LeakIX - Host collarts-login.cloudworkengine.net

Domain collarts-login.cloudworkengine.net

United States

AMAZON-02

Ubuntu

Software information

Apache Apache 2.4.58

tcp/443

Apache Apache 2.4.52

tcp/443

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 108.156.60.105
Domain: collarts-login.cloudworkengine.net
Port: 443
URL: https://collarts-login.cloudworkengine.net

First seen 2024-09-11 05:21
Last seen 2026-01-02 05:13
Open for 477 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2ccc218fd

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 02-Jan-2026 05:13:41 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  16 days 22 hours 30 minutes 59 seconds
Server load: 0.23 0.63 0.69
Total accesses: 671114 - Total Traffic: 2.1 GB - Total Duration: 31746289
CPU Usage: u46.41 s45.41 cu135.91 cs80.7 - .0211% CPU load
.459 requests/sec - 1568 B/second - 3419 B/request - 47.3039 ms/request
2 requests currently being processed, 48 idle workers
_______K________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0321090/2908/13686_
28.6816726114630.09.4845.06
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bf08e634102ca

0-0321090/2953/13987_
28.6823036529910.09.0546.03
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2395/13434_
28.709237152280.07.3242.09
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0321090/2569/14004_
28.6541626462330.08.3946.08
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_442e357da2512

0-0321090/2734/13287_
28.6450437285990.09.0144.03
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2540/12938_
28.6815325345670.09.0543.10
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e69f56552139b

0-0321090/3038/14564_
28.704316436710.09.7547.11
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-03210931/2697/13831K
28.7123360944052.78.3143.98
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0872d2149c504

0-0321090/2985/14269_
28.6376036831080.08.6846.66
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2698/13148_
28.703125530710.07.9242.00
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f79eaffac5dbe

0-0321090/2742/13601_
28.6277736295090.08.0543.50
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2585/13147_
28.6369555423830.08.8043.18
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321090/2661/13505_
28.6374436818000.08.1444.22
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/3072/13891_
28.6371335957510.09.9645.46
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2641/13436_
28.63650315470150.08.5643.38
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2900/13568_
28.6367435234140.09.0444.18
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2574/13646_
28.6455447344180.08.0447.22
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2401/12910_
28.6456736565500.07.5242.54
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2466/13212_
28.6360536728800.07.6944.05
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2705/12922_
28.6452935833660.07.6942.64
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2724/12666_
28.6532226751300.08.9140.21
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c4d3d8b5d1ba4

0-0321090/2322/12341_
28.6536025553770.06.7339.38
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_154e948b1abf5

0-0321090/2378/13389_
28.65451475565500.07.2442.70
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e7e5482568aa4

0-0321090/2830/13178_
28.6447938069260.08.0741.63
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0321090/2347/13330_
28.6543426400150.07.4045.38
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2422951eead9f

1-0320790/2526/13600_
27.6353526370960.07.3344.85
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_be41aec66ec3b

1-0320790/2589/12977_
27.6444136252810.07.9343.57
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320790/2436/12502_
27.6542235884880.07.4840.34
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320790/2668/13329_
27.6448825732280.07.8240.32
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ce8fcae1443eb

1-0320790/2575/13405_
27.6352125929350.06.9544.41
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_739111aa3a97e

1-0320790/2973/13009_
27.6370445967030.08.9442.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320790/2504/13208_
27.6530946117200.07.7942.10
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320790/2740/14004_
27.6536747694100.09.0345.11
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320790/2361/13365_
27.6447336621990.07.7044.83
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320790/2328/13308_
27.6617927432470.06.7841.79
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d260ebdf39472

1-0320790/2948/13937_
27.6535026491300.08.9046.53
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_08dd3b3b4a9d9

1-0320790/2539/13418_
27.6715205993080.07.7144.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0320790/2866/13893_
27.677926127290.08.3345.44
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_176712e31e28e

1-0320790/3099/13922_
27.6712666532010.09.3146.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7cc76f33bea94

1-0320790/2656/13470_
27.673556009550.08.0344.85
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-03207911/2852/13456W
27.680062686260.28.3742.66
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /server-status HTTP/1.1

1-0320790/2708/13237_
27.6743407524360.08.9144.38
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0320790/2498/13746_
27.6277036927330.07.1844.01
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0e504cf6e3d94

1-0320790/2284/13290_
27.6372936990760.07.8143.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.

Found on 2026-01-02 05:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2497bcd8c

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 26-Dec-2025 14:05:26 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 days 7 hours 22 minutes 45 seconds
Server load: 1.30 0.92 0.77
Total accesses: 393105 - Total Traffic: 1.3 GB - Total Duration: 20280881
CPU Usage: u39.44 s35.26 cu68.64 cs34.25 - .0199% CPU load
.441 requests/sec - 1567 B/second - 3551 B/request - 51.5915 ms/request
1 requests currently being processed, 49 idle workers
______________________________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0209250/2616/8036_
27.3568164243490.08.8327.21
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0209250/2581/8359_
27.403434142680.07.6328.93
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_232719c39e46b

0-0209250/2542/7828_
27.3569933949760.07.3324.88
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6d8d1dac3c891

0-0209250/2717/8498_
27.3565944401020.08.3528.37
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d5a5a81665d3a

0-0209250/2551/7589_
27.3561934339980.07.6025.71
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8caa4ce1af3fa

0-0209250/2620/7427_
27.3559233449470.08.4725.54
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8b475cd14ebd5

0-0209250/2946/8435_
27.3553034431370.08.8827.96
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ba81bedbff642

0-0209250/2832/8007_
27.3649643561240.08.1126.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e98896e4c7507

0-0209250/2601/8277_
27.3557334504260.08.8828.82
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7460f959abcd6

0-0209250/2556/7508_
27.3647333425480.07.6725.56
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2295a1af7735e

0-0209250/2684/7962_
27.364012084088760.07.7026.56
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/2627/7798_
27.3642133542420.07.5225.89
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_84aded8099d86

0-0209250/2652/7854_
27.3645233669340.07.6626.52
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e1b2b259ffd40

0-0209250/2380/7805_
27.3638063853160.06.8725.39
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0209250/2889/7868_
27.3731643578180.08.4725.45
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/2373/7984_
27.3634543373380.06.7327.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/2489/8028_
27.3636654930540.08.9429.48
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/2677/7613_
27.3727344525410.08.7225.95
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/2607/7897_
27.3729534922050.08.4528.05
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a7349df2f436

0-0209250/2543/7500_
27.3723813547440.07.9626.56
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0209250/2465/7201_
27.3910143824880.07.2523.34
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/2424/7201_
27.398943585510.07.2923.89
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0209250/2571/7818_
27.3914163669140.07.8926.16
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0209250/2857/7462_
27.405935067330.08.4224.93
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f5925c2431e65

0-0209250/2630/8051_
27.3572834162970.09.2129.00
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0aa1144bad991

1-0208790/2492/8059_
26.67199104448880.07.4927.81
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1f7bcee46da5e

1-0208790/2736/7687_
26.6530733764540.08.9627.61
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_11c516809e0d0

1-0208790/2612/7318_
26.6533733495570.08.2623.92
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d13274cf9109b

1-0208790/2642/7817_
26.6535043487690.07.6824.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/2751/8156_
26.6537234108420.08.5127.92
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_db722250f572f

1-02087937/2571/7372W
26.700040904360.17.5925.28
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /server-status HTTP/1.1

1-0208790/2576/7817_
26.6719033275730.07.2825.13
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_165922db63c0a

1-0208790/2830/8296_
26.6628134916750.08.3727.73
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d899f5ea5f2e7

1-0208790/2571/8255_
26.694354372100.07.4828.17
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/2499/8138_
26.6816145503120.07.2726.41
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0208790/2359/7987_
26.6271634325530.07.6927.75
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b0a2c6c74dc2

1-0208790/2375/7883_
26.689433787240.06.9727.52
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_57569d3c0b03a

1-0208790/2550/8045_
26.687543669610.07.5727.70
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/2412/7773_
26.6360254225000.07.0226.71
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/2486/7809_
26.6266743995030.08.1627.50
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/2507/7919_
26.6268634435400.07.5926.51
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_83736d7a9ea82

1-0208790/2535/7678_
26.6362634106430.07.7926.53
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d63a101e7838e

1-0208790/2726/8182_
26.6451874117210.08.2527.45
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/3037/8226_
26.6454933860440.08.7726.93
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/cor

Found on 2025-12-26 14:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de22960e4f8

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 24-Dec-2025 13:22:14 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 6 hours 39 minutes 32 seconds
Server load: 0.45 0.44 0.56
Total accesses: 326625 - Total Traffic: 1.1 GB - Total Duration: 17683323
CPU Usage: u21.15 s20.68 cu68.64 cs34.25 - .0202% CPU load
.457 requests/sec - 1657 B/second - 3630 B/request - 54.1395 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0209250/1269/6689_
13.2426423478360.04.4522.83
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b49eda7a79f9e

0-0209250/1183/6961_
13.2524743513790.03.4424.75
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1365/6651_
13.2521533038880.04.1021.66
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1485/7266_
13.2515543943240.04.6724.70
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1178/6216_
13.2517723184230.03.6621.78
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cea850e323d2e

0-0209250/1248/6055_
13.2512842952340.03.5720.65
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0209250/1515/7004_
13.258224003270.04.6823.77
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f2a8ce651a5fb

0-0209250/1541/6716_
13.262623155120.04.4922.81
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f4a50465309ba

0-0209250/1140/6816_
13.264954019410.03.8823.83
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1366/6318_
13.2269223079420.03.9521.84
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2b7284ad36acf

0-0209250/1312/6590_
13.2359033599560.03.7022.57
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b51157b721d41

0-0209250/1349/6520_
13.226192493165260.03.9022.27
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1331/6533_
13.2266133183770.03.8622.72
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1198/6623_
13.2356823484800.03.4321.95
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0416fab0e4632

0-0209250/1300/6279_
13.2354323044580.03.6720.65
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e9de945909cc4

0-0209250/1099/6710_
13.2350122994880.03.2924.00
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ad227709f6983

0-0209250/1205/6744_
13.2352534381030.04.4324.97
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1334/6270_
13.2344824013400.04.8422.07
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b2b0a4c435c86

0-0209250/1326/6616_
13.2346804430680.03.9323.53
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /robots.txt HTTP/1.1

0-0209250/1210/6167_
13.2342423078250.03.9522.55
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2959ede14b1fc

0-0209250/1155/5891_
13.2339943293800.03.5519.64
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1132/5909_
13.2333933143550.03.5920.18
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7974d4693f0dd

0-0209250/1255/6502_
13.2336843230000.04.1222.38
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0209250/1464/6069_
13.2331334625310.04.4420.95
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0209250/1364/6785_
13.2428423489920.04.6724.46
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7e9ec758c5584

1-0208790/1136/6703_
12.5445453946850.03.2923.61
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1322/6273_
12.5353823272090.04.8523.49
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_47118e5b0ab30

1-0208790/1260/5966_
12.5351952891230.03.8319.49
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1180/6355_
12.5256133018780.03.4620.13
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1234/6639_
12.5257433576790.03.9223.33
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1418/6219_
12.5430733676510.03.7921.48
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1383/6624_
12.5443332930110.03.8621.71
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1380/6846_
12.5448524441730.04.0323.39
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_55eac31c7796b

1-0208790/1156/6840_
12.5438634025010.03.5324.23
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1217/6856_
12.5440925006250.03.4822.62
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2a00cb6651875

1-0208790/1097/6725_
12.5432023696880.03.3123.37
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d6e79c4089773

1-0208790/1119/6627_
12.5435343402160.03.2323.78
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1223/6718_
12.5427233264260.03.6223.75
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1141/6502_
12.5420823377330.03.4423.13
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_35aaccee35b3d

1-0208790/1052/6375_
12.5425723137380.02.9422.29
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bf44dba806884

1-0208790/1322/6734_
12.5423503830630.03.8022.71
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET / HTTP/1.1

1-0208790/1185/6328_
12.551662103554350.03.7922.53
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0208790/1419/6875_
12.558933603270.04.6623.86
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http://collarts.instru

1-0208790/1470/6659_
12.556023392730.04.7222.88
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8

Found on 2025-12-24 13:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de20f220f46

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 22-Dec-2025 16:11:57 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 9 hours 29 minutes 15 seconds
Server load: 0.27 0.56 0.65
Total accesses: 256400 - Total Traffic: 916.0 MB - Total Duration: 14955782
CPU Usage: u26.55 s18.39 cu45.2 cs21.99 - .0203% CPU load
.464 requests/sec - 1738 B/second - 3746 B/request - 58.3299 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0326930/1753/5238_
16.3340442831740.05.7717.81
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f2bc4d979d8be

0-0326930/1704/5670_
16.3331623100990.06.0821.01
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_587ac7c746b06

0-0326930/1651/5117_
16.3343432283330.05.2717.09
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1700/5681_
16.3328933147160.05.4819.74
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1554/4900_
16.3423932707090.05.8217.74
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1501/4690_
16.333472312590170.05.1516.76
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1729/5354_
16.3514243276050.06.3318.73
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1754/5039_
16.3416132663750.05.6417.96
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1717/5561_
16.3422923389210.05.5619.63
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_96af1f7fadd86

0-0326930/1563/4778_
16.358922485450.05.7417.34
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_270ac8f6776e8

0-0326930/1503/5115_
16.3418332781810.04.9318.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1639/5039_
16.3510632697840.06.1718.01
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1734/5082_
16.351302572040.05.7318.54
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /swagger-ui.html HTTP/1.1

0-0326930/1629/5274_
16.353522810530.05.3718.11
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_405a4bb8964e7

0-0326930/1505/4843_
16.3174332592820.05.3616.52
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1705/5426_
16.3160752585910.06.2820.18
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1613/5385_
16.3163133808880.05.3320.07
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1537/4813_
16.3172533153060.04.8416.91
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1661/5219_
16.3257433816330.06.9219.40
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1449/4851_
16.32586182550740.04.9118.32
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1497/4580_
16.3171142904230.05.0515.67
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326930/1573/4643_
16.3254232716270.05.2716.18
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1733/5086_
16.3347932578440.05.7817.80
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1547/4495_
16.3350034011400.04.8016.15
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/1724/5245_
16.3345222805790.06.1119.20
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b7f2a52c84bb2

1-0326610/1807/5425_
16.6542433255910.06.1619.93
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/1806/4838_
16.66298502737220.06.5218.31
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9ba1810b5cebc

1-0326610/1688/4607_
16.6544532434690.05.7015.39
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/1637/5085_
16.6552122602040.05.3716.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5c57ef6fee2f2

1-0326610/1523/5302_
16.6556722933880.04.7519.12
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_397b9598ed2ee

1-0326610/1656/4676_
16.647532213251720.05.2817.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/1663/5124_
16.6547142515180.05.6817.52
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0326610/1631/5331_
16.6723123881750.05.5618.99
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2b110b8088482

1-0326610/1665/5559_
16.6722433622050.05.7820.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/1579/5536_
16.6726524532650.05.1718.85
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c5d222993e5ca

1-0326610/1691/5484_
16.6632633195150.06.2519.66
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/1856/5336_
16.6635932887460.06.6019.66
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/1708/5399_
16.6713522921320.05.8519.87
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f41423f9459ce

1-0326610/1521/5242_
16.6715622779960.05.5419.38
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_acb2d9ff34d73

1-0326610/1800/5227_
16.6717022780460.06.2019.08
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_20dd509d67b4f

1-0326610/1633/5275_
16.684823326840.05.5318.52
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c18349b1f9bb6

1-03266138/1602/4960W
16.690030954063.35.8218.18
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /server-status HTTP/1.1

1-0326610/1610/5353_
16.679733071130.05.5818.93
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/1510/5037_
16.6473332677520.04.7617.75
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.

Found on 2025-12-22 16:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2c2878bc5

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 20-Dec-2025 16:13:00 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 9 hours 30 minutes 19 seconds
Server load: 0.43 0.62 0.74
Total accesses: 200343 - Total Traffic: 724.8 MB - Total Duration: 11023076
CPU Usage: u10.36 s8.49 cu45.2 cs21.99 - .0227% CPU load
.527 requests/sec - 2001 B/second - 3793 B/request - 55.021 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0326930/629/4114_
5.1337452135960.02.0314.07
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/503/4469_
5.1335452522210.02.0717.01
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326930/564/4030_
5.1340321897400.01.8213.64
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_341582897c609

0-0326930/547/4528_
5.1332322478000.01.5515.81
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4ab611bde92aa

0-0326930/518/3864_
5.1341451951040.01.9613.88
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326930/504/3693_
5.1343332050770.01.6113.22
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/574/4199_
5.1428831749290.02.0714.46
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/559/3844_
5.1425441893580.01.8814.21
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/586/4430_
5.1427442531310.01.9216.00
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/494/3709_
5.1419841904630.01.5413.14
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/453/4065_
5.1417442353080.01.5915.02
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326930/495/3895_
5.1416132190770.01.6213.46
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/500/3848_
5.1414742023160.01.6114.42
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/587/4232_
5.1512032280090.01.7914.54
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/473/3811_
5.1510232082940.02.0813.23
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/541/4262_
5.154621912210.01.8415.74
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ac1c138b8df09

0-0326930/521/4293_
5.156932939780.01.9116.64
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-03269329/519/3795W
5.150023874441.31.7413.81
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /server-status HTTP/1.1

0-0326930/513/4071_
5.1364032195770.01.7314.20
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/499/3901_
5.136132221806900.01.6315.03
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/408/3491_
5.1359031694400.01.3211.94
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/560/3630_
5.1353442319880.01.8812.79
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326930/481/3834_
5.1355421972320.01.5813.59
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/415/3363_
5.134891962062110.01.3512.70
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0326930/499/4020_
5.1345732251480.02.3115.39
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/638/4256_
5.4539482365210.01.8315.60
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0326610/625/3657_
5.463622002049480.02.6114.40
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/539/3458_
5.4542131827690.02.1811.87
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/573/4021_
5.4543932152400.01.9613.01
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/431/4210_
5.4550022481340.01.3515.72
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_512c1b978aa53

1-0326610/501/3521_
5.463122639380.01.6913.76
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2b809992c7bb3

1-0326610/541/4002_
5.4540912045530.01.6713.51
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_913e66caaf66c

1-0326610/490/4190_
5.4634222113240.01.5314.97
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5971de2161053

1-0326610/525/4419_
5.4631532325220.01.8316.40
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2c5d9c592a9e2

1-0326610/501/4458_
5.4628122598460.01.4415.12
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4772d89e7ae67

1-0326610/510/4303_
5.4625932172530.02.2215.63
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/609/4089_
5.4623142185800.02.0515.11
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/525/4216_
5.4616732292370.01.7315.75
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/465/4186_
5.4618532268070.01.5115.34
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/575/4002_
5.4615332119190.01.9914.88
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/562/4204_
5.4613522759100.01.9014.89
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d4107039dafb1

1-0326610/462/3820_
5.467742584880.02.0414.40
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0326610/496/4239_
5.4611442525420.01.6514.99
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0326610/426/3953_
5.465442052280.01.3614.35
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0326610/604/4140_
5.45

Found on 2025-12-20 16:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2dc22a6d9

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 18-Dec-2025 17:09:56 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 10 hours 27 minutes 15 seconds
Server load: 1.21 0.94 0.90
Total accesses: 62004 - Total Traffic: 240.3 MB - Total Duration: 4986602
CPU Usage: u19.52 s11.31 cu0 cs0 - .0147% CPU load
.295 requests/sec - 1197 B/second - 4063 B/request - 80.4239 ms/request
2 requests currently being processed, 48 idle workers
____K_________________________________W___________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/1225/1225_
12.8410473831470.04.354.35
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_34f227cb33e05

0-0360/1448/1448_
12.69152431063500.05.905.90
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9616ac0227e9c

0-0360/1193/1193_
12.69148533926230.04.174.17
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/1384/1384_
13.16130955400.05.235.23
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /v2/api-docs HTTP/1.1

0-0361/1054/1054K
13.1640883041.14.284.28
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /about HTTP/1.1

0-0360/1157/1157_
12.9953541027210.04.494.49
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0360/1339/1339_
13.053514708890.04.534.53
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/1245/1245_
13.101433912370.05.675.67
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6b1d5a7e146cb

0-0360/1425/1425_
13.146841337680.05.895.89
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0360/1291/1291_
12.6616183905980.04.744.74
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9db98972a1700

0-0360/1339/1339_
12.72141731069150.04.954.95
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_af916dc75c324

0-0360/1224/1224_
12.8011403816680.04.594.59
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2dc8f7d00019d

0-0360/1289/1289_
12.9565741060170.05.065.06
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0360/1295/1295_
13.024393951210.04.684.68
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fd12f3f0ee588

0-0360/1080/1080_
12.966224663910.04.194.19
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0360/1263/1263_
12.946883870610.04.314.31
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3347f6bb86fb9

0-0360/1265/1265_
13.0728731433210.04.814.81
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_43a5a68ca7cb2

0-0360/1192/1192_
13.08228111429410.04.914.91
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0360/1034/1034_
12.908843831260.04.244.24
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c14b19905e443

0-0360/1162/1162_
12.927853821940.05.175.17
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=collarts.zoom.us&cooki

0-0360/1103/1103_
12.869574737620.04.434.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0360/1266/1266_
12.899105926880.05.205.20
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0360/1122/1122_
12.75132841039680.04.644.64
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/1154/1154_
12.7812373897000.04.814.81
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_461c147da09c9

0-0360/1197/1197_
12.6914703987140.04.954.95
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c544b38654baa

1-0370/1273/1273_
12.9148731170240.04.914.91
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a908755daa4ef

1-0370/1155/1155_
12.847363923320.04.764.76
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_56d3d1e008c59

1-0370/1226/1226_
12.856744891800.03.983.98
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0370/1189/1189_
12.8565031073510.03.953.95
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10ea9fc5e2651

1-0370/1259/1259_
12.9433051047710.05.015.01
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/1166/1166_
12.8858141288430.04.854.85
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7b002289e99fc

1-0370/1345/1345_
12.9724441105860.04.744.74
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0370/1147/1147_
12.933934771400.04.064.06
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0370/1213/1213_
13.0018931206110.04.774.77
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_592e6f13cdd49

1-0370/1288/1288_
13.0111041271980.04.924.92
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0370/1264/1264_
13.0249258842200.04.394.39
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0370/1424/1424_
12.63145841150430.05.515.51
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/1309/1309_
12.6015713866450.05.545.54
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2e09ede7f2269

1-03743/1241/1241W
13.0400101481108.84.424.42
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /server-status HTTP/1.1

1-0370/1288/1288_
12.57166641033870.05.325.32
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0370/1153/1153_
12.61149731163850.04.024.02
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0721c64c67e29

1-0370/1264/1264_
12.62147131325610.04.624.62
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6b4ddc63918b5

1-0370/1263/1263_
12.6812833904740.04.524.52
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e875704fe284a

1-0370/1339/1339_
12.71118741046850.05.505.50
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0370/1414/1414_
12.6513723872640.05.615.61

Found on 2025-12-18 17:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2196c422c

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 16-Dec-2025 13:51:25 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 hours 8 minutes 44 seconds
Server load: 0.50 0.53 0.55
Total accesses: 6059 - Total Traffic: 25.9 MB - Total Duration: 629447
CPU Usage: u2.38 s1.22 cu0 cs0 - .014% CPU load
.236 requests/sec - 1053 B/second - 4474 B/request - 103.886 ms/request
1 requests currently being processed, 49 idle workers
___________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/87/87_
1.443873160380.00.310.31
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_186bcd93757ac

0-0360/95/95_
1.435897211730.00.670.67
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/134/134_
1.436155171060.00.560.56
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/131/131_
1.436486111740.00.450.45
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/76/76_
1.43680762090.00.290.29
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/102/102_
1.451703132420.00.290.29
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c18a65ebd3211

0-0360/129/129_
1.45138466520.00.420.42
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ac8fe3c3e96c3

0-0360/133/133_
1.45806182200.00.500.50
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/115/115_
1.45263108700.00.770.77
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3534223ae0202

0-0360/117/117_
1.437085111270.00.430.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d03c1579cd91f

0-0360/167/167_
1.435606216660.00.720.72
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/126/126_
1.43499682540.00.850.85
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/140/140_
1.453194249120.00.940.94
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/116/116_
1.452997135480.00.460.46
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/110/110_
1.45272546260.00.310.31
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8715e74e71365

0-0360/120/120_
1.452493105220.00.420.42
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0569d3ceb502e

0-0360/110/110_
1.45236483100.00.420.42
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/142/142_
1.45206690990.00.530.53
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/94/94_
1.44338651530.00.380.38
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/79/79_
1.44371436490.00.270.27
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/83/83_
1.434233122790.00.630.63
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_567a57cef9dbb

0-0360/111/111_
1.43450382250.00.410.41
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_943cfe0e34733

0-0360/128/128_
1.435253149100.00.450.45
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9552d8f622d43

0-0360/147/147_
1.43475498790.00.580.58
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0360/122/122_
1.435754187590.00.420.42
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5d2acdb1c30c2

1-0370/163/163_
1.55325698350.00.580.58
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/110/110_
1.55311205101380.00.360.36
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/93/93_
1.55292397520.00.260.26
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4087d8f21453d

1-0370/104/104_
1.56260691360.00.330.33
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/174/174_
1.56243243184990.01.031.03
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/128/128_
1.562224192400.00.470.47
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/186/186_
1.561996159930.00.870.87
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/126/126_
1.561533158450.00.430.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_180fb1e62595d

1-0370/159/159_
1.57953120380.00.640.64
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3534223ae0202

1-0370/75/75_
1.5755471060.00.230.23
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ac8fe3c3e96c3

1-03728/156/156W
1.57001845637.90.440.44
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /server-status HTTP/1.1

1-0370/116/116_
1.546653114960.00.780.78
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c78d87ffc7df8

1-0370/102/102_
1.54635462290.00.370.37
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/104/104_
1.54686380420.00.430.43
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_56b8c82f865d5

1-0370/121/121_
1.545884141950.00.440.44
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0be64f15a0392

1-0370/130/130_
1.545834121450.00.500.50
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/101/101_
1.545663121330.00.350.35
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_217a6e5db4e1f

1-0370/142/142_
1.545453183950.00.630.63
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_32c8dd27282a6

1-0370/144/144_
1.555075131280.00.460.46
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/85/85_
1.55494453660.00.260.26
127.0.0.1http/1.1ip-10-1-107-160.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0370/135/135_
1.55455417573

Found on 2025-12-16 13:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2e2204303

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 14-Dec-2025 09:48:32 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  158 days 2 hours 40 minutes 22 seconds
Server load: 1.41 1.10 0.96
Total accesses: 8007671 - Total Traffic: 30.9 GB - Total Duration: 1202453176
CPU Usage: u139.49 s220.74 cu2459.35 cs1264.78 - .0299% CPU load
.586 requests/sec - 2427 B/second - 4141 B/request - 150.163 ms/request
1 requests currently being processed, 49 idle workers
________________W_________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-06690/1225/148783_
13.003713215370030.04.65582.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/1136/147551_
13.005065210039080.04.59583.07
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/1032/147610_
13.003914213055820.04.33585.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bbe852d20292c

0-06690/1053/153163_
13.004301219428810.04.10600.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06690/1050/146864_
12.99622135207222490.03.87577.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d188h

0-06690/1124/148888_
12.996512222599220.04.29588.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_681eba28dfb66

0-06690/1035/148489_
13.003512219943000.04.13588.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee94e4f78c747

0-06690/1090/147862_
13.003052222570100.04.29583.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fb378b619621c

0-06690/984/146987_
13.00205956214774590.03.77578.21
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/979/149269_
13.002757230833410.04.38585.04
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-06690/1048/143851_
13.001465209106960.04.09572.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/1130/150275_
13.00550224575140.04.84595.95
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-06690/1027/149092_
13.001663213999190.04.00584.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/1070/147979_
12.978065218119540.04.38580.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/1022/149667_
13.00821217759920.03.89580.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06690/1206/149251_
13.022332221230480.04.39587.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-066929/1149/146136W
13.03002203102939.84.70570.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-06690/1081/150954_
12.987401044230850880.05.15596.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-06690/1156/145817_
12.977821224818270.04.79586.67
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-06690/1223/145818_
12.9870433221705300.04.52579.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-06690/1100/147614_
12.986631212503030.05.63588.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d34b2aa7f6e1a

0-06690/1025/144750_
13.005542222908500.04.08582.86
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_93516ba7d60cd

0-06690/977/146834_
13.004466225962870.03.67581.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/1166/147113_
13.0058141209871090.04.41580.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-06690/943/147835_
12.986864222820740.03.56585.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/1587/139004_
19.162664216816170.06.24545.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/1570/141127_
19.163582217431410.08.49559.37
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a935623eec54b

1-0227610/1464/140996_
19.1628130209396580.06.58556.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fa9f94b953dc5

1-0227610/1511/144267_
19.1643049215848120.06.30573.56
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0227610/1296/140787_
19.163264215381180.05.26556.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/1470/142959_
19.1715584205869810.05.71561.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0227610/1711/141069_
19.18473206771020.06.50555.17
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0227610/1406/141041_
19.171330202220610.05.52564.33
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0227610/1330/140575_
19.171732210867470.05.82560.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_60122da94eea6

1-0227610/5295/140599_
19.18264210707510.021.26551.27
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/1525/143005_
19.147821208759260.06.10560.95
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0227610/1373/140769_
19.18640216681180.05.66562.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

1-0227610/1658/144656_
19.1566138209189390.06.67567.61
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0227610/1448/141361_
19.13815675210630050.06.18561.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0227610/1505/145288_
19.146952208510560.06.63563.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_05455c8d3fb5e

1-0227610/1593/141568_
19.147092207886410.06.13563.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0227610/1553/142506_
19.156452212766490.06.66562.97
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1b8082a4331c9

1-0227610/1495/143311_
19.16461342209883970.05.32562.67
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0227610/1643/141767_
19.15604326215770480.07.74565.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1

Found on 2025-12-14 09:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2a28ee1f4

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 13-Dec-2025 04:01:50 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  156 days 20 hours 53 minutes 39 seconds
Server load: 1.06 1.19 1.01
Total accesses: 7979568 - Total Traffic: 30.8 GB - Total Duration: 1198509852
CPU Usage: u129.42 s214.28 cu2459.35 cs1264.78 - .03% CPU load
.589 requests/sec - 2438 B/second - 4141 B/request - 150.197 ms/request
1 requests currently being processed, 49 idle workers
_________________________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-06690/585/148143_
6.231644214732920.02.31580.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/628/147043_
6.232133209340320.02.72581.21
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/491/147069_
6.231807212498520.02.00582.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-06690/490/152600_
6.2223544218613880.02.05598.42
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-06690/497/146311_
6.223351206485990.01.95575.54
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06690/497/148261_
6.22377123221889920.01.72585.95
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLdT8IwEH%2F3r1j63o2

0-06690/475/147929_
6.231383219020250.01.97586.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/545/147317_
6.23444221779380.02.20581.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/424/146427_
6.231044214083630.01.62576.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/417/148707_
6.208991230228040.02.30582.97
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-06690/515/143318_
6.208846208016010.02.11570.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/667/149812_
6.228244224063620.02.87593.97
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/529/148594_
6.20868140213297860.02.26582.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d18gY

0-06690/502/147411_
6.228060217461050.02.00578.33
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-06690/445/149090_
6.226722217108220.01.79578.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ae260cbb81362

0-06690/455/148500_
6.227644220550800.01.74584.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/501/145488_
6.226933219408610.01.87567.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/487/150360_
6.22622347230289230.02.71594.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/563/145224_
6.225192224079600.02.31584.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_073a2d5c5fc54

0-06690/611/145206_
6.225803220869780.02.08577.27
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/502/147016_
6.2247210211654340.02.62585.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-06690/481/144206_
6.224193221727020.02.13580.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-06690/494/146351_
6.222845224544500.01.93580.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-06690/549/146496_
6.22260144209167160.02.16577.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d19AW

0-06690/452/147344_
6.224473222247610.01.70583.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-02276131/991/138408W
12.11002157523378.04.03542.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

1-0227610/936/140493_
12.091293216655800.04.78555.65
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0227610/948/140480_
12.09752049208488200.04.28553.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0227610/978/143734_
12.091806215225420.04.34571.59
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0227610/799/140290_
12.068983214503730.03.12554.37
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0227610/947/142436_
12.068783205153060.03.82559.93
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0227610/1117/140475_
12.078151206079420.04.16552.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0227610/849/140484_
12.077860201304690.03.46562.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0227610/824/140069_
12.0683727210180500.03.61557.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_95caf3da1f1cb

1-0227610/4788/140092_
12.077044210281070.019.05549.06
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/979/142459_
12.076103207977920.04.13558.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8f7d684015aae

1-0227610/804/140200_
12.076872216182180.03.51559.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_72af2219c40df

1-0227610/1060/144058_
12.084644208497950.04.33565.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/901/140814_
12.076444209983720.04.23559.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/876/144659_
12.08472340207095600.03.89561.17
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0227610/954/140929_
12.08547465207051040.03.60561.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBb9swDIXvA%2FofDN1

1-0227610/984/141937_
12.083040212131390.04.51560.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0227610/985/142801_
12.092244209334750.03.60560.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/1028/141152_
12.083445214304890.05.66563.01
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0227610/1036/142400_
12.08429022285633

Found on 2025-12-13 04:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2c67da9ca

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 16-Oct-2025 12:37:04 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  99 days 5 hours 28 minutes 53 seconds
Server load: 0.62 0.75 0.82
Total accesses: 4699535 - Total Traffic: 18.8 GB - Total Duration: 816387139
CPU Usage: u80.25 s131.78 cu1497.29 cs731.67 - .0285% CPU load
.548 requests/sec - 2355 B/second - 4297 B/request - 173.717 ms/request
1 requests currently being processed, 49 idle workers
___________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0131920/390/81585_
4.67673143708100.01.78334.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0d764df1a80dd

0-0131920/265/80601_
4.67884134949690.01.36334.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_49b63ea19d46e

0-0131920/314/80638_
4.671013136423580.01.38335.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f8a6583e1e21

0-0131920/305/84837_
4.661433139092280.01.43344.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ac327ad8e262

0-0131920/270/83032_
4.661723135642030.01.26339.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0add1430f00b6

0-0131920/361/80960_
4.66207621143328680.01.84336.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/298/82371_
4.67454146114080.01.47341.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/336/81629_
4.67305144908180.01.48340.22
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/280/82118_
4.67155137833990.01.93339.25
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/334/83062_
4.634764149222310.01.49341.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/363/79767_
4.634625136617820.01.57330.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/318/84591_
4.644485145526910.01.48346.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/294/80944_
4.6440895139301080.02.60333.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/289/81504_
4.653814142211500.01.40334.63
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/221/83507_
4.644364138464920.01.51336.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/348/82081_
4.663413144616090.02.51338.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c1f19b3ad5174

0-0131920/325/80172_
4.663480148168950.01.46330.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0131920/286/84627_
4.663184151926890.01.24346.11
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/292/81251_
4.653733144355590.01.20346.25
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5741d2095f914

0-0131920/411/80898_
4.662814144765250.01.88335.43
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e615e379bdd97

0-0131920/320/81976_
4.662654135489410.01.50338.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f8df7b6aec15d

0-0131920/318/80138_
4.662255144868530.01.87338.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0131920/271/82972_
4.662493150443570.01.28346.22
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06d0a218728aa

0-0131920/434/82401_
4.661873136809890.02.50339.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_62dcf317c8d3c

0-0131920/314/81053_
4.661574143447430.01.43334.30
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_48df0f217b0fa

1-0136330/264/77169_
3.83935141865380.01.25316.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0136330/226/76657_
3.83835139944390.01.06314.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0136330/188/76918_
3.831084136480800.00.75315.28
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0136330/289/78764_
3.821786144362290.01.62327.35
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0136330/288/76553_
3.821526139778300.01.89319.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0136330/305/77742_
3.822014135029660.01.41320.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4cc74bd4edc0c

1-0136330/260/77545_
3.83384134594770.01.34321.41
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0dc3da7e8509b

1-0136330/264/78861_
3.83234129272890.01.32330.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ddb36d1e9b89f

1-0136330/230/77587_
3.83533138289170.01.21323.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64ed9523f7227

1-0136330/322/78713_
3.814554140074610.01.47323.12
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0301f209262f2

1-01363329/268/79199W
3.83001382694539.91.22327.40
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

1-0136330/332/78063_
3.813910140325750.01.69325.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-0136330/243/78645_
3.814703134430410.01.05327.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e148c628fa15d

1-0136330/261/77922_
3.814273136911280.01.15326.04
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e9558b13d9c03

1-0136330/253/78658_
3.814433135650160.01.16318.59
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8dbbd06d062f5

1-0136330/313/75866_
3.8233154133351720.01.45317.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0136330/250/78859_
3.814029137595860.01.11328.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb3caa3727901

1-0136330/314/77713_
3.823474612135934840.01.63317.78
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0136330/316/77719_
3.813664142476840.02.12324.23
127.0.0.1http/1.1

Found on 2025-10-16 12:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de288dc9427

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 14-Oct-2025 14:42:35 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  97 days 7 hours 34 minutes 25 seconds
Server load: 0.74 0.88 0.84
Total accesses: 4636851 - Total Traffic: 18.5 GB - Total Duration: 799068475
CPU Usage: u103.02 s143.14 cu1446.44 cs706.93 - .0285% CPU load
.551 requests/sec - 2361 B/second - 4282 B/request - 172.33 ms/request
1 requests currently being processed, 49 idle workers
W_________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-03183532/2493/80037W
23.19001409709362.68.28326.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-0318350/1724/79371_
23.164283132490710.06.21327.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_717d169f72457

0-0318350/1666/79293_
23.164496133481940.06.07329.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0318350/2147/83486_
23.181063135194280.07.10337.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5d1c1c252e23d

0-0318350/2050/81673_
23.16714356131316340.08.43333.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/2429/79562_
23.173896139869030.08.24330.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0318350/1991/81208_
23.181804143645400.07.15335.69
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/1734/80379_
23.1879349140731160.07.02334.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/2405/80677_
23.181464134504680.08.98331.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bacd43dfab57d

0-0318350/2185/81784_
23.166403144500010.08.33335.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64a63c881d1ac

0-0318350/1863/78583_
23.18533133337780.07.27324.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aa411ba3553ea

0-0318350/2300/83255_
23.164795142329620.08.02340.04
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/2407/79594_
23.182661136429840.08.55325.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0318350/2219/80149_
23.166174138745770.08.05327.30
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bae0a685ca35d

0-0318350/1853/82334_
23.15785323136264080.06.50330.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/1886/80735_
23.167496141611030.07.00331.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0318350/2204/78934_
23.165696144201650.07.77323.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0318350/2201/83465_
23.166896148783770.07.85340.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0318350/1817/80114_
23.173096141802830.06.74341.22
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/2408/79579_
23.165097140323520.08.59329.43
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0318350/2153/80612_
23.166725131820860.07.57331.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/1805/78900_
23.173373141926470.06.18331.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d80122259068c

0-0318350/1905/81701_
23.18229363146941740.06.92339.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/2477/81098_
23.16583341133629350.09.03332.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0318350/2305/79821_
23.165435138695690.08.87328.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/1971/76042_
23.582053138051280.07.05311.67
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b75887e743d3d

1-0320070/1540/75564_
23.56365342135989490.05.82308.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/2235/75945_
23.581734133091310.08.19310.76
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/2088/77480_
23.58897141276900.08.22320.29
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320070/2039/75201_
23.564424135917710.08.22312.65
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_c7e33ded88a0f9b8f

1-0320070/2072/76528_
23.5812926132649870.07.37314.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/1896/76384_
23.56762635129958660.06.94314.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0320070/2253/77747_
23.56456364127249420.07.99324.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/2075/76502_
23.568034135283510.07.60317.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/1979/77326_
23.56648376135563700.07.16315.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/1919/78077_
23.566814135245620.06.93321.64
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_96c7ebc2e6899

1-0320070/1689/76762_
23.567364134377990.06.22319.17
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/2252/77488_
23.565763129581840.08.72321.93
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a1d0ab9b6ee47

1-0320070/2167/76844_
23.567053131274510.08.26319.79
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d167419bc268d

1-0320070/1996/77382_
23.566296132789210.06.93311.89
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320070/2184/74562_
23.56520335130028450.07.79308.97
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0320070/2566/77649_
23.573297134390320.09.27322.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320070/2052/76400_
23.564893133221230.07.73310.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e66f73c631b6f

1-0320070/1588/76367_
23.58296138674760.06.03316.01

Found on 2025-10-14 14:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de214b18239

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 12-Oct-2025 19:43:15 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  95 days 12 hours 35 minutes 5 seconds
Server load: 0.78 0.78 0.94
Total accesses: 4462472 - Total Traffic: 17.9 GB - Total Duration: 777806296
CPU Usage: u89.56 s132.93 cu1407.15 cs686.7 - .0281% CPU load
.541 requests/sec - 2324 B/second - 4298 B/request - 174.299 ms/request
1 requests currently being processed, 49 idle workers
.................................................._______W______
___________........................._________________________...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/77544.
0.002235392664137891800.00.00317.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77647.
0.002235392788130905500.00.00321.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77627.
0.002235392692131166320.00.00323.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/81339.
0.002235392602132958090.00.00330.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79623.
0.002235392549127727500.00.00324.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77133.
0.002235392601136854150.00.00321.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79217.
0.002235396141337050.00.00328.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/78645.
0.002235392273138578730.00.00327.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78272.
0.002235392363131754200.00.00322.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79599.
0.0022353919683142015680.00.00326.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/76720.
0.002235392622131104330.00.00317.61
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/80955.
0.002235394444138449400.00.00332.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77187.
0.002235392544134010490.00.00316.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77930.
0.0022353958010136579730.00.00319.25
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/80481.
0.002235393113133884880.00.00323.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78849.
0.002235392691139031480.00.00324.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/76730.
0.002235392476140835490.00.00316.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/81264.
0.002235392533146486160.00.00332.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78297.
0.002235392480139008760.00.00334.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77171.
0.002235392297138050180.00.00320.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78459.
0.002235392473130106420.00.00323.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77095.
0.002235392426139031640.00.00325.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79796.
0.002235392308145039660.00.00332.95
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78621.
0.002235392275130369650.00.00323.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77516.
0.002235392283136652590.00.00319.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/74071.
0.0013811551136121990.00.00304.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/74024.
0.001381153134547860.00.00302.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_502aad3b92708

1-0-0/0/73710.
0.001381154130453090.00.00302.56
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/75392.
0.0013811538138472130.00.00312.07
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com&RelayState=

1-0-0/0/73162.
0.00138115336133791160.00.00304.43
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/74456.
0.0013811526130598050.00.00307.40
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/74488.
0.001381153127362100.00.00307.56
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6803381966127

1-0-0/0/75494.
0.001381153123699260.00.00316.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5049ad7ae8030

1-0-0/0/74427.
0.00138115319133093300.00.00310.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/75347.
0.001381155133897960.00.00308.64
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/76158.
0.001381153133228440.00.00314.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_656bf22edac78

1-0-0/0/75073.
0.001381153131948750.00.00312.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c1672384c5492

1-0-0/0/75236.
0.001381153126700000.00.00313.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_19b7c0627a774

1-0-0/0/74677.
0.001381154129048360.00.00311.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/75386.
0.0013811540129799620.00.00304.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/72378.
0.001381153126317370.00.00301.18
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ca914f5d54b70

1-0-0/0/75083.
0.001381154131155160.00.00313.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/74348.
0.0013811578129935710.00.00303.10
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/74779.
0.001381153136008170.00.00309.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_23e97ac7afe5d

1-0-0/0/75389.
0.00138115165140881190.00.00312.42
127.0.0.1<

Found on 2025-10-12 19:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de230b8d0e8

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 11-Oct-2025 02:36:07 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  93 days 19 hours 27 minutes 57 seconds
Server load: 1.44 1.41 1.23
Total accesses: 4425911 - Total Traffic: 17.7 GB - Total Duration: 770097697
CPU Usage: u90.23 s131.24 cu1391.3 cs679.23 - .0283% CPU load
.546 requests/sec - 2345 B/second - 4295 B/request - 173.998 ms/request
1 requests currently being processed, 74 idle workers
........................._______________________W_______________
___________........................._________________________...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/77544.
0.00755112664137891800.00.00317.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77647.
0.00755112788130905500.00.00321.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77627.
0.00755112692131166320.00.00323.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/81339.
0.00755112602132958090.00.00330.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79623.
0.00755112549127727500.00.00324.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77133.
0.00755112601136854150.00.00321.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79217.
0.00755116141337050.00.00328.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/78645.
0.00755112273138578730.00.00327.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78272.
0.00755112363131754200.00.00322.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79599.
0.007551119683142015680.00.00326.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/76720.
0.00755112622131104330.00.00317.61
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/80955.
0.00755114444138449400.00.00332.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77187.
0.00755112544134010490.00.00316.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77930.
0.007551158010136579730.00.00319.25
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/80481.
0.00755113113133884880.00.00323.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78849.
0.00755112691139031480.00.00324.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/76730.
0.00755112476140835490.00.00316.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/81264.
0.00755112533146486160.00.00332.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78297.
0.00755112480139008760.00.00334.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77171.
0.00755112297138050180.00.00320.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78459.
0.00755112473130106420.00.00323.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77095.
0.00755112426139031640.00.00325.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/79796.
0.00755112308145039660.00.00332.95
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/78621.
0.00755112275130369650.00.00323.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/77516.
0.00755112283136652590.00.00319.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0239700/1653/73985_
22.611651013136027930.08.34304.27
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0239700/1605/73979_
22.611015134282910.08.18302.37
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ecc284111d81d

1-0239700/1753/73653_
22.594461130400060.08.66302.30
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0239700/1595/75324_
22.595174138430020.07.38311.74
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0239700/1470/73131_
22.61223133741390.07.29304.33
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_717e149b9feb4

1-0239700/1507/74424_
22.594953130287490.07.21307.27
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ae683ac9c217f

1-0239700/1569/74425_
22.595573127285890.06.84307.25
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c492f909e710

1-0239700/1471/75453_
22.586475123683130.06.71316.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0239700/1703/74393_
22.6035614133061830.07.71310.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_22b99e34a7d4f

1-0239700/1535/75321_
22.6025764133814250.07.40308.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0239700/1507/76135_
22.593843133190890.07.22314.64
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5c0cba645a563

1-0239700/1467/75018_
22.585751131871340.08.10312.67
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0239700/1441/75173_
22.594663126643590.06.34312.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_58777ca957900

1-0239700/1519/74634_
22.6019142128946500.07.32311.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0239700/1702/75305_
22.603344129677760.08.08304.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0239700/1492/72334_
22.602874126221260.06.20301.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b12b0a2703dd2

1-0239700/1594/75024_
22.5860731131107390.07.27313.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a946a8799765e

1-0239700/1428/74316_
22.6023095129777860.06.19303.01
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0239700/1754/74760_
22.61455135981400.08.23309.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0239700/1699/75312_
22.61130414076916

Found on 2025-10-11 02:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de270f0487e

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 09-Oct-2025 06:00:55 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  91 days 22 hours 52 minutes 45 seconds
Server load: 1.97 1.13 0.87
Total accesses: 4376007 - Total Traffic: 17.5 GB - Total Duration: 758113702
CPU Usage: u76.26 s121.89 cu1384.44 cs676.31 - .0284% CPU load
.551 requests/sec - 2363 B/second - 4290 B/request - 173.243 ms/request
2 requests currently being processed, 48 idle workers
_K______________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-083480/78/76904_
0.7897056135521580.00.75315.21
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-083485/36/77112K
0.8810129584235.10.16318.51
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /debug/default/view?panel=config HTTP/1.1

0-083480/47/77039_
0.8820254129461870.00.26320.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6961bd06426a7

0-083480/44/80819_
0.868630131797090.00.23328.17
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-083480/96/78948_
0.868761126222180.00.51321.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-083480/58/76500_
0.789594135431740.00.31318.63
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_b73b2

0-083480/78/78631_
0.881321139307380.00.38325.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-083480/49/78129_
0.8821329137460170.00.28324.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-083480/44/77751_
0.882294130265390.00.20320.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083480/60/79070_
0.881694139513790.00.29324.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083480/47/76177_
0.868070130088190.00.27315.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-083480/57/80344_
0.8878125137406880.00.28328.79
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTgIxFN2b%2BA9N9%2

0-083480/34/76588_
0.858894132839400.00.15314.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083480/39/77271_
0.8742145133197310.00.24316.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083480/52/79889_
0.88279138132342260.00.22320.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT8JAEMXvfopm7223q

0-083480/48/78329_
0.8591356138087240.00.63322.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-083480/54/76150_
0.867550139575220.00.65313.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083480/17/80557_
0.867095145012860.00.09329.22
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083480/34/77706_
0.866495137867430.00.19330.76
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083480/20/76587_
0.866321136457520.00.10317.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-083480/25/77843_
0.876190128454480.00.16320.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083480/35/76491_
0.875710137431720.00.19321.99
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-083480/57/79214_
0.8756443143474210.00.66330.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-083480/58/78128_
0.874970129433930.00.34321.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083480/33/76969_
0.883494135665640.00.14316.10
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0239700/704/73036_
10.1022344132541720.04.26300.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0239700/739/73113_
10.10203997129865160.03.44297.63
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0239700/838/72738_
10.068294128851080.04.03297.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0239700/720/74449_
10.077694136589610.03.68308.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0239700/574/72235_
10.13480131422690.02.94299.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0239700/582/73499_
10.07746133128610240.02.72302.78
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BW71l

1-0239700/758/73614_
10.0687049125195920.03.42303.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0239700/708/74690_
10.069354122392510.03.18313.18
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_d9b97

1-0239700/778/73468_
10.076311131301440.03.72306.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0239700/753/74539_
10.10299717132663660.03.59304.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0239700/700/75328_
10.085654131753920.03.57311.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0239700/649/74200_
10.06882315130294690.04.18308.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuMwFN0jzT9Y3ufRa

1-0239700/600/74332_
10.07687473124810610.02.91309.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL0j9T9Yvudjo

1-0239700/623/73738_
10.1024626126341670.03.11307.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7bac2985b0e7e

1-0239700/805/74408_
10.09528705127717870.03.81300.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0239700/706/71548_
10.0762633123682770.03.02297.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0239700/691/74121_
10.069355128901750.03.13309.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_7daf8

1-0239700/600/73488_
10.094694127893460.02.46299.28
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0239700/793/73799_
10.075894130700270.03.51305.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0239700/864/74477_
10.039770138542390.03.67308.10
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0</

Found on 2025-10-09 06:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2eeea5a3b

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 06-Oct-2025 10:34:37 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  89 days 3 hours 26 minutes 27 seconds
Server load: 0.75 1.13 1.13
Total accesses: 4274655 - Total Traffic: 17.0 GB - Total Duration: 733388848
CPU Usage: u91.26 s124.85 cu1325.02 cs651.87 - .0285% CPU load
.555 requests/sec - 2367 B/second - 4266 B/request - 171.567 ms/request
2 requests currently being processed, 48 idle workers
_____________________________WK___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0173850/1606/74948_
24.15653131341470.07.31303.79
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://collarts-lo

0-0173850/1758/75070_
23.984701124258770.07.70308.99
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0173850/1640/75047_
24.15118886124885980.06.52311.56
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/1631/78718_
24.154331126979490.06.72317.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0173850/1706/76856_
24.1610121330070.08.45311.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /apple-touch-icon-precomposed.png HTTP/1.1

0-0173850/1683/74496_
23.9850734129295940.06.89307.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/1601/76567_
24.114053135146710.07.59315.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/accountinfo/complete.php HTTP/1.1

0-0173850/1836/76230_
24.123315131865450.08.71314.12
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0173850/1752/75733_
24.0446862125477630.07.49310.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-0173850/1853/77111_
24.123613135345300.09.64313.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/1843/74080_
24.132882124592060.09.33304.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a65142395a4fc

0-0173850/1794/78136_
24.114312129146270.08.60317.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b5527282ef673

0-0173850/1693/74420_
24.104461128331100.08.01302.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/password-strength.js HTTP/1.1

0-0173850/1992/75193_
24.142302129277790.09.17305.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f75d532139ff

0-0173850/1902/77863_
24.132572127426560.09.05310.06
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0173850/1750/76411_
24.161643134322760.07.64312.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0173850/1548/74113_
24.1328028135002630.06.78301.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0173850/1817/78440_
24.123890141310770.08.26319.28
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0173850/1846/75864_
24.132470133788520.08.46322.58
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0173850/1792/74636_
24.151863132262530.07.60308.22
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/1615/75725_
24.142080123879080.07.86310.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0173850/1500/74441_
24.13238900134006970.06.36311.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJbT8IwFH73Vyx9765Oo

0-0173850/1786/77226_
24.15883139182120.08.22319.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/1620/76383_
24.152003125688560.07.09313.51
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0173850/1720/74951_
24.151493127609300.07.87306.33
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-089180/589/71007_
10.551022128346290.02.36289.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c58abd3ea7d7c

1-089180/708/70961_
10.504473125511950.04.34288.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-089180/517/70617_
10.551322124224330.02.46286.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4126e074d85de

1-089180/566/72373_
10.55742131400080.03.32296.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_93f23ea7a55f0

1-0891819/564/70368W
10.55001257978141.43.26291.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

1-089183/615/71577K
10.5510123307133.03.09292.89
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /about HTTP/1.1

1-089180/746/71550_
10.55584121759890.04.62293.15
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-089180/610/72632_
10.542371109116304440.03.43303.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d3fLs

1-089180/674/71453_
10.532444125937850.02.97296.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-089180/739/72386_
10.532470125735970.04.01295.06
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-089180/718/73190_
10.503473127538910.03.79299.76
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_483e2ea63a8f8

1-089180/688/72144_
10.542174125167690.02.92296.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-089180/556/72396_
10.542380121680700.03.05299.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-089180/720/71881_
10.551643121303680.03.64297.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bcf39cf08f0bb

1-089180/611/72393_
10.5528322121692920.02.77290.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-089180/733/69473_
10.552064119269250.03.71288.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_cbd6f713af3a81811

1-089180/706/72198_
10.503752120345610.03.19297.59
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbd912d39d52d

1-089180/659/71662_
10.552002123781700.02.91291.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ae5eea0651885

1-089180/873/71753_
10.504681126859490.03.62295.35
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/password-strength.js HTTP/1.1

1-089180/806/72367_

Found on 2025-10-06 10:34

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2939b7a67

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 04-Oct-2025 07:13:10 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  87 days 5 minutes
Server load: 0.39 0.59 0.76
Total accesses: 4200203 - Total Traffic: 16.7 GB - Total Duration: 716075711
CPU Usage: u73.94 s116.14 cu1311.38 cs645.5 - .0286% CPU load
.559 requests/sec - 2378 B/second - 4257 B/request - 170.486 ms/request
1 requests currently being processed, 49 idle workers
___________W______________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0173850/217/73559_
2.921543126302100.00.89297.37
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6538bc643177b

0-0173850/254/73566_
2.921943119793910.01.04302.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a8b7542be2b63

0-0173850/206/73613_
2.921773121714550.00.76305.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4dc3993681d5

0-0173850/271/77358_
2.921403123972710.01.04311.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9e9c73630905

0-0173850/212/75362_
2.931206118236670.00.77303.64
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/191/73004_
2.931065125776880.01.04301.51
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/188/75154_
2.93894131680350.00.80308.21
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/236/74630_
2.93714129598160.01.08306.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/204/74185_
2.93566122248140.00.78303.64
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/190/75448_
2.93375131893200.00.84304.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/224/72461_
2.93194121529260.01.19296.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-01738514/266/76608W
2.93001251573322.81.03309.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-0173850/243/72970_
2.904423125875900.01.09295.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d7afadd98d0a

0-0173850/238/73439_
2.904246125490760.01.06297.41
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0173850/216/76177_
2.914123124150400.00.85301.86
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_80edfba4d19a7

0-0173850/228/74889_
2.913363130469680.00.88305.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4025a6f93ad4

0-0173850/199/72764_
2.913816131119500.01.24296.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0173850/271/76894_
2.913613138159550.01.52312.54
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_82677fcd40da0

0-0173850/190/74208_
2.913203130520350.00.66314.78
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b0b98bcc0503e

0-0173850/251/73095_
2.912733126176620.00.88301.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_464900da6690c

0-0173850/232/74342_
2.913046121054990.00.92303.28
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0173850/207/73148_
2.912883130961800.00.80306.29
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f11f3f3b416b3

0-0173850/213/75653_
2.912583134154250.01.26312.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_50c470d492401

0-0173850/268/75031_
2.9223845121872490.01.08307.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0173850/256/73487_
2.922083122166150.01.08299.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6b0c3a4c911b6

1-036550/716/69679_
9.932664124899790.02.85284.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/718/69528_
9.95483123023140.03.16280.41
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_40b1c81c80b5a

1-036550/821/69265_
9.934496120984660.03.54280.76
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/702/70694_
9.933136127538380.03.19288.56
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/806/69098_
9.95273122601890.03.75284.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5f65cc80b75f0

1-036550/740/70176_
9.95984120239280.03.52286.29
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_db83c55d88c34

1-036550/828/69936_
9.942204118547910.04.04284.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c81bc37e7c14

1-036550/862/71142_
9.93281343113394170.04.09296.65
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/667/70013_
9.942004122479830.02.74290.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/778/70777_
9.93343348121572010.03.93287.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/652/71635_
9.951653125199040.02.80292.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_04d50b1ce5e60

1-036550/887/70751_
9.95643121697730.04.31291.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3c7c1acafedca

1-036550/764/71005_
9.95771117479490.04.07293.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-036550/865/70335_
9.942284118377670.03.91290.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/853/71147_
9.932974118634020.03.62285.25
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/722/68037_
9.951334116720960.03.70282.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-036550/704/70795_
9.941856116862990.03.64291.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-036550/817/70276_
9.951134120285960.03.40285.89
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_209ab7dd14203

1-036550/697/70109_
9.9514829123901870.02.85288.92
127.0.0.1http/1.1ip-10

Found on 2025-10-04 07:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2b5cdc21f

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 02-Oct-2025 08:40:59 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  85 days 1 hour 32 minutes 48 seconds
Server load: 0.73 1.02 1.04
Total accesses: 4152944 - Total Traffic: 16.4 GB - Total Duration: 706201819
CPU Usage: u97.39 s125.6 cu1269.36 cs626.11 - .0288% CPU load
.565 requests/sec - 2403 B/second - 4252 B/request - 170.048 ms/request
1 requests currently being processed, 49 idle workers
W_________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0528055/1180/72617W
13.610012492360236.65.31293.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-052800/891/72651_
13.582053117606990.04.34298.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_667012d7dc94b

0-052800/1018/72694_
13.61210119565630.05.95302.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-052800/820/76343_
13.581204121016880.04.76306.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-052800/906/74467_
13.581921116492750.04.79300.12
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-052800/1169/72033_
13.573076123340210.06.59296.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_08e52032afc35

0-052800/982/74325_
13.581534130187930.05.01304.41
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-052800/960/73672_
13.535280127790650.04.86302.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-052800/1087/73289_
13.544363119613580.06.13299.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5705b1297cf47

0-052800/947/74561_
13.534846130621360.04.81300.76
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-052800/907/71515_
13.581721119923260.04.59292.18
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-052800/793/75547_
13.58813122910360.03.62305.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5877bc1d396cd

0-052800/904/71965_
13.58683124151410.03.90291.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2b70f57eff8a1

0-052800/1060/72458_
13.544573123873890.04.67292.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1bd46abe281bd

0-052800/968/75199_
13.544016122672710.04.41297.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-052800/978/73862_
13.563494128183570.05.20300.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e3144ccc14a2

0-052800/913/71899_
13.535214129663790.04.39292.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-052800/1025/75911_
13.573203135556800.05.64308.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8d42862a0f48a

0-052800/939/73059_
13.543823128878820.04.22309.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_446af41264084

0-052800/956/72162_
13.582284124460590.05.05298.11
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-052800/950/73353_
13.573274119356850.04.44298.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-052800/854/72292_
13.572653128622410.05.08302.69
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52e891ee465af

0-052800/1035/74780_
13.572936132570560.05.32307.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-052800/875/74149_
13.572523120279080.04.08303.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c4f8807568d7f

0-052800/945/72621_
13.5634430120104730.04.97296.04
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/2689/68791_
35.94744122357530.010.73281.07
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/2999/68674_
35.874694121742630.012.09276.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_343c4c01b5c20

1-0123770/3244/68291_
35.795453119111130.012.60276.69
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9836ba0b89cac

1-0123770/3427/69811_
35.883754125669460.014.52284.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/2907/68118_
35.931393120080260.011.84280.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_97bd7b20c902f

1-0123770/3558/69194_
35.892596118040940.014.21281.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/2922/68938_
35.883393116029740.011.69280.01
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3acc0fe75465e

1-0123770/3358/70111_
35.88301338111111130.013.45291.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/3347/69102_
35.883644119963180.013.56285.79
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/3320/69812_
35.901921118801260.012.73282.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0123770/3339/70861_
35.902423123722820.014.18289.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7d83af1ad9c3c

1-0123770/3231/69597_
35.883281119625030.013.54285.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0123770/2798/70081_
35.911823115485520.010.34288.69
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7c7c2059587b6

1-0123770/3176/69228_
35.8841040115718240.014.35286.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/3305/70113_
35.931307116560240.012.42280.93
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/2693/67120_
35.883144114793090.010.45278.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/3074/69954_
35.883884114935490.012.77287.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/2872/69317_
35.87462116118334140.011.07282.01
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0123770/2973/69175_
35.90211312236936</

Found on 2025-10-02 08:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de29584a9a8

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 30-Sep-2025 07:26:30 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  83 days 18 minutes 19 seconds
Server load: 0.44 0.65 0.79
Total accesses: 4076986 - Total Traffic: 16.1 GB - Total Duration: 689633336
CPU Usage: u105.36 s131.79 cu1231.11 cs604.83 - .0289% CPU load
.568 requests/sec - 2410 B/second - 4240 B/request - 169.153 ms/request
2 requests currently being processed, 48 idle workers
_________________________W__K_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0130590/4462/70797_
51.576564120471590.015.73285.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0130590/4818/71344_
51.864944115208760.017.81292.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0130590/5030/71092_
51.567644116478830.017.27293.67
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0130590/5251/74937_
51.568100116771550.018.19299.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/password-strength.js HTTP/1.1

0-0130590/5386/73057_
51.703194114186440.020.17293.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0130590/5129/70286_
51.605844119302770.019.80286.86
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0130590/5273/72675_
51.674050125567740.019.03296.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0130590/5343/72134_
51.811559124205040.018.68294.59
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0130590/5304/71559_
51.712824116039280.018.78291.41
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0130590/5128/73003_
51.864230127949700.018.32293.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7a1619e13bf5

0-0130590/4926/70157_
51.8213911116886110.017.14285.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0130590/6048/74220_
51.654961119897370.021.86299.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0130590/4770/70507_
51.566807121461350.016.92285.06
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0130590/4135/70870_
51.731650120198250.014.52285.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0130590/4709/73501_
51.596193120074450.015.41290.33
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_126df900eb9c0

0-0130590/4817/72435_
51.645101125110450.017.49293.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0130590/4986/70386_
51.71222331125760490.016.77285.74
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0130590/5397/74248_
51.567845131670050.018.48299.89
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0130590/4852/71590_
51.67414150126161860.018.35303.11
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BW71l

0-0130590/4517/70510_
51.8394351121484640.017.33289.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0130590/4819/71799_
51.86515116025120.016.49291.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_30d37

0-0130590/5044/70765_
51.586410125142220.018.01294.66
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0130590/5088/73098_
51.654603129758630.017.57299.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0130590/4810/72699_
51.86100117460220.017.68297.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0130590/4489/71094_
51.8213530116889410.016.24288.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6a3dd337f870a

1-01237716/1344/67446W
15.81001198690943.24.80275.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

1-0123770/1575/67250_
15.701123118688300.05.59270.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7391905632d22

1-0123770/1774/66821_
15.5566749114869560.06.37270.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb2e3623953c3

1-01237762/1761/68145K
15.802012134067609.66.30276.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0123770/1478/66689_
15.701394116439290.05.12273.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0123770/1985/67621_
15.701933114721780.06.77274.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/1342/67358_
15.557033110952160.04.40272.73
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/1673/68426_
15.556683106223330.05.87284.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0123770/1881/67636_
15.624446116633400.06.29278.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?cookieTime=1759216734&spentityid=

1-0123770/1834/68326_
15.702123115706160.06.62276.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b05d9453cd538

1-0123770/1867/69389_
15.624260120100310.06.60281.58
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0123770/1653/68019_
15.565991073116821240.05.52277.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?cookieTime=1759216574&spentityid=

1-0123770/1472/68755_
15.566304112627970.04.92283.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0123770/1662/67714_
15.557013113261320.05.98277.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/1815/68623_
15.701295114345410.06.01274.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/1285/65712_
15.653544111324910.04.24271.78
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0123770/1611/68491_
15.604511112463780.05.65279.93
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0123770/1335/67780_
15.575864114623470.04.44275.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0123770/1564/67766_
15.682205119197330.05.56<

Found on 2025-09-30 07:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2820c90d6

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 28-Sep-2025 09:05:49 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  81 days 1 hour 57 minutes 38 seconds
Server load: 0.66 0.80 0.75
Total accesses: 3836736 - Total Traffic: 15.3 GB - Total Duration: 666413715
CPU Usage: u66.81 s108.02 cu1205.68 cs591.23 - .0281% CPU load
.548 requests/sec - 2342 B/second - 4277 B/request - 173.693 ms/request
1 requests currently being processed, 49 idle workers
_____________W___________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0130590/140/66475_
1.964036114279280.00.56270.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0130590/245/66771_
1.965170108881520.01.37275.59
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/192/66254_
1.965340112981120.00.98277.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/112/69798_
1.946310112389230.00.47282.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/76/67747_
1.947036110052770.00.28273.58
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0130590/123/65280_
1.937530115393250.00.51267.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/112/67514_
1.963100120987610.00.45278.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/79/66870_
1.97302489119174370.00.33276.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEH73r1j63m0wJ

0-0130590/152/66407_
1.9724738110456880.01.10273.73
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6c2bb7e01a256

0-0130590/287/68162_
1.9711532124117940.01.58277.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0130590/107/65338_
1.972236111442120.00.56268.89
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0130590/155/68327_
1.98530114832410.00.66278.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/123/65860_
1.98436117427920.00.66268.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-01305910/103/66838W
1.99001156510911.70.42271.40
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-0130590/105/68897_
1.9013395116036520.00.51275.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0130590/134/67752_
1.90131510119809600.00.59276.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0130590/229/65629_
1.9012426121048300.01.25270.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0130590/132/68983_
1.9012710126002700.00.61282.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0130590/248/66986_
1.91115664122744080.01.37286.12
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0130590/146/66139_
1.9111800117701280.01.01273.28
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/186/67166_
1.9110591111670270.01.12276.61
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0130590/104/65825_
1.911135253120985170.00.41277.07
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0130590/195/68205_
1.9456632123936730.01.06282.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8d6f45b7d88d

0-0130590/132/68021_
1.929840113866350.00.53280.41
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0130590/83/66688_
1.928836113428200.00.29272.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/66102.
0.00222420118964520.00.00270.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/65675.
0.00222424117994140.00.00264.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/65047.
0.00222421113572660.00.00264.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET / HTTP/1.1

1-0-0/0/66384.
0.0022242672120068990.00.00270.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZNvb6owFMa%2FCul7AfE

1-0-0/0/65211.
0.00222423115600080.00.00268.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f21dd00f01a72

1-0-0/0/65636.
0.00222427113545880.00.00267.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/66016.
0.00222423110270860.00.00268.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06664eff99353

1-0-0/0/66753.
0.00222426105315500.00.00278.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/65755.
0.00222428115515810.00.00272.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/66492.
0.00222424113493790.00.00270.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/67522.
0.00222424118978050.00.00274.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_ba58b874437c576d6

1-0-0/0/66366.
0.00222424115900300.00.00272.01
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9b6c4e4270e9f

1-0-0/0/67283.
0.00222424111600490.00.00278.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_87a5bc76f0bae

1-0-0/0/66052.
0.00222424111931980.00.00271.73
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/66808.
0.00222420112714550.00.00268.51
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0-0/0/64427.
0.00222426110058260.00.00267.54
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/66880.
0.00222428111495290.00.00274.27
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/66445.
0.0022242129113920850.00.00270.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com&RelayState=

1-0-0/0/66202.
0.0022242328117664150.00.00272.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/66331.
0.00222426122673040.00.00273.29
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/68007.
0.00222426118858090.00.00282.31

Found on 2025-09-28 09:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de25ce62032

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 26-Sep-2025 11:20:16 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  79 days 4 hours 12 minutes 6 seconds
Server load: 0.64 0.72 0.72
Total accesses: 3799349 - Total Traffic: 15.1 GB - Total Duration: 658721670
CPU Usage: u86.05 s113.54 cu1171.46 cs577.24 - .0285% CPU load
.555 requests/sec - 2373 B/second - 4274 B/request - 173.378 ms/request
1 requests currently being processed, 49 idle workers
________________W_________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0195120/1795/66107_
24.30149239113745350.08.07268.64
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0195120/1668/66348_
24.32585717107967160.09.14273.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0195120/1450/65879_
24.329706112463550.08.34275.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1545/69492_
24.3113275111975800.07.30280.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_f48c0637898355a62

0-0195120/1664/67473_
24.327906109466500.07.58272.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1742/64971_
24.3110306114827730.09.91266.40
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1613/67213_
24.329106120307530.07.21277.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1529/66581_
24.327306118728030.07.44274.73
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1690/66089_
24.325506109848960.09.81272.01
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1860/67713_
24.323709123277440.08.88274.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1576/65053_
24.3110907110943560.08.30267.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1712/67923_
24.3112707114264690.07.38276.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1601/65515_
24.3114620116910600.07.79267.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0195120/1859/66542_
24.321906115252670.08.39270.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1311/68594_
24.3113907115772720.06.23274.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1714/67405_
24.3112106119138180.09.03275.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-01951212/1602/65181W
24.33001199263017.57.46268.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-0195120/1785/68626_
24.3387935125045980.08.90280.43
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0195120/1448/66566_
24.324906122010470.07.94284.21
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1545/65800_
24.3198214117083360.07.67271.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0195120/1586/66797_
24.322584111078470.08.14274.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0195120/1659/65573_
24.324721120562150.08.24276.22
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0195120/1643/67812_
24.323984121804910.08.49280.78
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://collarts-lo

0-0195120/1794/67723_
24.3262041113510540.09.01279.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0195120/1840/66413_
24.33354112787550.09.65271.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-068110/972/65422_
13.2693746118054380.04.55266.60
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-068110/1002/65151_
13.2410565117305010.04.27262.73
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dfeb40a649607

1-068110/1036/64450_
13.268506112594340.04.72261.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/985/65650_
13.262506118559050.05.02266.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/899/64556_
13.261306114435440.05.11265.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/837/64944_
13.263107111251310.06.00264.65
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/810/65446_
13.2411507109510350.04.04266.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/852/66091_
13.267601104521610.04.42275.92
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-068110/872/65019_
13.266706114589260.03.42268.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/853/65858_
13.2414507112344820.04.75267.70
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/857/66933_
13.241506762118357590.04.38272.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-068110/912/65695_
13.26706113726220.04.10268.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/898/66624_
13.28211110143820.04.18275.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-068110/911/65449_
13.24148243111104090.04.31269.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-068110/899/66129_
13.24123042111594210.04.06265.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-068110/994/63822_
13.2413490109362400.05.74265.07
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-068110/811/66213_
13.259750110259440.03.97271.58
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-068110/837/65843_
13.2599355112961360.03.98267.99
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-068110/898/65648_
13.2412970116726930.05.00270.39
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-068110/821/65730_
13.265744121145930.03.43271.12
127.0.0.1http/1.1ip-10-1-92-223.ap-southeas

Found on 2025-09-26 11:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de24cecbd82

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 25-Sep-2025 05:59:00 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  77 days 22 hours 50 minutes 50 seconds
Server load: 0.74 0.77 0.73
Total accesses: 3766105 - Total Traffic: 15.0 GB - Total Duration: 652839294
CPU Usage: u71.79 s106.29 cu1171.46 cs577.24 - .0286% CPU load
.559 requests/sec - 2386 B/second - 4267 B/request - 173.346 ms/request
2 requests currently being processed, 48 idle workers
______W__________________________________________K..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0195120/1165/65477_
14.633400112833430.05.28265.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0195120/1073/65753_
14.64363106713330.06.03270.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7d63acae294e9

0-0195120/945/65374_
14.641385111625590.06.19273.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b3b7f2079cee7

0-0195120/924/68871_
14.632524110540260.04.28277.93
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e780773314b9f

0-0195120/1027/66836_
14.641654108655480.04.82269.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5248d389a9712

0-0195120/1014/64243_
14.642135113934100.04.96261.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-01951213/1036/66636W
14.65001191909326.04.94275.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-0195120/909/65961_
14.64805117261960.04.89272.18
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0195120/998/65397_
14.64546108386320.06.29268.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1126/66979_
14.59463346122018700.05.20271.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0195120/860/64337_
14.641854110209710.04.38263.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0195120/1013/67224_
14.6422944113399930.04.21273.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0195120/1075/64989_
14.6332544115486590.05.20264.74
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0195120/896/65579_
14.595113113766720.04.13265.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_670e6635a0a54

0-0195120/817/68100_
14.632946115023560.04.34272.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0195120/1016/66707_
14.63269382117917250.05.04271.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0195120/865/64444_
14.594463118089690.04.09264.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4677d43bb944d

0-0195120/1080/67921_
14.594234123600510.04.98276.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_975882eb66f55

0-0195120/848/65966_
14.585544120815560.04.87281.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_7b2e07dc676d695b5

0-0195120/962/65217_
14.641134116447110.05.18269.06
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0195120/810/66021_
14.5854544109200610.04.77271.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0195120/982/64896_
14.59487136118908610.05.26273.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2B

0-0195120/971/67140_
14.594074120126580.05.29277.58
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0195120/1160/67089_
14.595284112455120.05.71275.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0195120/1145/65718_
14.603764111936550.05.36267.69
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/255/64705_
3.85205368116801760.01.50263.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/231/64380_
3.85245139116079550.01.11259.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZNdj6IwFIb%2FCuk9HwM

1-068110/338/63752_
3.852614111234370.01.57258.69
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/239/64904_
3.835281117473770.01.98263.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-068110/194/63851_
3.835037113671880.01.28262.01
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/216/64323_
3.825346110454980.01.59260.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068110/272/64908_
3.851594108309750.01.29263.45
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ddaa986633456

1-068110/218/65457_
3.851737103506020.01.33272.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/185/64332_
3.8512431113336630.00.84266.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVJLT%2BMwEP4rke95bto

1-068110/196/65201_
3.844330111401780.00.87263.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-068110/251/66327_
3.834530117431100.01.15269.65
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-068110/159/64942_
3.834714112679960.00.73265.58
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/288/66014_
3.844134109197730.01.59272.80
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_867a0c31d7655

1-068110/162/64700_
3.84398350110015890.01.24266.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/173/65403_
3.8535338110303710.00.88262.67
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-068110/273/63101_
3.853026108242390.01.52260.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/220/65622_
3.852214109140320.01.49269.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_db1438aa4f67b

1-068110/194/65200_
3.852804111872000.01.19265.21
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-068110/267/65017_
3.853450115725020.01.61266.99
127.0.0.1http/1.1ip-10-1-92-223.ap-s

Found on 2025-09-25 05:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de278ede6fd

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 22-Sep-2025 09:35:05 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  75 days 2 hours 26 minutes 54 seconds
Server load: 0.64 0.81 0.90
Total accesses: 3664606 - Total Traffic: 14.5 GB - Total Duration: 628030617
CPU Usage: u73.69 s103.91 cu1121.86 cs560.16 - .0287% CPU load
.565 requests/sec - 2393 B/second - 4237 B/request - 171.377 ms/request
1 requests currently being processed, 49 idle workers
__________________________W_______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0308170/1017/63314_
16.393893108487140.04.70255.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e0d21d541e707

0-0308170/1125/63552_
16.386421101987650.06.20258.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0308170/1116/63452_
16.394124105522990.06.05263.04
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0d1303557c3e7

0-0308170/1081/66988_
16.395924106314290.04.81269.56
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/1180/64702_
16.3865614104518330.06.14259.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/1159/62280_
16.394464109170270.07.10252.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/1156/64405_
16.395214113960060.05.88263.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/976/64058_
16.394304110783700.04.85262.35
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/914/63261_
16.394787104537350.04.66256.89
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0308170/1024/64595_
16.403474116628480.04.94259.88
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/1135/62370_
16.403653105085500.04.86254.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ec240c38a80e0

0-0308170/971/65274_
16.422113108750180.04.69264.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0442efaa5e0bf

0-0308170/1187/62924_
16.412908109589220.06.23254.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/1067/63767_
16.421797109690700.05.26257.37
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0308170/981/66286_
16.421433110238760.04.25263.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84727f6b6b6dd

0-0308170/907/64489_
16.412663113254880.05.09259.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3a1d30e11f7b3

0-0308170/946/62492_
16.421180111826040.04.36255.36
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0308170/1140/66026_
16.42963117321290.06.32267.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0d9d422af0512

0-0308170/1034/64108_
16.42784116707800.05.41270.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/1041/63380_
16.43596112922410.05.84259.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0308170/1132/64254_
16.4353105781130.04.99261.53
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0a237ae3c459f

0-0308170/1138/62631_
16.3770627113063310.05.48260.97
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0308170/1087/64833_
16.433841114285890.06.28264.79
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0308170/1236/64847_
16.386140105277100.06.95264.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0308170/1194/63568_
16.39557330107363790.06.64257.11
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0128440/404/62840_
7.296085113454950.02.27254.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-01284415/514/62463W
7.32001112226728.53.04248.95
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

1-0128440/369/61779_
7.313333104445670.02.34249.37
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0009eb1c4dcc1

1-0128440/498/62792_
7.311885112355330.02.14251.35
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_9811661079264feda

1-0128440/446/61960_
7.296880110357770.01.99252.29
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0128440/535/62228_
7.32453105508450.02.30249.78
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_05432b44b12aa

1-0128440/430/63229_
7.32876103978120.02.27254.52
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0128440/493/63369_
7.329867099494860.02.36262.40
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0128440/617/61994_
7.29565163109022970.03.98254.62
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLbxMxEL4j8R8s3%2Fe

1-0128440/451/63184_
7.311260107295660.02.81254.07
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0128440/467/64062_
7.32717111950890.03.24258.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0128440/450/62874_
7.32294107212850.03.35254.29
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0128440/530/63872_
7.311565104205060.02.35260.79
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dba4c5076ef05

1-0128440/416/62551_
7.296344105354290.01.88253.66
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3003cfd74e59a

1-0128440/609/63451_
7.295397106238140.03.70253.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128440/426/61248_
7.296481103757390.02.16250.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0128440/457/63610_
7.295154104733440.02.26259.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0128440/515/63210_
7.304523106024970.02.22255.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ae0044605ca0

1-0128440/484/63128_
7.304196109973190.02.46256.89
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-

Found on 2025-09-22 09:34

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de28d63c4c2

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 20-Sep-2025 08:43:02 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  73 days 1 hour 34 minutes 52 seconds
Server load: 0.90 0.94 1.00
Total accesses: 3602405 - Total Traffic: 14.2 GB - Total Duration: 615696589
CPU Usage: u86.37 s107.89 cu1080.77 cs543.63 - .0288% CPU load
.571 requests/sec - 2408 B/second - 4221 B/request - 170.913 ms/request
2 requests currently being processed, 48 idle workers
______________________W______________________K____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0118780/2000/62162_
28.6237031106104170.09.48250.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_765a90f36b734

0-0118780/2072/62247_
28.56502499477010.08.58251.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/1816/62178_
28.515811102678640.08.88256.37
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0118780/2255/65729_
28.6426530103327360.010.83263.99
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c7af8728e2314

0-0118780/2090/63379_
28.5159733102190310.010.65253.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_812233a898e30

0-0118780/2222/60942_
28.584530106691800.010.95244.54
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0118780/2175/63052_
28.565224111671780.09.82257.22
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0118780/2272/62933_
28.651745108446520.011.55256.99
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/1930/62157_
28.623491102905970.09.31251.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0118780/2193/63364_
28.651664113835770.010.96254.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTwIxEL37Kza9d3dbQ

0-0118780/2065/61086_
28.623814103044210.09.53248.20
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/2298/64139_
28.6239732106183260.010.18259.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2bc0921aa94ce

0-0118780/2042/61581_
28.6428730106224610.09.35248.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26e8638cc4cac

0-0118780/2137/62560_
28.67454106684440.09.96251.63
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/2078/65134_
28.6422427108382160.010.65258.65
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_98979a64a64b2

0-0118780/1849/63437_
28.67104110954760.08.99254.03
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0118780/2217/61395_
28.673030109818580.010.92250.51
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c0ab7ce5205fc

0-0118780/1774/64721_
28.6511228115174140.08.39260.12
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_133d9aad0e64b

0-0118780/2221/62789_
28.6419931114281390.011.80263.66
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d2e3808417199

0-0118780/1759/62165_
28.659131110128370.08.27253.15
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3d3113240f12e

0-0118780/2219/62928_
28.535421103376900.010.55255.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0118780/2173/61315_
28.506183110537790.010.65254.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7763dcb6fd94

0-0118786/2067/63574W
28.67001125413918.910.81257.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

0-0118780/1806/63427_
28.506473102156090.08.63257.17
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5bb0fed797f14

0-0118780/1793/62224_
28.6513035104271870.08.66249.59
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_240bbeb10441b

1-013310/1097/61653_
15.764944110792640.05.08248.54
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-013310/936/61178_
15.764304108883850.03.99241.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-013310/1292/60676_
15.763880102959440.05.89244.15
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /robots.txt HTTP/1.1

1-013310/1291/61588_
15.5957233109905650.06.33246.02
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ba0d5c8493d0e

1-013310/1292/60766_
15.764692108648300.05.91247.38
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74f98af9de2ab

1-013310/1169/60891_
15.7651031102622790.05.16243.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_544126f33f7dd

1-013310/1232/62089_
15.8016529101752480.05.71249.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bdb771bb758f6

1-013310/1142/62204_
15.783444097371130.05.77256.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-013310/1296/60588_
15.783304104932420.05.89247.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-013310/1086/61900_
15.7825633105425540.05.16247.33
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_59df4f0d7f35c

1-013310/1107/62845_
15.7827526109804910.05.57251.61
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e02192a68801b

1-013310/1065/61603_
15.7819134104999070.04.83247.57
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1d96adbdae55f

1-013310/1167/62608_
15.7820826101759790.05.93254.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ce54418a4a700

1-013310/1049/61460_
15.8012226103193230.04.76249.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94fc204a9ab6e

1-013310/925/62106_
15.801524103253970.03.78246.27
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-013310/1160/60114_
15.80394101025790.05.41245.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-013310/1219/62413_
15.8010229102183680.05.67253.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_358dca299403e

1-013310/1066/61903_
15.808128103787730.04.93249.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6b170a058b266

1-013310/1196/61790_
15.5666281108340120.06.05

Found on 2025-09-20 08:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de25e9f797a

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 18-Sep-2025 12:06:18 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  71 days 4 hours 58 minutes 8 seconds
Server load: 1.18 1.23 1.15
Total accesses: 3536606 - Total Traffic: 13.9 GB - Total Duration: 604762604
CPU Usage: u90.88 s111.72 cu1049.24 cs527.05 - .0289% CPU load
.575 requests/sec - 2419 B/second - 4208 B/request - 171.001 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................______________
___W_______.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0118780/738/60900_
9.521926104201430.04.23244.99
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0118780/673/60848_
9.512491097723890.02.91245.63
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0118780/699/61061_
9.502814101285730.04.05251.54
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8904b9cfee4e1

0-0118780/802/64276_
9.522104100217610.03.26256.42
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0118780/696/61985_
9.503213100457790.03.37245.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e9ef44970a870

0-0118780/790/59510_
9.503232353104333640.04.18237.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0118780/716/61593_
9.521575109537730.03.02250.43
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/823/61484_
9.544349106066670.04.23249.67
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/738/60965_
9.531235100172800.03.84246.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/830/62001_
9.537024111191920.03.85246.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/743/59764_
9.531080101221540.03.47242.15
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0118780/798/62639_
9.53394103835420.03.64252.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/699/60238_
9.53691652103950290.03.05241.82
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFbT8MwDIX%2FSuT3rBf

0-0118780/777/61200_
9.495363103596570.03.76245.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4f2d36e0c2e6c

0-0118780/642/63698_
9.49580329106512060.03.13251.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/678/62266_
9.504264108526420.03.40248.44
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/749/59927_
9.504655107176550.03.65243.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/696/63643_
9.504074113521340.03.24254.98
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/655/61223_
9.495604112444200.03.69255.55
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_38a5814cca32b

0-0118780/664/61070_
9.504534107144330.02.78247.66
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6f578ad8535c1

0-0118780/752/61461_
9.512413101858640.03.40248.29
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_697297dd63ec0

0-0118780/578/59720_
9.503874108601590.02.55246.77
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/811/62318_
9.505070110297030.03.91251.05
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0118780/642/62263_
9.503594816100724410.02.92251.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0118780/686/61117_
9.504883102408350.03.71244.64
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4608c854ab4c

1-0-0/0/60556.
0.00660024109070330.00.00243.46
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/60242.
0.00660024107287840.00.00237.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a1cf1bb44298a

1-0-0/0/59384.
0.00660024100572120.00.00238.26
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/60297.
0.00660024108257570.00.00239.69
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://collarts-lo

1-0-0/0/59474.
0.00660024105784170.00.00241.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/59722.
0.0066002499099030.00.00238.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/60857.
0.0066002398673030.00.00243.61
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_60a172980315b

1-0-0/0/61062.
0.006600232096018330.00.00251.08
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/59292.
0.006600218102645620.00.00241.24
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/60814.
0.00660024103077680.00.00242.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/61738.
0.00660023108014430.00.00246.04
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bdea89bffcd0c

1-0-0/0/60538.
0.00660023103400810.00.00242.75
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a24f990a46d94

1-0-0/0/61441.
0.00660026100372910.00.00248.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/60411.
0.00660024100176480.00.00244.50
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/61181.
0.00660024101702380.00.00242.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/58954.
0.0066002598594740.00.00240.31
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92565faa022d4

1-0-0/0/61194.
0.00660026100191870.00.00247.68
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/60837.
0.00660024101810560.00.00244.25
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3246c83b0659d

1-0-0/0/60594.
0.00660023106693560.00.00244.47
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/l

Found on 2025-09-18 12:06

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2841c82e2

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 17-Sep-2025 03:34:43 UTC
Restart Time: Wednesday, 09-Jul-2025 07:08:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  69 days 20 hours 26 minutes 32 seconds
Server load: 1.16 1.23 1.20
Total accesses: 3472068 - Total Traffic: 13.6 GB - Total Duration: 591667950
CPU Usage: u153.13 s148.16 cu963.85 cs479.46 - .0289% CPU load
.575 requests/sec - 2413 B/second - 4195 B/request - 170.408 ms/request
2 requests currently being processed, 73 idle workers
_____K___________________________W______________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0232920/6467/59982_
64.441204102194990.022.90239.59
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0232920/6273/59990_
64.43177196386300.023.19241.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0232920/5970/60167_
64.41338298792990.022.35245.90
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_140ef3e2cbd5e

0-0232920/6253/63188_
64.376433898478810.021.90251.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0232920/6319/61122_
64.37577798395890.021.99241.58
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0232923/6159/58556K
64.4400102457513.121.25232.84
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /v2/_catalog HTTP/1.1

0-0232920/6237/60693_
64.377210107025730.022.90246.10
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/script.js HTTP/1.1

0-0232920/6450/60441_
64.40428126103917920.024.73243.76
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com&RelayState=

0-0232920/6492/60092_
64.40469197963630.023.85241.65
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0232920/6336/60948_
64.377572109026350.022.61241.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_70aafb2ca7e9f

0-0232920/5960/58819_
64.36817698376820.020.99237.71
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0232920/6367/61590_
64.403903101473060.022.78247.49
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e1a972fc51912

0-0232920/6360/59399_
64.44530102001280.022.66237.85
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0232920/6117/60199_
64.413500101579070.022.33240.73
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1

0-0232920/6708/62899_
64.44922104577230.022.27247.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0232920/6344/61432_
64.412494105826180.021.60244.27
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0232920/6057/58996_
64.368084105005450.021.83238.30
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3e93dfd22ef13

0-0232920/6340/62782_
64.413044111647070.022.09250.81
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0232920/5857/60379_
64.432161110974750.022.54251.09
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0232920/5806/60187_
64.3767526105281990.021.40243.95
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0232920/5643/60549_
64.3754136998139280.020.99244.19
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0232920/5972/58937_
64.422286106728250.021.20243.32
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SingleLogoutService.php?SAMLRequest=nVPJcuIwEP0V

0-0232920/6176/61326_
64.441774108128340.021.14246.23
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0232920/6369/61399_
64.43207398619280.022.60247.28
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bd11c729830f1

0-0232920/5621/60219_
64.441035100655690.019.22239.83
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d98Et

1-0282080/5627/60051_
60.638220108453510.020.66240.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0282080/5598/59749_
60.64660618106756900.020.01235.87
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0282080/5712/58914_
60.683703100063420.020.46235.66
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_261624478fa79

1-0282080/5868/59859_
60.72128145107606780.021.47238.00
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZNfb7IwFMa%2FCuk9IOg

1-0282080/5804/59025_
60.702071037105264350.020.05239.72
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0282080/5355/59195_
60.68336498561180.019.43235.94
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0282080/6252/60512_
60.6831263798325110.022.39242.34
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0282080/5874/60670_
60.71177195532700.021.32249.56
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-02820836/5812/58850W
60.740010183487112.919.82239.10
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /server-status HTTP/1.1

1-0282080/5774/60355_
60.73863102713000.020.47240.16
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84f1cf538e46b

1-0282080/5077/61207_
60.731020107376040.017.20243.40
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0282080/5641/60010_
60.683950102602730.019.73239.99
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0282080/5968/60997_
60.69242199851830.020.70247.17
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0282080/6129/59878_
60.65547599530960.022.09241.91
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0282080/6788/60629_
60.646977101170090.024.28240.30
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0282080/4958/58448_
60.67435098324970.019.28238.13
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0282080/5848/60739_
60.65583199381430.021.09245.48
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0282080/5718/60269_
60.692280101151280.019.40241.96
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0282080/6024/60264_
60.68274708106382640.021.31243.14
127.0.0.1http/1.1ip-10-1-92-223.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZNtb6owFMe%2FCul7Hp

Found on 2025-09-17 03:34

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2fdf9ea18

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 21:30:54 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  83 days 11 hours 20 minutes 25 seconds
Server load: 7.12 3.24 2.06
Total accesses: 2947999 - Total Traffic: 12.6 GB - Total Duration: 716140967
CPU Usage: u118.79 s148.01 cu1027.16 cs481.75 - .0246% CPU load
.409 requests/sec - 1873 B/second - 4582 B/request - 242.924 ms/request
1 requests currently being processed, 74 idle workers
........................._________________________..............
..........._______________W_________.........................___
______________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/50181.
0.00160356397121685440.00.00219.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f8af2916a28aa

0-0-0/0/48963.
0.00160356499125707680.00.00220.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4c95f33a4acc3

0-0-0/0/49454.
0.00160356430116134050.00.00213.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ee3cc1c4a2f25

0-0-0/0/50060.
0.0016035676117999780.00.00221.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ac312f7846da6

0-0-0/0/49064.
0.00160356476125086390.00.00213.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2B

0-0-0/0/49277.
0.00160356467124212870.00.00216.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/51304.
0.0016035650120477610.00.00223.72
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5b25ef1d3a66a

0-0-0/0/50978.
0.00160356557127763110.00.00218.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3ba10c796cb36

0-0-0/0/49461.
0.00160356502120315880.00.00222.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9acf23f338aa4

0-0-0/0/48312.
0.0016035693121789750.00.00215.03
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9092f34b91fff

0-0-0/0/50464.
0.0016035631113869530.00.00219.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4cf7782337b09

0-0-0/0/48437.
0.00160356313118381410.00.00211.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bbde44e649e8b

0-0-0/0/50057.
0.00160356469118686800.00.00219.79
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/50106.
0.00160356208121192370.00.00222.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10a37151f440c

0-0-0/0/51509.
0.00160356314121750390.00.00228.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/50533.
0.00160356505126795770.00.00220.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dee51cc8ca93c

0-0-0/0/47908.
0.00160356304122573560.00.00209.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_56087dc17a294

0-0-0/0/49934.
0.00160356463123495880.00.00227.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1884

0-0-0/0/50616.
0.00160356479119308900.00.00213.64
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d7csT

0-0-0/0/49828.
0.00160356525121544320.00.00214.89
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/49635.
0.00160356249123954350.00.00217.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/50471.
0.00160356543127639620.00.00220.57
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a17f576dee54

0-0-0/0/50058.
0.00160356493122769830.00.00214.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_69371c240c290

0-0-0/0/49500.
0.00160356336119188160.00.00218.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a6e3ddd14581

0-0-0/0/50117.
0.00160356471114704000.00.00218.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d8933e647df2a

1-0243670/2213/40028_
28.403404115745400.07.88187.96
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_191756955f1d0

1-0243670/2457/41421_
28.3891767117657140.08.48189.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/zxcvbn.js HTTP/1.1

1-0243670/2805/41260_
28.40408156120288820.09.34190.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL6vtP%2FB8

1-0243670/2384/41072_
28.387684113754660.09.01191.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3bc04cdcda6e4

1-0243670/2589/41254_
28.395984116174030.08.96195.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_69095bdc15875

1-0243670/2711/41815_
28.4186645115159960.09.35198.20
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fJHLTsMwEEX3lfoPlvfNw

1-0243670/3178/42378_
28.30121932117299830.010.87194.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e4294f097f205

1-0243670/2224/40124_
28.3199230111052410.08.61190.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0cfe72fa37aee

1-0243670/2277/40509_
28.3010834115621440.08.14188.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_951d5eac5cf3a

1-0243670/2235/40279_
28.31929202118443470.07.89193.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0243670/2648/39601_
28.38708165116867200.09.56181.60
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BR71n

1-0243670/2509/40184_
28.411545119122910.08.44187.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0243670/2746/40630_
28.4026932123369750.09.83193.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a15a8eb25fa7e

1-0243670/2593/39559_
28.3012814121296760.08.76188.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0243670/2594/42202_
28.40470713115338710.09.17199.64
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0243670/2416/38565_
28.2814026123602730.08.18181.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0243670/2791/41531_
28.388240116803070.09.42199.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0243670/2216/40390_
28.3110231119567500.07.38194.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0243670/2578/40204_
28.411241118782250.010.1818

Found on 2024-10-22 21:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2354860a3

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 18:08:47 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  81 days 7 hours 58 minutes 18 seconds
Server load: 0.97 1.94 1.98
Total accesses: 2749629 - Total Traffic: 11.9 GB - Total Duration: 683907756
CPU Usage: u114.1 s133.89 cu974.12 cs460.36 - .0239% CPU load
.391 requests/sec - 1817 B/second - 4643 B/request - 248.727 ms/request
1 requests currently being processed, 74 idle workers
____________________________________W___________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-095130/1774/49796_
25.914884120715210.09.46218.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1635/48690_
25.905714124274080.09.26219.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_91fb7b857b468

0-095130/1853/49239_
25.921805115705930.09.28212.89
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1875/49772_
25.922854117321600.08.76220.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ae201071c837d

0-095130/1541/48844_
25.922294124255580.06.77212.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_89164e1b3db64

0-095130/1597/48976_
25.9354123452590.07.79215.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e54284571debb

0-095130/1853/51099_
25.914353120037860.09.35222.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7c4f7ccf5d318

0-095130/1944/50747_
25.921064127151870.09.84217.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3efac202c56b1

0-095130/1602/49192_
25.905474118915180.08.41220.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9d0fec872dc72

0-095130/1733/48093_
25.92254393120802660.09.49214.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1637/50230_
25.9215315113531860.08.96218.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1821/48141_
25.92605117533990.09.27210.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_94ad37793ceec

0-095130/1465/49883_
25.90611427118315130.07.90219.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1748/49808_
25.92815120572490.09.78221.60
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1646/51295_
25.9233328121264610.08.86227.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_291504ce9e240

0-095130/1830/50230_
25.93315126200840.09.24218.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1864/47737_
25.905914122345570.09.84208.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5dd8da46d5105

0-095130/1682/49620_
25.914615121574610.08.81226.72
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_faf11db13cef6

0-095130/1746/50382_
25.923825118539060.08.14212.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/1730/49580_
25.921995120627370.010.63213.72
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6070ad6debc13

0-095130/1782/49411_
25.923585123084940.09.95216.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/1636/50216_
25.9230929126599490.07.98219.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1481/49782_
25.9151332121934600.07.94213.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6e4f508d6e9d2

0-095130/1875/49139_
25.92127385118577610.09.62216.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/1749/49880_
25.924224114189660.08.66217.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ede5059079fd2

1-0325470/1851/37813_
29.634360110985040.09.11180.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0325470/1880/38962_
29.635865113094570.09.53181.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325470/1884/38454_
29.63244115668660.09.62181.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6c45aae5ebe4e

1-0325470/2005/38685_
29.633723109427800.09.67182.72
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4659a1fa67ae4

1-0325470/1947/38660_
29.636044112395760.010.76186.39
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_100ec247315a6

1-0325470/1964/39103_
29.63192400112038250.011.16188.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325470/2243/39199_
29.632755113827010.011.06183.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325470/2004/37898_
29.634114108259710.09.65181.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f32537a8b6be4

1-0325470/2116/38231_
29.632474110990920.011.53180.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8f925aed91b02

1-0325470/1865/38042_
29.631754115379500.09.63185.20
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_da72a0dd3ac04

1-0325470/1815/36949_
29.633495114152490.09.02172.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325479/1988/37663W
29.64001153594512.710.00179.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

1-0325470/2109/37882_
29.632167119050480.09.35183.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d12d76247cdfb

1-0325470/2099/36965_
29.63545117609910.010.78179.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325470/1933/39604_
29.635613111357400.09.55190.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2f3e297683d08

1-0325470/1705/36148_
29.63995119958250.09.25173.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0325470/1898/38738_
29.6345475112292490.09.88189.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325470/2045/38172_
29.63735116913650.012.43187.35
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36beae7ebdb44

1-0325470/1662/37625_

Found on 2024-10-20 18:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2ded12ac4

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 18-Oct-2024 22:46:12 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  79 days 12 hours 35 minutes 43 seconds
Server load: 0.77 1.02 1.13
Total accesses: 2719709 - Total Traffic: 11.8 GB - Total Duration: 675506295
CPU Usage: u102.36 s127.66 cu974.12 cs460.36 - .0242% CPU load
.396 requests/sec - 1836 B/second - 4639 B/request - 248.374 ms/request
1 requests currently being processed, 74 idle workers
_____________________________________________________W__________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-095130/1256/49278_
20.93136756119132320.06.70215.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/1299/48354_
20.93167955123194060.07.32217.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9670ece82a86a

0-095130/1351/48737_
20.9451645114673530.06.86210.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/1353/49250_
20.9378030116531960.06.55218.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cde1291f90221

0-095130/1199/48502_
20.946425122701700.05.41210.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0439a2b18bdef

0-095130/1249/48628_
20.92195142122538080.06.36214.03
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/1338/50584_
20.9312385118790200.07.09220.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/1498/50301_
20.941630125799190.08.02215.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-095130/1267/48857_
20.9315445117686020.06.81219.35
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/1317/47677_
20.9472528119782070.07.60212.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c40924c296ca0

0-095130/1253/49846_
20.9448037112239080.07.35217.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ff31a44a5a652

0-095130/1433/47753_
20.922053221116500900.07.43208.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEH73r1j63o0Ol

0-095130/1164/49582_
20.9218684117134080.06.62217.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_73e6e0d421202

0-095130/1349/49409_
20.95384119037020.07.88219.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_16bbee7e2c5e6

0-095130/1271/50920_
20.938674120291120.06.88225.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/1396/49796_
20.946851125105880.07.19216.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/1441/47314_
20.9217224121247230.07.98206.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c6d39646b7b27

0-095130/1275/49213_
20.93119228120284790.06.94224.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_467b50a8957f7

0-095130/1360/49996_
20.939220117547330.06.38211.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-095130/1355/49205_
20.943770119496740.08.45211.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-095130/1423/49052_
20.93107928121510900.08.39214.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_395d504d6fae6

0-095130/1199/49779_
20.938153125265260.05.97217.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_87156e5ff21e4

0-095130/1110/49411_
20.93144636120474590.05.78211.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_46115de26945d

0-095130/1466/48730_
20.943410117616010.07.37214.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-095130/1359/49490_
20.9312934113720050.06.94215.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ff6d9d37467d6

1-0325470/1393/37355_
24.9712314109721630.07.12178.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_28d99d5512aad

1-0325470/1519/38601_
24.96192746112197610.07.95179.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325470/1524/38094_
24.991324114151710.08.05179.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5b61cc36d4d0b

1-0325470/1594/38274_
24.9713472108539600.07.80180.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0325470/1551/38264_
24.9619755111601140.08.89184.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325470/1513/38652_
24.98721685110604580.09.42187.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325470/1758/38714_
24.978342944112504650.09.19181.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLdT8IwEH%2F3r1j63n0

1-0325470/1601/37495_
24.971270400107266630.07.94180.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0325470/1667/37782_
24.9780540110078930.09.45178.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0325470/1385/37562_
24.984985114305030.07.87183.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0325470/1502/36636_
24.9711440112989870.07.62170.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0325470/1627/37302_
24.99132510114234410.08.42177.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325470/1682/37455_
24.977643118171920.07.69181.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c47be21737672

1-0325470/1642/36508_
24.99533116053470.08.24177.20
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b933ae89a4c9a

1-0325470/1531/39202_
24.9618226576110215910.07.82188.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0325470/1368/35811_
24.9937756118790650.07.00171.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325470/1594/38434_
24.971415402111310500.08.64188.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0325470/1687/37814_
24.9929331115391680.010.50185.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fc03450688b69

1-0325470/1335/37298_
24.9859227113196850.06.85175.0

Found on 2024-10-18 22:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2eb674082

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 16-Oct-2024 19:56:13 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  77 days 9 hours 45 minutes 44 seconds
Server load: 0.37 0.67 0.86
Total accesses: 2669738 - Total Traffic: 11.5 GB - Total Duration: 653336302
CPU Usage: u79.04 s115.96 cu974.12 cs460.36 - .0244% CPU load
.399 requests/sec - 1845 B/second - 4623 B/request - 244.719 ms/request
1 requests currently being processed, 49 idle workers
____________________W_____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-095130/495/48517_
9.673515115679540.02.67211.68
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_353418664603a

0-095130/561/47616_
9.67234418120026540.03.30213.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/627/48013_
9.64109648110121500.02.95206.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/628/48525_
9.631211415114196390.03.53215.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/552/47855_
9.631148412119694820.02.71208.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-095130/544/47923_
9.64807397118215090.03.04210.72
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/605/49851_
9.6316355115677040.03.32216.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095130/633/49436_
9.64720558122597320.04.04211.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BW79m

0-095130/539/48129_
9.6670744114220740.03.02215.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/667/47027_
9.6668049117969230.03.60208.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/574/49167_
9.64103431110089120.03.09212.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_108c7348a69a6

0-095130/745/47065_
9.665854112660770.03.78204.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_759a12990e7ef

0-095130/428/48846_
9.649764112605430.02.36213.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_243d9388063aa

0-095130/579/48639_
9.6489329115372020.03.95215.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2249b214118a7

0-095130/508/50157_
9.6477365116849500.02.83221.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-095130/635/49035_
9.674154120262220.03.41212.57
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-095130/572/46445_
9.6739733116447750.03.74202.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b3896d6d3437c

0-095130/504/48442_
9.671744117034120.03.14221.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_92679d969279b

0-095130/489/49125_
9.672180113062170.02.61207.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /robots.txt HTTP/1.1

0-095130/625/48475_
9.6664710646116818500.03.70206.79
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-095139/524/48153W
9.68001187621912.53.43209.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-095130/478/49058_
9.6710034121453510.02.40213.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_223dae15ddf27

0-095130/443/48744_
9.641004404116641080.02.44207.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-095130/592/47856_
9.6729332113923190.03.24210.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_922f376983008

0-095130/563/48694_
9.6314771960111760110.03.09211.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325470/824/36786_
13.78774650107470380.04.31175.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325470/844/37926_
13.797100107335810.04.78176.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0325470/869/37439_
13.7969744108341060.05.07176.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325470/766/37446_
13.771067701106118190.03.78176.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325470/805/37518_
13.7616484108489650.04.92180.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2c9c064bcbf2b

1-0325470/817/37956_
13.778525107845920.04.79182.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9713c99447c47

1-0325470/986/37942_
13.7798929108244700.05.21177.89
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8a64d9e8093f9

1-0325470/825/36719_
13.79751638104617430.03.73176.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325470/912/37027_
13.79479103107011010.05.41174.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d1492d2dd46fb

1-0325470/725/36902_
13.802734111006840.04.18179.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f78051610a00c

1-0325470/806/35940_
13.779455110799530.04.02167.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d45cc98a306e3

1-0325470/927/36602_
13.802084110415960.04.87173.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_22e50d87a87e9

1-0325470/840/36613_
13.793904114605060.04.08178.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4c5f17cb0010f

1-0325470/836/35702_
13.794150111408190.04.37173.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0325470/727/38398_
13.79593112106851790.03.64184.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d2150585171be

1-0325470/745/35188_
13.7964513922115452170.03.47167.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325470/865/37705_
13.7615455108615920.04.64184.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f6d069c54868a

1-0325470/965/37092_
13.8015136111059040.06.20181.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d0010b9c1c45f

1-0325470/695/36658_
13.8022434111055950.03.75171.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.

Found on 2024-10-16 19:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de27f5cf206

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 14-Oct-2024 16:42:23 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  75 days 6 hours 31 minutes 54 seconds
Server load: 0.83 1.57 2.13
Total accesses: 2614968 - Total Traffic: 11.2 GB - Total Duration: 625934151
CPU Usage: u104.83 s134.24 cu920.16 cs428.84 - .0244% CPU load
.402 requests/sec - 1849 B/second - 4600 B/request - 239.366 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0233270/2637/47451_
34.9440430109971400.09.74206.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1557fb9b0e1b1

0-0233270/2462/46563_
34.94203422114167960.09.81206.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/2464/46782_
34.9214174104244840.09.23199.82
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_46e95640794e8

0-0233270/2687/47468_
34.95794107594670.010.88210.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0b7c1177485fe

0-0233270/2852/46788_
34.931233438114133770.010.16202.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0233270/2670/46901_
34.942605113145560.011.40204.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/2748/48650_
34.93936486109653510.010.06209.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/2885/48405_
34.9469041114246900.09.54205.39
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3ae342428ce36

0-0233270/2849/47095_
34.939105109262450.010.49209.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0233278/2482/45754W
34.9600111141919.78.90201.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-0233270/2890/48055_
34.9380831107063160.09.88206.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b6b47c61a2676

0-0233270/2663/45741_
34.9310856106339770.010.69197.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_877eb554d64f6

0-0233270/2887/47825_
34.93115034108785540.010.74208.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b75aa8f7d8381

0-0233270/2609/47414_
34.9313246110574350.09.13208.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/2783/49076_
34.94307620110998610.018.06215.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL6vxH%2Bwf

0-0233270/2728/48009_
34.93102737115675070.010.10207.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_501626651bed4

0-0233270/3142/45329_
34.937764111601660.010.95195.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_38f098d5ab000

0-0233270/2279/47522_
34.94727312110903850.07.68215.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_39761b2eddffd

0-0233270/3218/48164_
34.9452754109216680.011.49202.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c668b7e9ff793

0-0233270/2439/47382_
34.9454863111894650.09.24200.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_48678397defdc

0-0233270/2855/47089_
34.951015111152590.010.13202.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0233270/2618/47988_
34.944760115531820.09.86208.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0233270/3017/47638_
34.9449010110956020.010.62201.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLThsxFN0j8Q%2BW9%2

0-0233270/3030/46813_
34.93117558110069610.010.37204.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0233270/2882/47650_
34.9311245106474580.010.96206.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0184030/2717/35756_
37.58874100750960.09.92170.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b6dd3b59d49d5

1-0184030/3286/36841_
37.5727931101717010.012.15169.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3726a8694bd87

1-0184030/2588/36390_
37.564994103404130.09.39170.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e130576082041

1-0184030/2444/36407_
37.567524102643450.08.92171.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d8d258d27c5db

1-0184030/2646/36346_
37.54144933105078400.010.48174.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2e0c9d583b38b

1-0184030/3380/36962_
37.5648559103411170.012.89176.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0184030/3135/36722_
37.5414026104139910.010.71171.23
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0184030/2749/35602_
37.541133499637390.011.38170.96
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dea2dec6ffcad

1-0184030/2803/35788_
37.5855599506270.010.21167.23
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b2523766b4c78

1-0184030/3066/35902_
37.5412075103219260.010.70174.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/3420/34915_
37.5411185104558130.012.54161.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0184030/2732/35326_
37.54100659102808420.09.95167.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8be24c2b88c59

1-0184030/3142/35470_
37.5725032108714020.011.83172.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_222858b2d19a3

1-0184030/2815/34585_
37.5691874104693060.011.38167.57
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0184030/3274/37380_
37.56700203102562770.011.99179.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f12d5ec1bea42

1-0184030/2862/34214_
37.5665494111188150.011.20163.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cdda74d9c446f

1-0184030/2922/36674_
37.5411631185103856110.011.30178.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0184030/2783/35862_
37.54130631106133710.010.04173.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b5adf91e27226

1-0

Found on 2024-10-14 16:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de21e62eb57

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 13:54:39 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  73 days 3 hours 44 minutes 10 seconds
Server load: 0.64 0.69 0.78
Total accesses: 2483332 - Total Traffic: 10.7 GB - Total Duration: 603516443
CPU Usage: u61.92 s105.36 cu920.16 cs428.84 - .024% CPU load
.393 requests/sec - 1822 B/second - 4639 B/request - 243.027 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________________W____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0233270/101/44915_
1.954846105445770.00.42197.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/152/44253_
1.954396108925750.00.58197.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/119/44437_
1.9546744499831230.00.51191.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/117/44898_
1.954135104046610.00.49199.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0233270/130/44066_
1.95397455110630730.00.59192.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/173/44404_
1.953616109002050.00.78194.23
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/160/46062_
1.963294103827240.00.71200.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_66db04c2a2f96

0-0233270/108/45628_
1.953805110637030.00.48196.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/118/44364_
1.9730952103690610.00.98199.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx91e

0-0233270/127/43399_
1.9730955106381360.00.58193.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBb9swDIXvA%2FYfDN1

0-0233270/201/45366_
1.97285669100038980.00.85197.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0233270/126/43204_
1.9827149101772740.00.57187.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0233270/104/45042_
1.982525104444700.00.43198.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/150/44955_
1.982376106546890.00.60200.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/141/46434_
1.982175106577480.00.53198.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-0233270/107/45388_
1.981904113075920.00.44197.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e594251a7a0c2

0-0233270/117/42304_
1.981774107736340.00.52185.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6c43559b1a4f4

0-0233270/103/45346_
1.981584107739880.00.38208.68
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3c6193850e7fb

0-0233270/92/45038_
1.991114104647560.00.35191.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f0460a61bc436

0-0233270/110/45053_
1.981334108677550.00.50191.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fbd43d50628d5

0-0233270/127/44361_
1.99854106491410.00.49192.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_73e58f83ddd0c

0-0233270/159/45529_
1.99414110371300.01.13200.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b9e8b287befed

0-0233270/107/44728_
1.99225107307800.00.87192.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9adf97bea683d

0-0233270/106/43889_
1.99634104925060.00.47194.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_547960aa977b6

0-0233270/111/44879_
1.955006100215390.00.46195.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/290/33329_
4.113084196232230.01.32161.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com&RelayState=

1-0184030/306/33861_
4.10371496737000.01.66159.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_84a9a1a83ad2a

1-0184030/313/34115_
4.11319599066510.01.41162.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/281/34244_
4.103873198442530.01.16163.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_53144a8837a8b

1-0184030/291/33991_
4.104065100042040.01.15164.82
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3e0c260949af1

1-0184030/316/33898_
4.1234699936220.01.14165.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/258/33845_
4.10349497309980.00.99161.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_77d438347ab49

1-0184030/312/33165_
4.113085395890320.01.53161.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0184030/341/33326_
4.12271195899580.01.31158.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0184030/347/33183_
4.12243598468420.01.45164.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0184030/308/31803_
4.122644100220420.01.19150.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a75ab7fcbbed4

1-0184030/334/32928_
4.12230499331420.01.63158.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_45d7bb249cb18

1-0184030/324/32652_
4.1220033104956020.01.65162.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a2fe0c56c4ac

1-0184030/299/32069_
4.121845100300480.01.31157.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/280/34386_
4.12123597812620.01.06168.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/250/31602_
4.121414107180690.01.08152.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_25e48101c2b94

1-0184030/293/34045_
4.121706100467120.01.20168.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/384/33463_
4.12525101252990.01.79164.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0184030/274/32687_
4.12100610268806

Found on 2024-10-12 13:54

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de201908657

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 09:05:46 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  70 days 22 hours 55 minutes 17 seconds
Server load: 2.50 2.81 2.11
Total accesses: 2439806 - Total Traffic: 10.5 GB - Total Duration: 591270873
CPU Usage: u94.72 s117.26 cu868.29 cs405.54 - .0242% CPU load
.398 requests/sec - 1844 B/second - 4634 B/request - 242.343 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0268450/1387/44171_
23.6977240102810520.07.21193.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/1306/43353_
23.7150337106027210.07.21193.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5f4ffd4eaaa5f

0-0268450/1464/43613_
23.7226710697448490.07.12187.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bc0cc0e537a1e

0-0268450/1592/44132_
23.6810631101951700.08.38196.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0268450/1627/43148_
23.7215437108233930.07.51188.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_624a54226aa7c

0-0268450/1586/43440_
23.661209126106286010.09.25189.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d2e3ec38e4ce3

0-0268450/1331/45172_
23.697860100744380.07.01195.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0268450/1442/44808_
23.7073036107698570.07.62192.76
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8aa294194db38

0-0268450/1553/43457_
23.7138457101645940.07.76194.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/1586/42607_
23.7061032103714460.08.78189.70
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9aee363400334

0-0268450/1451/44429_
23.72198212797715480.07.46192.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL0j8R8i35u

0-0268450/1540/42306_
23.6612556099458290.06.68183.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/1481/44188_
23.72237131101551150.07.54194.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/1409/44019_
23.71310227104280840.07.03196.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b2111832b71ba

0-0268450/1515/45533_
23.7220462103909200.07.66194.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJbT8IwFH73Vyx935Vxa

0-0268450/1484/44550_
23.7145435110822110.08.47193.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_68ae3e2bc95f7

0-0268450/1575/41476_
23.6986636105738050.07.89181.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7647008b3df28

0-0268450/1372/44460_
23.6811060105308590.08.03204.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0268450/1713/44074_
23.681135195102559220.07.85186.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/1349/44175_
23.6975432106164410.06.60187.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_257c317954ed3

0-0268450/1504/43476_
23.714060104222290.07.31188.65
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0268450/1404/44680_
23.69936863107890730.07.10196.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268450/1239/43750_
23.681054120104897170.05.64187.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_076487558ecab

0-0268450/1226/42995_
23.698181102715950.05.78190.82
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0268458/1372/43972W
23.720097833709.76.51191.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

1-0174780/2160/32532_
32.141249094410910.010.43157.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0174780/2391/33043_
32.203935394057560.09.77155.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f8736c661aa6d

1-0174780/2161/33347_
32.1968259096849870.010.13159.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFbT8MwDIX%2FSuT3XtJ

1-0174780/2212/33414_
32.177926895939190.09.80159.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0174780/2073/33079_
32.169103297125950.09.63160.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e9e226830b2aa

1-0174780/2253/32994_
32.17818197288260.010.73161.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0174780/2166/33085_
32.197303394038870.09.02158.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_22151b85ec8a1

1-0174780/2325/32287_
32.195673493250040.09.64155.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f640457b92392

1-0174780/2034/32510_
32.2029516193457330.09.51154.57
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0174780/2214/32322_
32.18777196048310.010.44160.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0174780/2290/30868_
32.161107197833710.011.03146.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0174780/2175/31999_
32.1947619596486630.09.97153.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNrc6IwFIb%2FCpPvXES

1-0174780/2280/31735_
32.21217155102927410.010.45156.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_11ea3485e8b3b

1-0174780/2114/31199_
32.141240197947850.010.21153.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0174780/2269/33586_
32.23123194681300.010.24164.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0174780/2306/30734_
32.21173245104740140.09.72148.93
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFbT8MwDIX%2FSuT3tmn

1-0174780/2550/33196_
32.1610635998648670.011.89164.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0174780/2288/32506_
32.23113398849300.010.31160.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9df0e898b277a

1-0174780/2244/31809_
32.141160104100603250.08.52152.40
127.0.0.1http/1.1i

Found on 2024-10-10 09:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de29833e90c

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 08-Oct-2024 07:41:40 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 21 hours 31 minutes 11 seconds
Server load: 0.78 0.98 0.98
Total accesses: 2373297 - Total Traffic: 10.2 GB - Total Duration: 572636975
CPU Usage: u63.82 s101.85 cu868.29 cs405.54 - .0242% CPU load
.399 requests/sec - 1841 B/second - 4618 B/request - 241.283 ms/request
1 requests currently being processed, 49 idle workers
______________________W___________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0268450/106/42890_
2.82518599208370.00.56186.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0268450/155/42202_
2.8249042102684780.01.11187.66
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/199/42348_
2.86167193955180.00.89180.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0268450/259/42799_
2.861865198602410.01.17189.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/109/41630_
2.852864104473990.00.54181.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cb4f7ce4ba4d2

0-0268450/147/42001_
2.8533018102178490.00.70180.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0268450/96/43937_
2.82473596553600.00.34189.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0268450/100/43466_
2.824505103454420.00.86186.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0268450/200/42104_
2.84353498923790.01.68188.76
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b73a8e86e3f0b

0-0268450/144/41165_
2.84363599154060.00.60181.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0268450/93/43071_
2.83416093281220.00.35185.35
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0268450/103/40869_
2.8531270996164750.00.42177.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268450/134/42841_
2.862154797763870.00.59187.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_54b65810bd899

0-0268450/203/42813_
2.8622734101847540.00.88189.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/81/44099_
2.871455101268580.00.33186.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0268450/146/43212_
2.806550105125520.01.40186.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0268450/218/40119_
2.88954101118660.01.33174.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a697bf5d104df

0-0268450/116/43204_
2.816111101910090.00.47196.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0268450/241/42602_
2.88115599392660.01.12180.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0268450/175/43001_
2.825521102488470.01.51181.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0268450/150/42122_
2.81562599409430.00.62181.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0268450/157/43433_
2.89495104972700.00.70189.69
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/complete.php HTTP/1.1

0-0268459/104/42615W
2.8900996150011.70.45182.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-0268450/134/41903_
2.893482100117210.00.56185.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268450/137/42737_
2.88114194536650.00.62185.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0174780/911/31283_
11.61521090183140.03.83151.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0174780/904/31556_
11.6994590899040.03.47149.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0174780/831/32017_
11.586783293688080.03.28152.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0174780/757/31959_
11.681675392507640.02.86152.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0174780/764/31770_
11.67232194138030.03.31154.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0174780/866/31607_
11.672015694008050.03.05153.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0174780/798/31717_
11.68134891424690.02.79152.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

1-0174780/954/30916_
11.6970188942180.03.23149.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/zxcvbn.js HTTP/1.1

1-0174780/791/31267_
11.60553188721520.03.15148.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0174780/962/31070_
11.6990216592592270.04.26154.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/check.php?code=3884336061&username=

1-0174780/984/29562_
11.6917694231960.03.72138.79
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0174780/861/30685_
11.6938593379260.03.74147.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0174780/805/30260_
11.5961517897553410.03.65150.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d1421e2f78ea7

1-0174780/848/29933_
11.62480094196050.03.71146.66
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0174780/871/32188_
11.61500590951000.03.14157.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0174780/1009/29437_
11.64425698579670.03.62142.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0174780/1154/31800_
11.65386095647840.04.38156.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0174780/939/31157_
11.60601094351700.03.26153.69
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0174780/927/30492_
11.65353497155580.03.38147.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ef505912185db

1-0174780/724/31238_
11.67284598412080.03.21154.12
127.0.0.1

Found on 2024-10-08 07:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2b4e83018

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 06-Oct-2024 10:24:38 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  67 days 14 minutes 9 seconds
Server load: 1.14 0.87 0.85
Total accesses: 2148717 - Total Traffic: 9.5 GB - Total Duration: 546651908
CPU Usage: u174.61 s188.72 cu687.27 cs265.92 - .0227% CPU load
.371 requests/sec - 1753 B/second - 4725 B/request - 254.409 ms/request
1 requests currently being processed, 49 idle workers
_______________________W_.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0292430/9965/38539_
103.75461175493802860.031.56171.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9394/37965_
103.56663498194500.029.49173.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bf03a21542e3a

0-0292430/9848/37444_
103.70526589452380.030.41164.39
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9117/38028_
103.98165191927870.028.71173.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0292430/8262/37417_
103.77447499161390.025.92167.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9604/37667_
103.75480596226400.029.89165.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9855/39572_
103.95182692349680.030.50175.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/10695/39475_
103.67550598817990.033.21171.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0292430/9025/37544_
103.70525593682640.028.69172.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0292430/9142/36792_
103.86411594814460.027.94166.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9456/38335_
103.7448911889331700.028.95170.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292430/8157/35715_
104.05251391131000.024.97160.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ea1d629f0d750

0-0292430/9274/37922_
103.922542492166270.028.90169.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9320/38321_
103.68538496638630.029.55174.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9812/39351_
103.86385695452850.030.51171.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9986/38730_
103.69527498945340.031.43168.41
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_069d642ea880a

0-0292430/7798/35679_
103.92301095860410.024.48159.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0292430/8944/38900_
103.85420496398060.027.82181.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_03e91639f3522

0-0292430/9770/37864_
104.0155592623280.030.33163.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0292430/10382/38764_
103.90315496762560.032.31166.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f5a7b9f45b15

0-0292430/9178/37877_
103.74490592716100.028.92167.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/9814/39270_
103.922705100377830.030.08174.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0292430/9309/38130_
103.61599495077270.028.84166.76
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_06c05bde23a35

0-02924373/8491/37143W
104.08009504199212.126.13169.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-0292430/9730/37832_
103.98165089274140.030.69168.66
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

1-0-0/0/30372.
0.00214146586692170.00.00147.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/30652.
0.00214146488633860.00.00145.60
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/31186.
0.00214146589566630.00.00148.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/31202.
0.00214146090184950.00.00150.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/31006.
0.002141463592367810.00.00151.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7895e0d3d1ea3

1-0-0/0/30741.
0.00214146591295570.00.00150.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/30919.
0.00214146590361150.00.00149.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/29962.
0.00214146299787871690.00.00146.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/30476.
0.00214146426085674990.00.00145.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/30108.
0.002141464891276590.00.00150.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/28578.
0.00214146592590690.00.00135.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/29824.
0.00214146491932290.00.00144.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/29455.
0.00214146494586240.00.00146.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c46dc05e1e2b7

1-0-0/0/29085.
0.002141464392618600.00.00142.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/31317.
0.00214146388422130.00.00154.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0344b7842e191

1-0-0/0/28428.
0.0021414615597373290.00.00139.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTtwwFN1X6j9Y3udZi

1-0-0/0/30646.
0.00214146494289040.00.00152.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/30218.
0.00214146493127440.00.00150.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/29565.
0.00214146395352960.00.00143.89
127.0.0.1http/1.1

Found on 2024-10-06 10:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2f2c35572

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 04-Oct-2024 11:12:39 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  65 days 1 hour 2 minutes 10 seconds
Server load: 1.19 0.86 0.89
Total accesses: 1782233 - Total Traffic: 8.4 GB - Total Duration: 520349440
CPU Usage: u79.58 s107.46 cu687.27 cs265.92 - .0203% CPU load
.317 requests/sec - 1596 B/second - 5034 B/request - 291.965 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................______________
__W________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0292430/2776/31350_
19.03789488637210.09.18149.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5fd25f248ee55

0-0292430/2344/30915_
19.28141392739640.07.58151.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5b1e1adb0fe68

0-0292430/1856/29452_
19.18406483573170.05.72139.70
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2532/31443_
19.11657486545760.08.09152.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9f4213a9941ce

0-0292430/1907/31062_
18.91962593314280.06.79148.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0292430/2623/30686_
19.11683592200090.08.68144.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2285/32002_
18.99830486183350.07.43152.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2371/31151_
18.841194494223020.07.36145.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b79a50417b732

0-0292430/2234/30753_
18.95867488301530.07.90151.76
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_780fa1ae50a8e

0-0292430/2313/29963_
18.771382490298700.07.39146.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c233abaa610b6

0-0292430/2377/31256_
19.07733305683888590.07.66149.03
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/1559/29117_
18.91940485000720.04.83140.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0292430/1947/30595_
19.14535386604990.06.16147.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cd94e99e4f104

0-0292430/1781/30782_
18.93895591993520.06.16151.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0292430/1961/31500_
19.11640190250290.06.54147.18
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0292430/2045/30789_
19.3242493793460.07.06144.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/1311/29192_
18.91963489987390.04.69139.41
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0292430/1849/31805_
19.07737524192304330.05.88159.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2262/30356_
19.26240588213920.07.67141.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2026/30408_
19.14553591607430.06.66141.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0292430/1667/30366_
19.22340587510780.05.53144.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2240/31696_
19.11659496033820.07.05151.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2275/31096_
18.901018589309430.07.25145.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/1888/30540_
18.801283489348210.06.11149.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-0292430/2027/30129_
18.861109104983566390.06.46144.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/30372.
0.0044226586692170.00.00147.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/30652.
0.0044226488633860.00.00145.60
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/31186.
0.0044226589566630.00.00148.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/31202.
0.0044226090184950.00.00150.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/31006.
0.00442263592367810.00.00151.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7895e0d3d1ea3

1-0-0/0/30741.
0.0044226591295570.00.00150.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/30919.
0.0044226590361150.00.00149.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/29962.
0.0044226299787871690.00.00146.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/30476.
0.0044226426085674990.00.00145.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/30108.
0.00442264891276590.00.00150.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/28578.
0.0044226592590690.00.00135.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/29824.
0.0044226491932290.00.00144.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0-0/0/29455.
0.0044226494586240.00.00146.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c46dc05e1e2b7

1-0-0/0/29085.
0.00442264392618600.00.00142.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/31317.
0.0044226388422130.00.00154.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0344b7842e191

1-0-0/0/28428.
0.004422615597373290.00.00139.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTtwwFN1X6j9Y3udZi

1-0-0/0/30646.
0.0044226494289040.00.00152.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0-0/0/30218.
0.0044226493127440.00.00150.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0-0/0/29565.
0.0044226395352960.00.00143.89
127.0.0.1ht

Found on 2024-10-04 11:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2058211d1

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 02-Oct-2024 11:57:52 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  63 days 1 hour 47 minutes 23 seconds
Server load: 0.38 0.89 1.00
Total accesses: 1626561 - Total Traffic: 7.8 GB - Total Duration: 500018423
CPU Usage: u90.32 s101.15 cu634.88 cs246.56 - .0197% CPU load
.298 requests/sec - 1536 B/second - 5.0 kB/request - 307.408 ms/request
1 requests currently being processed, 49 idle workers
___________________________W______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0227610/2288/28277_
29.0445468285031390.011.35137.96
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0227610/1746/28283_
29.0110302889629030.09.21141.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c27e04221a8ff

0-0227610/1896/27298_
29.01111753680808320.010.23132.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfJ9DiS0k

0-0227610/2075/28619_
29.02643084086920.011.29143.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0227610/2228/28904_
29.043923190514480.011.93140.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2a18174ce7f75

0-0227610/2029/27742_
29.011069689643250.010.47133.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_95510339742d0a967

0-0227610/2045/29448_
29.02864083325470.011.58143.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0227610/2245/28423_
29.02687342991032670.012.87135.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0227610/2006/28159_
29.02615184827220.010.77141.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0227610/2136/27362_
29.03507087346210.012.04137.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0227610/1844/28593_
29.026634181399700.09.92139.69
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4d57961839433

0-0227610/2081/27194_
29.025787282380600.010.91133.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_79f92d77621df

0-0227610/1795/28358_
28.9814784383941290.010.30138.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cdfec7b80848e

0-0227610/1748/28655_
28.991410189267310.09.92143.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0227610/1955/29251_
29.06925286954520.011.19139.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0227610/1853/28347_
29.026286789025860.09.53134.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0227610/1810/27529_
29.02830086564880.010.11132.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /robots.txt HTTP/1.1

0-0227610/1978/29717_
29.052782690065010.011.36152.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0d94c82c09251

0-0227610/2056/27772_
29.0661085908330.011.34131.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0227610/2187/28197_
29.001177189193310.011.12133.70
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0227610/2058/28408_
29.001207084519290.09.97137.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0227610/1933/29190_
28.991346094049930.010.66143.41
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0227610/2223/28496_
29.019995685869650.012.44135.65
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0227610/2010/28322_
29.05233485069280.010.76141.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0227610/1988/27794_
29.01876080222830.010.07136.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-0325520/1724/29294_
26.23258084912840.09.38142.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0325520/1833/29901_
26.1512623186977910.010.33141.66
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_51454a0e8d1a5

1-0325528/1736/30232W
26.230087227329.79.30144.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

1-0325520/1942/30296_
26.213044787795260.010.21146.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/1810/30025_
26.20499490335090.09.17147.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0325520/1892/29555_
26.15142371789026890.09.14144.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325520/1701/29919_
26.1875113788680980.010.72145.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c9640ce634bac

1-0325520/1712/28860_
26.18876086068350.010.69141.70
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0325520/1649/29526_
26.161168083225210.08.98140.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0325520/1586/29057_
26.181078089459310.08.40145.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0325520/1943/27719_
26.189623691006430.010.61131.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b208b0298eea8

1-0325520/1602/28951_
26.1611455190176550.09.44139.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/1898/28586_
26.186436492391240.010.47140.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/1813/28150_
26.188524390926130.09.60138.39
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ee1cb260e111e

1-0325520/1807/30265_
26.1810053586682460.010.19149.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_59ae37fcc629d

1-0325520/1662/27635_
26.21429495722360.09.63134.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0325520/1711/29757_
26.18696192808730.09.42148.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0325520/1742/29464_
26.186349990710730.011.65146.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/1543/28787_
26.206156593254020.08.84140.35
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/1507/29696_
26.2061519506788

Found on 2024-10-02 11:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de241ed8730

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 30-Sep-2024 13:15:14 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  61 days 3 hours 4 minutes 45 seconds
Server load: 0.98 0.61 0.65
Total accesses: 1580617 - Total Traffic: 7.6 GB - Total Duration: 483680573
CPU Usage: u69.41 s91.9 cu634.88 cs246.56 - .0197% CPU load
.299 requests/sec - 1536 B/second - 5.0 kB/request - 306.007 ms/request
1 requests currently being processed, 49 idle workers
__________________W_______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0227610/1183/27172_
16.095343681450920.05.95132.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f07b3be4db300

0-0227610/1011/27548_
16.0811982687552930.05.98138.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d893de87a9735

0-0227610/1029/26431_
16.0888031978247920.05.59127.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0227610/1121/27665_
16.0889822280894460.06.37138.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6f81e7fe400ba

0-0227610/1191/27867_
16.10390785683350.06.54134.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0227610/1075/26788_
16.08127161786703790.06.03129.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0227610/1088/28491_
16.08738161880324110.07.05138.69
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0227610/1255/27433_
16.08689886734500.07.61130.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0227610/952/27105_
16.095754681624060.05.24136.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0227610/1107/26333_
16.095152582793300.06.20131.64
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVLdT8IwEH%2F3r1j63n

0-0227610/980/27729_
16.08710078779340.05.44135.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0227610/1127/26240_
16.0944168579115530.05.28127.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0227610/886/27449_
16.11144480666080.04.96133.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0227610/1003/27910_
16.10322585613740.05.93139.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVLdT8IwEH%2F3r1j63n

0-0227610/1017/28313_
16.111364583912550.05.59133.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0227610/1083/27577_
16.10363486419200.06.03131.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-0227610/1059/26778_
16.102343984255650.05.87127.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dc003f4f6c07b

0-0227610/1138/28877_
16.111213386328640.06.09146.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_479598182be10

0-0227618/1097/26813W
16.110081789449.76.31126.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-0227610/1165/27175_
16.071359685938410.05.84128.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_bb625dd6a8e09c7e4

0-0227610/1001/27351_
16.0714982781603220.04.51131.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0ac596310d889

0-0227610/1047/28304_
16.0714343489539450.06.00138.76
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_92be1f1e94cd2

0-0227610/1167/27440_
16.081118082549690.07.16130.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /.well-known/assetlinks.json HTTP/1.1

0-0227610/1044/27356_
16.11185081568430.05.62136.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0227610/984/26790_
16.0712844877439910.05.03131.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/849/28419_
12.8811342982442340.04.31137.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_808ccbbd9184a

1-0325520/897/28965_
12.881378084715840.05.64136.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0325520/879/29375_
12.86156045684484750.04.87140.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

1-0325520/1004/29358_
12.91127084269280.05.26141.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0325520/857/29072_
12.917065087563860.04.55142.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0325520/940/28603_
12.881277186111210.04.57139.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0325520/811/29029_
12.898016683780700.04.78139.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2906fe0915d92

1-0325520/836/27984_
12.8810202882163980.05.36136.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0aeed022f4247

1-0325520/703/28580_
12.881228080901500.03.61135.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET / HTTP/1.1

1-0325520/789/28260_
12.89880086461850.04.52141.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0325520/870/26646_
12.897212987510230.04.59125.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5d37440ac42e6

1-0325520/909/28258_
12.89696187976670.05.74136.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET / HTTP/1.1

1-0325520/937/27625_
12.89550689049610.05.16135.66
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_a56b6e3251b855dda

1-0325520/938/27275_
12.89665188400960.05.39134.18
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0325520/926/29384_
12.89523784193860.05.95145.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0325520/853/26826_
12.91273192017370.05.13130.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0325520/774/28820_
12.89374789955020.04.15142.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0325520/849/28571_
12.894213488159630.05.38139.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_05d13b36bbe2f

1-0325520/730/27974_
12.89454889542570.04.20135.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0325520/826/29015_
12.912043091900880.05.31143.38
127.0.0.1

Found on 2024-09-30 13:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de24975aac9

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 28-Sep-2024 17:30:15 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  59 days 7 hours 19 minutes 46 seconds
Server load: 8.38 2.22 1.03
Total accesses: 1544309 - Total Traffic: 7.4 GB - Total Duration: 469596339
CPU Usage: u51.47 s84.14 cu634.88 cs246.56 - .0198% CPU load
.301 requests/sec - 1540 B/second - 5111 B/request - 304.082 ms/request
1 requests currently being processed, 49 idle workers
___________W______________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0227610/418/26407_
5.3513013478740860.01.82128.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_20694b9159a15

0-0227610/302/26839_
5.351600185542810.01.71133.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0227610/393/25795_
5.3514353176404210.02.63124.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_be581d7c30002

0-0227610/360/26904_
5.3517334278670370.01.79133.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_614dd54727d6c

0-0227610/357/27033_
5.351152082823520.01.74129.96
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /robots.txt HTTP/1.1

0-0227610/394/26107_
5.3423383184185380.01.87125.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a757068a0b5a2

0-0227610/365/27768_
5.3511053478075950.02.40134.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d43610408367c

0-0227610/376/26554_
5.3510223384107240.02.21124.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d1780b35e67e1

0-0227610/316/26469_
5.356243479188020.01.44132.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0227610/349/25575_
5.354223980562750.02.00127.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c732d36dc5d40

0-0227610/305/27054_
5.358035276270110.01.94131.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3eacf15997d2d

0-0227618/405/25518W
5.350077404949.71.76124.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-0227610/323/26886_
5.3238143177539600.01.85130.39
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8fa5f71df595e

0-0227610/316/27223_
5.352353682914240.01.48135.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_142486dd078d3

0-0227610/316/27612_
5.323754079484430.01.57129.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0227610/340/26834_
5.333745183967620.01.88126.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

0-0227610/332/26051_
5.343688081625990.02.08124.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0227610/343/28082_
5.3434214380956340.01.66142.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_411780bf46bc8

0-0227610/284/26000_
5.3428213478662690.01.74121.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e64bda1fffc29

0-0227610/401/26411_
5.3432052980379190.02.08124.65
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_363895ea9dc39

0-0227610/289/26639_
5.343024778013280.01.37128.76
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0227610/375/27632_
5.3425224087293580.01.74134.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0437788f8c73e

0-0227610/407/26680_
5.3522213080272080.02.29125.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0f338d2a8634b

0-0227610/378/26690_
5.3426056879272080.01.76132.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0efd6432be139

0-0227610/314/26120_
5.3520053675449340.01.67127.82
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f17b74e8a256b

1-0325520/79/27649_
1.581138579880940.00.38133.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0325520/141/28209_
1.5811923183062070.00.70132.03
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_13ec068a9b68c

1-0325520/120/28616_
1.5713213081025450.00.60136.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c2aa482afeb58

1-0325520/102/28456_
1.57160024981127500.00.76136.65
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/116/28331_
1.5716215484547910.00.50138.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_78d6a18ee4e0c

1-0325520/99/27762_
1.5719225384068270.00.52135.69
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_40ee6f6240a86

1-0325520/92/28310_
1.581072580186680.00.58135.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVLbSgMxEP2VJe9772INb

1-0325520/113/27261_
1.587216480238210.00.53131.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d1c011e7d414f

1-0325520/98/27975_
1.589213379177000.00.54132.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_03fbd0bdf7c05

1-0325520/76/27547_
1.5850510384150700.00.38137.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2308353764d91

1-0325520/102/25878_
1.593973685390820.00.48121.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e9b0c172fbb6d

1-0325520/113/27462_
1.591163685314440.00.93131.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_371e3f7e807cf

1-0325520/131/26819_
1.4940223685833200.00.53131.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_11f66a9a847a3

1-0325520/127/26464_
1.4937545686017640.00.64129.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0325520/77/28535_
1.5637455781892480.00.78140.20
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/zxcvbn.js HTTP/1.1

1-0325520/120/26093_
1.5635624787030690.00.52125.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e74a5515670a5

1-0325520/156/28202_
1.563718085556840.00.64139.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0325520/95/27817_
1.573311084113230.00.41134.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0325520/65/27309_
1.5729053286219090.00.66132.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d989704c118c

1-032552

Found on 2024-09-28 17:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de25d076f9b

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 26-Sep-2024 20:54:16 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  57 days 10 hours 43 minutes 47 seconds
Server load: 0.41 0.43 0.56
Total accesses: 1526733 - Total Traffic: 7.3 GB - Total Duration: 462652414
CPU Usage: u117.23 s112.25 cu559.99 cs212.72 - .0202% CPU load
.308 requests/sec - 1570 B/second - 5106 B/request - 303.034 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-094370/4488/25989_
53.99224512577906580.019.56126.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e3d9be18bdbbb

0-094370/3942/26537_
54.0112674584369320.017.37132.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f0c1886d48542

0-094370/3311/25402_
54.0210763575218000.015.44121.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_109af62509637

0-094370/3956/26543_
53.9247453577632460.017.11131.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a237e4b1526ce

0-094370/4758/26676_
53.9238063381748510.021.43128.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_88bc38984c6e3

0-094370/3352/25713_
54.001676482527400.015.06123.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4b59d8d998878

0-094370/3819/27403_
54.027976176726000.017.22131.64
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-094370/4059/26177_
53.9243764382500630.016.86122.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_533daa3580d3d

0-094370/4037/26153_
53.99222611278263030.017.85131.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-094370/4416/25226_
54.01137243778764030.018.44125.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-094370/4791/26749_
53.9332643774835500.020.33129.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-094370/4147/25113_
53.9237453376002300.018.59122.64
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_00b2fa0d2e18e

0-094370/4631/26561_
53.9248134276418460.021.25128.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8a66210dcb1f0

0-094370/4175/26907_
54.021765281828070.017.16133.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b816514f93c7f

0-094370/4751/27296_
53.9923025878485330.019.05127.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-094370/4307/26494_
54.02883683152630.018.96124.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_43ebc095d6084

0-094370/4347/25719_
53.9336833580141130.019.63121.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEH73r1j63m0M

0-094370/4393/27739_
54.0017483279732540.020.27140.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6c0f8c289f32f

0-094370/4486/25716_
53.9331769077688480.019.32120.18
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_790373ab3d7bc

0-094370/4208/26010_
54.027133879043690.018.21122.57
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-094370/3948/26350_
54.001883475974000.017.12127.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-094370/3846/27257_
53.932637284450490.018.05132.76
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET / HTTP/1.1

0-094370/4140/26273_
54.0016285777801640.016.65123.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_89c01c0506b84

0-094370/4210/26312_
54.0021893677478540.017.19130.82
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4e6ccd85c68dd

0-094370/4321/25806_
54.024675573796890.018.84126.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fec34bba0a285

1-0195070/3876/27317_
50.8028764778740830.016.96132.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ea0764508103f

1-0195070/4309/27795_
50.8034463381914150.017.21129.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1d08c48a6cc71

1-0195070/4570/28328_
50.8216663579939020.019.36134.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_326f9a6e03cc1

1-0195070/3971/28121_
50.832033379767030.016.51134.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4923dfa93aeae

1-0195070/3970/27975_
50.831303383710210.017.16136.66
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f86635472755c

1-0195070/3966/27482_
50.7940717282989210.016.23133.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_61919acc20441

1-0195070/4249/27876_
50.802290078713060.018.47132.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0195070/3877/26928_
50.83705579284370.017.49129.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0195070/4621/27683_
50.8031825178200090.018.11130.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c743649252c39

1-0195070/3931/27237_
50.838643782968430.017.03136.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0195070/3604/25535_
50.803717583784620.016.34119.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0195070/4238/27136_
50.802226184111510.017.98129.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0195070/4271/26448_
50.8311493683995750.019.22129.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3125ce246388e

1-0195070/3921/26137_
50.794777084373950.016.01127.89
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /.well-known/assetlinks.json HTTP/1.1

1-0195070/4746/28170_
50.8219763580810830.019.42137.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_29837fe1553a6

1-0195070/3545/25741_
50.837764785807870.016.98124.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1474e9b4bd40b

1-0195070/4052/27769_
50.8025764583824810.018.19137.41
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d8f46f970a902

1-0195070/4362/27372_
50.802211082378160.018.08132.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0195070/3743/27035_
50.7946754184088290.015.01130.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast

Found on 2024-09-26 20:54

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2909eec10

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 24-Sep-2024 23:04:46 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  55 days 12 hours 54 minutes 17 seconds
Server load: 1.82 2.10 1.80
Total accesses: 1382887 - Total Traffic: 6.7 GB - Total Duration: 442054271
CPU Usage: u74.21 s87.11 cu559.99 cs212.72 - .0195% CPU load
.288 requests/sec - 1507 B/second - 5.1 kB/request - 319.66 ms/request
1 requests currently being processed, 49 idle workers
___W______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-094370/1395/22896_
23.12221474259370.07.48114.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3da67e0d0b603

0-094370/1392/23987_
23.05358779454900.07.98122.70
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-094370/1167/23258_
23.28126170714960.07.29113.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-094378/1201/23788W
23.330071843159.77.21121.82
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-094370/1605/23523_
23.3326677804180.09.59116.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/check.php?username=sswain&method=em

0-094370/1279/23640_
23.004624778592120.07.43115.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-094370/1312/24896_
23.004643472374840.07.31121.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eb05e94ac8f1b

0-094370/1309/23427_
23.01436379238150.07.27112.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2fffdc380c7fa

0-094370/1335/23451_
23.12223575094450.08.39121.60
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-094370/1432/22242_
23.03384474698560.06.88113.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-094370/1434/23392_
23.10251871613020.08.64118.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-094370/1161/22127_
23.12222711472950380.08.20112.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-094370/1466/23396_
23.251749371992370.09.42116.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6a02b44b4a735

0-094370/1616/24348_
23.28135577108160.08.13124.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_bdf758baf1aa8619a

0-094370/1410/23955_
23.09310374160900.07.29116.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d074ed80b4c00

0-094370/1434/23621_
23.3257578637810.07.60113.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-094370/1367/22739_
23.09316177096480.07.48109.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-094370/1568/24914_
23.18186476708960.010.26130.89
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com&cookieTime=

0-094370/1432/22662_
23.281521473645700.08.54109.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-094370/1522/23324_
23.12213674129960.08.67113.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-094370/1374/23776_
23.1619232871972980.07.37117.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-094370/1302/24713_
23.28153481115020.08.21122.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-094370/1391/23524_
23.2815221773770350.06.40112.96
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-094370/1333/23435_
23.12220474647390.07.16120.79
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

0-094370/1539/23024_
23.2997168453620.08.13115.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0195070/1108/24549_
17.38473474567400.06.41121.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0195070/1182/24668_
17.5214477668030.05.32118.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0195070/1326/25084_
17.511087875583250.07.57122.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a8e9f0f7d2138

1-0195070/974/25124_
17.5189075892230.05.50123.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /robots.txt HTTP/1.1

1-0195070/1056/25061_
17.50146179703420.06.59126.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0195070/1097/24613_
17.38451078009590.05.87123.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0195070/1172/24799_
17.41404575236410.06.75121.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-0195070/991/24042_
17.46221475260700.06.05118.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0195070/1034/24096_
17.46222474598250.05.20117.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_396ce2ecfa182

1-0195070/1009/24315_
17.38480979929410.05.90125.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php HTTP/1.1

1-0195070/897/22828_
17.46213679408760.05.19107.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0195070/1063/23961_
17.452789879935070.05.90117.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0195070/1247/23424_
17.481748579784090.07.45117.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4f085b1fac080

1-0195070/1016/23232_
17.41378379487360.05.39117.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_14bb5a1207b66

1-0195070/1071/24495_
17.43291375270200.05.70124.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4dc19e26ec205

1-0195070/889/23085_
17.452609580586900.05.53112.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fmycollar

1-0195070/1133/24850_
17.41389479596590.06.11125.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2f0b8a2bc5998

1-0195070/1236/24246_
17.48163579111110.05.57120.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0195070/1105/24397_
17.46229779794320.05.69120.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /modu

Found on 2024-09-24 23:04

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2c0f19dba

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 22-Sep-2024 19:58:02 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  53 days 9 hours 47 minutes 34 seconds
Server load: 0.30 0.58 0.72
Total accesses: 1327658 - Total Traffic: 6.4 GB - Total Duration: 422230673
CPU Usage: u46.05 s74.9 cu559.99 cs212.72 - .0194% CPU load
.288 requests/sec - 1497 B/second - 5.1 kB/request - 318.027 ms/request
1 requests currently being processed, 49 idle workers
__________________________________________W_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-094370/239/21740_
4.901046169620060.01.07108.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-094370/307/22902_
4.8915737075577060.01.50116.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1072d5a91eb4f

0-094370/197/22288_
4.8918732867692690.01.37107.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f4572184dc723

0-094370/248/22835_
4.8925006667624460.01.58116.20
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_56466fb4e6d63

0-094370/349/22267_
4.8922903371341100.02.44109.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-094370/249/22610_
4.8828034172751450.01.28109.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4823d32ac6766

0-094370/270/23854_
4.9013147369135430.01.71116.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-094370/236/22354_
4.9013033575205330.01.53107.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fe15b52e7de89

0-094370/315/22431_
4.906985671398520.02.57115.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e2781a6200757

0-094370/275/21085_
4.91426470785580.01.37108.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Faccount

0-094370/235/22193_
4.91387666815000.01.91111.35
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/accountinfo/password-expired.php HTTP/1.1

0-094370/303/21269_
4.9129640369624440.01.68105.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-094370/266/22196_
4.884820668207660.01.82109.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVLbTuMwEP2VyO9JnFslr

0-094370/423/23155_
4.91221072798310.01.85118.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-094370/243/22788_
4.911033670347730.01.07109.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f37a67c857234

0-094370/267/22454_
4.8851737574109730.01.76107.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c18f3fed23642

0-094370/314/21686_
4.8846663172854100.01.91104.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b5f10e67a0417

0-094370/283/23629_
4.8845883173032990.02.09122.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36ad801f2f68e

0-094370/262/21492_
4.8847042970781400.01.93102.79
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ec59a371fc2a4

0-094370/267/22069_
4.884513170207520.01.37105.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-094370/265/22667_
4.8843005068070190.01.59111.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_99cb876345a37

0-094370/226/23637_
4.8839033777010480.01.19115.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-094370/288/22421_
4.8837033370109030.01.45108.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8ab123f282ae6

0-094370/320/22422_
4.884205770625870.01.52115.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-094370/331/21816_
4.8831034365309920.01.97109.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e56640bc80866

1-0195070/23/23464_
0.172470071288880.00.08115.41
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0195070/18/23504_
0.1728153171613220.00.11112.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx9l

1-0195070/7/23765_
0.1737604870927480.00.03115.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0195070/12/24162_
0.1734005972541220.00.07117.89
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_17e079911e2a6

1-0195070/9/24014_
0.1740025775968810.00.08119.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_979b8115d0c46

1-0195070/9/23525_
0.172782074257290.00.04117.73
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0195070/12/23639_
0.1722033171843840.00.06114.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_23fed12a1cc1a

1-0195070/27/23078_
0.185726371362580.00.15112.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ce05c801b616a

1-0195070/12/23074_
0.181322170430200.00.07112.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0195070/10/23316_
0.1815235476358650.00.04119.35
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0dc386e3bd43a

1-0195070/21/21952_
0.25402174905120.00.48103.20
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-0195070/19/22917_
0.1810033076230610.00.11111.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3b3422f19d2a1

1-0195070/14/22191_
0.18161415176028130.00.06110.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f25911eff0ea

1-0195070/19/22235_
0.1811911076052420.00.06111.93
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php HTTP/1.1

1-0195070/18/23442_
0.25340071986440.00.10118.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0195070/22/22218_
0.262296277732840.00.13107.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0195070/14/23731_
0.26192676270160.00.05119.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0195078/21/23031W
0.260075840509.70.06114.93
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

1-0195070/17/23309_
0.1648733274802160.00.06115.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e7b318278a786

1-0195070/9/23977_
0.1648134175913970.00.03119.57
127.0.0.1http/1

Found on 2024-09-22 19:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2bd7b7480

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 20-Sep-2024 19:43:22 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  51 days 9 hours 32 minutes 54 seconds
Server load: 0.79 0.75 0.76
Total accesses: 1306470 - Total Traffic: 6.3 GB - Total Duration: 414863463
CPU Usage: u104.97 s92.33 cu489.31 cs188.64 - .0197% CPU load
.294 requests/sec - 1527 B/second - 5.1 kB/request - 317.545 ms/request
1 requests currently being processed, 49 idle workers
______________________W___________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-091070/2450/21327_
46.793811868029680.015.69105.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-091070/3153/22465_
46.8213272974057610.018.01114.20
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bf38cff2a2122

0-091070/2580/21886_
46.812497066151930.014.56105.65
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-091070/3040/22454_
46.823413166025200.020.00114.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a118625fc6d9c

0-091070/2669/21801_
46.82167411870058300.013.79105.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e1d8c21c44467

0-091070/2660/22214_
46.8214393171634820.013.52107.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9df3421943844

0-091070/2898/23432_
46.8125237567762640.017.73113.70
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4f72f1f6aad23

0-091070/2479/21990_
46.8033906373904870.013.99105.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5225959909b61

0-091070/3039/21954_
46.7935493570058410.018.53112.41
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e8bf2cb377992

0-091070/2382/20638_
46.80347543669805150.015.97106.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091070/2305/21840_
46.8272211165706860.012.93108.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1192c41686de1

0-091070/2377/20821_
46.829963267673500.014.27103.38
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_936d13f41f558

0-091070/2604/21808_
46.821598258366603100.014.70106.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fcollarts

0-091070/2720/22583_
46.8128263070914230.015.58115.18
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b0a5045a62136

0-091070/2726/22325_
46.811851568944700.015.95107.79
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b929a06f8b48f

0-091070/2708/22075_
46.8128755272228140.014.72105.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091070/2517/21224_
46.831272971751020.014.37101.18
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b36c2d77a207d

0-091070/2750/23213_
46.8030934271624190.018.08119.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_934ffabd9ccf5

0-091070/2889/21064_
46.80295310968924330.014.57100.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ed148ff147179

0-091070/2758/21645_
46.8120493068875800.014.60103.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a3edd2ded04e

0-091070/2610/22247_
46.8119273466325500.014.93109.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_767950963c37f

0-091070/2656/23287_
46.826044176125940.014.65114.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a15b7c5b50720

0-091078/2608/21963W
46.830068393509.714.57105.90
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-091070/2694/21986_
46.7936932869567690.017.13113.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ed8abfdc083f2

0-091070/2390/21310_
46.8210473363925780.013.23106.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1cbc42e268cf0

1-0188820/2195/22968_
39.09342714669774630.012.74112.66
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ce6b3bff8a72f

1-0188820/2303/23068_
39.0925841270500590.013.50109.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET / HTTP/1.1

1-0188820/2001/23381_
39.08355746969782350.011.29112.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVLbTuMwEP2VyO%2B5NyR

1-0188820/2321/23728_
39.101095070576380.012.90115.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0188820/2256/23573_
39.0837263374663910.013.19117.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_aa5db661a7889

1-0188820/2070/23187_
39.1010273272598180.011.38115.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_227b40afa89a2

1-0188820/2453/23202_
39.0916276670162750.014.42112.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ba0a91a1a20fc

1-0188820/2059/22601_
39.0835064270208090.012.84110.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_24492b66f374e

1-0188820/1992/22705_
39.0931263068937120.010.83110.60
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c31e957766bee

1-0188820/2278/22864_
39.09251026174868320.012.14117.03
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0188820/2057/21595_
39.092861073350220.012.81100.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0188820/2246/22442_
39.0919533273733430.014.05108.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eb064316a1621

1-0188820/2131/21785_
39.10845974125870.014.03108.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

1-0188820/2301/21810_
39.106095374917980.014.72109.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_39dd0538fedab

1-0188820/2344/23069_
39.092962670553350.014.31116.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_9433997b2ad79f7c4

1-0188820/2045/21824_
39.0928973276358180.010.99105.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fb646be907253

1-0188820/2190/23318_
39.0918293474675850.013.75117.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f409d5007cdda

1-0188820/2029/22552_
39.09159212774402930.012.82113.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e18902a46a9ad

1-0188820/2014/22880_
39.0838543173084550.012.42

Found on 2024-09-20 19:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de286b97088

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 18-Sep-2024 21:55:42 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  49 days 11 hours 45 minutes 13 seconds
Server load: 0.81 1.08 1.11
Total accesses: 1256260 - Total Traffic: 6.0 GB - Total Duration: 396944992
CPU Usage: u75.9 s80.43 cu489.31 cs188.64 - .0195% CPU load
.294 requests/sec - 1513 B/second - 5.0 kB/request - 315.974 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-091070/1389/20266_
27.8314327464798240.08.5398.68
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_32ca220da8b88

0-091070/1767/21079_
27.85760070242460.010.56106.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-091070/1562/20868_
27.8499322862566800.08.3699.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbqMwEIZfBfmeY0gTU

0-091070/1968/21382_
27.9064063122000.012.39106.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-091070/1598/20730_
27.85767166344550.08.10100.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091070/1578/21132_
27.882623767188020.08.13102.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_178c47d98dffe

0-091070/1863/22397_
27.86334063814270.011.13107.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-091070/1612/21123_
27.831210770811800.09.43100.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_fe7dc3e95efc83710

0-091070/1797/20712_
27.8313406266058550.011.09104.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e1865fb392d2d

0-091070/1488/19744_
27.8589310166326010.09.91100.23
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091070/1374/20909_
27.87318561375000.06.32102.24
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-091070/1438/19882_
27.87279064627440.08.9898.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-091070/1629/20833_
27.90122063095620.09.01100.98
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-091070/1508/21371_
27.8313523667866380.09.14108.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f728fbc678243

0-091070/1622/21221_
27.86692064986070.09.35101.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-091070/1626/20993_
27.858865268488370.09.16100.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091070/1486/20193_
27.83148353868256850.08.0494.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091070/1601/22064_
27.88190167360670.09.57111.34
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-091070/1798/19973_
27.86350164398150.09.5995.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091070/1580/20467_
27.85822293064154090.08.6397.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-091070/1491/21128_
27.86598535762091300.07.64102.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNvb6owFMa%2FCul7QED

0-091070/1766/22397_
27.87308072266120.010.31109.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-091070/1571/20926_
27.84103743364925200.08.4499.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLdT8IwEH%2F3r1j63n2

0-091070/1689/20981_
27.901344865695830.010.85106.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091078/1410/20330W
27.900060605369.78.03101.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

1-0188820/1208/21981_
21.4730072466623460.06.59106.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0188820/1320/22085_
21.4827217167482610.07.66104.14
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNdb6pAEIb%2FCtl7gUV

1-0188820/1119/22499_
21.47334066702430.06.68107.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0188820/1183/22590_
21.473424267691180.06.31109.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0188820/1278/22595_
21.475627570944490.07.03110.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fdf20eb7e39ff

1-0188820/1194/22311_
21.4667215770076130.07.40111.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbqMwEIZfBfmeQwhpA

1-0188820/1528/22277_
21.431315066502530.08.28106.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0188820/1190/21732_
21.481573367534140.07.32104.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0188820/1081/21794_
21.47295665143720.05.85105.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0188820/1443/22029_
21.4821458670858970.07.76112.65
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0188820/1127/20665_
21.48134168772160.07.7495.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0188820/1325/21521_
21.4215299569416600.07.42101.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0188820/1162/20816_
21.46877570197750.07.61101.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-0188820/1325/20834_
21.468323371263140.08.56103.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7fa45f22aa162

1-0188820/1348/22073_
21.431473211667248840.07.98110.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0188820/1114/20893_
21.431382150072770410.05.3199.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0188820/1200/22328_
21.4892264071455720.07.55111.23
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0188820/1074/21597_
21.467965371570350.07.53107.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7b9f599e8758b

1-0188820/1164/22030_
21.46767169711550.06.76107.63
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0188820/1242/22467_
21.4313393870362000.07.00111.28
127.0.0.1ht

Found on 2024-09-18 21:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2549765d8

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 16-Sep-2024 20:01:11 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  47 days 9 hours 50 minutes 43 seconds
Server load: 4.76 2.30 1.39
Total accesses: 1191741 - Total Traffic: 5.7 GB - Total Duration: 372618152
CPU Usage: u75.5 s77.72 cu454.02 cs176.7 - .0191% CPU load
.291 requests/sec - 1483 B/second - 5100 B/request - 312.667 ms/request
1 requests currently being processed, 49 idle workers
_____W____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-091070/234/19111_
4.9852155157332780.01.0691.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091070/396/19708_
5.01179065464900.01.7397.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-091070/379/19685_
5.00488158696630.01.9793.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091070/330/19744_
5.00434057225830.01.3795.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-091070/333/19465_
5.01409362417390.01.7093.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a0de3e867b810

0-091078/309/19863W
5.010061226369.71.3695.39
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-091070/362/20896_
4.9920913157984930.01.5597.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9b7c732554d34

0-091070/285/19796_
4.9937693364576270.01.2692.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVLdT8IwEH%2F3r1j63n

0-091070/382/19297_
4.984055160888020.01.9295.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091070/339/18595_
4.991570261003070.02.6292.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET / HTTP/1.1

0-091070/294/19829_
4.9845694057626620.01.1997.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4db2b7fda760f

0-091070/340/18784_
4.9849457560829970.02.5291.64
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091070/302/19506_
4.98502541558065580.01.3293.29
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SingleLogoutService.php?SAMLRequest=nVNbc6IwGP0r

0-091070/290/20153_
4.994032662062520.01.72101.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/password-expired.php?StateId=_88f2c

0-091070/320/19919_
4.9848793260693970.02.1293.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-091070/300/19667_
5.01167064522420.01.2892.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-091070/332/19039_
4.993219564285490.01.7588.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_e12038bf903e2c7a5

0-091070/248/20711_
4.992715266963348750.01.31103.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNdb6JAFIb%2FCpl7vsE

0-091070/272/18447_
4.991344458335850.01.0386.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_66ecbacd402f41e47

0-091070/276/19163_
5.00816059050540.01.0589.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-091070/369/20006_
5.01416157389910.02.0196.65
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091070/362/20993_
5.00744566178380.02.41101.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_cbf3e4428fe28599a

0-091070/313/19668_
5.00844560714870.01.7993.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

0-091070/338/19630_
4.992623160618540.01.6697.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-091070/326/19246_
4.9924773956261840.01.9095.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-064890/3059/20696_
46.01186461667420.017.3299.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_e7f849be6af4ca90d

1-064890/2882/20702_
45.904424862666010.013.8995.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-064890/2712/21313_
46.021754662393010.014.72100.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/2925/21321_
45.98246755063419220.016.13102.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

1-064890/2769/21214_
45.972616065665880.015.51103.39
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/2981/21055_
45.973015065782770.015.94103.41
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-064890/3049/20676_
45.9817103861791900.015.3397.69
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-064890/2714/20379_
45.99807062748800.013.3096.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/2913/20636_
45.96361417161407910.016.3599.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cdf779e717c43

1-064890/3131/20556_
45.9886916066720710.016.60104.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/2710/19436_
45.982590064209650.013.3787.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/icons/clipboard.svg HTTP/1.1

1-064890/2874/20145_
46.00495165317060.013.7394.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/3396/19589_
46.02803465716140.016.3593.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-064890/2667/19459_
45.9813824965705860.015.0894.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/3290/20611_
45.8951564661505580.015.15101.54
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a4f0810442f03

1-064890/2890/19744_
46.014416268056450.014.2393.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/3188/21061_
46.014201167040650.018.60103.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/2796/20422_
46.014093165040010.016.5199.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e91435df016a3

1-064890/3210/20803_
45.964048165924600.019.24100.55
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-064890/3294/21142_
45.9978084764731950.019.75103.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/

Found on 2024-09-16 20:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de240f23dfe

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 14-Sep-2024 17:43:08 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 7 hours 32 minutes 39 seconds
Server load: 0.60 0.85 1.18
Total accesses: 1100051 - Total Traffic: 5.2 GB - Total Duration: 348807476
CPU Usage: u71.35 s72.88 cu417.59 cs164.7 - .0186% CPU load
.281 requests/sec - 1432 B/second - 5099 B/request - 317.083 ms/request
1 requests currently being processed, 49 idle workers
.........................___________________________W___________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/18877.
0.00671064256402930.00.0090.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_15702433521de

0-0-0/0/19312.
0.00671064764813170.00.0096.18
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5d0c48c11ccc5

0-0-0/0/19306.
0.0067106058025950.00.0091.10
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /robots.txt HTTP/1.1

0-0-0/0/19414.
0.006710617156671810.00.0094.09
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/19132.
0.00671063961748480.00.0092.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_be1f7e42e0dc4

0-0-0/0/19554.
0.0067106560449120.00.0094.02
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_490620cc0e802

0-0-0/0/20534.
0.0067106657105880.00.0095.96
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/check.php?username=omckenz.20241366

0-0-0/0/19511.
0.006710610464001260.00.0091.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36c08902ab213

0-0-0/0/18915.
0.0067106060250820.00.0093.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/18256.
0.0067106160229020.00.0090.31
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0-0/0/19535.
0.00671063456953690.00.0095.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_309a9eef2e551

0-0-0/0/18444.
0.00671063559923040.00.0089.11
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_40c55e159ae48

0-0-0/0/19204.
0.006710636456988460.00.0091.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/accountinfo/reset.php HTTP/1.1

0-0-0/0/19863.
0.00671066661563250.00.0099.60
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-0-0/0/19599.
0.0067106359882860.00.0091.83
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fcollarts.

0-0-0/0/19367.
0.0067106063736550.00.0090.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0-0/0/18707.
0.00671063463449390.00.0086.81
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b4c36d1a20c4d

0-0-0/0/20463.
0.0067106062266610.00.00101.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/18175.
0.0067106057752140.00.0085.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0-0/0/18887.
0.006710612558402940.00.0088.74
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f32f2053f67b3

0-0-0/0/19637.
0.0067106156116420.00.0094.64
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0-0/0/20631.
0.00671064865422790.00.0099.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/19355.
0.0067106159936470.00.0091.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0-0/0/19292.
0.00671064360017230.00.0095.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_38345b9a7f5e8

0-0-0/0/18920.
0.00671065155819310.00.0093.26
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ab0c6070d8611

1-064890/1149/18786_
20.7513964055343560.07.7990.03
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-064890/1143/18963_
20.703598056670620.06.4188.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/1115/19716_
20.7028313558174260.06.2792.18
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4487e9bff6aa1

1-064890/1124/19520_
20.7421783659422760.07.3993.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1cdf203a7b66c

1-064890/1054/19499_
20.7521003861265770.06.4494.33
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6fd9d03841540

1-064890/1143/19217_
20.7033783060454290.07.6695.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_04c7cf043ff2e

1-064890/1156/18783_
20.7518782858074780.07.2489.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b965496d7fa63

1-064890/1059/18724_
20.7516358555119160.05.8489.05
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7b88548106de6

1-064890/1265/18988_
20.751991055310310.07.8990.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/1304/18729_
20.7510083763203170.08.4096.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b1880a30ff3a0

1-064890/1101/17827_
20.7519693760393870.05.5379.67
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/1084/18355_
20.7573819560071370.05.7186.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-064890/1299/17492_
20.753784660310410.07.4085.00
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f598c5d9b191a

1-064890/979/17771_
20.6939783261772240.06.0385.43
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e8a248e8a15c9

1-064890/1078/18399_
20.751083356077990.06.3292.71
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_372c58e13f382

1-064890/1187/18041_
20.6937963762912010.06.3786.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-064890/1425/19298_
20.6938853363411280.010.0394.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_db6025680c629

1-064890/1153/18779_
20.7032443061566610.08.7091.97
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8c517fb8dc766

1-064890/1388/18981_
20.703229461869380.09.2790.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-064890/1331/19179_
20.694210060070940.09.6993.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resource

Found on 2024-09-14 17:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de26525cd91

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 13-Sep-2024 00:01:30 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  43 days 13 hours 51 minutes 1 second
Server load: 3.79 3.09 2.39
Total accesses: 1075032 - Total Traffic: 5.1 GB - Total Duration: 334750643
CPU Usage: u83.55 s75.1 cu390.29 cs155.98 - .0187% CPU load
.286 requests/sec - 1446 B/second - 5065 B/request - 311.387 ms/request
1 requests currently being processed, 74 idle workers
__________________________________________________________W_____
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-013870/1733/18722_
32.7223617855936890.09.5989.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vxH%2Bwf

0-013870/2120/19136_
32.64662164192330.011.5595.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-013870/2196/19182_
32.6468944457549100.011.9390.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/2438/19248_
32.63890055633480.013.4392.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/script.js HTTP/1.1

0-013870/1960/18963_
32.63867160697320.010.5591.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-013870/1767/19375_
32.7315416959421600.011.3892.69
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNdb6pAEIb%2FCtl7vlG

0-013870/2027/20327_
32.65355056310900.011.6494.49
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-013870/1991/19282_
32.63816162868000.011.1689.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-013870/2164/18755_
32.63904259227440.014.7193.15
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET / HTTP/1.1

0-013870/1773/18006_
32.7398159425960.012.1489.08
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-013870/1987/19372_
32.654804756148700.09.7994.72
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1739/18249_
32.64775158436670.09.7988.27
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-013870/1946/19082_
32.65384156526720.011.5391.42
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

0-013870/1966/19734_
32.65440178161094110.011.9198.23
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/check.php?code=&username=awilson.73

0-013870/1808/19396_
32.6453725559093070.011.6790.78
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJdT8IwFH038T8sfd8GU

0-013870/2017/19161_
32.64552762836200.011.9989.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-013870/1505/18552_
32.6475323462683900.08.3086.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/1963/20317_
32.67295461613350.010.86100.35
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-013870/1803/17954_
32.722665757092780.010.4384.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-013870/1871/18658_
32.731151057799610.010.9587.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-013870/2059/19403_
32.7318915954946800.011.8693.62
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNdb6pAEIb%2FCtl7PhW

0-013870/2009/20366_
32.6477581864766040.010.7897.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/2137/19127_
32.7310338159251520.012.2290.04
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/1826/19070_
32.645814259474620.010.5694.47
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8d7aa520dbd60

0-013870/1870/18744_
32.663113454821260.010.2292.37
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_33505f28ab8e1

1-064890/737/18374_
12.9310717852990780.04.7086.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNdb6pAEIb%2FCtl7vkE

1-064890/731/18551_
12.91285554672710.03.9985.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/check.php?username=mkulang.20242214

1-064890/651/19252_
12.93129055626920.03.6389.53
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/719/19115_
12.92248057008220.04.4490.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-064890/603/19048_
12.92222957804660.03.5791.46
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/check.php?username=awilson.7314&met

1-064890/745/18819_
12.913455059076850.04.3391.80
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/718/18345_
12.921813155501390.04.0986.45
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4eece77915ff4

1-064890/714/18379_
12.941017253743130.03.7486.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_aafdb3f8a5008

1-064890/845/18568_
12.84890153016080.05.4988.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-064890/753/18178_
12.85890460171820.04.6892.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-064890/770/17496_
12.93855657938770.03.7377.87
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/631/17902_
12.86843157721900.03.0783.44
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-064890/879/17072_
12.867887558165610.04.7082.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/673/17465_
12.8871517060545420.04.2183.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNrj6owEIb%2FCul3rl4

1-064890/637/17958_
12.87776054005650.03.8390.22
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/806/17660_
12.905805061237980.04.3684.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/868/18741_
12.88671059061360.06.5391.30
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-064890/698/18324_
12.9057036359234800.05.9789.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-064890/807/18400_
12.90543658834680.05.2586.56
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/check.php?username=awilson.7314&met

1-064890/770/18618_
12.86807055570790.04.6588.71
127.0.0.1http/1.1ip-10-1-1

Found on 2024-09-13 00:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de24297582f

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 11-Sep-2024 05:22:06 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 19 hours 11 minutes 37 seconds
Server load: 0.96 1.47 1.53
Total accesses: 1042483 - Total Traffic: 4.9 GB - Total Duration: 317419761
CPU Usage: u64.13 s67.23 cu390.29 cs155.98 - .0188% CPU load
.289 requests/sec - 1449 B/second - 5021 B/request - 304.484 ms/request
2 requests currently being processed, 73 idle workers
______W________________________________________________________K
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-013870/1325/18314_
24.859875354333520.07.5386.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1732/18748_
24.94347162673750.09.3193.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1557/18543_
24.934465054889880.08.9587.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1961/18771_
24.91677153497180.010.6090.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-013870/1400/18403_
24.925384058309600.07.7088.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1380/18988_
24.8886315257432610.08.4489.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j9T9Yvu9XW

0-0138786/1547/19847W
25.00005491547271.38.8491.70
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-013870/1555/18846_
24.92521060235440.08.3087.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1686/18277_
24.9261616856022570.011.3389.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEIX3SLyD5X3%2

0-013870/1374/17607_
24.8877515857632570.09.0085.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfI9iUMhQ

0-013870/1591/18976_
24.9699053903450.07.4392.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-013870/1292/17802_
24.93446355200450.06.7785.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a1d9a7a77d70

0-013870/1483/18619_
24.96533454604640.08.3088.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_344dd4568eeea

0-013870/1449/19217_
24.951564658868970.08.7495.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1364/18952_
24.952407657721240.08.8087.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1596/18740_
24.9711061190500.09.7587.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-013870/1138/18185_
24.94417160292440.06.1283.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1597/19951_
24.841103059189730.08.9998.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1456/17607_
24.851041055063100.07.9781.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1427/18214_
24.8790370655579360.08.3584.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/1594/18938_
24.879404453136580.09.1590.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL6vtP%2FB8

0-013870/1596/19953_
24.91695060134830.08.4195.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-013870/1669/18659_
24.888092855426430.09.7187.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d18g

0-013870/1394/18638_
24.94396057763850.07.9491.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1506/18380_
24.8510625051959780.07.9890.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/334/17971_
5.54313339451894990.02.2684.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL1X4j9Yvu9XF

1-064890/318/18138_
5.53501152694640.01.7083.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/251/18852_
5.543725666354478850.01.4187.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-064890/277/18673_
5.54453154992930.01.7487.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-064890/297/18742_
5.54386056222960.01.9589.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/286/18360_
5.535214957109580.01.6089.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/295/17922_
5.54403153517270.01.5983.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/323/17988_
5.5419917752154190.01.7484.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfJ9jgQaL

1-064890/380/18103_
5.561444751145280.02.5785.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/272/17697_
5.5729557695880.01.2589.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-064890/280/17006_
5.561215355912720.01.4475.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/252/17523_
5.391125155512270.01.2481.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/492/16685_
5.4010355354803950.02.6180.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/318/17110_
5.391111156125820.01.5180.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/214/17535_
5.401072151055500.01.1187.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/393/17247_
5.4795413259254130.02.2081.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/complete.php HTTP/1.1

1-064890/333/18206_
5.471011156761710.02.2286.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-064890/287/17913_
5.48818757071990.02.8886.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2

1-064890/322/17915_
5.4885415256313810.02.8684.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNrb6pAEIb%2FCtnvXKT

1-064890/350/18198_
5.48916739

Found on 2024-09-11 05:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2b2d70c61

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 11-Sep-2024 05:21:56 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 19 hours 11 minutes 27 seconds
Server load: 1.04 1.50 1.54
Total accesses: 1042450 - Total Traffic: 4.9 GB - Total Duration: 317415052
CPU Usage: u64.13 s67.22 cu390.29 cs155.98 - .0188% CPU load
.289 requests/sec - 1449 B/second - 5021 B/request - 304.489 ms/request
2 requests currently being processed, 73 idle workers
______W________________________________________________________K
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-013870/1325/18314_
24.859785354333520.07.5386.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1732/18748_
24.94338162673750.09.3193.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1557/18543_
24.934375054889880.08.9587.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1961/18771_
24.91668153497180.010.6090.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-013870/1400/18403_
24.925294058309600.07.7088.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1380/18988_
24.8885315257432610.08.4489.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j9T9Yvu9XW

0-0138758/1519/19819W
24.99005486862181.68.7591.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-013870/1555/18846_
24.92512060235440.08.3087.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1686/18277_
24.9260716856022570.011.3389.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEIX3SLyD5X3%2

0-013870/1374/17607_
24.8876515857632570.09.0085.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfI9iUMhQ

0-013870/1591/18976_
24.9690053903450.07.4392.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-013870/1292/17802_
24.93437355200450.06.7785.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a1d9a7a77d70

0-013870/1483/18619_
24.96443454604640.08.3088.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_344dd4568eeea

0-013870/1449/19217_
24.951464658868970.08.7495.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1364/18952_
24.952307657721240.08.8087.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1596/18740_
24.972061190500.09.7587.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-013870/1138/18185_
24.94407160292440.06.1283.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1597/19951_
24.841094059189730.08.9998.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1456/17607_
24.851032055063100.07.9781.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1427/18214_
24.8789370655579360.08.3584.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/1594/18938_
24.879314453136580.09.1590.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL6vtP%2FB8

0-013870/1596/19953_
24.91686060134830.08.4195.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-013870/1669/18659_
24.888002855426430.09.7187.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d18g

0-013870/1394/18638_
24.94386057763850.07.9491.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1506/18380_
24.8510525051959780.07.9890.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/334/17971_
5.54304339451894990.02.2684.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL1X4j9Yvu9XF

1-064890/318/18138_
5.53492152694640.01.7083.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/251/18852_
5.543635666354478850.01.4187.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-064890/277/18673_
5.54443154992930.01.7487.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-064890/297/18742_
5.54376056222960.01.9589.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/286/18360_
5.535124957109580.01.6089.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/295/17922_
5.54393153517270.01.5983.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/323/17988_
5.5419017752154190.01.7484.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfJ9jgQaL

1-064890/380/18103_
5.561354751145280.02.5785.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/272/17697_
5.5719557695880.01.2589.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-064890/280/17006_
5.561115355912720.01.4475.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/252/17523_
5.391115155512270.01.2481.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/492/16685_
5.4010255354803950.02.6180.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/318/17110_
5.391102156125820.01.5180.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/214/17535_
5.401063151055500.01.1187.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/393/17247_
5.4794513259254130.02.2081.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/complete.php HTTP/1.1

1-064890/333/18206_
5.471002156761710.02.2286.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-064890/287/17913_
5.48809757071990.02.8886.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2

1-064890/322/17915_
5.4884415256313810.02.8684.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNrb6pAEIb%2FCtnvXKT

1-064890/350/18198_
5.489077395

Found on 2024-09-11 05:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de2d2f62c24

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 11-Sep-2024 05:21:50 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 19 hours 11 minutes 21 seconds
Server load: 1.04 1.51 1.55
Total accesses: 1042414 - Total Traffic: 4.9 GB - Total Duration: 317414820
CPU Usage: u64.12 s67.21 cu390.29 cs155.98 - .0188% CPU load
.289 requests/sec - 1449 B/second - 5022 B/request - 304.5 ms/request
2 requests currently being processed, 73 idle workers
______W________K________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-013870/1325/18314_
24.859725354333520.07.5386.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1732/18748_
24.94331162673750.09.3193.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1557/18543_
24.934305054889880.08.9587.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1961/18771_
24.91661153497180.010.6090.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-013870/1400/18403_
24.925224058309600.07.7088.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1380/18988_
24.8884715257432610.08.4489.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j9T9Yvu9XW

0-0138725/1486/19786W
24.9700548663685.88.6691.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-013870/1555/18846_
24.92505060235440.08.3087.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1686/18277_
24.9260016856022570.011.3389.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEIX3SLyD5X3%2

0-013870/1374/17607_
24.8875915857632570.09.0085.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfI9iUMhQ

0-013870/1591/18976_
24.9684053903450.07.4392.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-013870/1292/17802_
24.93431355200450.06.7785.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a1d9a7a77d70

0-013870/1483/18619_
24.96383454604640.08.3088.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_344dd4568eeea

0-013870/1449/19217_
24.951404658868970.08.7495.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1364/18952_
24.952247657721240.08.8087.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013876/1596/18740K
24.9710611905025.79.7587.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-013870/1138/18185_
24.94401160292440.06.1283.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1597/19951_
24.841087059189730.08.9998.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1456/17607_
24.851026055063100.07.9781.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1427/18214_
24.8788770655579360.08.3584.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/1594/18938_
24.879244453136580.09.1590.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL6vtP%2FB8

0-013870/1596/19953_
24.91679060134830.08.4195.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-013870/1669/18659_
24.887932855426430.09.7187.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d18g

0-013870/1394/18638_
24.94380057763850.07.9491.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1506/18380_
24.8510465051959780.07.9890.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/334/17971_
5.54297339451894990.02.2684.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL1X4j9Yvu9XF

1-064890/318/18138_
5.53486152694640.01.7083.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/251/18852_
5.543575666354478850.01.4187.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-064890/277/18673_
5.54437154992930.01.7487.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-064890/297/18742_
5.54370056222960.01.9589.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/286/18360_
5.535054957109580.01.6089.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/295/17922_
5.54387153517270.01.5983.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/323/17988_
5.5418317752154190.01.7484.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfJ9jgQaL

1-064890/380/18103_
5.561294751145280.02.5785.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/272/17697_
5.5713557695880.01.2589.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-064890/280/17006_
5.561055355912720.01.4475.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/252/17523_
5.391109155512270.01.2481.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/492/16685_
5.4010195354803950.02.6180.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/318/17110_
5.391096156125820.01.5180.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/214/17535_
5.401057151055500.01.1187.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/393/17247_
5.4793913259254130.02.2081.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/complete.php HTTP/1.1

1-064890/333/18206_
5.47995156761710.02.2286.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-064890/287/17913_
5.48803757071990.02.8886.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2

1-064890/322/17915_
5.4883815256313810.02.8684.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNrb6pAEIb%2FCtnvXKT

1-064890/350/18198_
5.48901739

Found on 2024-09-11 05:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31174f7de2174f7de22a29fea5

Apache Status

Apache Server Status for collarts-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 11-Sep-2024 05:21:49 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 19 hours 11 minutes 21 seconds
Server load: 1.05 1.52 1.55
Total accesses: 1042410 - Total Traffic: 4.9 GB - Total Duration: 317414818
CPU Usage: u64.12 s67.21 cu390.29 cs155.98 - .0188% CPU load
.289 requests/sec - 1449 B/second - 5022 B/request - 304.501 ms/request
3 requests currently being processed, 72 idle workers
______W________K________________________________________________
_K_________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-013870/1325/18314_
24.859715354333520.07.5386.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1732/18748_
24.94331162673750.09.3193.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1557/18543_
24.934305054889880.08.9587.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1961/18771_
24.91661153497180.010.6090.12
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-013870/1400/18403_
24.925224058309600.07.7088.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1380/18988_
24.8884615257432610.08.4489.75
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j9T9Yvu9XW

0-0138721/1482/19782W
24.9700548663477.68.6591.51
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /server-status HTTP/1.1

0-013870/1555/18846_
24.92505060235440.08.3087.01
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1686/18277_
24.9260016856022570.011.3389.77
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEIX3SLyD5X3%2

0-013870/1374/17607_
24.8875915857632570.09.0085.94
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfI9iUMhQ

0-013870/1591/18976_
24.9683053903450.07.4392.36
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-013870/1292/17802_
24.93430355200450.06.7785.25
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a1d9a7a77d70

0-013870/1483/18619_
24.96373454604640.08.3088.19
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_344dd4568eeea

0-013870/1449/19217_
24.951394658868970.08.7495.06
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013870/1364/18952_
24.952237657721240.08.8087.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-013876/1596/18740K
24.9700611905025.79.7587.28
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-013870/1138/18185_
24.94400160292440.06.1283.88
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1597/19951_
24.841087059189730.08.9998.48
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1456/17607_
24.851025055063100.07.9781.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1427/18214_
24.8788670655579360.08.3584.86
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-013870/1594/18938_
24.879244453136580.09.1590.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL6vtP%2FB8

0-013870/1596/19953_
24.91679060134830.08.4195.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-013870/1669/18659_
24.887932855426430.09.7187.52
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d18g

0-013870/1394/18638_
24.94379057763850.07.9491.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-013870/1506/18380_
24.8510455051959780.07.9890.13
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/334/17971_
5.54297339451894990.02.2684.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL1X4j9Yvu9XF

1-064890/318/18138_
5.53485152694640.01.7083.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/251/18852_
5.543565666354478850.01.4187.32
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-064890/277/18673_
5.54436154992930.01.7487.92
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-064890/297/18742_
5.54369056222960.01.9589.84
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-064890/286/18360_
5.535054957109580.01.6089.07
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/295/17922_
5.54386153517270.01.5983.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/323/17988_
5.5418317752154190.01.7484.95
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZPbbuIwEIZfJfJ9jgQaL

1-064890/380/18103_
5.561284751145280.02.5785.59
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/272/17697_
5.5712557695880.01.2589.40
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fcolla

1-064890/280/17006_
5.561055355912720.01.4475.58
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/252/17523_
5.391109155512270.01.2481.61
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/492/16685_
5.4010185354803950.02.6180.21
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-064890/318/17110_
5.391095156125820.01.5180.91
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-064890/214/17535_
5.401056151055500.01.1187.50
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-064890/393/17247_
5.4793813259254130.02.2081.85
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/accountinfo/complete.php HTTP/1.1

1-064890/333/18206_
5.47995156761710.02.2286.99
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-064890/287/17913_
5.48802757071990.02.8886.16
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2

1-064890/322/17915_
5.4883715256313810.02.8684.17
127.0.0.1http/1.1ip-10-1-100-249.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZNrb6pAEIb%2FCtnvXKT

1-064890/350/18198_
5.48900739

Found on 2024-09-11 05:21

Create report

Open service 108.156.60.105:443 · collarts-login.cloudworkengine.net

2026-01-09 08:05

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 09 Jan 2026 08:05:21 GMT
Pragma: no-cache
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 ee47c4d401aca1a1f5c2ee96ce3267e4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: bheSBd9J21-W3aZ1NCITEWpeTqtax65pRrAnIh--nx-hoT6XhwbY-g==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 108.156.60.105:443 · collarts-login.cloudworkengine.net

2026-01-02 05:13

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 02 Jan 2026 05:13:19 GMT
Pragma: no-cache
Server: Apache/2.4.52 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 96e04892ec84a7161914f66c3ba3b5f0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: gsQyDYiiUs7wcW2yQL_Zy1lijI39H_dRxHsDUJkCar8MKAcclMTFxQ==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 108.156.60.105:443 · collarts-login.cloudworkengine.net

2025-12-22 16:11

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 16:11:35 GMT
Pragma: no-cache
Server: Apache/2.4.52 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 abf5199c76a5a64063b4cf8863f823aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: IEjtPhH3mX-YfVwvgYjgELpuQ7OCfaFLgRbhD2s0DYx4GSkR3QLk0Q==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 108.156.60.105:443 · collarts-login.cloudworkengine.net

2025-12-20 16:12

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Sat, 20 Dec 2025 16:12:36 GMT
Pragma: no-cache
Server: Apache/2.4.52 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 ee47c4d401aca1a1f5c2ee96ce3267e4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: OWB9XoZ50Nt5WOMjP3vGuqXTvCu3P7FX2tWehLAa_FofLr4h35IpEg==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://collarts-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

collarts.cloudworkengine.netcollarts-id.cloudworkengine.netcollarts.files.cloudworkengine.net.aucollarts-login.cloudworkengine.net

Fingerprint:

1c7767bf25f9e6b1833e4e6504249a20c03405dc2d332c9d82e07517776817cf

CN:

collarts.cloudworkengine.net

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M03

Not before:

2025-08-13 00:00

Not after:

2026-09-11 23:59

Domain summary

collarts-login.cloudworkengine.net 53

1 recorded

IP summary

108.156.60.105 2 99.86.4.34 1 13.225.78.61 1 13.225.78.32 1 13.225.78.69 1 13.225.78.49 1

6 recorded