073431209400.01.1452.69
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-3272570/126/3852_
57.792214929141200.01.3149.75
66.249.71.170http/1.1www.chonlateeadmin.com:443GET /igkmxkt-18975xetidm54v.htm HTTP/1.1

0-3272570/114/3732_
61.17084634479660.01.7653.84
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-3272570/111/3732_
61.69084244252600.01.3356.42
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /vrkejnl-25904xitems/etidm64iex.html HTTP/1.1

0-3272571/81/3688W
35.85527041503500.00.8752.07
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-3272570/116/4164_
61.70053832045810.01.3653.47
217.113.194.241http/1.1www.mkandptfoods.com:443GET /dkimfdjp/cloudflare-warp-deb-centos-7.html HTTP/1.1

0-3272570/113/3728_
61.16177729703830.01.1747.85
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/109/3685_
61.56184130815500.01.2947.20
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /qhsjupk-237fetidm2.htm HTTP/1.1

0-3272570/110/3722_
61.35263030669960.01.4548.35
66.249.71.170http/1.1www.chonlateeadmin.com:443GET /igkmxkt-18975xetidm54v.htm HTTP/1.1

0-3272570/113/3802_
61.541032799620.01.3158.42
134.122.89.242http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-3272570/111/3782_
61.35175536028480.01.2379.26
161.35.155.246http/1.1

0-3272570/61/3601_
60.86284034178470.00.9846.07
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-3272570/111/3978_
61.69078235306640.01.5686.36
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/111/3700_
60.22183832230800.01.3455.39
52.70.240.171http/1.1www.chonlateeboi.com:443GET /10897bzlnitems/eti HTTP/1.1

0-3272570/95/4080_
60.790105432566410.01.1150.81
164.92.192.25h2localhost:443[0/0] Software caused connection abort

1-3-0/0/3371.
0.007984535123540.00.0044.32
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?jnmecaw-217954zitems/etid.html HTTP/1.1

1-3-0/0/3218.
0.0079031531300.00.0041.22
192.99.35.94http/1.1www.1smestartup.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3169.
0.0079052626650.00.0042.66
192.99.35.94http/1.1www.1smestartup.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3087.
0.007983940107590.00.0040.28
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?tuthlzs-363356gitems/eti.htm HTTP/1.1

1-3-0/0/3149.
0.007983949882710.00.0044.50
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?hphsvcw-21262uetidm.html HTTP/1.1

1-3-0/0/3325.
0.007984425480700.00.0043.43
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqradej-194689eeti.html HTTP/1.1

1-3-0/0/3243.
0.007984825990870.00.0040.31
52.70.240.171http/1.1www.chonlateeboi.com:443GET /32568xhlfetidm20qxf.htm HTTP/1.1

1-3-0/0/3326.
0.0079128948142115430.00.0044.91
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-3-0/0/3320.
0.007983626592530.00.0043.63
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uzzvrsm-10719mitems/eti.htm HTTP/1.1

1-3-0/0/3186.
0.007972190532384020.00.0041.07
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-3-0/0/3260.
0.007976827179430.00.0046.27
192.99.35.94http/1.1www.1smestartup.com:443GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3418.
0.007984326784420.0

Found on 2024-01-06 02:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c7303e36c7303e366204fb10

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:23:58 
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 51 seconds
Server load: 0.92 1.25 0.96
Total accesses: 142776 - Total Traffic: 1.9 GB - Total Duration: 187804484
CPU Usage: u15.08 s3.17 cu2336.4 cs123.86 - 4.47% CPU load
2.57 requests/sec - 35.7 kB/second - 13.9 kB/request - 1315.38 ms/request
10 requests currently being processed, 182 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
230705yes (old gen)1no00000
43868no1yes131000
53869no1yes032000
63887no0yes131000
73890no0yes527000
83891no0yes230000
93894no0yes131000
Sum824 10182000

.........................................................W......
..............W.................................................
______________W_________________________________________________
__R___________________________________W_WWW_R___________________
_WW_____________________________R_______________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00111136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00106331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.001025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00106889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00106403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0018637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0019806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0019747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00106913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00110786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00106878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00107274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00106975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00111106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00111617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0019056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00106839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0019207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00110777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0019246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00106592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00107034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00107004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00106504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00110857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0019006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00110786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00111166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00106337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00107123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0019487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00107132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.002014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.002011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.002010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.002112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.00208160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.00209262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.002011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0024889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.00209736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.0028949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0016111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf.htm

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31845655b1845655b15dbcc340

Apache Status

Apache Server Status for ftp.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:39 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 30 seconds
Server load: 1.19 1.06 1.23
Total accesses: 167054 - Total Traffic: 1.4 GB - Total Duration: 222783508
CPU Usage: u771.44 s1262.02 cu12423800 cs2986310 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1333.6 ms/request
7 requests currently being processed, 3 idle workers
WW_RCRWW.__.......................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247290/75/12523W
33.7500163035850.00.96102.61
159.223.236.215http/1.1localhost:80GET /server-status HTTP/1.0

1-421250910/26/12641W
14.3300164689620.00.13123.88
104.248.33.236http/1.1www.bannongsaischool.com:80GET / HTTP/1.0

2-421259040/13/12486_
6.1000164860000.00.0999.56
159.223.236.215http/1.1localhost:80GET /.git/config HTTP/1.0

3-421248180/61/12421R
25.4600164218770.00.4892.41
194.195.117.204http/1.1localhost:80GET /v2/_catalog HTTP/1.0

4-421245881/100/11821C
37.3301160197860.71.31129.28
194.195.117.204http/1.1localhost:80GET /login.action HTTP/1.0

5-421248470/47/11492R
29.975428149059310.00.4597.72
142.93.122.55http/1.1

6-421246000/95/11419W
37.7100146103420.01.27100.55
139.144.172.77http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

7-421259460/11/11187W
5.8500149067840.00.0883.93
134.122.123.104http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

8-421-0/0/10409.
0.00170138207460.00.0069.47
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

9-421266870/13/10221_
1.6401132836680.00.0289.23
159.223.236.215http/1.1localhost:80GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

10-421249150/43/8783_
19.1701118547370.00.2976.55
104.248.33.236http/1.1localhost:80GET /info.php HTTP/1.0

11-421-0/0/8706.
0.0037228115615800.00.0061.87
45.127.61.132http/1.1www.bannongsaischool.com:80GET /wp-content/uploads/2019/01/NONGSAI-MAP-07.jpg HTTP/1.0

12-421-0/0/7478.
0.004694256101876860.00.0056.31
172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1666252186.05959701538085937500

13-421-0/0/5788.
0.001119080138630.00.0057.40
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

14-421-0/0/4126.
0.00939159509020.00.0029.18
119.76.14.104http/1.1www.ddflooringperfect.co.th:443GET /wp-content/plugins/so-widgets-bundle/widgets/button/css/st

15-421-0/0/3697.
0.00887152456030.00.0037.77
69.171.251.15http/1.1www.dreamhightravel.com:443GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?

16-421-0/0/2815.
0.001079037702710.00.0024.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-421-0/0/1946.
0.00946027282540.00.0019.67
124.120.94.45http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css

18-421-0/0/1517.
0.001638024024520.00.007.27
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-421-0/0/1004.
0.001642015341220.00.005.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-421-0/0/1175.
0.00121478416577850.00.008.98
172.68.234.228http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1666251444.71553611755371093750

21-421-0/0/835.
0.001649011428820.00.004.62
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-421-0/0/788.
0.001376011318000.00.003.41
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-421-0/0/787.
0.001632011185000.00.0018.86
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-421-0/0/356.
0.00168604758130.00.002.96
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

25-421-0/0/204.
0.00168502702970.00.0045.99
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-421-0/0/196.
0.00154002258210.00.001.31
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

27-421-0/0/103.
0.00170001463500.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-421-0/0/3.
0.001699012070.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-421-0/0/64.
0.00144201086510.00.000.51
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-421-0/0/4.
0.00168905000.00.000.09
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

31-421-0/0/19.
0.001637096110.00.000.44
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-421-0/0/3.
0.001698080.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-421-0/0/1.
0.001707000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-421-0/0/1.
0.001706010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-421-0/0/11.
0.001673064400.00.000.05
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-421-0/0/1.
0.001705010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-421-0/0/7.
0.001681032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421-0/0/3.
0.001696036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421-0/0/9.
0.001675028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421-0/0/4.
0.00168809810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 19subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 227 seconds, (range: 38...299)index usage: 0%, cache usage: 0%total entries stored since starting: 6417total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23211 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: mail.bannongsaischool.com
Port: 443
URL: https://mail.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-01 23:21
Open for 469 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652d05fbd470

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 06:22:06 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  27 days 20 hours 20 minutes 45 seconds
Server load: 2.00 2.00 2.00
Total accesses: 1844456 - Total Traffic: 23.8 GB - Total Duration: 2140712981
CPU Usage: u176.7 s105.21 cu32089.3 cs2210.25 - 1.44% CPU load
.767 requests/sec - 10.4 kB/second - 13.5 kB/request - 1160.62 ms/request
1 requests currently being processed, 127 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes032000
229661no0yes032000
329394no0yes032000
529374no0yes131000
Sum400 1127000

________________________________................................
________________________________________________________________
................................W_______________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/11/14759_
2.3630160256550.00.01193.64
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/10/15253_
2.5830139008950.00.03198.88
128.199.195.68http/1.1localhost:80GET /.git/config HTTP/1.1

0-92293730/13/14826_
2.72721150306110.00.03192.60
52.151.238.95http/1.1localhost:80POST / HTTP/1.1

0-92293730/8/15001_
2.8150145868950.00.01185.88
142.93.64.15http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-92293730/10/14908_
2.7380147705720.00.03185.30
128.199.61.251http/1.1localhost:443GET / HTTP/1.1

0-92293730/10/15137_
2.5900156638040.00.01188.42
198.199.121.22http/1.1localhost:80GET / HTTP/1.1

0-92293730/11/14811_
2.0240145587210.00.01200.11
128.199.61.251h2localhost:443[0/0] Software caused connection abort

0-92293730/8/15115_
2.2700150176780.00.03187.52
138.68.163.10http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/13/15080_
2.8310145223140.00.01229.81
128.199.61.251http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/12/15206_
2.6170148852860.00.07194.79
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/12/14772_
2.287216154280500.00.01200.61
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-92293730/13/14786_
2.3760147116910.00.01195.38
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/16/14647_
2.6160137181680.00.03185.40
128.199.61.251http/1.1

0-92293730/15/14806_
2.3565169077150.00.03185.96
138.197.88.136http/1.1

0-92293730/13/15759_
2.7470141537910.00.03187.69
142.93.64.15http/1.1localhost:80GET / HTTP/1.1

0-92293730/14/14806_
2.8410165338300.00.01182.40
138.197.88.136http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/11/14850_
2.6450143397160.00.01206.27
138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/16/14923_
2.6420144891050.00.03189.21
159.223.102.13http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/8/14736_
2.3680160243150.00.01200.49
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-92293730/13/14958_
2.8060144636770.00.03193.71
142.93.64.15http/1.1localhost:80GET /about HTTP/1.1

0-92293730/9/14946_
2.2710181441040.00.01193.27
161.35.190.56http/1.1localhost:443GET / HTTP/1.1

0-92293730/11/14976_
2.6450147004650.00.01203.99
128.199.61.251h2localhost:443[0/0] Software caused connection abort

0-92293730/13/15431_
2.35616150748190.00.05188.17
128.199.61.251http/1.1

0-92293730/9/14640_
2.234080138763940.00.01190.06
164.92.192.25http/1.1

0-92293730/13/14937_
2.2868162204850.00.01186.79
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/12/14615_
2.8330135973540.00.03196.88
142.93.64.15http/1.1localhost:80GET /_all_dbs HTTP/1.1

0-92293730/10/15117_
2.8330144712710.00.01194.45
128.199.61.251http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/12/14897_
2.8230159153250.00.01213.25
142.93.64.15http/1.1localhost:80GET /login.action HTTP/1.1

0-92293730/10/14697_
2.6450152163320.00.03175.84
138.197.88.136http/1.1

0-92293730/12/15160_
2.8320135117420.00.01225.05
142.93.64.15http/1.1localhost:80GET /.env HTTP/1.1

0-92293730/16/14635_
2.364120155554100.00.02199.09
161.35.190.56http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/10/14900_
2.664110145814280.00.01185.00
159.223.102.13http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15731.
0.0077120138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.0077120136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.0077120174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.0077120150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.0077120146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.0077120134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.0077120172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.0077120165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.0077120127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.0077120152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.0077120148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.0077120159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.0077120159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15189.
0.0077120137016410.00.00183.04
159.223.102.13http/1.1localhost:80GET /config.json HTTP/1.1

1-92-0/0/15367.
0.0077120136506630.00.0

Found on 2024-02-01 23:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652d1adeeb98

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 07:46:34 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  1 day 21 hours 45 minutes 13 seconds
Server load: 2.58 3.13 2.92
Total accesses: 780833 - Total Traffic: 10.6 GB - Total Duration: 956033475
CPU Usage: u163.49 s13.98 cu13326.1 cs698.67 - 8.62% CPU load
4.74 requests/sec - 67.5 kB/second - 14.2 kB/request - 1224.38 ms/request
6 requests currently being processed, 122 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
08425no2yes131001
111360no1yes329000
216287no0yes032000
316453no2yes230001
Sum405 6122002

___________________W_____________R____________________W__R______
_________________________________________WW_____________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-784250/138/6026_
88.48584583173540.01.9789.50
52.70.240.171http/1.1www.chonlateeboi.com:443GET /37805yxnoetidm57.html HTTP/1.1

0-784250/153/6505_
88.80383960679930.01.4485.91
185.191.171.5http/1.1www.chonlateeadmin.com:443GET /bpqdlch-27210detid.htm HTTP/1.1

0-784250/138/6042_
88.85091672356210.01.8590.16
185.191.171.17http/1.1www.chonlateefood.com:443GET /geti/srh39538sbrzitems HTTP/1.1

0-784250/170/6378_
88.50584070069730.01.7882.77
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ygnktze-27909aitems/etidm14.htm HTTP/1.1

0-784250/153/6098_
88.83084966915350.01.5878.85
52.70.240.171http/1.1www.chonlateeboi.com:443GET /21167sdsletidm91dl.html HTTP/1.1

0-784250/213/6459_
88.80384878180940.03.0385.19
52.70.240.171http/1.1www.chonlateeboi.com:443GET /21151sdslitems/etidm93nl HTTP/1.1

0-784250/157/6264_
88.20898158961860.02.0396.45
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1

0-784250/140/6298_
88.63890467740960.01.5482.39
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?ntoggdh-195104betidm55a HTTP/1.1

0-784250/202/6316_
87.860172362744330.01.98124.83
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1

0-784250/191/6234_
88.803071765400.01.9680.21
139.144.150.8http/1.1localhost:443GET / HTTP/1.1

0-784250/125/5986_
88.485076504920.01.4276.63
137.184.150.232h2localhost:443[0/0] Software caused connection abort

0-784250/137/5943_
88.6671475605470.01.6377.45
66.249.66.19http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.GET /wp-content/plugins/contact-form-7/includes/css/styles.css?

0-784250/147/6006_
87.64883453369170.01.7679.69
52.167.144.229h2www.chonlateefbl.com:443[1/1] done: stream 1, GET /rare-vintage-disney-masterpiece-fant

0-784250/149/6214_
88.638081935320.01.7984.08
159.65.138.217http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-784250/131/6650_
88.668056887820.01.4785.89
159.65.138.217http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-784250/218/5993_
88.30583783435860.01.9678.31
139.144.150.8http/1.1

0-784250/159/6155_
88.658064800860.01.7280.39
159.65.138.217http/1.1localhost:80GET /config.json HTTP/1.1

0-784250/151/6302_
88.76588659267790.01.4981.88
185.191.171.13http/1.1www.chonlateefood.com:443GET /items/gvv1826givbtidm.html HTTP/1.1

0-784250/144/6307_
88.686062245030.01.6280.41
203.170.192.183http/1.1www.chonlateeboi.com:443POST /wp-cron.php?doing_wp_cron=1704588387.56041693687438964843

0-784251/130/6066W
88.620068807720.01.5785.40
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /hxwktze-1736jitems/etidm93ukj.html HTTP/1.1

0-784250/229/6346_
88.00684490375040.02.1988.38
3.224.220.101http/1.1www.chonlateeboi.com:443GET /2160ymuietidm97cyr.htm HTTP/1.1

0-784250/127/6035_
88.620071156990.01.4482.16
159.65.138.217http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-784250/139/6619_
88.63884573810710.01.7588.31
23.22.35.162http/1.1www.chonlateeboi.com:443GET /19275khrritems/etidm.htm HTTP/1.1

0-784250/155/6120_
88.44885663169420.01.6388.58
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /yrnktze-36151aitems/etidm39le HTTP/1.1

0-784250/207/6018_
87.73688475386540.01.9975.43
137.184.150.232h2localhost:443[0/0] Software caused connection abort

0-784250/132/6140_
88.268057674720.01.4979.62
46.101.103.192http/1.1localhost:443GET / HTTP/1.1

0-784250/145/6163_
88.413056811350.01.6789.55
51.15.17.105http/1.1www.siamsolarrooftop.com:80GET /wp-includes/IXR/wp-login.php HTTP/1.1

0-784250/143/6139_
88.812070665570.01.84109.95
139.144.150.8http/1.1localhost:443GET /about HTTP/1.1

0-784250/150/6086_
87.80583454330410.01.5976.96
139.144.150.8http/1.1

0-784250/146/6245_
88.55388572739320.01.69114.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /19223khrretidm90jr.html HTTP/1.1

0-784250/120/6031_
88.56384167437570.01.3989.05
85.208.96.202http/1.1www.chonlateeboi.com:443GET /1746ztiaetid.htm HTTP/1.1

0-784250/142/6343_
87.83383965294640.01.7781.53
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?pipvrsm-372036citems/eti HTTP/1.1

1-7113600/94/6198_
58.495218372908950.01.0780.64
40.77.167.78h2www.thaidaoherb.com:443GET /bzolo5/cute-goat-drawings-sketches-with-pencil-free-easy-s

1-7113600/122/5986R
58.10885066596260.01.3876.34
85.208.96.210http/1.1

1-7113600/88/5963_
58.851093340180.01.0177.24
159.65.138.217http/1.1localhost:80GET / HTTP/1.1

1-7113600/91/5651_
59.022076012370.01.2975.12
139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-7113600/90/5902_
58.71663775262280.01.1187.87
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?ytcqgmy-264665petid HTTP/1.1

1-7113600/89/5962_
59.04187764715940.01.0778.53
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /agpktze-24505citems/eti HTTP/1.1

1-7113600/85/6017_
58.850065341440.01.0776.31
159.65.138.217http/1.1localhost:80GET /.DS_Store HTTP/1.1

1-7113600/92/6091_
58.70684876422540.01.4481.30
139.144.150.8h2localhost:443[0/0] Software caused connection abort

1-7113600/96/6043_
57.30568255492410.01.2377.95
40.77.167.78h2www.thaidaoherb.com:443[1/1] done: stream 1, GET /bzolo5/cute-goat-drawings-sketches-w

1-7113600/92/6010_
59.04283769757650.00.9984.21
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cgrktze-11481eitems/eti.htm HTTP/1.1

1-7113600/85/5801_
58.83284476249590.01.2183.43
137.184.150.232h2localhost:443[0/0] Software caused connection abort

1-7113600/90/6324_
58.20764158947520.01.1691.88
139.144.150.8h2localhost:443

Found on 2024-01-07 00:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652d1dd4e926

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Saturday, 06-Jan-2024 09:59:17 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime:  23 hours 57 minutes 56 seconds
Server load: 3.58 3.32 3.00
Total accesses: 420569 - Total Traffic: 5.8 GB - Total Duration: 446366254
CPU Usage: u115.16 s8.57 cu7122.88 cs375.23 - 8.83% CPU load
4.87 requests/sec - 70.2 kB/second - 14.4 kB/request - 1061.34 ms/request
16 requests currently being processed, 48 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
027257no8yes725004
330342no16yes923006
Sum2024 16480010

_________R_R__R_W___WW_______W__................................
................................_____W_W_R_W______WW___WW____W__
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-3272570/113/3665_
61.971046976400.01.3753.00
134.122.89.242http/1.1localhost:80GET /config.json HTTP/1.1

0-3272570/106/3997_
62.000105729309370.01.2852.34
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /cmywxtz-3187letidm2 HTTP/1.1

0-3272570/101/3659_
61.93263542147840.01.2660.48
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?npqsvcw-105846detidm91a HTTP/1.1

0-3272570/126/3935_
61.83184035359560.01.6750.06
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?sztvrsm-10795gitems/eti.htm HTTP/1.1

0-3272570/157/3811_
61.900033360870.01.7647.97
161.35.155.246http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-3272570/111/3983_
61.98173944897190.01.6050.80
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/117/3798_
61.79284329582490.01.4962.70
23.22.35.162http/1.1www.chonlateeboi.com:443GET /16541jbwjetidm46.html HTTP/1.1

0-3272570/128/3836_
61.922031888410.01.5149.49
134.122.89.242http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-3272570/106/3880_
61.981034349050.01.3491.99
164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1

0-3272570/120/3827R
61.76284229689330.01.6649.62
66.249.72.65http/1.1www.chonlateeadmin.com:443

0-3272570/104/3702_
61.95273735290390.01.3346.34
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/131/3587R
61.74284446852350.01.2945.57
49.232.145.205http/1.1www.ss-cool.com:443

0-3272570/118/3657_
61.920029759810.01.5849.46
164.92.192.25http/1.1localhost:443GET /about HTTP/1.1

0-3272570/104/3903_
61.98184641616540.01.2953.65
3.224.220.101http/1.1www.chonlateeboi.com:443GET /19959gzgqitems/etidm39rq.htm HTTP/1.1

0-3272570/124/3993R
61.912035965370.01.5553.21
23.22.35.162http/1.1

0-3272570/120/3603_
62.00073052127340.01.4346.36
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272571/94/3718W
61.730036469030.01.1647.72
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/100/3962_
60.24173431209400.01.1452.69
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-3272570/127/3853_
61.83184929149700.01.3249.76
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /govmbwb-331iitems/etidm HTTP/1.1

0-3272570/116/3734_
62.000034479670.01.7653.84
164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-3272571/112/3733W
61.920044258930.01.3456.43
164.92.192.25http/1.1localhost:443GET /server-status HTTP/1.1

0-3272571/81/3688W
35.85533041503500.00.8752.07
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-3272570/116/4164_
61.70053832045810.01.3653.47
217.113.194.241http/1.1www.mkandptfoods.com:443GET /dkimfdjp/cloudflare-warp-deb-centos-7.html HTTP/1.1

0-3272570/114/3729_
61.90084829712320.01.1847.86
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qofmbwb-28083sitems/etidm.htm HTTP/1.1

0-3272570/110/3686_
61.821030815510.01.2947.20
161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-3272570/111/3723_
62.070030669960.01.4548.35
161.35.155.246http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-3272570/114/3803_
61.87183632807980.01.3258.43
66.249.68.65http/1.1www.chonlateeadmin.com:443GET /trust.php?spvecaw-82841iitems/eti.htm HTTP/1.1

0-3272570/112/3783_
61.772036028490.01.2479.26
134.122.89.242http/1.1localhost:80GET /_all_dbs HTTP/1.1

0-3272570/62/3602_
61.760034178480.00.9846.07
161.35.155.246http/1.1localhost:443GET / HTTP/1.1

0-3272571/111/3978W
61.690035306640.01.5686.36
39.108.17.168http/1.1www.mkandptfoods.com:443POST /xmlrpc.php HTTP/1.1

0-3272570/112/3701_
61.971032230800.01.3455.39
164.92.192.25http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-3272570/95/4080_
60.791105432566410.01.1150.81
164.92.192.25h2localhost:443[0/0] Software caused connection abort

1-3-0/0/3371.
0.008584535123540.00.0044.32
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?jnmecaw-217954zitems/etid.html HTTP/1.1

1-3-0/0/3218.
0.0085031531300.00.0041.22
192.99.35.94http/1.1www.1smestartup.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3169.
0.0085052626650.00.0042.66
192.99.35.94http/1.1www.1smestartup.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3087.
0.008583940107590.00.0040.28
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?tuthlzs-363356gitems/eti.htm HTTP/1.1

1-3-0/0/3149.
0.008583949882710.00.0044.50
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?hphsvcw-21262uetidm.html HTTP/1.1

1-3-0/0/3325.
0.008584425480700.00.0043.43
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqradej-194689eeti.html HTTP/1.1

1-3-0/0/3243.
0.008584825990870.00.0040.31
52.70.240.171http/1.1www.chonlateeboi.com:443GET /32568xhlfetidm20qxf.htm HTTP/1.1

1-3-0/0/3326.
0.0085128948142115430.00.0044.91
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-3-0/0/3320.
0.008583626592530.00.0043.63
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uzzvrsm-10719mitems/eti.htm HTTP/1.1

1-3-0/0/3186.
0.008572190532384020.00.0041.07
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-3-0/0/3260.
0.008576827179430.00.0046.27
192.99.35.94http/1.1www.1smestartup.com:443GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3418.
0.008584326784420.00.0047.42
52.70.240.171http/1.1ww

Found on 2024-01-06 02:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652d9908951f

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:24:02 ICT
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 56 seconds
Server load: 1.01 1.26 0.96
Total accesses: 142847 - Total Traffic: 1.9 GB - Total Duration: 187804801
CPU Usage: u15.49 s3.23 cu2336.4 cs123.86 - 4.47% CPU load
2.57 requests/sec - 35.7 kB/second - 13.9 kB/request - 1314.73 ms/request
15 requests currently being processed, 177 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
230705yes (old gen)1no00000
43868no1yes329000
53869no1yes230000
63887no0yes131000
73890no8yes329007
83891no0yes626000
93894no0yes032000
Sum8212 15177007

.........................................................W......
..............W.................................................
___W__________W_____________R______W___________________W________
___________________________R_______R________R_________________W_
_WW__________W________W_______WW________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00511136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00506331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.005025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00506889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00506403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0058637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0059806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0059747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00506913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00510786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00506878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00507274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00506975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00511106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00511617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0059056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00506839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0059207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00510777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0059246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00506592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00507034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00507004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00506504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00510857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0059006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00510786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00511166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00506337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00507123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0059487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00507132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.007014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.007011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.007010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.007112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.00708160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.00709262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.007011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0074889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.00709736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.0078949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0056111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319da785ea9da785eaee02df71

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:45 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 35 seconds
Server load: 1.09 1.04 1.23
Total accesses: 167156 - Total Traffic: 1.4 GB - Total Duration: 222821229
CPU Usage: u755.85 s1258.54 cu12423800 cs2986320 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1333.01 ms/request
17 requests currently being processed, 0 idle workers
WCCWCCCWRRRCRRCCC.................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247290/85/12533W
35.1500163066320.00.98102.62
139.162.139.31http/1.1localhost:443GET /server-status HTTP/1.1

1-421250911/31/12646C
16.3701164730902.30.28124.03
139.162.139.31http/1.1localhost:443GET / HTTP/1.1

2-421259041/31/12504C
7.6701164895182.70.1199.58
104.248.168.29http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-421248180/72/12432W
27.1800164253290.00.5092.42
139.162.139.31http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

4-421268881/2/11823C
0.5401160208702.70.01129.29
104.248.168.29http/1.1localhost:443GET /info.php HTTP/1.1

5-421248471/54/11499C
31.1201149082252.70.4697.73
139.162.139.31http/1.1localhost:443GET /info.php HTTP/1.1

6-421246001/99/11423C
39.3801146145872.71.36100.64
104.248.168.29http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

7-421259461/17/11193L
7.5400149101482.70.0983.94
139.162.139.31http/1.1localhost:443GET /.DS_Store HTTP/1.1

8-421268810/6/10415R
1.0100138226280.00.0169.48
139.162.139.31http/1.1

9-421266870/23/10231R
2.6201132854720.00.0389.24
45.79.48.136http/1.1

10-421249150/51/8791R
20.540724118574990.00.3076.56
142.93.122.55http/1.1

11-421268891/6/8712C
1.4601115644982.70.0161.88
104.248.168.29http/1.1localhost:443GET /.git/config HTTP/1.1

12-421269080/2/7480R
0.4601101886120.00.0156.31
139.162.139.31http/1.1

13-421269090/3/5791R
0.390180146520.00.0057.41
139.162.139.31http/1.1

14-421269111/3/4129C
0.740159524052.70.0129.19
104.248.168.29http/1.1localhost:443GET /.env HTTP/1.1

15-421269141/1/3698C
0.050252456072.70.0037.78
104.248.168.29http/1.1localhost:443GET /telescope/requests HTTP/1.1

16-421269441/1/2816C
0.010237702752.70.0024.80
139.162.139.31http/1.1localhost:443GET /.env HTTP/1.1

17-421-0/0/1946.
0.00951027282540.00.0019.67
124.120.94.45http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css

18-421-0/0/1517.
0.001643024024520.00.007.27
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-421-0/0/1004.
0.001647015341220.00.005.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-421-0/0/1175.
0.00121978416577850.00.008.98
172.68.234.228http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1666251444.71553611755371093750

21-421-0/0/835.
0.001654011428820.00.004.62
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-421-0/0/788.
0.001381011318000.00.003.41
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-421-0/0/787.
0.001637011185000.00.0018.86
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-421-0/0/356.
0.00169104758130.00.002.96
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

25-421-0/0/204.
0.00169002702970.00.0045.99
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-421-0/0/196.
0.00154502258210.00.001.31
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

27-421-0/0/103.
0.00170501463500.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-421-0/0/3.
0.001704012070.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-421-0/0/64.
0.00144701086510.00.000.51
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-421-0/0/4.
0.00169405000.00.000.09
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

31-421-0/0/19.
0.001642096110.00.000.44
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-421-0/0/3.
0.001703080.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-421-0/0/1.
0.001712000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-421-0/0/1.
0.001711010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-421-0/0/11.
0.001678064400.00.000.05
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-421-0/0/1.
0.001710010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-421-0/0/7.
0.001686032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421-0/0/3.
0.001701036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421-0/0/9.
0.001680028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421-0/0/4.
0.00169309810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 21subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 222 seconds, (range: 32...293)index usage: 0%, cache usage: 0%total entries stored since starting: 6419total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23279 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: pop.bannongsaischool.com
Port: 443
URL: https://pop.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-01 23:21
Open for 469 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6caf2072965b

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 06:22:09 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  27 days 20 hours 20 minutes 48 seconds
Server load: 2.00 2.00 2.00
Total accesses: 1844466 - Total Traffic: 23.8 GB - Total Duration: 2140712998
CPU Usage: u176.72 s105.23 cu32089.3 cs2210.25 - 1.44% CPU load
.767 requests/sec - 10.4 kB/second - 13.5 kB/request - 1160.61 ms/request
2 requests currently being processed, 126 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes230000
229661no0yes032000
329394no0yes032000
529374no0yes032000
Sum400 2126000

__W_______R_____________________................................
________________________________________________________________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/11/14759_
2.3660160256550.00.01193.64
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/10/15253_
2.5860139008950.00.03198.88
128.199.195.68http/1.1localhost:80GET /.git/config HTTP/1.1

0-92293731/13/14826W
2.7200150306110.00.03192.60
138.197.88.136http/1.1localhost:443GET /server-status HTTP/1.1

0-92293730/8/15001_
2.8180145868950.00.01185.88
142.93.64.15http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-92293730/10/14908_
2.73110147705720.00.03185.30
128.199.61.251http/1.1localhost:443GET / HTTP/1.1

0-92293730/10/15137_
2.5930156638040.00.01188.42
198.199.121.22http/1.1localhost:80GET / HTTP/1.1

0-92293730/11/14811_
2.0270145587210.00.01200.11
128.199.61.251h2localhost:443[0/0] Software caused connection abort

0-92293730/8/15115_
2.2730150176780.00.03187.52
138.68.163.10http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/13/15080_
2.8340145223140.00.01229.81
128.199.61.251http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/12/15206_
2.61100148852860.00.07194.79
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/12/14772R
2.287516154280500.00.01200.61
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-92293730/13/14786_
2.3790147116910.00.01195.38
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/16/14647_
2.6190137181680.00.03185.40
128.199.61.251http/1.1

0-92293730/15/14806_
2.3595169077150.00.03185.96
138.197.88.136http/1.1

0-92293730/13/15759_
2.74100141537910.00.03187.69
142.93.64.15http/1.1localhost:80GET / HTTP/1.1

0-92293730/14/14806_
2.8440165338300.00.01182.40
138.197.88.136http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/11/14850_
2.6480143397160.00.01206.27
138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/16/14923_
2.6450144891050.00.03189.21
159.223.102.13http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/8/14736_
2.36110160243150.00.01200.49
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-92293730/13/14958_
2.8090144636770.00.03193.71
142.93.64.15http/1.1localhost:80GET /about HTTP/1.1

0-92293730/9/14946_
2.2740181441040.00.01193.27
161.35.190.56http/1.1localhost:443GET / HTTP/1.1

0-92293730/11/14976_
2.6480147004650.00.01203.99
128.199.61.251h2localhost:443[0/0] Software caused connection abort

0-92293730/13/15431_
2.35916150748190.00.05188.17
128.199.61.251http/1.1

0-92293730/10/14641_
2.8400138763940.00.01190.06
128.199.61.251http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/13/14937_
2.2898162204850.00.01186.79
138.197.88.136h2localhost:443[0/0] Software caused connection abort

0-92293730/12/14615_
2.8350135973540.00.03196.88
142.93.64.15http/1.1localhost:80GET /_all_dbs HTTP/1.1

0-92293730/10/15117_
2.8350144712710.00.01194.45
128.199.61.251http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/12/14897_
2.8260159153250.00.01213.25
142.93.64.15http/1.1localhost:80GET /login.action HTTP/1.1

0-92293730/10/14697_
2.6480152163320.00.03175.84
138.197.88.136http/1.1

0-92293730/12/15160_
2.8340135117420.00.01225.05
142.93.64.15http/1.1localhost:80GET /.env HTTP/1.1

0-92293730/16/14635_
2.3620155554100.00.02199.09
161.35.190.56http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/10/14900_
2.6610145814280.00.01185.00
159.223.102.13http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15731.
0.0077150138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.0077150136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.0077150174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.0077150150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.0077150146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.0077150134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.0077150172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.0077150165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.0077150127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.0077150152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.0077150148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.0077150159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.0077150159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15189.
0.0077150137016410.00.00183.04
159.223.102.13http/1.1localhost:80GET /config.json HTTP/1.1

1-92-0/0/15367.
0.00

Found on 2024-02-01 23:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6caf771c4f63

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 07:46:38 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  1 day 21 hours 45 minutes 17 seconds
Server load: 2.61 3.13 2.92
Total accesses: 780860 - Total Traffic: 10.6 GB - Total Duration: 956044495
CPU Usage: u163.79 s13.99 cu13326.1 cs698.67 - 8.62% CPU load
4.74 requests/sec - 67.4 kB/second - 14.2 kB/request - 1224.35 ms/request
7 requests currently being processed, 121 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
08425no2yes230001
111360no1yes329000
216287no0yes032000
316453no2yes230001
Sum405 7121002

_______________W__W_______________________R__W______W___________
________________________________W___R___________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-784250/139/6027_
88.93084583173540.02.0089.53
66.249.66.18http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.GET /wp-content/themes/chonlateedesign/js/scripts.js?ver=5.8.8 

0-784250/153/6505_
88.80783960679930.01.4485.91
185.191.171.5http/1.1www.chonlateeadmin.com:443GET /bpqdlch-27210detid.htm HTTP/1.1

0-784250/138/6042_
88.85391672356210.01.8590.16
185.191.171.17http/1.1www.chonlateefood.com:443GET /geti/srh39538sbrzitems HTTP/1.1

0-784250/170/6378_
88.50884070069730.01.7882.77
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ygnktze-27909aitems/etidm14.htm HTTP/1.1

0-784250/153/6098_
88.83484966915350.01.5878.85
52.70.240.171http/1.1www.chonlateeboi.com:443GET /21167sdsletidm91dl.html HTTP/1.1

0-784250/213/6459_
88.80784878180940.03.0385.19
52.70.240.171http/1.1www.chonlateeboi.com:443GET /21151sdslitems/etidm93nl HTTP/1.1

0-784250/157/6264_
88.20398158961860.02.0396.45
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1

0-784250/141/6299_
88.863067740960.01.5482.39
137.184.150.232http/1.1localhost:443GET /about HTTP/1.1

0-784250/202/6316_
87.863172362744330.01.98124.83
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1

0-784250/191/6234_
88.806071765400.01.9680.21
139.144.150.8http/1.1localhost:443GET / HTTP/1.1

0-784250/125/5986_
88.489076504920.01.4276.63
137.184.150.232h2localhost:443[0/0] Software caused connection abort

0-784250/137/5943_
88.6601875605650.01.6377.45
66.249.66.18http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.GET /wp-content/themes/chonlateedesign/js/scripts.js?ver=5.8.8 

0-784250/147/6006_
87.64283453369170.01.7679.69
52.167.144.229h2www.chonlateefbl.com:443[1/1] done: stream 1, GET /rare-vintage-disney-masterpiece-fant

0-784250/150/6215_
88.88187181944040.01.8184.10
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /srhktze-1747uitems/etidm HTTP/1.1

0-784250/131/6650_
88.661056887820.01.4785.89
159.65.138.217http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-784251/218/5993W
88.300083435860.01.9678.31
137.184.150.232http/1.1localhost:443GET /server-status HTTP/1.1

0-784250/160/6156_
88.940105464811400.01.7480.41
3.224.220.101http/1.1www.chonlateeboi.com:443GET /28371khrritems/etidm.htm HTTP/1.1

0-784250/151/6302_
88.76888659267790.01.4981.88
185.191.171.13http/1.1www.chonlateefood.com:443GET /items/gvv1826givbtidm.html HTTP/1.1

0-784251/144/6307W
88.680062245030.01.6280.41
3.224.220.101http/1.1www.chonlateeboi.com:443GET /40817idtueti.html HTTP/1.1

0-784250/131/6067_
88.87283668816090.01.5985.41
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /hxwktze-1736jitems/etidm93ukj.html HTTP/1.1

0-784250/229/6346_
88.00084490375040.02.1988.38
3.224.220.101http/1.1www.chonlateeboi.com:443GET /2160ymuietidm97cyr.htm HTTP/1.1

0-784250/127/6035_
88.624071156990.01.4482.16
159.65.138.217http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-784250/140/6620_
88.863073810720.01.7588.31
139.144.150.8http/1.1localhost:443GET /login.action HTTP/1.1

0-784250/156/6121_
88.871063169430.01.6388.58
139.144.150.8http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-784250/207/6018_
87.73088475386540.01.9975.43
137.184.150.232h2localhost:443[0/0] Software caused connection abort

0-784250/132/6140_
88.261057674720.01.4979.62
46.101.103.192http/1.1localhost:443GET / HTTP/1.1

0-784250/145/6163_
88.416056811350.01.6789.55
51.15.17.105http/1.1www.siamsolarrooftop.com:80GET /wp-includes/IXR/wp-login.php HTTP/1.1

0-784250/143/6139_
88.815070665570.01.84109.95
139.144.150.8http/1.1localhost:443GET /about HTTP/1.1

0-784250/150/6086_
87.80083454330410.01.5976.96
139.144.150.8http/1.1

0-784250/146/6245_
88.55688572739320.01.69114.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /19223khrretidm90jr.html HTTP/1.1

0-784250/120/6031_
88.56684167437570.01.3989.05
85.208.96.202http/1.1www.chonlateeboi.com:443GET /1746ztiaetid.htm HTTP/1.1

0-784250/142/6343_
87.83783965294640.01.7781.53
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?pipvrsm-372036citems/eti HTTP/1.1

1-7113600/95/6199_
59.170072908950.01.0880.64
137.184.150.232http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-7113600/123/5987_
59.15284966604760.01.4076.36
85.208.96.210http/1.1www.chonlateeadmin.com:443GET /triejnl-48340vetidm3 HTTP/1.1

1-7113600/88/5963_
58.854093340180.01.0177.24
159.65.138.217http/1.1localhost:80GET / HTTP/1.1

1-7113600/93/5653_
59.180076012370.01.2975.12
52.167.144.216h2www.chonlateepr.com:443GET /nvoe/fstes0024496353.html HTTP/2.0

1-7113600/90/5902_
58.71263775262280.01.1187.87
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?ytcqgmy-264665petid HTTP/1.1

1-7113600/89/5962_
59.04487764715940.01.0778.53
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /agpktze-24505citems/eti HTTP/1.1

1-7113600/85/6017_
58.853065341440.01.0776.31
159.65.138.217http/1.1localhost:80GET /.DS_Store HTTP/1.1

1-7113600/92/6091_
58.70284876422540.01.4481.30
139.144.150.8h2localhost:443[0/0] Software caused connection abort

1-7113600/97/6044_
59.151055492410.01.2377.95
139.144.150.8http/1.1localhost:443GET /.env HTTP/1.1

1-7113600/92/6010_
59.04583769757650.00.9984.21
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cgrktze-11481eitems/eti.htm HTTP/1.1

1-7113600/85/5801R
58.83684476249590.01.2183.43
23.22.35.162http/1.1www.chonlateeadmin.com:443

1-7113600/90/6324_
58.20264158947520.01.1691.88
139.144.150.8h2localhost:443

Found on 2024-01-07 00:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6cafea3ce160

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Saturday, 06-Jan-2024 09:59:16 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime:  23 hours 57 minutes 55 seconds
Server load: 3.58 3.32 3.00
Total accesses: 420557 - Total Traffic: 5.8 GB - Total Duration: 446360171
CPU Usage: u114.99 s8.56 cu7122.88 cs375.23 - 8.83% CPU load
4.87 requests/sec - 70.2 kB/second - 14.4 kB/request - 1061.35 ms/request
15 requests currently being processed, 49 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
027257no8yes428004
330342no14yes1121013
Sum2022 1549017

_W_____________R_____W_______R__................................
................................___W_RWW____W______W_RW_W___WW__
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-3272570/113/3665_
61.970046976400.01.3753.00
134.122.89.242http/1.1localhost:80GET /config.json HTTP/1.1

0-3272571/105/3996W
60.920029298800.01.2752.32
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /cmywxtz-3187letidm2 HTTP/1.1

0-3272570/101/3659_
61.93163542147840.01.2660.48
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?npqsvcw-105846detidm91a HTTP/1.1

0-3272570/126/3935_
61.83084035359560.01.6750.06
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?sztvrsm-10795gitems/eti.htm HTTP/1.1

0-3272570/157/3811_
61.901033360870.01.7647.97
161.35.155.246http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-3272570/111/3983_
61.98073944897190.01.6050.80
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/117/3798_
61.79184329582490.01.4962.70
23.22.35.162http/1.1www.chonlateeboi.com:443GET /16541jbwjetidm46.html HTTP/1.1

0-3272570/128/3836_
61.921031888410.01.5149.49
134.122.89.242http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-3272570/106/3880_
61.980034349050.01.3491.99
164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1

0-3272570/120/3827_
61.76184229689330.01.6649.62
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /dzsmbwb-5944fetidm34qmf HTTP/1.1

0-3272570/104/3702_
61.95173735290390.01.3346.34
143.198.201.166http/1.1www.xn--72cztbd4dxek5iqd.com:44POST //xmlrpc.php HTTP/1.1

0-3272570/131/3587_
61.74184446852350.01.2945.57
23.22.35.162http/1.1www.chonlateeboi.com:443GET /9221sstyetidm60.html HTTP/1.1

0-3272570/118/3657_
61.921029759810.01.5849.46
164.92.192.25http/1.1localhost:443GET /about HTTP/1.1

0-3272570/104/3903_
61.98084641616540.01.2953.65
3.224.220.101http/1.1www.chonlateeboi.com:443GET /19959gzgqitems/etidm39rq.htm HTTP/1.1

0-3272570/124/3993_
61.911035965370.01.5553.21
134.122.89.242http/1.1localhost:80GET /.git/config HTTP/1.1

0-3272570/119/3602R
61.682052120040.01.4246.35
143.198.201.166http/1.1

0-3272570/94/3718_
61.73184136469030.01.1647.72
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?uqxqxjd-253663ketidm23hd.html HTTP/1.1

0-3272570/100/3962_
60.24273431209400.01.1452.69
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-3272570/127/3853_
61.83084929149700.01.3249.76
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /govmbwb-331iitems/etidm HTTP/1.1

0-3272570/115/3733_
61.872034479670.01.7653.84
134.122.89.242http/1.1localhost:80GET /.env HTTP/1.1

0-3272570/112/3733_
61.92163244258930.01.3456.43
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?zuchsbr-3236petidm9.htm HTTP/1.1

0-3272571/81/3688W
35.85532041503500.00.8752.07
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-3272570/116/4164_
61.70153832045810.01.3653.47
217.113.194.241http/1.1www.mkandptfoods.com:443GET /dkimfdjp/cloudflare-warp-deb-centos-7.html HTTP/1.1

0-3272570/114/3729_
61.90184829712320.01.1847.86
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qofmbwb-28083sitems/etidm.htm HTTP/1.1

0-3272570/110/3686_
61.820030815510.01.2947.20
161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-3272570/110/3722_
61.35163030669960.01.4548.35
66.249.71.170http/1.1www.chonlateeadmin.com:443GET /igkmxkt-18975xetidm54v.htm HTTP/1.1

0-3272570/114/3803_
61.87083632807980.01.3258.43
66.249.68.65http/1.1www.chonlateeadmin.com:443GET /trust.php?spvecaw-82841iitems/eti.htm HTTP/1.1

0-3272570/112/3783_
61.771036028490.01.2479.26
134.122.89.242http/1.1localhost:80GET /_all_dbs HTTP/1.1

0-3272570/62/3602_
61.761034178480.00.9846.07
161.35.155.246http/1.1localhost:443GET / HTTP/1.1

0-3272570/111/3978R
61.69478235306640.01.5686.36
39.108.17.168http/1.1www.mkandptfoods.com:443

0-3272570/112/3701_
61.970032230800.01.3455.39
164.92.192.25http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-3272570/95/4080_
60.790105432566410.01.1150.81
164.92.192.25h2localhost:443[0/0] Software caused connection abort

1-3-0/0/3371.
0.008484535123540.00.0044.32
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?jnmecaw-217954zitems/etid.html HTTP/1.1

1-3-0/0/3218.
0.0084031531300.00.0041.22
192.99.35.94http/1.1www.1smestartup.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3169.
0.0084052626650.00.0042.66
192.99.35.94http/1.1www.1smestartup.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3087.
0.008483940107590.00.0040.28
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?tuthlzs-363356gitems/eti.htm HTTP/1.1

1-3-0/0/3149.
0.008483949882710.00.0044.50
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?hphsvcw-21262uetidm.html HTTP/1.1

1-3-0/0/3325.
0.008484425480700.00.0043.43
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqradej-194689eeti.html HTTP/1.1

1-3-0/0/3243.
0.008484825990870.00.0040.31
52.70.240.171http/1.1www.chonlateeboi.com:443GET /32568xhlfetidm20qxf.htm HTTP/1.1

1-3-0/0/3326.
0.0084128948142115430.00.0044.91
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-3-0/0/3320.
0.008483626592530.00.0043.63
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uzzvrsm-10719mitems/eti.htm HTTP/1.1

1-3-0/0/3186.
0.008472190532384020.00.0041.07
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-3-0/0/3260.
0.008476827179430.00.0046.27
192.99.35.94http/1.1www.1smestartup.com:443GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A

1-3-0/0/3418.
0.008484326784420.00.0047.42

Found on 2024-01-06 02:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6cafc248eaab

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:24:06 ICT
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 59 seconds
Server load: 1.01 1.26 0.96
Total accesses: 142916 - Total Traffic: 1.9 GB - Total Duration: 187856552
CPU Usage: u6.1 s2.62 cu2343.01 cs124.29 - 4.46% CPU load
2.58 requests/sec - 35.7 kB/second - 13.9 kB/request - 1314.45 ms/request
14 requests currently being processed, 178 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
43868no1yes428000
53869no1yes329000
63887no0yes131000
73890no8yes527007
83891no0yes131000
93894no0yes032000
Sum7111 14178007

................................................................
................................................................
___W_________W____W___W_________WR_W____________________________
_____________W_____________________W_________________R_RR_____W_
__W_____________________________________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00911136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00906331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.009025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00906889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00906403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0098637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0099806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0099747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00906913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00910786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00906878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00907274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00906975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00911106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00911617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0099056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00906839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0099207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00910777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0099246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00906592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00907034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00907004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00906504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00910857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0099006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00910786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00911166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00906337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00907123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0099487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00907132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0010014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.0010011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.0010010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.0010112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.001008160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.001009262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.0010011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.00104889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.001009736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.00108949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0096111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf.htm HTTP/1.1

1-1-0/0/1315.
0.0010904</

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318ce7b91c8ce7b91c712d6c2e

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:44 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 35 seconds
Server load: 1.09 1.04 1.23
Total accesses: 167143 - Total Traffic: 1.4 GB - Total Duration: 222821198
CPU Usage: u755.53 s1258.51 cu12423800 cs2986320 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1333.12 ms/request
15 requests currently being processed, 2 idle workers
_RCWRRCRRR_RRRRRR.................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247290/85/12533_
35.150446163066320.00.98102.62
139.144.172.77http/1.1

1-421250910/30/12645R
16.340648164730880.00.28124.03
139.162.139.31http/1.1

2-421259041/31/12504C
7.6701164895182.70.1199.58
104.248.168.29http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-421248180/71/12431W
27.1700164253270.00.4992.42
104.248.168.29http/1.1localhost:443GET /server-status HTTP/1.1

4-421268880/1/11822R
0.480540160208670.00.00129.28
104.248.168.29http/1.1

5-421248470/53/11498R
31.100431149082220.00.4697.73
45.79.48.136http/1.1

6-421246001/99/11423C
39.3801146145872.71.36100.64
104.248.168.29http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

7-421259460/15/11191R
7.530444149101460.00.0883.93
104.248.168.29http/1.1

8-421268810/5/10414R
0.920501138226270.00.0169.48
104.248.168.29http/1.1

9-421266870/22/10230R
2.600491132854700.00.0389.24
104.248.168.29http/1.1

10-421249150/51/8791_
20.540724118574990.00.3076.56
142.93.122.55http/1.1

11-421268890/5/8711R
1.440430115644960.00.0161.88
104.248.168.29http/1.1

12-421269080/1/7479R
0.450461101886090.00.0056.31
104.248.168.29http/1.1

13-421269090/2/5790R
0.38039280146500.00.0057.41
104.248.168.29http/1.1

14-421269110/2/4128R
0.73038459524020.00.0129.18
104.248.168.29http/1.1

15-421269140/0/3697R
0.001152456030.00.0037.77
104.248.168.29http/1.1

16-421269440/0/2815R
0.000037702710.00.0024.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-421-0/0/1946.
0.00951027282540.00.0019.67
124.120.94.45http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css

18-421-0/0/1517.
0.001643024024520.00.007.27
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-421-0/0/1004.
0.001647015341220.00.005.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-421-0/0/1175.
0.00121878416577850.00.008.98
172.68.234.228http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1666251444.71553611755371093750

21-421-0/0/835.
0.001654011428820.00.004.62
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-421-0/0/788.
0.001380011318000.00.003.41
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-421-0/0/787.
0.001637011185000.00.0018.86
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-421-0/0/356.
0.00169104758130.00.002.96
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

25-421-0/0/204.
0.00169002702970.00.0045.99
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-421-0/0/196.
0.00154402258210.00.001.31
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

27-421-0/0/103.
0.00170501463500.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-421-0/0/3.
0.001704012070.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-421-0/0/64.
0.00144601086510.00.000.51
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-421-0/0/4.
0.00169405000.00.000.09
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

31-421-0/0/19.
0.001642096110.00.000.44
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-421-0/0/3.
0.001703080.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-421-0/0/1.
0.001712000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-421-0/0/1.
0.001711010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-421-0/0/11.
0.001678064400.00.000.05
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-421-0/0/1.
0.001710010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-421-0/0/7.
0.001686032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421-0/0/3.
0.001701036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421-0/0/9.
0.001680028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421-0/0/4.
0.00169309810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 20subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 223 seconds, (range: 33...294)index usage: 0%, cache usage: 0%total entries stored since starting: 6418total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23266 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: pop.bannongsaischool.com
Port: 80
URL: http://pop.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-02 02:08
Open for 469 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6caf7cf2ba52

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 09:08:41 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  27 days 23 hours 7 minutes 20 seconds
Server load: 2.00 2.00 2.00
Total accesses: 1845092 - Total Traffic: 23.8 GB - Total Duration: 2140724322
CPU Usage: u184.45 s108.38 cu32089.3 cs2210.25 - 1.43% CPU load
.764 requests/sec - 10.3 kB/second - 13.5 kB/request - 1160.23 ms/request
1 requests currently being processed, 127 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes032000
229661no0yes032000
329394no0yes131000
529374no0yes032000
Sum400 1127000

________________________________................................
_______________________________________________________W________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/14/14762_
5.105400160256560.00.01193.64
143.198.72.96http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/13/15256_
5.085390139008970.00.03198.89
143.198.72.96http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/18/14831_
5.095380150306340.00.05192.62
178.62.73.12http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/15/15008_
5.135400145868980.00.01185.89
143.198.72.96http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/15/14913_
5.145350147705900.00.05185.32
159.223.102.13http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/13/15140_
4.83538490156642950.00.02188.43
147.182.168.210h2localhost:443[0/0] Software caused connection abort

0-92293730/12/14812_
4.6980145587210.00.03200.13
143.198.72.96http/1.1

0-92293730/11/15118_
5.115380150176790.00.03187.53
142.93.64.15http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/20/15087_
5.135390145223170.00.02229.82
159.223.102.13http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/17/15211_
5.135400148852870.00.07194.80
159.223.102.13http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/17/14777_
5.095380154280510.00.02200.61
142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/18/14791_
4.865360147116930.00.01195.38
147.182.168.210http/1.1

0-92293730/19/14650_
5.085400137181700.00.04185.40
178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/22/14813_
5.1200169077180.00.04185.97
143.198.72.96http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/16/15762_
4.84536529141543210.00.06187.72
178.128.151.41h2localhost:443[0/0] Software caused connection abort

0-92293730/18/14810_
4.825400165338320.00.02182.41
146.190.160.11h2localhost:443[0/0] Software caused connection abort

0-92293730/18/14857_
5.2400143397190.00.02206.28
192.53.126.23http/1.1localhost:80GET /v2/_catalog HTTP/1.1

0-92293730/19/14926_
5.135390144891060.00.04189.22
143.198.72.96http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/15/14743_
5.135400160243160.00.01200.49
142.93.64.15http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/19/14964_
5.23110144636790.00.04193.71
192.53.126.23http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-92293730/12/14949_
4.83539503181446080.00.02193.28
143.198.72.96h2localhost:443[0/0] Software caused connection abort

0-92293730/16/14981_
5.025400147004840.00.02204.00
128.199.61.251http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/19/15437_
5.145350150748210.00.05188.17
161.35.190.56http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/14/14645_
5.125330138763960.00.01190.06
178.62.73.12http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/17/14941_
5.135400162204870.00.02186.79
161.35.190.56http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/15/14618_
5.135390135973720.00.03196.88
161.35.190.56http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/14/15121_
5.105380144712730.00.01194.46
143.198.72.96http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/15/14900_
5.085400159153260.00.01213.25
147.182.168.210http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/18/14705_
5.125350152163350.00.03175.84
178.62.73.12http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/15/15163_
4.875400135117420.00.03225.07
178.62.73.12h2localhost:443[0/0] Software caused connection abort

0-92293730/21/14640_
5.105390155554200.00.02199.10
178.128.151.41http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/15/14905_
5.055350145814300.00.02185.01
178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-92-0/0/15731.
0.00177060138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.00177060136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.00177060174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.00177060150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.00177060146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.00177060134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.00177060172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.00177060165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.00177060127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.00177060152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.00177060148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.00177060159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.00177060159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92

Found on 2024-02-02 02:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6caf8d576af1

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 07:09:30 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  1 day 21 hours 8 minutes 9 seconds
Server load: 2.56 2.66 2.71
Total accesses: 771862 - Total Traffic: 10.5 GB - Total Duration: 949677231
CPU Usage: u195.17 s16 cu13132.8 cs688.42 - 8.64% CPU load
4.75 requests/sec - 67.7 kB/second - 14.3 kB/request - 1230.37 ms/request
5 requests currently being processed, 59 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
08425no5yes428002
229622no2yes131001
Sum207 559003

____________R____W_____WW_______................................
_________W______________________................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-784250/24/5912_
10.30385382256680.00.2987.82
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[6/6] done: stream 11, GET /wp-content/uploads/2021/06/01-06-21

0-784250/25/6377_
10.323059778270.00.1784.63
207.154.240.169http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-784250/13/5917_
9.05167871335760.00.1588.46
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-784250/16/6224_
10.420069087420.00.2581.24
207.154.240.169http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-784250/13/5958_
10.42084265987010.00.1777.44
3.224.220.101http/1.1www.chonlateeboi.com:443GET /494qbkeitems/etidm22a.html HTTP/1.1

0-784250/71/6317_
9.952122477172990.01.4883.63
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/feature_Home-02-768x776.jpg HTT

0-784250/20/6127_
10.32384257990480.00.3094.72
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /igxitgo-27061kitems/etidm62 HTTP/1.1

0-784250/18/6176_
10.094066892750.00.2081.04
159.65.58.104http/1.1localhost:80GET /.env HTTP/1.1

0-784250/84/6198_
10.40085061996740.00.36123.21
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /dvsitgo-28044fetidm8.htm HTTP/1.1

0-784250/17/6060_
10.134105470923160.00.2178.45
81.94.159.31http/1.1www.nptpropertythailand.com:443GET /wp-admin/admin-ajax.php?action=acf/fields/upload_file/add_

0-784250/12/5873_
10.19183975710310.00.1675.37
178.18.243.135http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97

0-784250/17/5823_
10.34383774784870.00.2376.05
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?rwsqxjd-387950fetidm9 HTTP/1.1

0-784250/16/5875R
10.23788152491990.00.2178.14
3.224.220.101http/1.1

0-784250/18/6083_
10.13275280988980.00.2182.50
66.249.74.107http/1.1www.thaidaoherb.com:443GET /trust.php?item/owr274txwttidm.html HTTP/1.1

0-784250/18/6537_
10.35284155940970.00.2184.63
85.208.96.197http/1.1www.chonlateeboi.com:443GET /4006xhlfetidm98c HTTP/1.1

0-784250/18/5793_
10.011082435850.00.2276.57
159.65.58.104http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-784250/27/6023_
10.02684964000030.00.1678.83
49.229.231.63http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/cropped-Icon_Home-32x32.png HTT

0-784251/13/6164W
10.010058331110.00.1780.56
178.18.243.135http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97

0-784250/20/6183_
10.28483861401500.00.2279.01
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /cgritgo-28069eitems/etidm15 HTTP/1.1

0-784250/14/5950_
10.362067802270.00.1383.96
207.154.240.169http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-784250/23/6140_
10.391133689494650.00.3886.58
49.229.231.63http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/06/01-02-215x215.jpg HTTP/2.0

0-784250/12/5920_
10.056070297280.00.0980.81
159.65.58.104http/1.1localhost:80GET /_all_dbs HTTP/1.1

0-784250/16/6496_
9.90483572887570.00.1886.74
23.22.35.162http/1.1www.chonlateeboi.com:443GET /11631ztiaitems/etidm94ja.htm HTTP/1.1

0-784251/15/5980W
10.020062210280.00.1587.10
23.22.35.162http/1.1www.chonlateeboi.com:443GET /397qbkeitems/etidm55 HTTP/1.1

0-784251/17/5828W
10.230074527980.00.2673.71
207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.1

0-784250/13/6021_
10.23683956823860.00.1578.28
3.224.220.101http/1.1www.chonlateeboi.com:443GET /22933crwditems/etidm37 HTTP/1.1

0-784250/14/6032_
10.133055940290.00.1988.07
159.65.58.104http/1.1localhost:80GET /config.json HTTP/1.1

0-784250/12/6008_
10.20084769693860.00.25108.36
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /rvgitgo-25744tetidm88eit HTTP/1.1

0-784250/16/5952_
9.870153449900.00.1575.52
203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704586148.19250702857971191406

0-784250/21/6120_
10.27565771772600.00.23113.36
37.140.216.216http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.1

0-784250/12/5923_
9.99167566583960.00.1387.79
37.187.135.45http/1.1www.ltclevelup.com:443POST /wp-login.php HTTP/1.1

0-784250/16/6217_
10.36183464389500.00.1879.94
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vtkitgo-28010xitems/etid.html HTTP/1.1

1-7-0/0/6104.
0.0028986372162760.00.0079.57
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /mnbsall-45161oeti.html HTTP/1.1

1-7-0/0/5864.
0.0028924065905680.00.0074.96
198.98.55.181http/1.1www.pndintertrade.com:443POST /wp-login.php HTTP/1.1

1-7-0/0/5875.
0.00289205892564370.00.0076.23
66.249.65.233http/1.1www.chonlateenextbiz.com:443GET /home-depot-metal-washer-hoses-e-NZEga2cg HTTP/1.1

1-7-0/0/5560.
0.0028983675273480.00.0073.83
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /dyssall-32958fetidm97q.htm HTTP/1.1

1-7-0/0/5812.
0.00289221674555930.00.0086.76
167.99.182.39http/1.1localhost:443GET /server-status HTTP/1.1

1-7-0/0/5873.
0.0028983864080620.00.0077.46
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /oydsall-41523qitems/etidm.htm HTTP/1.1

1-7-0/0/5932.
0.00289135464692830.00.0075.24
66.249.71.192http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%

1-7-0/0/5999.
0.0028954875585810.00.0079.86
40.77.167.52http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%9F%E0%B8%B4%E0%B8%A1

1-7-0/0/5947.
0.0028988554793410.00.0076.72
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?uwvadej-59859ieti.html HTTP/1.1

1-7-0/0/5918.
0.00289112468952690.00.0083.22
114.119.137.190http/1.1www.dreamhightravel.com:443GET /dhtpe65-b-may-oct23-5d4n/?sow-85685=6 HTTP/1.1

1-7-0/0/5716.
0.0028984675490620.00.0082.22
185.191.171.9http/1.1www.chonlateeadmin.com:443GET /lkartxd-18718netidm54y HTTP/1.1

1-7-0/0/6234.

Found on 2024-01-07 00:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6caf1d9ef761

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 05-Jan-2024 20:23:26 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 hours 22 minutes 5 seconds
Server load: 2.54 2.55 2.53
Total accesses: 186553 - Total Traffic: 2.7 GB - Total Duration: 148877061
CPU Usage: u224.72 s12.28 cu2734.05 cs151.16 - 8.36% CPU load
5 requests/sec - 76.4 kB/second - 15.3 kB/request - 798.042 ms/request
5 requests currently being processed, 59 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
06904no7yes131004
25731no12yes428007
Sum2019 5590011

___W____________________________................................
_______W___________________RW_W_................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069040/200/2173_
113.25083817883300.02.4534.24
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?eeehsbr-205911retidm6 HTTP/1.1

0-069040/192/2307_
113.22184216992980.02.4728.57
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?auyggdh-141635letidm50n HTTP/1.1

0-069040/187/2136_
112.95184529214040.02.3241.74
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ttixsgj-7962vetid.htm HTTP/1.1

0-069041/200/2331W
112.510017265340.02.3430.23
185.191.171.8http/1.1www.chonlateefood.com:443GET /getid/fou34507ihpoitems HTTP/1.1

0-069040/189/2272_
113.182017680790.02.3728.52
147.182.130.98http/1.1localhost:80GET /about HTTP/1.1

0-069040/207/2513_
113.133017606180.02.6431.34
147.182.130.98http/1.1localhost:80GET / HTTP/1.1

0-069040/190/2130_
113.05485117372750.02.2226.51
52.70.240.171http/1.1www.chonlateeboi.com:443GET /4111rbhsitems/etidm43ds HTTP/1.1

0-069040/181/2254_
112.804018007130.02.2429.49
54.38.85.37http/1.1www.1smestartup.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-069040/196/2282_
112.66385317019000.02.4563.25
157.55.39.49h2www.chonlateeadmin.com:443[0/0] init

0-069040/185/2231_
113.221016932210.02.4028.84
147.182.168.210http/1.1localhost:80GET /telescope/requests HTTP/1.1

0-069040/190/2204_
111.450220820625050.02.2827.02
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /owdxsgj-19943qetidm52bj.html HTTP/1.1

0-069040/187/2143_
112.38389716938870.02.4328.08
185.191.171.19http/1.1www.chonlateeboi.com:443GET /30262ebqoetidm19y HTTP/1.1

0-069040/169/2121_
113.020017429580.02.6530.24
147.182.168.210http/1.1localhost:80GET /login.action HTTP/1.1

0-069040/193/2388_
113.05484118060580.02.4331.82
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?fufhlzs-5660sitems/eti.htm HTTP/1.1

0-069040/175/2464_
112.834020055050.02.3333.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /pubcategoryrbhs/13 HTTP/1.1

0-069040/201/2187_
112.88284817398770.02.3929.35
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ifxxsgj-31793keti.html HTTP/1.1

0-069040/188/2136_
113.221017613480.02.3027.97
147.182.130.98http/1.1localhost:80GET /v2/_catalog HTTP/1.1

0-069040/185/2312_
112.93284217243600.02.2132.27
23.22.35.162http/1.1www.chonlateeboi.com:443GET /4134rbhsetidm10a.htm HTTP/1.1

0-069040/188/2331_
113.22184216742890.02.3730.77
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ykyqxjd-151357litems/etid.html HTTP/1.1

0-069040/189/2169_
113.06384218952330.02.2826.51
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?cqcqxjd-218259petidm44pdp HTTP/1.1

0-069040/182/2233_
112.88338417177460.02.0632.60
27.254.96.168http/1.1www.bannongsaischool.com:443POST /wp-cron.php?doing_wp_cron=1704460998.80784511566162109375

0-069040/183/2234_
112.11189318094110.02.7032.91
159.203.182.222http/1.1

0-069040/196/2501_
113.02084316767660.02.9530.95
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?bubhlzs-17876oitems/eti.htm HTTP/1.1

0-069040/189/2146_
110.39284516645430.02.4128.90
159.203.182.222h2localhost:443[0/0] Software caused connection abort

0-069040/175/2170_
113.250017705310.02.0328.61
137.184.106.30http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-069040/189/2180_
112.73245916820870.02.3028.17
151.106.38.166http/1.1www.thesungolden.com:443POST /wp-login.php HTTP/1.1

0-069040/185/2109_
113.182016403080.02.3427.07
137.184.106.30http/1.1localhost:80GET /about HTTP/1.1

0-069040/189/2242_
112.383016851260.02.5759.22
54.38.85.37http/1.1www.1smestartup.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-069040/178/2104_
112.51195517088030.02.2426.81
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?jughsbr-235192titems/etid.html HTTP/1.1

0-069040/188/2467_
113.09384616472710.02.4067.74
23.22.35.162http/1.1www.chonlateeboi.com:443GET /16518bzlnetidm62i.htm HTTP/1.1

0-069040/191/2134_
113.132017035750.02.2234.53
147.182.130.98http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-069040/347/2470_
113.132017177090.03.3130.04
137.184.106.30http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

1-0-0/0/1494.
0.00234384410789900.00.0019.95
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1

1-0-0/0/1277.
0.00234390410369240.00.0016.79
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1

1-0-0/0/1292.
0.00234384310629170.00.0018.86
52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1

1-0-0/0/1320.
0.00234384010544740.00.0017.61
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1

1-0-0/0/1329.
0.00234384010311000.00.0021.84
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1

1-0-0/0/1313.
0.00234383710077550.00.0017.92
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1

1-0-0/0/1347.
0.00234386610387560.00.0016.37
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1

1-0-0/0/1346.
0.00234389710630850.00.0016.65
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1

1-0-0/0/1346.
0.00234383910436060.00.0017.96
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1

1-0-0/0/1273.
0.00234384110395360.00.0016.70
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1

1-0-0/0/1214.
0.00234392410022070.00.0015.53
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wuxaonh-247555kitems/eti.htm HTTP/1.1

1-0-0/0/1373.
0.002343107410816380.00.0018.55
23.22.35.162http/1.1</

Found on 2024-01-05 13:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31472a6caf472a6cafe55f4b96

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:23:58 ICT
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 51 seconds
Server load: 0.92 1.25 0.96
Total accesses: 142776 - Total Traffic: 1.9 GB - Total Duration: 187804484
CPU Usage: u15.08 s3.17 cu2336.4 cs123.86 - 4.47% CPU load
2.57 requests/sec - 35.7 kB/second - 13.9 kB/request - 1315.38 ms/request
10 requests currently being processed, 182 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
230705yes (old gen)1no00000
43868no1yes131000
53869no1yes032000
63887no0yes131000
73890no0yes527000
83891no0yes230000
93894no0yes131000
Sum824 10182000

.........................................................W......
..............W.................................................
______________W_________________________________________________
__R___________________________________W_WWW_R___________________
_WW_____________________________R_______________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00111136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00106331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.001025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00106889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00106403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0018637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0019806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0019747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00106913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00110786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00106878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00107274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00106975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00111106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00111617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0019056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00106839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0019207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00110777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0019246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00106592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00107034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00107004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00106504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00110857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0019006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00110786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00111166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00106337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00107123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0019487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00107132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.002014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.002011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.002010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.002112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.00208160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.00209262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.002011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0024889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.00209736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.0028949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0016111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf.h

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318ce7b91c8ce7b91c4cbe8665

Apache Status

Apache Server Status for pop.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:40 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 30 seconds
Server load: 1.19 1.06 1.23
Total accesses: 167078 - Total Traffic: 1.4 GB - Total Duration: 222783555
CPU Usage: u771.48 s1262.06 cu12423800 cs2986310 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1333.41 ms/request
10 requests currently being processed, 0 idle workers
RWWWCCWW.RW.......................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247290/79/12527R
33.7701163035970.00.97102.61
159.223.236.215http/1.1localhost:80GET /info.php HTTP/1.0

1-421250910/26/12641W
14.3300164689620.00.13123.88
104.248.33.236http/1.1www.bannongsaischool.com:80GET / HTTP/1.0

2-421259040/21/12494W
6.1200164860150.00.0999.56
139.162.237.108http/1.1localhost:80GET /server-status HTTP/1.0

3-421248181/63/12423L
25.4800164218800.70.4992.41
139.162.237.108http/1.1localhost:80GET /telescope/requests HTTP/1.0

4-421245881/100/11821C
37.3301160197860.71.31129.28
194.195.117.204http/1.1localhost:80GET /login.action HTTP/1.0

5-421248471/48/11493C
29.9801149059332.20.4597.72
142.93.122.55http/1.1localhost:443GET / HTTP/1.1

6-421246000/95/11419W
37.7100146103420.01.27100.55
139.144.172.77http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

7-421259460/11/11187W
5.8500149067840.00.0883.93
134.122.123.104http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

8-421-0/0/10409.
0.00170138207460.00.0069.47
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

9-421266870/19/10227R
1.6500132836770.00.0289.23
139.162.237.108http/1.1localhost:80PUT /api/v2/cmdb/system/admin/admin HTTP/1.0

10-421249150/47/8787W
19.1800118547450.00.2976.55
172.104.25.128http/1.1www.bannongsaischool.com:80GET / HTTP/1.0

11-421-0/0/8706.
0.0037228115615800.00.0061.87
45.127.61.132http/1.1www.bannongsaischool.com:80GET /wp-content/uploads/2019/01/NONGSAI-MAP-07.jpg HTTP/1.0

12-421-0/0/7478.
0.004694256101876860.00.0056.31
172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1666252186.05959701538085937500

13-421-0/0/5788.
0.001120080138630.00.0057.40
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

14-421-0/0/4126.
0.00939159509020.00.0029.18
119.76.14.104http/1.1www.ddflooringperfect.co.th:443GET /wp-content/plugins/so-widgets-bundle/widgets/button/css/st

15-421-0/0/3697.
0.00887152456030.00.0037.77
69.171.251.15http/1.1www.dreamhightravel.com:443GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?

16-421-0/0/2815.
0.001080037702710.00.0024.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-421-0/0/1946.
0.00946027282540.00.0019.67
124.120.94.45http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css

18-421-0/0/1517.
0.001638024024520.00.007.27
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-421-0/0/1004.
0.001642015341220.00.005.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-421-0/0/1175.
0.00121478416577850.00.008.98
172.68.234.228http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1666251444.71553611755371093750

21-421-0/0/835.
0.001649011428820.00.004.62
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-421-0/0/788.
0.001376011318000.00.003.41
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-421-0/0/787.
0.001632011185000.00.0018.86
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-421-0/0/356.
0.00168604758130.00.002.96
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

25-421-0/0/204.
0.00168502702970.00.0045.99
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-421-0/0/196.
0.00154002258210.00.001.31
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

27-421-0/0/103.
0.00170001463500.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-421-0/0/3.
0.001699012070.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-421-0/0/64.
0.00144201086510.00.000.51
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-421-0/0/4.
0.00168905000.00.000.09
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

31-421-0/0/19.
0.001637096110.00.000.44
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-421-0/0/3.
0.001698080.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-421-0/0/1.
0.001707000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-421-0/0/1.
0.001706010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-421-0/0/11.
0.001673064400.00.000.05
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-421-0/0/1.
0.001705010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-421-0/0/7.
0.001681032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421-0/0/3.
0.001696036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421-0/0/9.
0.001675028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421-0/0/4.
0.00168809810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 19subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 227 seconds, (range: 37...298)index usage: 0%, cache usage: 0%total entries stored since starting: 6417total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23213 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: mail.bannongsaischool.com
Port: 80
URL: http://mail.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-02 02:08
Open for 469 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652dc41bcdc4

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 09:08:32 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  27 days 23 hours 7 minutes 11 seconds
Server load: 2.00 2.00 2.00
Total accesses: 1845074 - Total Traffic: 23.8 GB - Total Duration: 2140724308
CPU Usage: u184.42 s108.37 cu32089.3 cs2210.25 - 1.43% CPU load
.764 requests/sec - 10.3 kB/second - 13.5 kB/request - 1160.24 ms/request
1 requests currently being processed, 127 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes032000
229661no0yes131000
329394no0yes032000
529374no0yes032000
Sum400 1127000

________________________________................................
___________________________W____________________________________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/14/14762_
5.105310160256560.00.01193.64
143.198.72.96http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/13/15256_
5.085300139008970.00.03198.89
143.198.72.96http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/18/14831_
5.095290150306340.00.05192.62
178.62.73.12http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/15/15008_
5.135310145868980.00.01185.89
143.198.72.96http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/15/14913_
5.145260147705900.00.05185.32
159.223.102.13http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/13/15140_
4.83529490156642950.00.02188.43
147.182.168.210h2localhost:443[0/0] Software caused connection abort

0-92293730/12/14812_
4.695320145587210.00.03200.13
143.198.72.96http/1.1

0-92293730/11/15118_
5.115290150176790.00.03187.53
142.93.64.15http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/20/15087_
5.135300145223170.00.02229.82
159.223.102.13http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/17/15211_
5.135320148852870.00.07194.80
159.223.102.13http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/17/14777_
5.095290154280510.00.02200.61
142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/18/14791_
4.865270147116930.00.01195.38
147.182.168.210http/1.1

0-92293730/19/14650_
5.085310137181700.00.04185.40
178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/22/14813_
5.125320169077180.00.04185.97
143.198.72.96http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/16/15762_
4.84527529141543210.00.06187.72
178.128.151.41h2localhost:443[0/0] Software caused connection abort

0-92293730/18/14810_
4.825310165338320.00.02182.41
146.190.160.11h2localhost:443[0/0] Software caused connection abort

0-92293730/17/14856_
5.125320143397180.00.02206.27
147.182.168.210http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/19/14926_
5.135300144891060.00.04189.22
143.198.72.96http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/15/14743_
5.135310160243160.00.01200.49
142.93.64.15http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/19/14964_
5.2320144636790.00.04193.71
192.53.126.23http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-92293730/12/14949_
4.83530503181446080.00.02193.28
143.198.72.96h2localhost:443[0/0] Software caused connection abort

0-92293730/16/14981_
5.025310147004840.00.02204.00
128.199.61.251http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/19/15437_
5.145260150748210.00.05188.17
161.35.190.56http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/14/14645_
5.125240138763960.00.01190.06
178.62.73.12http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/17/14941_
5.135310162204870.00.02186.79
161.35.190.56http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/15/14618_
5.135300135973720.00.03196.88
161.35.190.56http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/14/15121_
5.105290144712730.00.01194.46
143.198.72.96http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/15/14900_
5.085310159153260.00.01213.25
147.182.168.210http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/18/14705_
5.125260152163350.00.03175.84
178.62.73.12http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/15/15163_
4.875310135117420.00.03225.07
178.62.73.12h2localhost:443[0/0] Software caused connection abort

0-92293730/21/14640_
5.105300155554200.00.02199.10
178.128.151.41http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/15/14905_
5.055260145814300.00.02185.01
178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-92-0/0/15731.
0.00176970138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.00176970136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.00176970174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.00176970150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.00176970146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.00176970134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.00176970172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.00176970165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.00176970127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.00176970152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.00176970148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.00176970159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.00176970159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-

Found on 2024-02-02 02:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652dd3d24e56

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 07:09:15 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  1 day 21 hours 7 minutes 54 seconds
Server load: 2.62 2.67 2.71
Total accesses: 771788 - Total Traffic: 10.5 GB - Total Duration: 949638391
CPU Usage: u194.13 s15.95 cu13132.8 cs688.42 - 8.64% CPU load
4.75 requests/sec - 67.7 kB/second - 14.3 kB/request - 1230.44 ms/request
2 requests currently being processed, 62 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
08425no4yes032111
229622no2yes230001
Sum206 262112

________________________________................................
_______W_______W________________................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-784250/20/5908_
9.67585382256680.00.1787.70
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[54/54] done: stream 107, GET /wp-content/plugins/woocommerce/a

0-784250/23/6375_
9.68483759778090.00.1784.63
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[60/60] done: stream 115, GET /wp-content/plugins/gallery-by-su

0-784250/13/5917_
9.05167871335760.00.1588.46
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-784250/15/6223_
10.02087069087410.00.2581.24
52.70.240.171http/1.1www.chonlateeboi.com:443GET /11259ztiaitems/etidm.htm HTTP/1.1

0-784250/12/5957_
8.52184965978590.00.1677.43
178.18.243.135http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97

0-784250/71/6317_
9.952122477172990.01.4883.63
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/feature_Home-02-768x776.jpg HTT

0-784250/18/6125_
9.26684457982050.00.2994.71
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?boahsbr-206142netid.htm HTTP/1.1

0-784250/17/6175_
9.66585066892750.00.1981.04
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[53/53] done: stream 105, GET /wp-content/plugins/woocommerce/a

0-784250/82/6196_
9.90685061978340.00.33123.19
165.232.76.155http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-784250/16/6059_
9.89783370912610.00.2178.45
52.70.240.171http/1.1www.chonlateeboi.com:443GET /16595ztiaetidm.html HTTP/1.1

0-784250/11/5872_
9.84183975710310.00.1375.34
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?kjlsvcw-327883yitems/eti.htm HTTP/1.1

0-784250/15/5821_
9.51684474767480.00.2076.02
66.249.65.235http/1.1www.chonlateenextbiz.com:443GET /renault-megane-e-tech-ev60-range-e-m5dzbZFb HTTP/1.1

0-784250/15/5874_
9.821252483180.00.1978.13
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[89/89] done: stream 177, GET /wp-content/uploads/2021/01/cropp

0-784250/17/6082_
9.67584480981450.00.1982.48
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /bvqitgo-16264detidm66oid HTTP/1.1

0-784250/17/6536_
9.93483855932550.00.2084.62
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /sghitgo-25797uitems/etidm76.htm HTTP/1.1

0-784250/18/5793_
10.011082435850.00.2276.57
159.65.58.104http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-784250/26/6022_
9.47784964000030.00.1678.83
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[10/10] done: stream 17, GET /wp-content/uploads/siteorigin-wid

0-784250/13/6164_
10.011058331110.00.1780.56
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[90/90] done: stream 179, GET /wp-content/uploads/2021/01/cropp

0-784250/19/6182_
9.89684361393120.00.2079.00
185.191.171.7http/1.1www.chonlateeadmin.com:443GET /pmeuzzo-25222retidm74c HTTP/1.1

0-784250/12/5948_
9.9811267802270.00.1383.95
203.170.192.183http/1.1www.ltclevelup.com:443POST /wp-cron.php?doing_wp_cron=1704586153.70836091041564941406

0-784250/19/6136_
10.00132789481290.00.1786.36
27.254.96.168http/1.1www.bannongsaischool.com:443POST /wp-cron.php?doing_wp_cron=1704586153.80696797370910644531

0-784250/11/5919_
9.48684170297280.00.0980.81
49.229.231.63h2www.xn--12cx2bef7bl0boq4ch6gugw[14/14] done: stream 27, GET /wp-content/plugins/siteorigin-pan

0-784250/16/6496_
9.90683572887570.00.1886.74
23.22.35.162http/1.1www.chonlateeboi.com:443GET /11631ztiaitems/etidm94ja.htm HTTP/1.1

0-784250/15/5980_
10.020062210280.00.1587.10
159.65.58.104http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-784250/16/5827_
10.02083974517560.00.2473.69
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dvsitgo-25756fetidm2 HTTP/1.1

0-784250/12/6020_
8.740232456815460.00.1478.27
66.249.65.235http/1.1www.chonlateenextbiz.com:443GET /renault-megane-e-tech-ev60-range-e-m5dzbZFb HTTP/1.1

0-784250/13/6031_
9.95283955940280.00.1988.07
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /jtyitgo-14062letidm34w HTTP/1.1

0-784250/11/6007_
9.791104169685390.00.24108.35
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /btqitgo-18110ditems/etidm74o.html HTTP/1.1

0-784250/16/5952_
9.877153449900.00.1575.52
203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704586148.19250702857971191406

0-784250/20/6119_
9.906104571766030.00.23113.36
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?huihlzs-5324vetid HTTP/1.1

0-784250/12/5923_
9.99167566583960.00.1387.79
37.187.135.45http/1.1www.ltclevelup.com:443POST /wp-login.php HTTP/1.1

0-784250/15/6216_
9.332264381160.00.1779.93
161.97.145.38http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B9%80

1-7-0/0/6104.
0.0027586372162760.00.0079.57
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /mnbsall-45161oeti.html HTTP/1.1

1-7-0/0/5864.
0.0027524065905680.00.0074.96
198.98.55.181http/1.1www.pndintertrade.com:443POST /wp-login.php HTTP/1.1

1-7-0/0/5875.
0.00275205892564370.00.0076.23
66.249.65.233http/1.1www.chonlateenextbiz.com:443GET /home-depot-metal-washer-hoses-e-NZEga2cg HTTP/1.1

1-7-0/0/5560.
0.0027583675273480.00.0073.83
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /dyssall-32958fetidm97q.htm HTTP/1.1

1-7-0/0/5812.
0.00275221674555930.00.0086.76
167.99.182.39http/1.1localhost:443GET /server-status HTTP/1.1

1-7-0/0/5873.
0.0027583864080620.00.0077.46
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /oydsall-41523qitems/etidm.htm HTTP/1.1

1-7-0/0/5932.
0.00275135464692830.00.0075.24
66.249.71.192http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%

1-7-0/0/5999.
0.0027554875585810.00.0079.86
40.77.167.52http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%9F%E0%B8%B4%E0%B8%A1

1-7-0/0/5947.
0.0027588554793410.00.0076.72
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?uwvadej-59859ieti.html HTTP/1.1

1-7-0/0/5918.
0.00275112468952690.00.0083.22
114.119.137.190http/1.1www.dreamhightravel.com:443GET /dhtpe65-b-may-oct23-5d4n/?sow-85685=6 HTTP/1.1

1-7

Found on 2024-01-07 00:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652d3c2753d3

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 05-Jan-2024 20:23:20 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 hours 21 minutes 59 seconds
Server load: 2.50 2.54 2.52
Total accesses: 186505 - Total Traffic: 2.7 GB - Total Duration: 148860938
CPU Usage: u224.12 s12.26 cu2734.05 cs151.16 - 8.36% CPU load
5 requests/sec - 76.4 kB/second - 15.3 kB/request - 798.161 ms/request
6 requests currently being processed, 58 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
06904no8yes527002
25731no4yes131001
Sum2012 658003

______R__W___W__W_____W_________................................
__________________R_____________................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069040/199/2172_
112.750356417874920.02.4434.23
54.38.85.37http/1.1www.1smestartup.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-069040/191/2306_
112.74083916984550.02.4628.56
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?zfevrsm-158482retidm9 HTTP/1.1

0-069040/187/2136_
112.95084529214040.02.3241.74
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ttixsgj-7962vetid.htm HTTP/1.1

0-069040/200/2331_
112.51496317265340.02.3430.23
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?yjyecaw-76191letidm3 HTTP/1.1

0-069040/188/2271_
112.130617680780.02.3728.52
203.170.192.183http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1704460978.05843901634216308593

0-069040/206/2512_
112.71186117606180.02.6431.34
3.224.220.101http/1.1www.chonlateeboi.com:443GET /1567bzlnitems/etidm97hn HTTP/1.1

0-069040/189/2129R
112.75484817364230.02.2126.49
52.70.240.171http/1.1

0-069040/181/2254_
112.802018007130.02.2429.49
54.38.85.37http/1.1www.1smestartup.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-069040/196/2282_
112.66185317019000.02.4563.25
157.55.39.49h2www.chonlateeadmin.com:443[0/0] init

0-069041/183/2229W
111.710016932140.02.3928.83
147.182.168.210http/1.1localhost:80GET /server-status HTTP/1.1

0-069040/190/2204_
111.453220820625050.02.2827.02
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /owdxsgj-19943qetidm52bj.html HTTP/1.1

0-069040/187/2143_
112.38189716938870.02.4328.08
185.191.171.19http/1.1www.chonlateeboi.com:443GET /30262ebqoetidm19y HTTP/1.1

0-069040/168/2120_
112.152174017429570.02.6530.24
3.224.220.101http/1.1www.chonlateeboi.com:443GET /pubcategoryrbhs/13 HTTP/1.1

0-069041/192/2387W
112.190018052170.02.4231.81
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?fufhlzs-5660sitems/eti.htm HTTP/1.1

0-069040/175/2464_
112.832020055050.02.3333.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /pubcategoryrbhs/13 HTTP/1.1

0-069040/201/2187_
112.88184817398770.02.3929.35
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ifxxsgj-31793keti.html HTTP/1.1

0-069041/186/2134W
112.440017605050.02.2927.96
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?brbecaw-167532oitems/eti HTTP/1.1

0-069040/185/2312_
112.93084217243600.02.2132.27
23.22.35.162http/1.1www.chonlateeboi.com:443GET /4134rbhsetidm10a.htm HTTP/1.1

0-069040/187/2330_
111.450100216734470.02.3630.75
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /mfbxsgj-19941oitems/etidm62.htm HTTP/1.1

0-069040/188/2168_
112.792018943900.02.2726.50
203.170.192.183http/1.1www.chonlateeboi.com:443POST /wp-cron.php?doing_wp_cron=1704460997.99043107032775878906

0-069040/182/2233_
112.88138417177460.02.0632.60
27.254.96.168http/1.1www.bannongsaischool.com:443POST /wp-cron.php?doing_wp_cron=1704460998.80784511566162109375

0-069040/183/2234_
112.11089318094110.02.7032.91
157.55.39.49h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /hewqdrd-45234jetid.htm

0-069041/195/2500W
112.440016759230.02.9430.94
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?bubhlzs-17876oitems/eti.htm HTTP/1.1

0-069040/189/2146_
110.39184516645430.02.4128.90
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ckcqxjd-345633petidm70p HTTP/1.1

0-069040/174/2169_
112.76484817705310.02.0328.61
3.224.220.101http/1.1www.chonlateeboi.com:443GET /11906cafjitems/etid.html HTTP/1.1

0-069040/189/2180_
112.73145916820870.02.3028.17
151.106.38.166http/1.1www.thesungolden.com:443POST /wp-login.php HTTP/1.1

0-069040/184/2108_
112.94098116403070.02.3427.07
157.55.39.49h2www.chonlateeadmin.com:443GET /hewqdrd-45234jetid.htm HTTP/2.0

0-069040/189/2242_
112.381016851260.02.5759.22
54.38.85.37http/1.1www.1smestartup.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-069040/178/2104_
112.51095517088030.02.2426.81
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?jughsbr-235192titems/etid.html HTTP/1.1

0-069040/187/2466_
112.802016464250.02.3967.73
147.182.168.210http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-069040/190/2133_
112.91083617035740.02.2234.53
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?eteqgmy-215037retid HTTP/1.1

0-069040/346/2469_
112.901017177090.03.3130.04
147.182.168.210http/1.1localhost:80GET /v2/_catalog HTTP/1.1

1-0-0/0/1494.
0.00233784410789900.00.0019.95
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1

1-0-0/0/1277.
0.00233790410369240.00.0016.79
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1

1-0-0/0/1292.
0.00233784310629170.00.0018.86
52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1

1-0-0/0/1320.
0.00233784010544740.00.0017.61
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1

1-0-0/0/1329.
0.00233784010311000.00.0021.84
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1

1-0-0/0/1313.
0.00233783710077550.00.0017.92
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1

1-0-0/0/1347.
0.00233786610387560.00.0016.37
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1

1-0-0/0/1346.
0.00233789710630850.00.0016.65
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1

1-0-0/0/1346.
0.00233783910436060.00.0017.96
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1

1-0-0/0/1273.
0.00233784110395360.00.0016.70
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1

1-0-0/0/1214.
0.00233792410022070.00.0015.53
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust

Found on 2024-01-05 13:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1e652d8c1e652d02935940

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:23:58 ICT
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 51 seconds
Server load: 0.92 1.25 0.96
Total accesses: 142776 - Total Traffic: 1.9 GB - Total Duration: 187804484
CPU Usage: u15.08 s3.17 cu2336.4 cs123.86 - 4.47% CPU load
2.57 requests/sec - 35.7 kB/second - 13.9 kB/request - 1315.38 ms/request
10 requests currently being processed, 182 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
230705yes (old gen)1no00000
43868no1yes131000
53869no1yes032000
63887no0yes131000
73890no0yes527000
83891no0yes230000
93894no0yes131000
Sum824 10182000

.........................................................W......
..............W.................................................
______________W_________________________________________________
__R___________________________________W_WWW_R___________________
_WW_____________________________R_______________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00111136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00106331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.001025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00106889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00106403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0018637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0019806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0019747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00106913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00110786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00106878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00107274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00106975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00111106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00111617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0019056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00106839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0019207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00110777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0019246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00106592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00107034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00107004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00106504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00110857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0019006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00110786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00111166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00106337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00107123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0019487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00107132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.002014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.002011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.002010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.002112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.00208160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.00209262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.002011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0024889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.00209736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.0028949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0016111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf.

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319da785ea9da785eaa45845c0

Apache Status

Apache Server Status for mail.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:39 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 30 seconds
Server load: 1.19 1.06 1.23
Total accesses: 167046 - Total Traffic: 1.4 GB - Total Duration: 222783495
CPU Usage: u771.43 s1262.01 cu12423800 cs2986310 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1333.67 ms/request
7 requests currently being processed, 3 idle workers
_W_RCRWW._W.......................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247290/73/12521_
33.7501163035830.00.96102.60
139.162.139.31http/1.1localhost:443GET / HTTP/1.1

1-421250910/26/12641W
14.3300164689620.00.13123.88
104.248.33.236http/1.1www.bannongsaischool.com:80GET / HTTP/1.0

2-421259040/11/12484_
6.1000164859980.00.0999.56
45.79.48.136http/1.1localhost:443GET / HTTP/1.1

3-421248180/61/12421R
25.4600164218770.00.4892.41
194.195.117.204http/1.1localhost:80GET /v2/_catalog HTTP/1.0

4-421245881/100/11821C
37.3301160197860.71.31129.28
194.195.117.204http/1.1localhost:80GET /login.action HTTP/1.0

5-421248470/47/11492R
29.975428149059310.00.4597.72
142.93.122.55http/1.1

6-421246000/95/11419W
37.7100146103420.01.27100.55
139.144.172.77http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

7-421259460/11/11187W
5.8500149067840.00.0883.93
134.122.123.104http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

8-421-0/0/10409.
0.00170138207460.00.0069.47
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

9-421266870/11/10219_
1.6200132836640.00.0289.23
104.248.33.236http/1.1localhost:80GET / HTTP/1.0

10-421249150/41/8781W
19.1700118547310.00.2976.54
104.248.33.236http/1.1localhost:80GET /server-status HTTP/1.0

11-421-0/0/8706.
0.0037228115615800.00.0061.87
45.127.61.132http/1.1www.bannongsaischool.com:80GET /wp-content/uploads/2019/01/NONGSAI-MAP-07.jpg HTTP/1.0

12-421-0/0/7478.
0.004694256101876860.00.0056.31
172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1666252186.05959701538085937500

13-421-0/0/5788.
0.001119080138630.00.0057.40
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

14-421-0/0/4126.
0.00939159509020.00.0029.18
119.76.14.104http/1.1www.ddflooringperfect.co.th:443GET /wp-content/plugins/so-widgets-bundle/widgets/button/css/st

15-421-0/0/3697.
0.00887152456030.00.0037.77
69.171.251.15http/1.1www.dreamhightravel.com:443GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?

16-421-0/0/2815.
0.001079037702710.00.0024.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-421-0/0/1946.
0.00946027282540.00.0019.67
124.120.94.45http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css

18-421-0/0/1517.
0.001638024024520.00.007.27
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-421-0/0/1004.
0.001642015341220.00.005.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-421-0/0/1175.
0.00121478416577850.00.008.98
172.68.234.228http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1666251444.71553611755371093750

21-421-0/0/835.
0.001649011428820.00.004.62
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-421-0/0/788.
0.001376011318000.00.003.41
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-421-0/0/787.
0.001632011185000.00.0018.86
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-421-0/0/356.
0.00168604758130.00.002.96
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

25-421-0/0/204.
0.00168502702970.00.0045.99
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-421-0/0/196.
0.00154002258210.00.001.31
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

27-421-0/0/103.
0.00170001463500.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-421-0/0/3.
0.001699012070.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-421-0/0/64.
0.00144201086510.00.000.51
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-421-0/0/4.
0.00168905000.00.000.09
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

31-421-0/0/19.
0.001637096110.00.000.44
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-421-0/0/3.
0.001698080.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-421-0/0/1.
0.001707000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-421-0/0/1.
0.001706010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-421-0/0/11.
0.001673064400.00.000.05
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-421-0/0/1.
0.001705010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-421-0/0/7.
0.001681032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421-0/0/3.
0.001696036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421-0/0/9.
0.001675028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421-0/0/4.
0.00168809810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 19subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 227 seconds, (range: 38...299)index usage: 0%, cache usage: 0%total entries stored since starting: 6417total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23211 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: smtp.bannongsaischool.com
Port: 443
URL: https://smtp.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-02 04:01
Open for 469 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311926366e1926366e7317be07

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 11:01:16 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  28 days 59 minutes 55 seconds
Server load: 2.00 2.24 2.25
Total accesses: 1846144 - Total Traffic: 23.8 GB - Total Duration: 2141102011
CPU Usage: u201.01 s111.05 cu32089.3 cs2210.25 - 1.43% CPU load
.762 requests/sec - 10.3 kB/second - 13.5 kB/request - 1159.77 ms/request
1 requests currently being processed, 127 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes131000
229661no0yes032000
329394no0yes032000
529374no0yes032000
Sum400 1127000

_____W__________________________................................
________________________________________________________________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/22/14770_
9.024501160260890.00.11193.74
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1

0-92293730/21/15264_
8.3345014139013280.00.09198.94
185.166.84.146http/1.1www.dreamhightravel.com:443GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Co

0-92293730/25/14838_
8.894312150309240.00.11192.68
74.80.182.88http/1.1www.thairuamthaiparty.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1

0-92293730/19/15012_
8.0945833145874860.00.05185.93
74.80.182.88http/1.1www.ckt-trading.com:443GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Appl

0-92293730/20/14918_
8.474362147711630.00.14185.41
62.197.150.19http/1.1www.chonlateevip.com:443GET /wp-content/plugins/ultimate-member/assets/js/um-crop.min.j

0-92293731/21/15148W
8.9800156648910.00.09188.50
162.243.161.105http/1.1localhost:443GET /server-status HTTP/1.1

0-92293730/19/14819_
9.0045617145588350.00.11200.21
74.80.182.88http/1.1www.ckt-trading.com:443GET /wp-content/uploads/2022/11/favicon2.png HTTP/1.1

0-92293730/17/15124_
9.0643715150181980.00.06187.55
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Ga

0-92293730/24/15091_
8.0945822145226790.00.07229.86
74.80.182.88http/1.1www.leadingservice.co.th:443GET /wp-content/themes/chonlateedesign/js/scripts.js?ver=6.3.2 

0-92293730/25/15219_
8.8645815148853280.00.14194.86
74.80.182.88http/1.1www.leadingservice.co.th:443GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1

0-92293730/26/14786_
8.97911154393200.00.06200.65
162.243.161.105h2localhost:443[0/0] Software caused connection abort

0-92293730/24/14797_
8.97108147156020.00.07195.44
162.243.161.105h2localhost:443[0/0] Software caused connection abort

0-92293730/30/14661_
9.16100137182690.00.13185.49
162.243.161.105http/1.1localhost:443GET / HTTP/1.1

0-92293730/24/14815_
8.67436841169086460.00.06185.99
111.7.100.35http/1.1www.leadingservice.co.th:443GET / HTTP/1.1

0-92293730/21/15767_
9.0843111141614960.00.08187.74
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-includes/js/wp-emoji-release.min.js?ver=6.4.2 HTTP/1.1

0-92293730/24/14816_
8.8645811165341160.00.07182.46
74.80.182.88http/1.1www.ckt-trading.com:443GET /wp-content/themes/sydney/js/so-legacy-main.min.js?ver=6.4.

0-92293730/24/14863_
9.0643712143404920.00.08206.34
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Ga

0-92293730/25/14932_
9.1042316144939900.00.09189.27
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-content/uploads/2023/03/cropped-line-profile-2-32x32.jp

0-92293730/19/14747_
8.3445019160388120.00.03200.51
62.197.150.19http/1.1www.dreamhightravel.com:443GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1

0-92293730/27/14972_
9.2110144639320.00.11193.79
162.243.161.105http/1.1localhost:443GET /v2/_catalog HTTP/1.1

0-92293730/21/14958_
8.9742315181495740.00.13193.39
74.80.182.88http/1.1www.thairuamthaiparty.com:443GET /wp-content/plugins/happy-elementor-addons/assets/js/happy-

0-92293730/22/14987_
8.8745112147053460.00.06204.04
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1

0-92293730/27/15445_
8.864581150748520.00.14188.26
74.80.182.88http/1.1www.ckt-trading.com:443GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Ga

0-92293730/21/14652_
8.7618138764950.00.13190.17
74.80.182.88http/1.1www.leadingservice.co.th:443GET /wp-content/plugins/so-widgets-bundle/js/sow.jquery.fittext

0-92293730/26/14950_
8.98557162205780.00.08186.86
162.243.161.105h2localhost:443[0/0] Software caused connection abort

0-92293730/25/14628_
9.074355135981370.00.12196.97
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Co

0-92293730/17/15124_
8.4643620144713330.00.03194.48
62.197.150.19http/1.1www.chonlateevip.com:443GET /wp-content/plugins/rolo-slider/assets/js/owl.carousel.min.

0-92293730/20/14905_
8.98849159187370.00.04213.28
162.243.161.105h2localhost:443[0/0] Software caused connection abort

0-92293730/23/14710_
8.7143529152174310.00.08175.89
74.80.182.88http/1.1www.thairuamthaiparty.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1

0-92293730/21/15169_
8.461038135139090.00.08225.12
74.80.182.88http/1.1www.thairuamthaiparty.com:443GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver

0-92293730/27/14646_
8.8745617155571570.00.04199.12
74.80.182.88http/1.1www.ckt-trading.com:443GET /wp-content/plugins/siteorigin-panels/js/styling.min.js?ver

0-92293730/20/14910_
9.0643725145814940.00.12185.11
74.80.182.88http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Ga

1-92-0/0/15731.
0.00244610138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.00244610136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.00244610174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.00244610150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.00244610146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.00244610134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.00244610172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.00244610165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.00244610127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956

Found on 2024-02-02 04:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311926366e1926366ec44fdb11

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 04:49:12 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  1 day 18 hours 47 minutes 51 seconds
Server load: 2.73 2.83 2.78
Total accesses: 740363 - Total Traffic: 10.1 GB - Total Duration: 922540471
CPU Usage: u146.35 s13.64 cu12557.1 cs658.42 - 8.68% CPU load
4.81 requests/sec - 68.6 kB/second - 14.3 kB/request - 1246.07 ms/request
6 requests currently being processed, 122 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
129818no2yes329010
229622no3yes131010
329820no0yes230000
429822no1yes032000
Sum406 6122020

................................W_________W__________________W__
___________W______________________________________R___________W_
________________________________................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-7-0/0/5888.
0.00211884682151280.00.0087.53
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ztoitgo-3314bitems/etid.html HTTP/1.1

0-7-0/0/6352.
0.00211853759595630.00.0084.46
114.119.133.42http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3

0-7-0/0/5904.
0.00211890171251600.00.0088.30
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /znoaebb-23464betidm76mab HTTP/1.1

0-7-0/0/6208.
0.002118250968961020.00.0080.99
185.126.202.247http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.1

0-7-0/0/5945.
0.00211884365868080.00.0077.28
85.208.96.212http/1.1www.chonlateeadmin.com:443GET /hjwkawv-9666jetid.htm HTTP/1.1

0-7-0/0/6246.
0.002118190877062280.00.0082.16
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /db.php?g1807522.shtml HTTP/1.1

0-7-0/0/6107.
0.00211884857888050.00.0094.42
185.6.8.216http/1.1www.chonlateevip.com:443POST /xmlrpc.php HTTP/1.1

0-7-0/0/6158.
0.00211896566786600.00.0080.85
66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /db.php?g1807522.shtml HTTP/1.1

0-7-0/0/6114.
0.002118061876620.00.00122.86
217.34.133.56http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /xmlrpc.php HTTP/1.1

0-7-0/0/6043.
0.002118105170721940.00.0078.24
3.224.220.101http/1.1

0-7-0/0/5861.
0.002118128175625990.00.0075.21
68.178.149.194http/1.1www.thefixup333.com:443POST /xmlrpc.php HTTP/1.1

0-7-0/0/5806.
0.00211884974679720.00.0075.82
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ioxaebb-23447ketidm54vb.html HTTP/1.1

0-7-0/0/5859.
0.00211883852382760.00.0077.93
23.22.35.162http/1.1

0-7-0/0/6065.
0.00211863180836290.00.0082.29
39.101.185.186http/1.1www.dreamhightravel.com:443POST /xmlrpc.php HTTP/1.1

0-7-0/0/6519.
0.00211884655832350.00.0084.42
23.22.35.162http/1.1www.chonlateeboi.com:443GET /32900idtuitems/etidm1.html HTTP/1.1

0-7-0/0/5775.
0.002118169982286170.00.0076.34
52.70.240.171http/1.1

0-7-0/0/5996.
0.002118104963883560.00.0078.67
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wrlaebb-39061yitems/etidm66 HTTP/1.1

0-7-0/0/6151.
0.00211884058247790.00.0080.39
52.70.240.171http/1.1

0-7-0/0/6163.
0.002118182061270520.00.0078.79
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /nncaebb-40976pitems/etidm20aap.html HTTP/1.1

0-7-0/0/5936.
0.00211885267721970.00.0083.83
3.224.220.101http/1.1www.chonlateeboi.com:443GET /4874gcmpitems/etid.html HTTP/1.1

0-7-0/0/6117.
0.002118214189378220.00.0086.19
52.70.240.171http/1.1

0-7-0/0/5908.
0.00211884170185010.00.0080.72
23.22.35.162http/1.1

0-7-0/0/6480.
0.00211884972795280.00.0086.56
3.224.220.101http/1.1www.chonlateeboi.com:443GET /33953gcmpeti.html HTTP/1.1

0-7-0/0/5965.
0.00211886362107390.00.0086.95
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /pneaebb-6268retidm4 HTTP/1.1

0-7-0/0/5811.
0.00211884474402960.00.0073.45
52.70.240.171http/1.1

0-7-0/0/6008.
0.00211852256710170.00.0078.13
23.22.35.162http/1.1

0-7-0/0/6018.
0.00211886955869190.00.0087.88
52.70.240.171http/1.1www.chonlateeboi.com:443GET /33998gcmpitems/etidm60q.html HTTP/1.1

0-7-0/0/5996.
0.002118135669609890.00.00108.11
68.178.226.214http/1.1www.partymanagementthailand.comPOST /xmlrpc.php HTTP/1.1

0-7-0/0/5936.
0.00211885353380510.00.0075.38
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /aopaebb-23387cetidm.html HTTP/1.1

0-7-0/0/6099.
0.00211885571644760.00.00113.13
23.22.35.162http/1.1www.chonlateeboi.com:443GET /3165gcmpitems/etidm47.htm HTTP/1.1

0-7-0/0/5911.
0.00211884366501140.00.0087.66
52.70.240.171http/1.1

0-7-0/0/6201.
0.002118635664263310.00.0079.76
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /toiaebb-30062vitems/etidm57g.html HTTP/1.1

1-7298181/59/5840W
34.170069929030.00.7375.59
128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1

1-7298180/64/5596_
34.74362963643500.00.9271.60
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?qtnggdh-101845aetidm24dg.html HTTP/1.1

1-7298180/56/5616_
34.752104590222090.00.7772.96
185.191.171.6http/1.1www.chonlateeadmin.com:443GET /peerfru-41394retid.htm HTTP/1.1

1-7298180/58/5299_
34.74384572985960.00.7768.60
3.224.220.101http/1.1www.chonlateeboi.com:443GET /24651rbhsitems/etidm.htm HTTP/1.1

1-7298180/58/5564_
33.65663572064930.00.8883.65
66.249.73.11http/1.1www.chonlateeadmin.com:443GET /trust.php?dngadej-284352tetidm23qat HTTP/1.1

1-7298180/55/5618_
34.41684862083860.00.7873.88
128.199.62.55http/1.1

1-7298180/57/5687_
34.61084762608430.00.7071.72
23.22.35.162http/1.1www.chonlateeboi.com:443GET /21630sabfetidm27y.htm HTTP/1.1

1-7298180/56/5750_
34.791073150110.00.8175.54
128.199.62.55http/1.1localhost:443GET /v2/_catalog HTTP/1.1

1-7298180/58/5720_
33.155246852566200.00.8273.79
31.184.236.34http/1.1

1-7298180/51/5677_
34.68584266998710.00.6679.45
23.22.35.162http/1.1www.chonlateeboi.com:443GET /24662rbhsitems/etidm31o.html HTTP/1.1

1-7298181/55/5475W
34.620073373280.00.8679.09
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?bnyaonh-160668letidm49o HTTP/1.1

1-7298180/55/6002_
34.49563555842010.00.7387.71
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?bneadej-35400retidm62oar HTTP/1.1

1-7298180/57/5691_
34.65684876575080.00.6777.57
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?rroecaw-261980betidm69e.htm HTTP/1.1

Found on 2024-01-06 21:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311926366e1926366ef0b0a1f2

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:24:05 ICT
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 59 seconds
Server load: 1.01 1.26 0.96
Total accesses: 142885 - Total Traffic: 1.9 GB - Total Duration: 187844685
CPU Usage: u5.98 s2.58 cu2343.01 cs124.29 - 4.46% CPU load
2.57 requests/sec - 35.7 kB/second - 13.9 kB/request - 1314.66 ms/request
13 requests currently being processed, 179 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
43868no1yes428000
53869no1yes131000
63887no0yes329000
73890no8yes329007
83891no0yes230000
93894no0yes032000
Sum7111 13179007

................................................................
................................................................
___W__________W___W___R____________W____________________________
__W__________W_____________W_______W_________________R________W_
__W__W__________________________________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00811136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00806331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.008025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00806889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00806403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0088637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0089806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0089747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00806913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00810786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00806878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00807274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00806975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00811106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00811617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0089056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00806839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0089207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00810777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0089246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00806592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00807034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00807004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00806504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00810857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0089006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00810786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00811166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00806337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00807123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0089487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00807132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0010014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.0010011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.0010010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.0010112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.001008160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.001009262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.0010011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.00104889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.001009736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.00108949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0086111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf.htm HTTP/1.1

1-1-0/0/1315.
0.0010904

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3180f5600980f56009104d83a8

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:48 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 39 seconds
Server load: 1.09 1.04 1.23
Total accesses: 167195 - Total Traffic: 1.4 GB - Total Duration: 222829376
CPU Usage: u726.2 s1251.31 cu12423900 cs2986330 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1332.75 ms/request
38 requests currently being processed, 8 idle workers
RRRRRCRCRRRCCRCCRCRCCCCCRRRWRWWRRRRRR__R______....
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247290/87/12535R
35.1701163066400.00.98102.63
142.93.122.55http/1.1

1-421250910/33/12648R
16.3802164731030.00.28124.03
142.93.122.55http/1.1

2-421259040/32/12505R
7.9201241164920020.00.1199.59
142.93.122.55http/1.1

3-421248180/74/12434R
27.1901164253330.00.5092.43
142.93.122.55http/1.1

4-421268880/3/11824R
0.8001078160230260.00.01129.29
134.122.123.104http/1.1

5-421248471/55/11500C
31.760640149095065.50.4797.73
172.70.214.175http/1.1www.proplustech.co.th:443POST /wp-login.php HTTP/1.1

6-421270460/0/11423R
0.0001146145870.00.00100.64
134.122.123.104http/1.1www.bannongsaischool.com:443

7-421259461/20/11196C
7.5710149101542.70.0983.94
45.79.48.136http/1.1localhost:443GET /.env HTTP/1.1

8-421268810/11/10420R
1.0400138226350.00.0269.49
142.93.122.55http/1.1

9-421266870/24/10232R
2.6301132854740.00.0389.24
142.93.122.55http/1.1

10-421249150/52/8792R
20.5601118575010.00.3076.56
142.93.122.55http/1.1

11-421268891/8/8714C
1.4700115645021.30.0261.89
45.79.48.136http/1.1localhost:443GET /config.json HTTP/1.1

12-421269081/4/7482C
0.4700101886151.30.0156.32
45.79.48.136http/1.1localhost:443GET /about HTTP/1.1

13-421269090/5/5793R
0.410080146550.00.0157.41
142.93.122.55http/1.1

14-421269111/4/4130C
0.751059524062.70.0129.19
45.79.48.136http/1.1localhost:443GET /telescope/requests HTTP/1.1

15-421269141/2/3699C
0.061152456091.30.0037.78
139.162.139.31http/1.1localhost:443GET /config.json HTTP/1.1

16-421269440/1/2816W
0.010037702750.00.0024.80
142.93.122.55http/1.1localhost:443GET / HTTP/1.1

17-421269571/2/1948C
0.011127282612.70.0119.67
45.79.48.136http/1.1localhost:443GET /info.php HTTP/1.1

18-421269580/1/1518R
0.020224024560.00.007.28
134.122.123.104http/1.1www.bannongsaischool.com:443

19-421269701/1/1005C
0.001115341262.70.005.16
45.79.48.136http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

20-421269721/2/1177C
0.020016577901.30.008.98
45.79.48.136http/1.1localhost:443GET /login.action HTTP/1.1

21-421269781/2/837C
0.001111428871.30.004.63
139.162.139.31http/1.1localhost:443GET /about HTTP/1.1

22-421269881/1/789C
0.001211318042.70.003.42
45.79.48.136http/1.1localhost:443GET /.git/config HTTP/1.1

23-421269971/1/788C
0.55055411196085.50.0118.86
172.71.94.93http/1.1www.dr-rpi.com:443POST /wp-login.php HTTP/1.1

24-421269980/1/357R
0.5005174768480.00.002.96
134.122.123.104http/1.1

25-421270000/0/204R
0.00002702970.00.0045.99
134.122.123.104http/1.1

26-421270020/0/196R
0.00002258210.00.001.31
142.93.122.55http/1.1

27-421270090/0/103W
0.00001463500.00.000.45
172.71.98.22http/1.1www.siamerp.com:443POST /xmlrpc.php HTTP/1.1

28-421270190/0/3R
0.000012070.00.000.11
134.122.123.104http/1.1

29-421270280/0/64W
0.00001086510.00.000.51
142.93.122.55http/1.1localhost:443GET /.env HTTP/1.1

30-421270300/0/4W
0.00005000.00.000.09
142.93.122.55http/1.1localhost:443GET /server-status HTTP/1.1

31-421270520/0/19R
0.000096110.00.000.44
134.122.123.104http/1.1www.bannongsaischool.com:443

32-421270540/0/3R
0.000080.00.000.01
134.122.123.104http/1.1www.bannongsaischool.com:443

33-421270640/0/1R
0.000000.00.000.00
134.122.123.104http/1.1www.bannongsaischool.com:443

34-421270690/0/1R
0.000010.00.000.00
134.122.123.104http/1.1www.bannongsaischool.com:443

35-421270720/0/11R
0.000064400.00.000.05
134.122.123.104http/1.1www.bannongsaischool.com:443

36-421270820/0/1R
0.000010.00.000.00
134.122.123.104http/1.1www.bannongsaischool.com:443

37-421270850/0/7_
0.000032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421270890/0/3_
0.000036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421270910/0/9R
0.000028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421270940/0/4_
0.00009810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 23subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 219 seconds, (range: 29...290)index usage: 0%, cache usage: 1%total entries stored since starting: 6421total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23328 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: smtp.bannongsaischool.com
Port: 80
URL: http://smtp.bannongsaischool.com

First seen 2022-10-20 07:56
Last seen 2024-02-01 21:19
Open for 469 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311926366e1926366ed486e27e

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 04:19:26 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  27 days 18 hours 18 minutes 6 seconds
Server load: 2.03 2.06 2.01
Total accesses: 1843004 - Total Traffic: 23.8 GB - Total Duration: 2140668853
CPU Usage: u167.56 s102.55 cu32089.3 cs2210.25 - 1.44% CPU load
.768 requests/sec - 10.4 kB/second - 13.5 kB/request - 1161.51 ms/request
1 requests currently being processed, 127 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes032000
229661no0yes131000
329394no0yes032000
529374no0yes032000
Sum400 1127000

________________________________................................
______W_________________________________________________________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/1/14749_
0.0720160256510.00.00193.63
159.203.182.222http/1.1localhost:80GET / HTTP/1.1

0-92293730/0/15243_
0.0020138991490.00.00198.85
164.92.84.255h2localhost:443[0/0] Software caused connection abort

0-92293730/1/14814_
0.0720150305980.00.00192.57
159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-92293730/0/14993_
0.003570145868920.00.00185.87
45.55.193.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/0/14898_
0.003570147705690.00.00185.27
167.172.20.95http/1.1localhost:80GET /telescope/requests HTTP/1.1

0-92293730/0/15127_
0.003570156637760.00.00188.41
144.126.198.24http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/0/14800_
0.003570145560290.00.00200.10
159.203.44.43http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/0/15107_
0.003570150176580.00.00187.50
164.92.192.25http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/0/15067_
0.003570145202600.00.00229.80
159.223.102.13http/1.1localhost:80GET /.DS_Store HTTP/1.1

0-92293730/0/15194_
0.003570148852630.00.00194.72
159.203.44.43http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/0/14760_
0.003570154280280.00.00200.59
167.172.20.95http/1.1localhost:80GET / HTTP/1.1

0-92293730/0/14773_
0.003570147100270.00.00195.37
167.172.232.142http/1.1localhost:80GET /telescope/requests HTTP/1.1

0-92293730/0/14631_
0.003570137181620.00.00185.36
45.55.193.222http/1.1localhost:443GET /v2/_catalog HTTP/1.1

0-92293730/0/14791_
0.003570169077040.00.00185.93
139.144.96.150http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/0/15746_
0.003570141537700.00.00187.66
167.172.20.95http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-92293730/0/14792_
0.003570165338160.00.00182.39
164.92.84.255http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/0/14839_
0.003570143397110.00.00206.26
139.144.96.150http/1.1localhost:443GET / HTTP/1.1

0-92293730/0/14907_
0.003570144873350.00.00189.18
45.55.193.222http/1.1

0-92293730/0/14728_
0.003570160242950.00.00200.48
139.144.150.23http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/0/14945_
0.003570144636710.00.00193.68
164.92.84.255http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/0/14937_
0.003570181440860.00.00193.26
167.172.232.142http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/0/14965_
0.003570146988040.00.00203.98
139.144.150.23http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/0/15418_
0.003570150747980.00.00188.12
139.144.150.23h2localhost:443[0/0] Software caused connection abort

0-92293730/0/14631_
0.003570138763900.00.00190.05
139.144.150.23http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/0/14924_
0.003570162204730.00.00186.78
159.203.44.43http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/0/14603_
0.003570135973320.00.00196.85
134.122.34.144http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/0/15107_
0.003570144712670.00.00194.45
64.227.126.135http/1.1localhost:443GET /about HTTP/1.1

0-92293730/0/14885_
0.003570159153040.00.00213.24
139.144.150.23http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/0/14687_
0.003570152163290.00.00175.81
178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/0/15148_
0.003570135099350.00.00225.04
164.92.84.255http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/0/14619_
0.003570155554030.00.00199.08
159.203.44.43http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/0/14890_
0.003570145814070.00.00184.99
178.62.73.12http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

1-92-0/0/15731.
0.003520138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.003520136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.003520174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.003520150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.003520146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.003520134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.003520172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.003520165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.003520127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.003520152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.003520148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.003520159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.003520159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15189.
0.00

Found on 2024-02-01 21:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311926366e1926366ed623870c

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 05-Jan-2024 20:23:26 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 hours 22 minutes 5 seconds
Server load: 2.54 2.55 2.53
Total accesses: 186555 - Total Traffic: 2.7 GB - Total Duration: 148877906
CPU Usage: u224.75 s12.28 cu2734.05 cs151.16 - 8.37% CPU load
5 requests/sec - 76.4 kB/second - 15.3 kB/request - 798.038 ms/request
5 requests currently being processed, 59 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
06904no7yes329004
25731no12yes230007
Sum2019 5590011

___W___R_____W__________________................................
___________________________RW___................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069040/200/2173_
113.25083817883300.02.4534.24
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?eeehsbr-205911retidm6 HTTP/1.1

0-069040/192/2307_
113.22184216992980.02.4728.57
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?auyggdh-141635letidm50n HTTP/1.1

0-069040/187/2136_
112.95284529214040.02.3241.74
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ttixsgj-7962vetid.htm HTTP/1.1

0-069041/200/2331W
112.510017265340.02.3430.23
185.191.171.8http/1.1www.chonlateefood.com:443GET /getid/fou34507ihpoitems HTTP/1.1

0-069040/189/2272_
113.182017680790.02.3728.52
147.182.130.98http/1.1localhost:80GET /about HTTP/1.1

0-069040/207/2513_
113.133017606180.02.6431.34
147.182.130.98http/1.1localhost:80GET / HTTP/1.1

0-069040/190/2130_
113.05485117372750.02.2226.51
52.70.240.171http/1.1www.chonlateeboi.com:443GET /4111rbhsitems/etidm43ds HTTP/1.1

0-069040/181/2254R
112.804018007130.02.2429.49
66.249.71.168http/1.1www.chonlateeadmin.com:443

0-069040/196/2282_
112.66385317019000.02.4563.25
157.55.39.49h2www.chonlateeadmin.com:443[0/0] init

0-069040/185/2231_
113.221016932210.02.4028.84
147.182.168.210http/1.1localhost:80GET /telescope/requests HTTP/1.1

0-069040/190/2204_
111.450220820625050.02.2827.02
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /owdxsgj-19943qetidm52bj.html HTTP/1.1

0-069040/187/2143_
112.38389716938870.02.4328.08
185.191.171.19http/1.1www.chonlateeboi.com:443GET /30262ebqoetidm19y HTTP/1.1

0-069040/169/2121_
113.020017429580.02.6530.24
147.182.168.210http/1.1localhost:80GET /login.action HTTP/1.1

0-069041/193/2388W
113.050018060580.02.4331.82
147.182.130.98http/1.1localhost:80GET /server-status HTTP/1.1

0-069040/175/2464_
112.834020055050.02.3333.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /pubcategoryrbhs/13 HTTP/1.1

0-069040/201/2187_
112.88384817398770.02.3929.35
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ifxxsgj-31793keti.html HTTP/1.1

0-069040/188/2136_
113.221017613480.02.3027.97
147.182.130.98http/1.1localhost:80GET /v2/_catalog HTTP/1.1

0-069040/185/2312_
112.93284217243600.02.2132.27
23.22.35.162http/1.1www.chonlateeboi.com:443GET /4134rbhsetidm10a.htm HTTP/1.1

0-069040/188/2331_
113.22184216742890.02.3730.77
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ykyqxjd-151357litems/etid.html HTTP/1.1

0-069040/189/2169_
113.06384218952330.02.2826.51
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?cqcqxjd-218259petidm44pdp HTTP/1.1

0-069040/182/2233_
112.88338417177460.02.0632.60
27.254.96.168http/1.1www.bannongsaischool.com:443POST /wp-cron.php?doing_wp_cron=1704460998.80784511566162109375

0-069040/183/2234_
112.11189318094110.02.7032.91
159.203.182.222http/1.1

0-069040/196/2501_
113.02084316767660.02.9530.95
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?bubhlzs-17876oitems/eti.htm HTTP/1.1

0-069040/189/2146_
110.39284516645430.02.4128.90
159.203.182.222h2localhost:443[0/0] Software caused connection abort

0-069040/175/2170_
113.250017705310.02.0328.61
137.184.106.30http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-069040/189/2180_
112.73245916820870.02.3028.17
151.106.38.166http/1.1www.thesungolden.com:443POST /wp-login.php HTTP/1.1

0-069040/185/2109_
113.182016403080.02.3427.07
137.184.106.30http/1.1localhost:80GET /about HTTP/1.1

0-069040/189/2242_
112.383016851260.02.5759.22
54.38.85.37http/1.1www.1smestartup.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-069040/178/2104_
112.51195517088030.02.2426.81
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?jughsbr-235192titems/etid.html HTTP/1.1

0-069040/188/2467_
113.09384616472710.02.4067.74
23.22.35.162http/1.1www.chonlateeboi.com:443GET /16518bzlnetidm62i.htm HTTP/1.1

0-069040/191/2134_
113.132017035750.02.2234.53
147.182.130.98http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-069040/347/2470_
113.132017177090.03.3130.04
137.184.106.30http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

1-0-0/0/1494.
0.00234384410789900.00.0019.95
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1

1-0-0/0/1277.
0.00234390410369240.00.0016.79
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1

1-0-0/0/1292.
0.00234384310629170.00.0018.86
52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1

1-0-0/0/1320.
0.00234384010544740.00.0017.61
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1

1-0-0/0/1329.
0.00234384010311000.00.0021.84
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1

1-0-0/0/1313.
0.00234383710077550.00.0017.92
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1

1-0-0/0/1347.
0.00234386610387560.00.0016.37
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1

1-0-0/0/1346.
0.00234389710630850.00.0016.65
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1

1-0-0/0/1346.
0.00234383910436060.00.0017.96
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1

1-0-0/0/1273.
0.00234384110395360.00.0016.70
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1

1-0-0/0/1214.
0.00234392410022070.00.0015.53
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wuxaonh-247555kitems/eti.htm HTTP/1.1

1-0-0/0/1373.
0.002343107410816380.00.0018.55
23.22.35.162http/1.1www.chonlateeboi.com:443GET /22932oqmietidm9.htm

Found on 2024-01-05 13:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311926366e1926366e4af75277

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 31-Dec-2023 00:23:58 ICT
Restart Time: Saturday, 30-Dec-2023 08:59:06 ICT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  15 hours 24 minutes 51 seconds
Server load: 0.92 1.25 0.96
Total accesses: 142776 - Total Traffic: 1.9 GB - Total Duration: 187804484
CPU Usage: u15.08 s3.17 cu2336.4 cs123.86 - 4.47% CPU load
2.57 requests/sec - 35.7 kB/second - 13.9 kB/request - 1315.38 ms/request
10 requests currently being processed, 182 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
130544yes (old gen)1no00000
230705yes (old gen)1no00000
43868no1yes131000
53869no1yes032000
63887no0yes131000
73890no0yes527000
83891no0yes230000
93894no0yes131000
Sum824 10182000

.........................................................W......
..............W.................................................
______________W_________________________________________________
__R___________________________________W_WWW_R___________________
_WW_____________________________R_______________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/1117.
0.00111136509430.00.0011.84
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init

0-1-0/0/1136.
0.00106331540.00.0011.53
45.55.193.222http/1.1localhost:443GET / HTTP/1.1

0-1-0/0/1140.
0.001025265700.00.0024.94
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nluyynk158444hetidm4.htm HTTP/1.1

0-1-0/0/1274.
0.00106889840.00.0023.82
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rlyyynk158396letidm8.htm HTTP/1.1

0-1-0/0/1105.
0.00106403550.00.0012.53
167.99.184.41http/1.1localhost:80\x16\x03\x01\x01\v\x01

0-1-0/0/1082.
0.0018637108900.00.0011.73
27.254.96.168h2www.tafa.or.th:443[1/1] done: stream 1, GET /.well-known/acme-challenge/letsencry

0-1-0/0/1128.
0.0019806519050.00.0015.72
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1175.
0.0019747218650.00.0011.92
85.208.96.208http/1.1www.chonlateefood.com:443GET /items/jhy49721nheetid.html HTTP/1.1

0-1-0/0/1083.
0.00106913460.00.0010.57
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /erluqhe232587yitems/etidm HTTP/1.1

0-1-0/0/1184.
0.00110786829040.00.0011.80
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?294810rvjfetid.htm HTTP/1.1

0-1-0/0/1236.
0.00106878810.00.0013.78
142.93.158.96h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1159.
0.00107274260.00.0021.81
159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1276.
0.00106975010.00.0016.15
159.203.44.43h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1184.
0.00111106511550.00.0011.82
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236725rvjfitems/etidm31 HTTP/1.1

0-1-0/0/1095.
0.00111617072800.00.0010.51
27.254.96.168h2www.tafa.or.th:443[0/0] init

0-1-0/0/1299.
0.0019056830310.00.0011.70
164.92.192.25http/1.1localhost:80\x16\x03\x01\x01\x07\x01

0-1-0/0/1128.
0.00106839100.00.0019.11
142.93.153.3http/1.1www.bannongsaischool.com:80GET /debug/default/view?panel=config HTTP/1.1

0-1-0/0/1107.
0.0019207344320.00.0010.90
85.208.96.211http/1.1www.chonlateeadmin.com:443GET /qgfxzet-6035setidm.html HTTP/1.1

0-1-0/0/1101.
0.00110777047680.00.0011.08
52.167.144.181h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /g282106.shtml

0-1-0/0/1105.
0.0019246288640.00.0014.53
207.154.240.169http/1.1www.bannongsaischool.com:443GET / HTTP/1.1

0-1-0/0/1137.
0.00106592820.00.0011.02
47.128.115.110h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B

0-1-0/0/1121.
0.00107034910.00.0014.01
159.203.63.67http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1113.
0.00107004240.00.0011.09
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ijpewrv144789citems/etidm97 HTTP/1.1

0-1-0/0/1188.
0.00106504600.00.0011.44
159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-1-0/0/1076.
0.00110857030960.00.0010.88
128.199.62.55h2localhost:443[0/0] Software caused connection abort

0-1-0/0/1192.
0.0019006922670.00.0012.90
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?251392rvjfetidm47yrn HTTP/1.1

0-1-0/0/1160.
0.00110786474890.00.0013.73
159.203.63.67http/1.1localhost:80\x16\x03\x01\x01\x0c\x01

0-1-0/0/1137.
0.00111166730360.00.0011.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236788rvjfetidm1 HTTP/1.1

0-1-0/0/1037.
0.00106337650.00.0010.15
52.167.144.181h2www.chonlateenextbiz.com:443GET /g282106.shtml HTTP/2.0

0-1-0/0/1272.
0.00107123480.00.0015.67
159.223.102.13http/1.1localhost:80GET / HTTP/1.1

0-1-0/0/1183.
0.0019487191880.00.0013.31
185.191.171.4http/1.1www.chonlateefood.com:443GET /get/vbk37513sbrzitems HTTP/1.1

0-1-0/0/1111.
0.00107132170.00.0011.49
159.89.83.196http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.002014496950.00.0038.55
203.170.192.183http/1.1www.bannongsaischool.com:443GET /.well-known/acme-challenge/letsencrypt_1703956978_e85a2b04

1-1-0/0/1124.
0.002011368210.00.0012.21
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /erlkeon16085y4md/3d724b8.htm HTTP/1.1

1-1-0/0/1104.
0.002010151050.00.0011.72
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /udbuqhe252597oitems/etidm48 HTTP/1.1

1-1-0/0/1114.
0.002112113334880.00.0012.50
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?239406rvjfetidm96y.htm HTTP/1.1

1-1-0/0/1143.
0.00208160800.00.0011.93
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /krruqhe232619eitems/etidm.htm HTTP/1.1

1-1-0/0/1200.
0.00209262510.00.0013.49
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /wdduqhe232605qitems/etidm22 HTTP/1.1

1-1-0/0/1271.
0.002011146310.00.0014.21
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

1-1-0/0/1334.
0.0024889625020.00.0056.21
97.74.206.146http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1

1-1-0/0/1237.
0.00209736310.00.0031.66
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reyewrv93786letid HTTP/1.1

1-1-0/0/1161.
0.0028949699610.00.0013.64
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?236747rvjfetidm.html HTTP/1.1

1-1-0/0/1283.
0.0016111154750.00.0012.43
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236775rvjfitems/etidm94tf.

Found on 2023-12-30 17:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3180f5600980f56009b46c0b1d

Apache Status

Apache Server Status for smtp.bannongsaischool.com (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 20-Oct-2022 14:57:39 +07
Restart Time: Thursday, 20-Oct-2022 04:02:09 +07
Parent Server Config. Generation: 422
Parent Server MPM Generation: 421
Server uptime:  10 hours 55 minutes 30 seconds
Server load: 1.19 1.06 1.23
Total accesses: 167033 - Total Traffic: 1.4 GB - Total Duration: 222783452
CPU Usage: u771.41 s1262 cu12423800 cs2986310 - 39200% CPU load
4.25 requests/sec - 37.8 kB/second - 8.9 kB/request - 1333.77 ms/request
7 requests currently being processed, 3 idle workers
R_R__RRR.WR.......................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-421247290/72/12520R
33.7513486163035820.00.96102.60
139.162.139.31http/1.1

1-421250910/26/12641_
14.3301164689620.00.13123.88
194.195.117.204http/1.1localhost:80GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass

2-421259040/10/12483R
6.0992200164859970.00.0899.56
172.71.102.161http/1.1www.business.co.th:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3

3-421248180/58/12418_
25.4600164218740.00.4892.41
194.195.117.204http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0

4-421245880/98/11819_
37.3301160197820.01.31129.28
194.195.117.204http/1.1localhost:80GET /telescope/requests HTTP/1.0

5-421248470/47/11492R
29.974428149059310.00.4597.72
172.69.42.134http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1

6-421246000/95/11419R
37.714726146103420.01.27100.55
139.144.172.77http/1.1www.bannongsaischool.com:443

7-421259460/11/11187R
5.8571149067840.00.0883.93
134.122.123.104http/1.1www.bannongsaischool.com:443

8-421-0/0/10409.
0.00170138207460.00.0069.47
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

9-421266870/6/10214W
1.6200132836320.00.0189.22
194.195.117.204http/1.1localhost:80GET /server-status HTTP/1.0

10-421249150/40/8780R
19.15141007118547300.00.2876.54
104.248.168.29http/1.1

11-421-0/0/8706.
0.0037128115615800.00.0061.87
45.127.61.132http/1.1www.bannongsaischool.com:80GET /wp-content/uploads/2019/01/NONGSAI-MAP-07.jpg HTTP/1.0

12-421-0/0/7478.
0.004684256101876860.00.0056.31
172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1666252186.05959701538085937500

13-421-0/0/5788.
0.001119080138630.00.0057.40
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

14-421-0/0/4126.
0.00939159509020.00.0029.18
119.76.14.104http/1.1www.ddflooringperfect.co.th:443GET /wp-content/plugins/so-widgets-bundle/widgets/button/css/st

15-421-0/0/3697.
0.00887152456030.00.0037.77
69.171.251.15http/1.1www.dreamhightravel.com:443GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?

16-421-0/0/2815.
0.001079037702710.00.0024.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-421-0/0/1946.
0.00946027282540.00.0019.67
124.120.94.45http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css

18-421-0/0/1517.
0.001637024024520.00.007.27
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-421-0/0/1004.
0.001641015341220.00.005.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-421-0/0/1175.
0.00121378416577850.00.008.98
172.68.234.228http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1666251444.71553611755371093750

21-421-0/0/835.
0.001648011428820.00.004.62
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-421-0/0/788.
0.001375011318000.00.003.41
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-421-0/0/787.
0.001631011185000.00.0018.86
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-421-0/0/356.
0.00168604758130.00.002.96
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

25-421-0/0/204.
0.00168502702970.00.0045.99
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-421-0/0/196.
0.00153902258210.00.001.31
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

27-421-0/0/103.
0.00170001463500.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-421-0/0/3.
0.001699012070.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-421-0/0/64.
0.00144101086510.00.000.51
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-421-0/0/4.
0.00168905000.00.000.09
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

31-421-0/0/19.
0.001636096110.00.000.44
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-421-0/0/3.
0.001698080.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-421-0/0/1.
0.001707000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-421-0/0/1.
0.001706010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-421-0/0/11.
0.001673064400.00.000.05
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-421-0/0/1.
0.001705010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-421-0/0/7.
0.001681032810.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-421-0/0/3.
0.001696036060.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-421-0/0/9.
0.001675028000.00.000.52
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-421-0/0/4.
0.00168809810.00.000.02
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 16subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 217 seconds, (range: 38...299)index usage: 0%, cache usage: 0%total entries stored since starting: 6414total entries replaced since starting: 0total entries expired since starting: 6398total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 67 hit, 23210 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-20 07:56

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-09-26 22:44

HTTP/1.1 301 Moved Permanently
Date: Thu, 26 Sep 2024 22:44:29 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found one day ago by HttpPlugin

Create report

Open service 27.254.96.168:443 · bannongsaischool.com

2024-09-26 21:10

HTTP/1.1 200 OK
Date: Thu, 26 Sep 2024 21:10:05 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Link: <https://bannongsaischool.com/wp-json/>; rel="https://api.w.org/"
Link: <https://bannongsaischool.com/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found one day ago by HttpPlugin

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-09-25 01:20

HTTP/1.1 301 Moved Permanently
Date: Wed, 25 Sep 2024 01:20:22 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-09-25 by HttpPlugin

Create report

Open service 27.254.96.168:443 · bannongsaischool.com

2024-09-24 12:18

HTTP/1.1 200 OK
Date: Tue, 24 Sep 2024 12:18:27 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Link: <https://bannongsaischool.com/wp-json/>; rel="https://api.w.org/"
Link: <https://bannongsaischool.com/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-24 by HttpPlugin

Create report

Open service 27.254.96.168:443 · bannongsaischool.com

2024-09-14 11:47

HTTP/1.1 200 OK
Date: Sat, 14 Sep 2024 11:47:18 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Link: <https://bannongsaischool.com/wp-json/>; rel="https://api.w.org/"
Link: <https://bannongsaischool.com/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-14 by HttpPlugin

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-09-14 11:08

HTTP/1.1 301 Moved Permanently
Date: Sat, 14 Sep 2024 11:08:22 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-09-14 by HttpPlugin

Create report

Open service 27.254.96.168:443 · bannongsaischool.com

2024-09-12 16:20

HTTP/1.1 200 OK
Date: Thu, 12 Sep 2024 16:20:51 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Link: <https://bannongsaischool.com/wp-json/>; rel="https://api.w.org/"
Link: <https://bannongsaischool.com/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-12 by HttpPlugin

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-09-12 14:32

HTTP/1.1 301 Moved Permanently
Date: Thu, 12 Sep 2024 14:32:08 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-09-12 by HttpPlugin

Create report

Open service 27.254.96.168:443 · bannongsaischool.com

2024-09-11 02:19

HTTP/1.1 200 OK
Date: Wed, 11 Sep 2024 02:19:15 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Link: <https://bannongsaischool.com/wp-json/>; rel="https://api.w.org/"
Link: <https://bannongsaischool.com/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-11 by HttpPlugin

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-09-10 18:33

HTTP/1.1 301 Moved Permanently
Date: Tue, 10 Sep 2024 18:33:19 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-09-10 by HttpPlugin

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-09-08 22:59

HTTP/1.1 301 Moved Permanently
Date: Sun, 08 Sep 2024 22:59:41 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-09-08 by HttpPlugin

Create report

Open service 27.254.96.168:443 · bannongsaischool.com

2024-09-08 09:16

HTTP/1.1 200 OK
Date: Sun, 08 Sep 2024 09:16:26 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Link: <https://bannongsaischool.com/wp-json/>; rel="https://api.w.org/"
Link: <https://bannongsaischool.com/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-08 by HttpPlugin

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-09-06 22:21

HTTP/1.1 301 Moved Permanently
Date: Fri, 06 Sep 2024 22:21:20 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-09-06 by HttpPlugin

Create report

Open service 27.254.96.168:443 · www.bannongsaischool.com

2024-08-16 22:46

HTTP/1.1 301 Moved Permanently
Date: Fri, 16 Aug 2024 22:46:22 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Location: https://bannongsaischool.com/
Vary: User-Agent
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-08-16 by HttpPlugin

Create report

Open service 27.254.96.168:443 · bannongsaischool.com

2024-08-16 22:00

HTTP/1.1 200 OK
Date: Fri, 16 Aug 2024 22:00:27 GMT
Server: Apache/2
X-Powered-By: PHP/7.2.33
X-Pingback: https://bannongsaischool.com/xmlrpc.php
Link: <https://bannongsaischool.com/wp-json/>; rel="https://api.w.org/"
Link: <https://bannongsaischool.com/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-08-16 by HttpPlugin

Create report

bannongsaischool.comftp.bannongsaischool.commail.bannongsaischool.compop.bannongsaischool.comsmtp.bannongsaischool.comwww.bannongsaischool.com

Fingerprint:

8c1bf64d320290e59869847240330dacbbc725201836b7d892de1ef8c2a9c3a1

CN:

bannongsaischool.com

Key:

RSA-4096

Issuer:

Not before:

2022-10-20 06:55

Not after:

2023-01-18 06:55

Domain summary

ftp.bannongsaischool.com 10 mail.bannongsaischool.com 10 pop.bannongsaischool.com 10 smtp.bannongsaischool.com 8 www.bannongsaischool.com 7 bannongsaischool.com 6

6 recorded

IP summary

27.254.96.168 4 203.170.192.183 4

2 recorded