LeakIX - Host en.cosmeticatravel.com

Domain en.cosmeticatravel.com

United States

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 104.26.3.189
Domain: en.cosmeticatravel.com
Port: 443
URL: https://en.cosmeticatravel.com

First seen 2022-06-19 00:08
Last seen 2024-09-20 15:50
Open for 824 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a902a881e5

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Sep 11 2024 11:03:44

Current Time: Friday, 20-Sep-2024 11:50:36 EDT
Restart Time: Thursday, 19-Sep-2024 11:07:34 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 1 day 43 minutes 2 seconds
Server load: 1.40 1.43 1.48
Total accesses: 84926 - Total Traffic: 814.2 MB
CPU Usage: u348.12 s351.61 cu0 cs0 - .786% CPU load
.954 requests/sec - 9.4 kB/second - 9.8 kB/request
1 requests currently being processed, 124 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
18975820yes025000
18976020yes025000
18976360yes025000
18979220yes025000
20319320yes124000
Sum0 1124000

________________________________________________________________
_____________________________________________________W_______...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

<SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-118975820/215/623_
137.89235330.02.886.31
172.71.81.136la-rhinoplastie.net:7081GET /detail/16/detail/9/Action-de-la-rhinoplastie.html HTTP/1.0
0-118975820/206/615_
138.25358230.01.785.60
208.88.4.121annexosteopathy.com:7081POST /wp-cron.php?doing_wp_cron=1726847400.11545801162719726562
0-118975820/212/621_
138.31171600.02.706.73
40.77.167.44technovationacademy.com:7080GET /mmhna/e1468912.html HTTP/1.0
0-118975820/211/620_
138.2730440.02.886.22
162.158.175.208en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-118975820/212/614_
138.16881610.03.188.16
40.77.167.44technovationacademy.com:7080GET /products/goi399223?id=547 HTTP/1.0
0-118975820/211/620_
137.8625540.02.245.52
47.128.28.72carconesautomotiverepairserviceGET /rb3.gif HTTP/1.0
0-118975820/210/618_
138.282840.02.966.14
77.95.113.242celeste.cirrushosting.com:7080GET / HTTP/1.0
0-118975820/211/616_
138.0718280.03.186.01
66.249.93.38doctor-london.co.uk:7081GET /.well-known/traffic-advice HTTP/1.0
0-118975820/210/616_
138.03206290.01.924.79
172.71.119.57cosmeticatravel.com:7081GET /js/core.min.js HTTP/1.0
0-118975820/205/614_
138.01206170.02.425.89
172.71.135.25cosmeticatravel.com:7081GET /js/script.js HTTP/1.0
0-118975820/210/620_
137.8625540.02.515.96
47.128.28.72carconesautomotiverepairserviceGET /tc3.gif HTTP/1.0
0-118975820/210/615_
137.962061400.02.616.03
141.101.97.70cosmeticatravel.com:7081GET /blog/a-12-85-pourquoi-les-hommes-adorent-les-gros-seins.ht
0-118975820/211/618_
138.31171630.02.195.30
40.77.167.44technovationacademy.com:7080GET /tag/wnmaj HTTP/1.0
0-118975820/215/623_
138.30171700.02.095.52
40.77.167.44technovationacademy.com:7080GET /tag/jkvsf HTTP/1.0
0-118975820/211/621_
138.051881740.02.075.60
52.167.144.20technovationacademy.com:7080GET /tag/uqvmp HTTP/1.0
0-118975820/213/626_
138.12147290.02.025.47
108.162.226.146otoplastie.info:7081GET /wp-includes/wlwmanifest.xml HTTP/1.0
0-118975820/209/614_
137.95206200.01.885.38
172.71.135.101cosmeticatravel.com:7081GET /chatbot/assets/css/chat.css HTTP/1.0
0-118975820/210/618_
138.253518640.01.935.54
66.249.70.8annexosteopathy.com:7081GET /category/massage-therapy/feed/ HTTP/1.0
0-118975820/210/619_
138.17881640.03.176.59
40.77.167.44technovationacademy.com:7081GET /douen/s617441.html HTTP/1.0
0-118975820/210/617_
138.111501680.01.543.95
47.90.201.125technovationacademy.com:7080GET / HTTP/1.0
0-118975820/209/613_
137.98206150.01.765.25
141.101.97.36cosmeticatravel.com:7081GET /chatbot/assets/css/typing.css HTTP/1.0
0-118975820/208/616_
138.336440.02.646.76
172.68.27.27otoplastie.info:7081HEAD / HTTP/1.0
0-118975820/209/619_
138.2150150.02.145.64
66.9.172.184bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=ssx HTTP/1.0
0-118975820/210/617_
138.19741650.02.596.79
216.244.66.201technovationacademy.com:7080GET /pctcatalogjcdz/99 HTTP/1.0
0-118975820/209/620_
138.061831620.02.145.90
52.167.144.189technovationacademy.com:7081GET /products/landsmaal480450?id=152 HTTP/1.0
1-118976020/221/608_
159.52851770.01.945.45
52.167.144.189technovationacademy.com:7081GET /nosba/r272251.html HTTP/1.0
1-118976020/220/609_
159.291971570.02.926.12
52.167.144.189technovationacademy.com:7081GET /list/49_2485?kg=dy HTTP/1.0
1-118976020/215/604_
159.45138880.02.314.75
172.70.207.55en.cosmeticatravel.com:7081GET /guestbook.php HTTP/1.0
1-118976020/220/608_
159.601130.02.556.15
172.71.172.47en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-118976020/219/608_
159.54581800.01.725.13
40.77.167.44technovationacademy.com:7080GET /fryah/v837435.html HTTP/1.0
1-118976020/218/608_
159.471191620.02.206.05
52.167.144.20technovationacademy.com:7081GET /hndbb/a272230.html HTTP/1.0
1-118976020/221/610_
159.37155540.01.874.99
172.71.170.39lifting-mammaire.net:7081HEAD / HTTP/1.0
1-118976020/221/609_
159.555750.01.945.26
77.95.113.242celeste.cirrushosting.com:7080GET / HTTP/1.0
1-118976020/218/609_
159.3914530.02.806.10
77.95.113.242celeste.cirrushosting.com:7080GET / HTTP/1.0
1-118976020/220/609_
159.21206680.02.056.30
172.71.127.51cosmeticatravel.com:7081GET /css/style.css HTTP/1.0
1-118976020/217/606_
159.132271600.02.255.82
52.167.144.189technovationacademy.com:7081GET /kiqgf/e624763.html HTTP/1.0
1-118976020/220/604_
159.631330.01.565.23
172.70.247.30en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-118976020/217/605_
159.0925550.02.716.39
47.128.28.72carconesautomotiverepairserviceGET /ls3.gif HTTP/1.0
1-118976020/218/607_
159.331881760.02.965.93
40.77.167.44technovationacademy.com:7081GET /bvdxr/m381295.html HTTP/1.0
1-118976020/218/605_
159.282058420.02.576.25
107.189.30.241fit-tunisie.org:7081GET ///wp-login.php?wp_lang=e HTTP/1.0
1-118976020/217/606_
159.42142190.02.766.78
172.71.81.80otoplastie.info:7081GET /misc/ajax.js HTTP/1.0
1-118976020/218/606_
159.321897190.02.645.56
172.166.176.149sirokotravel.com:7081GET / HTTP/1.0
1-118976020/220/610_
159.49114490.03.587.19
162.158.174.99implant-capillaire.org:7081HEAD / HTTP/1.0
1-118976020/216/603_
159.461251720.02.265.18
15.236.225.192technovationacademy.com:7080GET / HTTP/1.0
1-118976020/218/606_
159.23206210.02.326.00
141.101.68.250cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
1-118976020/218/610_
159.082601750.02.395.85
52.167.144.20technovationacademy.com:7080GET /list/257_1232?kg=dy HTTP/1.0
1-118976020/215/604_
159.38150200.02.246.07
92.249.48.213dependable.ca:7080GET / HTTP/1.0
1-118976020/220/607_
159.112382610.02.686.73
23.80.151.227mrmohankumar.cirrusvps.ca:7080GET /contact-form HTTP/1.0
1-118976020/219/605_
159.411431740.02.905.90
52.167.144.189technovationacademy.com:7081GET /draoa/e1121383.html HTTP/1.0
1-118976020/219/609_
159.26206220.02.476.02
172.71.130.81cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
2-118976360/247/671_
166.731761650.02.806.34
66.249.64.40technovationacademy.com:7081GET /?impaternate156770.html HTTP/1.0
2-118976360/251/675_
166.592334

Found on 2024-09-20 15:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4695fa04a2c67eeb6

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Aug 27 2024 13:58:54

Current Time: Wednesday, 18-Sep-2024 12:07:55 EDT
Restart Time: Wednesday, 18-Sep-2024 05:07:37 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 7 hours 17 seconds
Server load: 1.87 2.79 3.11
Total accesses: 35681 - Total Traffic: 279.9 MB
CPU Usage: u460.24 s479.13 cu0 cs0 - 3.73% CPU load
1.41 requests/sec - 11.4 kB/second - 8.0 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
10682020yes124000
10682300yes025000
10682580yes025000
10683370yes025000
Sum0 199000

_______W________________________________________________________
____________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-010682020/301/301_
207.8535250.02.252.25
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/299/299_
207.68120150.02.082.08
47.128.63.206bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=sgr HTTP/1.0
0-010682020/296/296_
207.5618250.02.072.07
193.186.4.231confluvium.ca:7081GET / HTTP/1.0
0-010682020/300/300_
207.611661740.02.022.02
40.77.167.144technovationacademy.com:7080GET /tag/cedmy HTTP/1.0
0-010682020/297/297_
207.7871270.02.042.04
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/299/299_
207.57181280.03.073.07
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/300/300_
208.862310240.02.022.02
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/300/300W
207.54000.02.342.34
172.70.243.183en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
0-010682020/299/299_
207.8449270.01.821.82
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/300/300_
207.62153270.02.232.23
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/300/300_
207.75761680.02.012.01
66.249.75.66technovationacademy.com:7081GET /tdexy/o63073.html HTTP/1.0
0-010682020/297/297_
207.55184270.01.991.99
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/297/297_
207.8152210.02.032.03
172.69.58.184cosmeticatravel.com:7081GET /blog/media/article/1571734763.jpg HTTP/1.0
0-010682020/294/294_
208.910250.02.402.40
162.158.94.62en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-010682020/299/299_
207.59179310.02.462.46
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/299/299_
207.7396260.02.662.66
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/298/298_
207.6613200.02.012.01
194.38.20.13emailfree.ca:7080GET /chart/php-ofc-library/ofc_upload_image.php HTTP/1.0
0-010682020/298/298_
207.72102270.02.622.62
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/300/300_
207.8250260.02.482.48
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/299/299_
207.64145490.02.152.15
172.68.26.131lifting-mammaire.net:7081HEAD / HTTP/1.0
0-010682020/298/298_
207.76741740.02.232.23
66.249.75.68technovationacademy.com:7081GET /config/entry/review/add/product_id/1436855 HTTP/1.0
0-010682020/298/298_
207.69117250.02.232.23
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
0-010682020/295/295_
207.66132290.01.801.80
172.69.64.200reduction-mammaire.org:7081HEAD / HTTP/1.0
0-010682020/299/299_
208.891270.02.982.98
66.249.69.170bushleaguefactor.com:7081GET / HTTP/1.0
0-010682020/300/300_
208.872170.02.192.19
173.183.27.238jasper.number41media.com:7080GET /jasper_wireframes/images/dashboard/u68_mouseOver.svg HTTP/
1-010682300/314/314_
205.0292260.02.762.76
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/311/311_
205.1262260.02.762.76
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/313/313_
205.086650.02.152.15
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-010682300/315/315_
204.90131300.02.202.20
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/316/316_
205.0586290.02.832.83
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/317/317_
205.22131710.03.293.29
66.249.75.67technovationacademy.com:7081GET /products/hispidulate371642?id=695 HTTP/1.0
1-010682300/314/314_
205.0094260.02.772.77
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/313/313_
204.97103520.02.122.12
172.69.65.48le-lifting.com:7081HEAD / HTTP/1.0
1-010682300/313/313_
204.9994450.02.362.36
162.158.175.209cosmeticatravel.com:7081HEAD / HTTP/1.0
1-010682300/313/313_
204.91124250.02.012.01
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/315/315_
205.0776240.02.582.58
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/313/313_
205.1848270.01.601.60
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/316/316_
205.1355280.02.162.16
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/314/314_
205.23111730.02.412.41
194.38.20.13eleven5p.ca:7081GET /chart/php-ofc-library/ofc_upload_image.php HTTP/1.0
1-010682300/316/316_
205.231250.02.162.16
66.249.69.170bushleaguefactor.com:7081GET /robots.txt HTTP/1.0
1-010682300/313/313_
205.2014170.02.402.40
99.164.50.61bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=ksc HTTP/1.0
1-010682300/315/315_
205.270260.02.352.35
162.158.110.232en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
1-010682300/315/315_
205.1554280.02.692.69
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/316/316_
205.0488180.02.382.38
51.79.69.229annexosteopathy.com:7081GET / HTTP/1.0
1-010682300/315/315_
205.1652260.03.313.31
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/310/310_
204.941161760.02.542.54
87.250.224.212technovationacademy.com:7080GET /mediatress678630.html HTTP/1.0
1-010682300/314/314_
205.25640.02.552.55
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-010682300/315/315_
205.1165350.02.162.16
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/313/313_
204.93121250.02.752.75
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
1-010682300/312/312_
204.97103280.02.372.37
172.70.207.100reduction-mammaire.org:7081GET /4/reduction-mammaire-photo.php HTTP/1.0
2-010682580/354/354_

Found on 2024-09-18 16:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4695fa04a1e7bf6c9

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Aug 27 2024 13:58:54

Current Time: Monday, 16-Sep-2024 07:59:37 EDT
Restart Time: Sunday, 15-Sep-2024 00:07:44 EDT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime: 1 day 7 hours 51 minutes 53 seconds
Server load: 1.55 1.52 1.75
Total accesses: 99786 - Total Traffic: 950.7 MB
CPU Usage: u239.06 s249.59 cu0 cs0 - .426% CPU load
.87 requests/sec - 8.5 kB/second - 9.8 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
951750yes025000
952030yes025000
952310yes025000
954110yes124000
Sum0 199000

________________________________________________________________
____________________W_______________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-3951750/125/862_
75.2258300.01.458.35
172.71.167.73blepharoplastie.net:7081HEAD / HTTP/1.0
0-3951750/120/858_
75.12992810.00.808.02
173.252.83.40mrmohankumar.cirrusvps.ca:7080GET /file/11 HTTP/1.0
0-3951750/120/847_
75.392428490.01.339.13
52.167.144.138shorehamvillage.com:7081GET /?s= HTTP/1.0
0-3951750/122/852_
75.19661730.01.337.69
66.249.66.19technovationacademy.com:7081GET /?/hayami/hayami_tc.php/config/entry/review/add/product_id/
0-3951750/124/864_
75.25351750.00.968.62
66.249.66.21technovationacademy.com:7081GET /?/hayami/hayami_tc.php/ssecc/d668711.html HTTP/1.0
0-3951750/125/861_
75.2835100.00.997.70
4.213.113.19shorehamvillage.com:7081GET /wp-admin/css/ HTTP/1.0
0-3951750/123/860_
74.9916039700.01.728.72
162.158.174.60cosmeticatravel.fr:7081GET / HTTP/1.0
0-3951750/121/865_
75.041301480.01.088.33
223.109.252.201underwoodfinancial.com:7080GET / HTTP/1.0
0-3951750/121/849_
75.16801770.00.657.35
66.249.75.68technovationacademy.com:7081GET /products/hymnodist1489111?id=261 HTTP/1.0
0-3951750/122/862_
75.0711022120.00.767.04
24.222.58.196shorehamvillage.com:7081POST /autodiscover/autodiscover.xml HTTP/1.0
0-3951750/121/854_
73.65140170.00.938.34
167.99.210.137indexiweb.com:7081GET /.git/config HTTP/1.0
0-3951750/121/859_
75.03138120.00.998.83
167.99.210.137indexiweb.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-3951750/117/851_
74.9516460.01.338.15
83.97.73.239cinarium.com:7081GET /contact.html HTTP/1.0
0-3951750/119/849_
74.961621760.01.299.34
95.108.213.156technovationacademy.com:7080GET /housemaster669532.html HTTP/1.0
0-3951750/123/857_
75.352580.00.977.95
172.71.150.79reduction-mammaire.org:7081GET /css/VideoPlayerPopUp.css HTTP/1.0
0-3951750/122/861_
75.244280.00.877.63
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-3951750/122/856_
75.342670.01.938.66
172.71.151.115reduction-mammaire.org:7081GET /css/animate.min.css HTTP/1.0
0-3951750/123/862_
75.21661630.01.839.03
66.249.66.19technovationacademy.com:7081GET /?/information/csr_sdgs.php/config/entry/review/add/product
0-3951750/122/855_
75.1487400.00.787.95
172.68.245.225en.cosmeticatravel.com:7081GET /cosmetic-plastic-surgery.php HTTP/1.0
0-3951750/123/859_
75.293180.01.309.68
162.158.41.102reduction-mammaire.org:7081GET /js/bootstrap-dropdownhover.min.js HTTP/1.0
0-3951750/122/858_
75.3226110.01.539.12
172.71.142.105reduction-mammaire.org:7081GET /css/bootstrap-dropdownhover.css HTTP/1.0
0-3951750/122/855_
75.10100470.01.208.24
172.71.254.53en.cosmeticatravel.com:7081GET /buccal-fat-reduction.php/blog/blog/in-vitro-fertilization.
0-3951750/117/847_
75.332670.01.247.18
162.158.42.96reduction-mammaire.org:7081GET /js/main.js HTTP/1.0
0-3951750/123/856_
75.0014260.00.817.08
167.99.210.137indexiweb.com:7081GET /about HTTP/1.0
0-3951750/121/855_
75.1867370.01.139.12
172.68.26.222la-rhinoplastie.net:7081HEAD / HTTP/1.0
1-3952030/112/826_
82.0187150.01.247.02
34.171.238.57bushleaguefactor.com:7081GET / HTTP/1.0
1-3952030/112/820_
81.9114340.01.347.65
167.99.210.137indexiweb.com:7081POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disa
1-3952030/113/832_
82.12641640.01.228.24
66.249.66.20technovationacademy.com:7081GET /?/information/csr_sdgs.php/mseja/b323048.html HTTP/1.0
1-3952030/111/825_
82.097317540.01.017.17
157.245.6.207francinelalonde.com:7081POST /wp-login.php HTTP/1.0
1-3952030/111/823_
82.19491730.01.088.24
66.249.75.66technovationacademy.com:7081GET /zfmty/e705330.html HTTP/1.0
1-3952030/113/833_
82.106540.01.178.86
47.128.115.3scienceanalogies.com:7080GET /robots.txt HTTP/1.0
1-3952030/113/836_
82.11641660.01.068.34
66.249.66.20technovationacademy.com:7081GET /?/information/csr_sdgs.php/config/entry/review/add/product
1-3952030/112/825_
81.8716260.01.668.89
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-3952030/111/828_
82.0378190.00.947.99
162.158.187.33en.cosmeticatravel.com:7081GET /inc/captcha.php HTTP/1.0
1-3952030/112/823_
81.941261680.01.018.07
66.249.66.19technovationacademy.com:7081GET /?/hayami/hayami_tc.php/eqpen/f962115.html HTTP/1.0
1-3952030/115/826_
82.0678930.01.419.03
172.70.207.142en.cosmeticatravel.com:7081POST /guestbook.php HTTP/1.0
1-3952030/113/831_
81.98121560.01.228.02
172.69.225.151cosmeticatravel.com:7081GET /abdominoplastie-tunisie.php HTTP/1.0
1-3952030/112/833_
82.09737270.01.057.56
208.88.4.121francinelalonde.com:7081POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=Ym3b
1-3952030/112/828_
82.14521740.01.397.08
66.249.75.67technovationacademy.com:7081GET /products/intracellularly981335?id=182 HTTP/1.0
1-3952030/115/831_
82.18493940.01.298.73
208.88.4.121
1-3952030/113/831_
82.2628100.01.157.71
172.71.151.22reduction-mammaire.org:7081GET /js/jquery.countup.min.js HTTP/1.0
1-3952030/113/828_
82.17511680.00.998.41
66.249.75.66technovationacademy.com:7081GET /elbbh/i835230.html HTTP/1.0
1-3952030/112/830_
81.901593090.00.806.27
208.88.4.121amitoladesignconcepts.ca:7080POST /wp-cron.php?doing_wp_cron=1726487818.22899389266967773437
1-3952030/113/822_
82.2329120.00.947.41
162.158.41.228reduction-mammaire.org:7081GET /js/bootstrap-datepicker.min.js HTTP/1.0
1-3952030/114/827_
82.213780.00.836.24
172.70.163.86la-liposuccion.com:7081GET /robots.txt HTTP/1.0
1-3952030/112/827_
82.301290.00.716.61
172.70.163.86en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-3952030/110/828_
81.48140230.00.967.18
167.99.210.137indexiweb.com:7081GET /.env HTTP/1.0
1-3952030/113/828_
81.9015722070.00.978.06
54.36.182.232shorehamvillage.com:7081POST /wp-login.php HTTP/1.0
1-3952030/115/826_
82.15522540.00.717.61
157.55.39.225nothim.ca:7080GET /robots.txt HTTP/1.0
1-3952030/112/829_
82.252990.00.948.26
172.71.147.39reduction-mammaire.org:7081GET /js/animated-text.js HTTP/1.0
2-3952310/131/920_
102.422980.01.109.04
172.71.147.102reduction-mammaire.org:7081GET /js/VideoPlayerPopUp.js HTTP/1.0
2-3952310/130/906_
102.227315300.01.349.28
208.88.4.121francinelalonde.com:7081POST

Found on 2024-09-16 11:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4695fa04a63a46567

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Aug 27 2024 13:58:54

Current Time: Saturday, 14-Sep-2024 07:07:09 EDT
Restart Time: Wednesday, 11-Sep-2024 03:13:18 EDT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime: 3 days 3 hours 53 minutes 50 seconds
Server load: 2.67 2.58 2.38
Total accesses: 317222 - Total Traffic: 2.8 GB
CPU Usage: u573.05 s549.84 cu0 cs0 - .411% CPU load
1.16 requests/sec - 10.6 kB/second - 9.1 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
34315640yes025000
34315920yes025000
34315930yes124000
34317090yes025000
Sum0 199000

_______________________________________________________________W
____________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-334315640/139/2074_
81.5143690.01.1917.50
195.2.71.225mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
0-334315640/140/2079_
81.58201570.01.1617.40
35.219.54.159indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/137/2077_
81.34852290.01.2217.73
43.156.98.190indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/140/2078_
81.42541590.01.4517.99
82.165.213.228indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/138/2084_
81.6652070.01.1317.82
31.184.242.14indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/138/2084_
81.48451530.01.5919.67
160.153.250.168indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/139/2084_
81.554113810.01.5516.71
124.223.197.100fit-tunisie.org:7081GET / HTTP/1.0
0-334315640/139/2083_
81.358524960.01.6517.73
57.141.0.25shorehamvillage.com:7081GET /?utm_medium=paid&utm_source=ig&utm_id=120212068992180309&u
0-334315640/139/2078_
81.6371570.00.9819.87
87.238.168.220indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/138/2078_
81.39681760.01.3019.21
212.192.219.10indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/138/2077_
81.4257670.01.4017.73
185.231.155.169mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
0-334315640/137/2073_
81.4844680.01.0518.12
195.2.71.225mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
0-334315640/139/2081_
81.60161490.01.3017.56
172.70.90.121cosmeticatravel.com:7081GET /blog/a-12-459-confinement-on-en-profite.html HTTP/1.0
0-334315640/138/2080_
81.6213130.01.3619.82
208.88.4.121indemnia.ca:7081POST /wp-cron.php?doing_wp_cron=1726312015.25902795791625976562
0-334315640/137/2077_
81.271152740.01.1017.97
216.244.66.242mrmohankumar.cirrusvps.ca:7080GET /file/94 HTTP/1.0
0-334315640/138/2082_
81.45483070.02.4117.55
195.2.71.225mrmohankumar.cirrusvps.ca:7081GET /node/37/done HTTP/1.0
0-334315640/139/2076_
81.45481870.01.2418.66
207.46.13.126technovationacademy.com:7081GET /products/creamy651870?id=33 HTTP/1.0
0-334315640/138/2081_
81.3190400.01.3220.34
172.71.81.132blepharoplastie.net:7081GET /blog/page-5/5/detail/11/detail/6/preparation-pour-une-blep
0-334315640/139/2083_
81.39691720.01.2017.52
103.231.40.216indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-334315640/138/2076_
81.6561690.00.9517.22
66.249.79.96technovationacademy.com:7081GET /?/list/ct.php/products/bland263160?id=100 HTTP/1.0
0-334315640/137/2081_
81.631040.01.4417.54
5.255.231.179bushleaguefactor.com:7081GET /robots.txt HTTP/1.0
0-334315640/139/2084_
81.700580.01.4119.62
172.70.114.217en.cosmeticatravel.com:7081GET / HTTP/1.0
0-334315640/138/2077_
81.281101660.00.9919.34
5.255.231.96technovationacademy.com:7081GET /products/fiddlefaced1301180?id=63 HTTP/1.0
0-334315640/137/2074_
81.3876490.01.2018.86
172.69.6.7implant-mammaire.net:7081HEAD / HTTP/1.0
0-334315640/137/2081_
81.47481720.01.5417.52
157.55.39.48technovationacademy.com:7080GET /tag/ojxje HTTP/1.0
1-334315920/140/2190_
89.058611760.01.4920.29
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1726311941.71819090843200683593
1-334315920/141/2191_
89.1349770.01.7920.24
195.2.71.225mrmohankumar.cirrusvps.ca:7080GET /node/37/done/ HTTP/1.0
1-334315920/141/2194_
89.10551010.01.5520.47
185.231.155.169mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
1-334315920/141/2191_
89.16481320.01.6719.81
195.2.71.225mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
1-334315920/141/2193_
89.282470.01.0919.98
172.70.80.73abdominoplastie.org:7081GET /robots.txt HTTP/1.0
1-334315920/142/2192_
89.2141340.01.3519.42
172.70.142.169la-liposuccion.com:7081GET /detail/35/2/lipoaspiration.php HTTP/1.0
1-334315920/141/2195_
89.360300.00.8818.76
172.70.230.24en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-334315920/142/2195_
89.17441660.01.1018.60
52.167.144.161technovationacademy.com:7080GET /list/348_198?kg=dy HTTP/1.0
1-334315920/138/2191_
89.19441840.01.3419.54
85.10.158.97indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
1-334315920/142/2193_
89.390280.02.3520.11
172.70.110.30en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
1-334315920/140/2193_
89.125260.01.2224.33
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
1-334315920/141/2194_
89.0188540.01.0919.58
162.158.106.141otoplastie.info:7081GET /blog/4/blog/detail/25/recoller-les-oreilles-sans-chirurgie
1-334315920/142/2191_
89.30231600.01.0818.00
104.248.175.154indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
1-334315920/141/2192_
89.272770.01.0119.02
65.108.203.133muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-334315920/140/2194_
89.3319830.01.3118.14
162.158.90.82en.cosmeticatravel.com:7081GET /guestbook.php HTTP/1.0
1-334315920/139/2201_
89.2438490.01.1218.68
172.69.7.4en.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-334315920/138/2193_
89.19422050.00.9618.58
195.2.71.225mrmohankumar.cirrusvps.ca:7081GET /tutorial/carbon-pricing-101 HTTP/1.0
1-334315920/140/2198_
89.1647830.01.3919.05
195.2.71.225mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
1-334315920/141/2196_
89.25331740.00.7420.49
66.249.79.96technovationacademy.com:7081GET /?/list/ct.php/a2f6product/product_id/740838/reviews HTTP/1
1-334315920/141/2191_
89.08662190.01.0419.78
92.53.96.214indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
1-334315920/141/2195_
89.0486500.00.7119.25
172.71.166.96cosmeticatravel.com:7081HEAD / HTTP/1.0
1-334315920/140/2192_
89.15481850.00.8119.69
157.55.39.48technovationacademy.com:7080GET /list/64_972?kg=dy HTTP/1.0
1-334315920/140/2190_
89.0684470.01.1017.87
162.158.190.118implant-capillaire.org:7081GET /blog/2/2/4/detail/3/detail/48/que-faire-pour-ameliorer-les
1-334315920/139/2190_
89.0958460.01.4720.29
172.70.130.194otoplastie.info:7081HEAD / HTTP/1.0
1-334315920/140/2186_
89.2924210.01.5018.57
172.71.166.144abdominoplastie.org:7081GET /apple-app-site-association HTTP/1.0
2-334315930/170/2282_
115.96462410.01.3319.38
195.2.71.225mrmohankumar.cirrusvps.ca:7081GET /tutorial/carbon-pricing-101 HTTP/1.0
2-334315930/171/2285_
116.0831220.01.8

Found on 2024-09-14 11:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4695fa04a9ec6231e

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Aug 27 2024 13:58:54

Current Time: Thursday, 12-Sep-2024 11:46:57 EDT
Restart Time: Wednesday, 11-Sep-2024 03:13:18 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 1 day 8 hours 33 minutes 39 seconds
Server load: 2.06 1.67 1.51
Total accesses: 147865 - Total Traffic: 1.2 GB
CPU Usage: u601.18 s611.78 cu0 cs0 - 1.03% CPU load
1.26 requests/sec - 10.5 kB/second - 8.3 kB/request
1 requests currently being processed, 124 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
24819750yes025000
24819940yes025000
24820050yes124000
24822040yes025000
26190500yes025000
Sum0 1124000

____________________________________________________________W___
_____________________________________________________________...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-124819750/250/946_
189.4853360.01.706.66
24.222.58.196shorehamvillage.com:7081GET /wp-content/uploads/2016/04/powered-by-dfi-200.png HTTP/1.0
0-124819750/252/953_
189.551250.01.626.24
172.69.135.67en.cosmeticatravel.com:7081GET /about HTTP/1.0
0-124819750/251/946_
189.3588100.01.616.92
204.16.57.115shorehamvillage.com:7081GET /wp-content/uploads/2016/04/social-facebook-200.png HTTP/1.
0-124819750/250/948_
189.26923160.02.277.81
180.102.110.174amitoladesignconcepts.ca:7080GET / HTTP/1.0
0-124819750/249/951_
189.4953120.02.096.86
24.222.58.196shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/shadow.png HTTP/1.0
0-124819750/249/952_
189.318970.02.868.43
204.16.57.115shorehamvillage.com:7081GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.0
0-124819750/254/951_
189.288980.02.436.91
204.16.57.115shorehamvillage.com:7081GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP
0-124819750/250/952_
189.3289320.01.586.75
204.16.57.115shorehamvillage.com:7081GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HT
0-124819750/253/949_
189.522570.01.807.21
47.128.96.229mrmohankumar.cirrusvps.ca:7081GET /sites/default/files/pct%20inc%20consumer%20price%20canada.
0-124819750/254/945_
189.3389500.02.208.53
204.16.57.115shorehamvillage.com:7081GET /wp-content/plugins/accordion-blocks/build/index.css?ver=1.
0-124819750/247/944_
189.348970.02.097.02
204.16.57.115shorehamvillage.com:7081GET /wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver
0-124819750/249/947_
189.495390.02.106.70
24.222.58.196shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/white-star.png HTTP/1
0-124819750/250/947_
189.495390.02.077.33
24.222.58.196shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/btn_tail.png HTTP/1.0
0-124819750/251/949_
189.570270.02.628.65
172.69.134.89en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
0-124819750/251/949_
189.231201960.01.727.41
166.88.122.48zevrev.org:7080GET /node/23 HTTP/1.0
0-124819750/249/948_
189.426760.02.406.59
194.38.20.13bushleaguefactor.com:7081GET /admin/plugins/fileupload/server/php/index.php?file=tf2rghf
0-124819750/251/948_
189.4072110.02.448.09
204.16.57.115shorehamvillage.com:7081GET /wp-content/uploads/bb-plugin/cache/33-layout.js?ver=ec433e
0-124819750/249/949_
189.3189360.01.878.62
204.16.57.115shorehamvillage.com:7081GET /wp-includes/css/dashicons.min.css?ver=6.6.2 HTTP/1.0
0-124819750/251/949_
189.4853350.01.466.11
24.222.58.196shorehamvillage.com:7081GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP
0-124819750/249/945_
189.318980.02.367.19
204.16.57.115shorehamvillage.com:7081GET /wp-content/plugins/ubermenu/assets/css/skins/blackwhite2.c
0-124819750/253/948_
189.4953600.02.827.74
24.222.58.196shorehamvillage.com:7081GET /wp-content/themes/genesis/lib/js/menu/superfish.args.min.j
0-124819750/256/954_
189.4753110.02.637.99
24.222.58.196shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/blue-star.png HTTP/1.
0-124819750/250/947_
189.3688200.02.687.67
204.16.57.115shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/shoreham-villa
0-124819750/249/944_
189.397212290.02.348.49
204.16.57.115shorehamvillage.com:7081GET /our-home/ HTTP/1.0
0-124819750/251/949_
189.3389520.02.067.11
204.16.57.115shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/blocks/random-testimo
1-124819940/302/996_
208.0753120.02.447.21
24.222.58.196shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/shoreham-villa
1-124819940/300/994_
208.0753450.02.177.76
24.222.58.196shorehamvillage.com:7081GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.0
1-124819940/301/998_
208.1153160.03.249.07
24.222.58.196shorehamvillage.com:7081GET /wp-content/uploads/2024/04/ShorehamBoard-Ad-No-Footer2.jpg
1-124819940/301/1001_
207.946540.02.437.40
47.128.123.253bushleaguefactor.com:7081GET /robots.txt HTTP/1.0
1-124819940/297/996_
207.88881590.03.468.79
66.249.75.66technovationacademy.com:7081GET /products/conviviality44964?id=865 HTTP/1.0
1-124819940/301/1002_
208.2121760.01.757.97
66.249.75.67technovationacademy.com:7081GET /products/laking1875056?id=909 HTTP/1.0
1-124819940/301/997_
208.0853770.02.797.95
24.222.58.196shorehamvillage.com:7081GET /wp-content/plugins/bb-plugin/js/jquery.easing.1.3.js?ver=1
1-124819940/301/998_
208.0853590.02.657.29
24.222.58.196shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/lib/js/dynamik-responsive.js
1-124819940/302/1001_
208.0853280.02.977.96
24.222.58.196shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/top_blocks_tail.png H
1-124819940/301/998_
208.115360.02.978.30
24.222.58.196shorehamvillage.com:7081GET /wp-content/uploads/2023/11/ACSealAwES-1.png HTTP/1.0
1-124819940/301/1001_
207.985490.02.3313.82
24.222.58.196shorehamvillage.com:7081GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP
1-124819940/299/998_
208.0753530.02.998.78
24.222.58.196shorehamvillage.com:7081GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.0
1-124819940/300/998_
208.005360.03.168.45
24.222.58.196shorehamvillage.com:7081GET /wp-content/uploads/2016/04/social-facebook-200.png HTTP/1.
1-124819940/298/995_
208.115360.02.907.83
24.222.58.196shorehamvillage.com:7081GET /wp-content/uploads/2023/07/20220208_DementiaSurveil_11003.
1-124819940/299/994_
208.12461720.02.176.96
66.249.66.21technovationacademy.com:7081GET /?/list/ct.php/products/ganza1548503?id=491 HTTP/1.0
1-124819940/303/1004_
208.17272480.02.588.42
47.128.96.229mrmohankumar.cirrusvps.ca:7081GET /file/70 HTTP/1.0
1-124819940/300/1001_
207.898050.02.358.13
47.128.97.58celeste.cirrushosting.com:7081GET /en/media-menu-en/news-menu/554-premios-en-varadero-gourmet
1-124819940/300/999_
208.0053240.02.377.52
24.222.58.196shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/include/assets/js/eas
1-124819940/301/1000_
208.0753250.05.3310.65
24.222.58.196shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/menu_tail.png 
1-124819940/302/999_
208.1528230.02.727.71
51.79.69.229annexosteopathy.com:7081GET / HTTP/1.0
1-124819940/299/1001_
208.19228320.02.067.72
208.88.4.121annexosteopathy.com:7081POST /wp-cron.php?doing_wp_cron=1726155994.23164296150207519531
1-124819940/301/998_
208.0053320.03.057.77
24.222.58.196shorehamvillage.com:7081GET /wp-content/plugins/ubermenu/assets/css/fontawesome/css/fon
1-124819940/300/994_
208.0753500.02.43

Found on 2024-09-12 15:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9cc7bc5a3

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Tuesday, 10-Sep-2024 12:26:05 EDT
Restart Time: Tuesday, 10-Sep-2024 12:23:16 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 2 minutes 48 seconds
Server load: 2.37 1.87 1.81
Total accesses: 399 - Total Traffic: 4.9 MB
CPU Usage: u4.47 s6.33 cu0 cs0 - 6.43% CPU load
2.38 requests/sec - 29.7 kB/second - 12.5 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
17893690yes025000
17893900yes025000
17894130yes124000
17895860yes025000
Sum0 199000

_____________________________________________________________W__
____________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-017893690/5/5_
2.300340.00.070.07
172.69.130.209en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-017893690/4/4_
2.0351530.00.040.04
172.71.167.226cosmeticatravel.com:7081HEAD / HTTP/1.0
0-017893690/3/3_
2.04491660.00.130.13
66.249.75.68technovationacademy.com:7081GET /products/gatewayman33303?id=305 HTTP/1.0
0-017893690/4/4_
2.0351570.00.040.04
172.71.167.171implant-capillaire.org:7081HEAD / HTTP/1.0
0-017893690/4/4_
2.0641640.00.040.04
172.70.38.57la-liposuccion.com:7081HEAD / HTTP/1.0
0-017893690/4/4_
2.08411700.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.09396220.00.060.06
52.167.144.171theelectricians.ca:7081GET /w_150/https:/theelectricians.ca/wp-content/uploads/2020/03
0-017893690/4/4_
2.11381820.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.11371740.00.040.04
157.55.39.7technovationacademy.com:7080GET /drmhs/u1689198.html HTTP/1.0
0-017893690/3/3_
2.13331980.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.16261780.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.15322740.00.110.11
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.18251790.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.21121760.00.070.07
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/3/3_
1.995410870.00.000.00
34.122.147.229shorehamvillage.com:7081GET /wp-content/uploads/2016/04/social-facebook-200.png HTTP/1.
0-017893690/3/3_
0.9955610.00.040.04
34.122.147.229shorehamvillage.com:7081GET /wp-includes/js/wp-emoji-release.min.js?ver=6.2.6 HTTP/1.0
0-017893690/2/2_
1.0055580.00.000.00
34.122.147.229shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/shoreham-villa
0-017893690/2/2_
1.0055330.00.040.04
34.122.147.229shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/top_tail.png H
0-017893690/3/3_
0.9855470.00.020.02
34.122.147.229shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/menu_tail.png 
0-017893690/3/3_
0.9955320.00.000.00
34.122.147.229shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/white-star.png HTTP/1
0-017893690/4/4_
2.2711720.00.010.01
52.167.144.191technovationacademy.com:7080GET /list/1_5103_746?kg=dy HTTP/1.0
0-017893690/4/4_
2.246140.00.010.01
71.7.149.168shorehamvillage.com:7081GET /favicon.ico HTTP/1.0
0-017893690/4/4_
2.2271930.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.2731760.00.070.07
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
0-017893690/4/4_
2.2551670.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.34291670.00.110.11
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.31341680.00.080.08
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.32311940.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.35281790.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.37281770.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.41191820.00.050.05
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.38211710.00.010.01
40.77.167.28technovationacademy.com:7080GET /tag/pwtzd HTTP/1.0
1-017893900/5/5_
3.39201710.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/4/4_
3.441126430.00.130.13
156.34.164.93shorehamvillage.com:7081POST /autodiscover/autodiscover.xml HTTP/1.0
1-017893900/5/5_
3.4722160.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/5/5_
3.500170.00.070.07
108.162.241.171en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-017893900/5/5_
3.4811780.00.010.01
66.249.69.96technovationacademy.com:7081GET /?/list/ct.php/products/bluffer923797?id=677 HTTP/1.0
1-017893900/5/5_
3.472500.00.010.01
108.162.216.96reduction-mammaire.org:7081HEAD / HTTP/1.0
1-017893900/5/5_
3.520280.00.040.04
172.69.130.52en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-017893900/4/4_
3.29372000.00.070.07
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/3/3_
3.1855160.00.010.01
34.122.147.229shorehamvillage.com:7081GET /wp-content/plugins/ubermenu/assets/css/fontawesome/fonts/f
1-017893900/4/4_
3.1755200.00.040.04
34.122.147.229shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/blue-star.png HTTP/1.
1-017893900/4/4_
3.1855250.00.040.04
34.122.147.229shorehamvillage.com:7081GET /wp-content/themes/dynamik-gen/images/top_blocks_tail.png H
1-017893900/4/4_
3.205560.00.010.01
35.239.103.25shorehamvillage.ca:7080GET / HTTP/1.0
1-017893900/4/4_
3.234760.00.070.07
36.110.131.24celeste.cirrushosting.com:7081GET /images/articles/La-linea-azul-del-ron-cubano__Foto-0.jpg H
1-017893900/4/4_
3.21511690.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/4/4_
3.244680.00.010.01
108.162.245.245cosmeticatravel.co.uk:7081GET /wp-content/uploads/2019/10/Lifting-visage-3-980x650.jpg HT
1-017893900/4/4_
3.25461960.00.070.07
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
1-017893900/4/4_
3.29371880.00.070.07
157.55.39.7technovationacademy.com:7081GET /list/241_76?kg=dy HTTP/1.0
1-017893900/4/4_
3.274360.00.040.04
103.136.220.239celeste.cirrushosting.com:7081GET /images/articles/La-linea-azul-del-ron-cubano__Foto-0.jpg H
2-017894130/4/4_
2.091510320.00.000.00
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
2-017894130/4/4_
1.01231650.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
2-017894130/4/4_
2.12132060.00.040.04
139.211.26.75zevrev.org:7081GET /node/7 HTTP/1.0
2-017894130/4/4_
2.13132020.00.080.08
1

Found on 2024-09-10 16:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a963c2452e

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Sunday, 08-Sep-2024 02:41:16 EDT
Restart Time: Saturday, 07-Sep-2024 14:07:45 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 33 minutes 31 seconds
Server load: 0.51 0.49 0.61
Total accesses: 37878 - Total Traffic: 326.6 MB
CPU Usage: u477.18 s497.98 cu0 cs0 - 2.16% CPU load
.838 requests/sec - 7.4 kB/second - 8.8 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
5723550yes025000
5723600yes025000
5723840yes025000
5725680yes124000
Sum0 199000

________________________________________________________________
_____________________________W______............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-05723550/333/333_
215.1913480.02.752.75
172.69.130.81la-liposuccion.com:7081GET /images/article/1453803782.jpg HTTP/1.0
0-05723550/336/336_
215.332060.02.882.88
159.89.17.243tunisia-golf-travel.com:7081GET /.DS_Store HTTP/1.0
0-05723550/336/336_
215.101491620.02.762.76
52.167.144.192technovationacademy.com:7080GET /dzdyi/b109500.html HTTP/1.0
0-05723550/335/335_
215.322240.02.562.56
159.89.17.243tunisia-golf-travel.com:7081GET /v2/_catalog HTTP/1.0
0-05723550/334/334_
215.17135410.02.942.94
172.68.27.114en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-05723550/334/334_
215.420270.03.053.05
172.71.99.40en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-05723550/336/336_
215.3832570.03.223.22
66.249.75.106nothim.ca:7081GET /robots.txt HTTP/1.0
0-05723550/330/330_
215.05182490.03.233.23
162.158.174.148lifting-mammaire.net:7081HEAD / HTTP/1.0
0-05723550/333/333_
214.95201660.02.432.43
159.89.17.243tunisia-golf-travel.com:7081GET /.env HTTP/1.0
0-05723550/337/337_
215.371070.02.622.62
117.132.188.205bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=jls HTTP/1.0
0-05723550/336/336_
215.1413880.03.103.10
159.223.132.86webmail.indemnia.ca:7081GET /server-status HTTP/1.0
0-05723550/333/333_
215.1413750.03.153.15
159.223.132.86webmail.indemnia.ca:7081GET /telescope/requests HTTP/1.0
0-05723550/331/331_
215.400290.02.652.65
172.71.183.141en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
0-05723550/331/331_
215.071784900.03.603.60
175.178.35.245eleven5p.ca:7081POST /xmlrpc.php HTTP/1.0
0-05723550/337/337_
215.238040.02.982.98
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-05723550/336/336_
215.31259900.02.162.16
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1725777650.36039900779724121093
0-05723550/336/336_
215.11138310.03.343.34
159.223.132.86webmail.indemnia.ca:7081GET / HTTP/1.0
0-05723550/332/332_
215.322140.02.732.73
159.89.17.243tunisia-golf-travel.com:7081GET /login.action HTTP/1.0
0-05723550/336/336_
214.9819490.03.033.03
167.71.175.236tunisia-business-travel.com:708GET /.git/config HTTP/1.0
0-05723550/336/336_
215.15135520.02.962.96
162.158.243.89otoplastie.info:7081GET / HTTP/1.0
0-05723550/333/333_
215.27461620.02.452.45
157.55.39.60technovationacademy.com:7080GET /ruttw/f1249072.html HTTP/1.0
0-05723550/336/336_
215.26461620.02.832.83
157.55.39.60technovationacademy.com:7081GET /list/252_3097_253?kg=dy HTTP/1.0
0-05723550/329/329_
215.061782260.02.702.70
208.88.4.121eleven5p.ca:7081POST /wp-cron.php?doing_wp_cron=1725777497.48905491828918457031
0-05723550/335/335_
215.29281670.02.942.94
44.222.82.133technovationacademy.com:7080GET /products/legatee2443842?id=610 HTTP/1.0
0-05723550/334/334_
215.1213850.02.752.75
159.223.132.86webmail.indemnia.ca:7081GET /.vscode/sftp.json HTTP/1.0
1-05723600/349/349_
225.6211018090.03.443.44
172.71.175.56cosmeticatravel.co.uk:7081GET / HTTP/1.0
1-05723600/353/353_
225.50127310.03.753.75
172.68.26.189la-liposuccion.com:7081HEAD / HTTP/1.0
1-05723600/351/351_
225.821940.03.033.03
159.89.17.243tunisia-golf-travel.com:7081GET /s/132313e243e28383e2830323/_/;/META-INF/maven/com.atlassia
1-05723600/354/354_
225.802170.03.073.07
159.89.17.243tunisia-golf-travel.com:7081GET /server-status HTTP/1.0
1-05723600/352/352_
225.4713217800.01.831.83
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1725777542.47371602058410644531
1-05723600/357/357_
225.6786190.03.143.14
54.88.179.33doctor-london.co.uk:7081GET / HTTP/1.0
1-05723600/358/358_
225.71451620.03.083.08
87.250.224.213technovationacademy.com:7081GET /products/dantophilist1260970?id=938 HTTP/1.0
1-05723600/351/351_
225.8941620.03.323.32
44.222.82.133technovationacademy.com:7080GET /products/fjerding296282?id=734 HTTP/1.0
1-05723600/356/356_
225.7628480.02.742.74
162.158.174.42gynecomastie.org:7081HEAD / HTTP/1.0
1-05723600/357/357_
225.64951590.02.982.98
66.249.64.41technovationacademy.com:7081GET /?/list/ct.php/config/entry/review/add/product_id/2462086 H
1-05723600/357/357_
225.841950.03.053.05
159.89.17.243tunisia-golf-travel.com:7081GET /telescope/requests HTTP/1.0
1-05723600/354/354_
225.851990.02.912.91
208.88.4.121
1-05723600/354/354_
225.9022180.03.103.10
66.249.75.106nothim.ca:7081GET /feed/ HTTP/1.0
1-05723600/358/358_
225.887100.02.622.62
117.132.188.205bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=blt HTTP/1.0
1-05723600/355/355_
225.831950.03.283.28
167.71.175.236tunisia-business-travel.com:708GET /about HTTP/1.0
1-05723600/355/355_
225.71451680.03.223.22
5.255.231.146technovationacademy.com:7081GET /products/hexapetalous1899371?id=522 HTTP/1.0
1-05723600/352/352_
225.491311630.03.863.86
87.250.224.83technovationacademy.com:7081GET /products/creedlessness1946594?id=840 HTTP/1.0
1-05723600/352/352_
225.32201590.03.523.52
159.89.17.243tunisia-golf-travel.com:7081GET /.git/config HTTP/1.0
1-05723600/355/355_
225.8611130.04.304.30
117.132.188.205bushleaguefactor.com:7081GET / HTTP/1.0
1-05723600/352/352_
225.75291570.03.013.01
52.167.144.192technovationacademy.com:7080GET /jfapc/o752214.html HTTP/1.0
1-05723600/357/357_
225.8219180.04.024.02
208.88.4.121
1-05723600/356/356_
225.6311040.02.832.83
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-05723600/353/353_
225.73431760.03.053.05
5.255.231.25technovationacademy.com:7081GET /products/durrie1737004?id=816 HTTP/1.0
1-05723600/353/353_
225.4513850.02.552.55
159.223.132.86webmail.indemnia.ca:7081GET /login.action HTTP/1.0
1-05723600/357/357_
225.782424890.03.283.28
24.222.58.196shorehamvillage.com:7081POST /autodiscover/autodiscover.xml HTTP/1.0
2-05723840/329/329_
211.961940.02.862.86
167.71.175.236tunisia-business-travel.com:708GET /.vscode/sftp.json HTTP/1.0
2-05723840/332/332_
212.01111430.02.592.59
107.180.118.85annexosteopathy.com:7081POST /xmlrpc.php HTTP/1.0
2-05723840/331/331

Found on 2024-09-08 06:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a90a44b57f

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Thursday, 05-Sep-2024 21:47:47 EDT
Restart Time: Wednesday, 04-Sep-2024 03:11:38 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 1 day 18 hours 36 minutes 8 seconds
Server load: 0.37 0.43 0.36
Total accesses: 171604 - Total Traffic: 1.6 GB
CPU Usage: u910.32 s958.25 cu0 cs0 - 1.22% CPU load
1.12 requests/sec - 10.9 kB/second - 9.7 kB/request
1 requests currently being processed, 149 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
31446950yes025000
31447230yes124000
31447510yes025000
31449300yes025000
32603680yes025000
34331830yes025000
Sum0 1149000

_______________________________________________W________________
________________________________________________________________
______________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-131446950/493/1085_
310.311481710.03.549.43
87.250.224.6technovationacademy.com:7081GET /products/malacobdella2271179?id=162 HTTP/1.0
0-131446950/491/1087_
310.3314216810.03.4210.22
208.88.4.121francinelalonde.com:7081POST /wp-cron.php?doing_wp_cron=1725587123.51583290100097656250
0-131446950/493/1081_
310.4096470.03.559.85
172.71.175.89lifting-mammaire.net:7081HEAD / HTTP/1.0
0-131446950/494/1090_
310.371191660.03.879.39
40.77.167.243technovationacademy.com:7080GET /pscnn/n552902.html HTTP/1.0
0-131446950/496/1084_
310.563290.04.119.51
162.158.170.132en.cosmeticatravel.com:7081GET /about HTTP/1.0
0-131446950/494/1086_
310.1030160.03.609.60
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
0-131446950/491/1082_
310.4568250.03.3910.43
172.71.166.157it.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-131446950/492/1085_
310.494640.05.5011.87
157.55.39.222tunisia-business-travel.com:708GET /robots.txt HTTP/1.0
0-131446950/492/1081_
310.11294150.04.0110.21
95.217.195.123muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-131446950/493/1084_
310.1428516750.03.709.73
208.88.4.121francinelalonde.com:7081POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=CZf6
0-131446950/489/1084_
310.2123636750.04.499.92
172.70.80.198cosmeticatravel.fr:7081GET / HTTP/1.0
0-131446950/494/1086_
310.47532320.04.9810.88
89.41.26.199technovationacademy.com:7081GET / HTTP/1.0
0-131446950/489/1080_
310.1428716180.03.6510.49
171.244.0.91francinelalonde.com:7081POST /wp-login.php HTTP/1.0
0-131446950/493/1085_
310.4376460.03.158.25
172.71.166.84cosmeticatravel.com:7081HEAD / HTTP/1.0
0-131446950/492/1085_
310.28176140.04.2710.77
188.143.169.41bushleaguefactor.com:7081GET / HTTP/1.0
0-131446950/493/1086_
310.35126290.03.8410.57
172.68.27.206cosmeticatravel.com:7081GET /lifitng-non-chirurgical-du-visage.php HTTP/1.0
0-131446950/492/1075_
310.23227200.04.039.69
108.162.241.98cosmeticatravel.com:7081GET /blog/media/article/1444983987.jpg HTTP/1.0
0-131446950/492/1087_
310.381152650.03.929.36
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-131446950/489/1081_
310.102991690.03.209.08
40.77.167.243technovationacademy.com:7080GET /list/265_2142?kg=dy HTTP/1.0
0-131446950/491/1080_
310.54350.02.879.08
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
0-131446950/493/1086_
310.162672250.03.709.54
207.46.13.6technovationacademy.com:7080GET /list/49_5639?kg=dy HTTP/1.0
0-131446950/493/1086_
310.301571610.04.5110.08
157.55.39.201technovationacademy.com:7080GET /tag/gvwee HTTP/1.0
0-131446950/493/1087_
310.44711630.04.2010.50
52.167.144.166technovationacademy.com:7080GET /tag/gfdat HTTP/1.0
0-131446950/491/1086_
310.361231600.03.829.45
17.241.219.188technovationacademy.com:7080GET /nspuv/aLVZowyd1403780.html HTTP/1.0
0-131446950/491/1085_
310.536400.04.5610.82
172.70.142.230en.cosmeticatravel.com:7081GET / HTTP/1.0
1-131447230/495/1057_
313.542111700.05.0010.45
66.249.64.41technovationacademy.com:7081GET /?/hayami/hayami_tc.php/products/mellivorinae2275435?id=365
1-131447230/500/1064_
313.7997230.04.5210.19
157.55.39.6sirokotravel.com:7081GET / HTTP/1.0
1-131447230/497/1061_
313.823140.04.9912.06
172.70.143.197en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-131447230/499/1058_
313.631192130.04.769.85
91.219.148.241mrmohankumar.cirrusvps.ca:7081GET /tutorial/carbon-pricing-101 HTTP/1.0
1-131447230/495/1052_
313.38323270.04.579.90
162.158.129.89en.cosmeticatravel.com:7081GET /health-check-up.php HTTP/1.0
1-131447230/498/1062_
313.571889770.03.899.89
103.158.22.22shorehamvillage.com:7081POST /xmlrpc.php HTTP/1.0
1-131447230/494/1056_
313.413071700.04.279.08
5.255.231.169technovationacademy.com:7081GET /products/eyen1503727?id=561 HTTP/1.0
1-131447230/501/1068_
313.40308150.03.999.90
95.217.195.123muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-131447230/499/1061_
313.45289180.04.6610.34
172.70.80.57cosmeticatravel.com:7081GET /blog/media/article/1423561300.jpg HTTP/1.0
1-131447230/497/1057_
313.353261740.03.7910.26
87.250.224.30technovationacademy.com:7081GET /products/patterned2124470?id=768 HTTP/1.0
1-131447230/498/1059_
313.5916640.04.569.78
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-131447230/497/1063_
313.472641630.03.769.23
5.255.231.245technovationacademy.com:7081GET /products/hoopmaker2053878?id=524 HTTP/1.0
1-131447230/501/1064_
313.5122670.03.859.12
47.128.32.250underwoodfinancial.com:7081GET /site/assets/files/1/underwood_logo.svg HTTP/1.0
1-131447230/497/1066_
313.67981610.04.9911.66
95.108.213.159technovationacademy.com:7081GET /products/candlerent2091322?id=766 HTTP/1.0
1-131447230/499/1055_
313.502271750.04.5410.16
47.128.32.250underwoodfinancial.com:7081GET / HTTP/1.0
1-131447230/499/1062_
313.1110216330.05.0810.90
172.68.238.107le-lifting.com:7081GET /.env.bak HTTP/1.0
1-131447230/498/1059_
313.75301660.03.679.77
66.249.64.40technovationacademy.com:7081GET /?/list/ct.php/products/cupped456285?id=385 HTTP/1.0
1-131447230/495/1050_
313.725140.04.409.50
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-131447230/495/1060_
313.54211190.04.529.72
95.217.195.123muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-131447230/497/1054_
313.7338160.03.649.45
95.217.195.123muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-131447230/499/1060_
313.4229510.04.259.56
66.249.79.32technovationacademy.com:7081GET /tfphp/v643526.html HTTP/1.0
1-131447230/499/1059_
313.6510414160.04.209.24
66.181.72.85francinelalonde.com:7081POST /wp-login.php HTTP/1.0
1-131447230/498/1058W
313.32000.04.8310.23
172.71.124.162en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-131447230/497/1061_
313.706960.03.519.39
51.222.253.4daryljamieson.com:7081GET /jp/jp/index_files/c5c49e1d022b322f10ce8aea2c0e15b4-12.html
1-131447230/498/1059_
313.3632560.04.189.45
206.189.59.166celeste.cirrushosting.com:7081

Found on 2024-09-06 01:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a94bbfbe20

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Tuesday, 03-Sep-2024 21:49:05 EDT
Restart Time: Monday, 02-Sep-2024 12:08:17 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 1 day 9 hours 40 minutes 48 seconds
Server load: 0.12 0.21 0.32
Total accesses: 106444 - Total Traffic: 917.8 MB
CPU Usage: u795.12 s778.42 cu0 cs0 - 1.3% CPU load
.878 requests/sec - 7.8 kB/second - 8.8 kB/request
1 requests currently being processed, 174 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
20520820yes025000
20521100yes025000
20521380yes025000
20523560yes025000
21485340yes025000
21984990yes025000
21987620yes124000
Sum0 1174000

________________________________________________________________
________________________________________________________________
_________________________________________W_____.................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-120520820/305/544_
213.343621780.02.224.35
95.108.213.131technovationacademy.com:7081GET /products/metacarpal2222371?id=534 HTTP/1.0
0-120520820/305/540_
213.4227060.03.195.78
206.81.11.46fenoor.com:7081GET /favicon.ico HTTP/1.0
0-120520820/305/537_
213.571381720.02.815.27
207.46.13.102technovationacademy.com:7081GET /ptznr/n275206.html HTTP/1.0
0-120520820/305/538_
213.71191700.02.655.17
40.77.167.247technovationacademy.com:7080GET /sxrpj/u149626.html HTTP/1.0
0-120520820/309/546_
213.67701600.03.025.33
213.180.203.187technovationacademy.com:7081GET /products/febrifugal901401?id=636 HTTP/1.0
0-120520820/303/538_
213.6588290.02.354.01
5.181.86.85kingbiryanihouse.com:7081GET / HTTP/1.0
0-120520820/305/540_
213.52179180.02.315.33
172.70.135.107cosmeticatravel.com:7081GET /chatbot/assets/js/responses.js HTTP/1.0
0-120520820/302/539_
212.8132750.02.484.50
87.236.176.12
0-120520820/307/540_
213.452391720.01.673.36
207.46.13.102technovationacademy.com:7081GET /zkrim/o1660250.html HTTP/1.0
0-120520820/305/543_
213.373291750.02.314.06
40.77.167.247technovationacademy.com:7081GET /list/49_6473?kg=dy HTTP/1.0
0-120520820/305/539_
212.743881710.02.944.85
87.236.176.14
0-120520820/305/544_
213.712040.03.055.15
64.227.154.105celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
0-120520820/306/537_
213.343601660.01.994.31
40.77.167.247technovationacademy.com:7081GET /upssa/w1840161.html HTTP/1.0
0-120520820/303/535_
213.27437500.02.414.51
172.69.64.245implant-capillaire.org:7081HEAD / HTTP/1.0
0-120520820/301/534_
213.224777790.02.444.44
208.88.4.121francinelalonde.com:7081POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=WCDR
0-120520820/304/539_
213.294056680.02.144.53
208.88.4.121francinelalonde.com:7081POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=8QJY
0-120520820/305/538_
213.74318570.02.584.43
172.70.80.189cosmeticatravel.fr:7081GET /favicon.ico HTTP/1.0
0-120520820/307/543_
213.541636830.02.014.61
208.88.4.121
0-120520820/301/536_
213.72161720.02.404.67
40.77.167.78technovationacademy.com:7081GET /f/golf HTTP/1.0
0-120520820/307/540_
213.621001850.01.734.36
15.237.252.86zevrev.org:7081GET /wp-head.php HTTP/1.0
0-120520820/306/544_
213.561491670.02.664.17
40.77.167.73technovationacademy.com:7080GET /hajjk/s301676.html HTTP/1.0
0-120520820/304/537_
213.412811750.02.444.48
17.241.75.82technovationacademy.com:7080GET /ahttt/elgPjXEd1652343.html HTTP/1.0
0-120520820/306/541_
213.264372840.02.004.42
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-120520820/305/542_
213.591161770.03.045.30
5.255.231.148technovationacademy.com:7081GET /products/laboriously803216?id=180 HTTP/1.0
0-120520820/303/540_
213.472169530.02.694.96
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1725414327.96126604080200195312
1-120521100/290/580_
210.163291660.01.833.98
40.77.167.247technovationacademy.com:7080GET /tag/vwnas HTTP/1.0
1-120521100/292/582_
210.2228250.01.864.50
66.249.72.7tunisia-business-travel.com:708GET /js/jquery.nivo.slider.js HTTP/1.0
1-120521100/294/586_
210.123741670.02.285.35
93.174.93.12technovationacademy.com:7080GET / HTTP/1.0
1-120521100/292/587_
210.43921690.02.936.11
5.255.231.11technovationacademy.com:7081GET /products/macedonic1781353?id=923 HTTP/1.0
1-120521100/287/580_
210.4814310.02.655.83
164.92.244.132webmail.indemnia.ca:7081GET / HTTP/1.0
1-120521100/294/583_
210.1830950.02.475.31
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-120521100/292/582_
210.45491640.02.335.42
87.250.224.73technovationacademy.com:7081GET /products/invest1540387?id=879 HTTP/1.0
1-120521100/291/582_
210.0939940.02.995.89
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-120521100/293/590_
209.93578470.02.785.59
172.68.27.5otoplastie.info:7081HEAD / HTTP/1.0
1-120521100/291/578_
210.004991670.02.183.95
207.46.13.102technovationacademy.com:7081GET /qfrrp/a108556.html HTTP/1.0
1-120521100/289/585_
210.2721618070.02.294.67
125.212.209.171shorehamvillage.com:7081POST /wp-login.php HTTP/1.0
1-120521100/293/582_
210.2128360.03.435.43
66.249.72.8tunisia-business-travel.com:708GET /js/script.js HTTP/1.0
1-120521100/291/584_
208.584031430.01.864.71
87.236.176.29
1-120521100/291/583_
210.391301730.01.905.34
213.180.203.138technovationacademy.com:7081GET /products/assignably1440006?id=446 HTTP/1.0
1-120521100/290/584_
209.92578140.02.265.48
172.68.244.186cosmeticatravel.com:7081GET /chatbot/assets/js/Chat.js HTTP/1.0
1-120521100/290/585_
210.074081640.02.525.55
87.250.224.73technovationacademy.com:7081GET /products/dysraphia2005211?id=133 HTTP/1.0
1-120521100/292/590_
210.321891800.02.906.08
40.77.167.247technovationacademy.com:7080GET /tag/akvah HTTP/1.0
1-120521100/293/588_
210.471600.01.875.34
40.77.167.78technovationacademy.com:7080GET /wp-fame.php/hzfw/263/cmqiv/13340.html HTTP/1.0
1-120521100/290/585_
210.2821215910.01.944.60
207.46.13.127annexosteopathy.com:7081GET /sitemap_index.xml HTTP/1.0
1-120521100/291/580_
210.0840517110.02.274.48
66.249.75.132francinelalonde.com:7081GET /cms/files/media/Pierre_Rannou_Finding.pdf HTTP/1.0
1-120521100/291/586_
210.10397270.02.055.07
172.71.146.230it.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-120521100/291/585_
209.955711670.02.595.23
5.255.231.138technovationacademy.com:7081GET /products/dugong182028?id=904 HTTP/1.0
1-120521100/291/582_
210.301971980.02.525.19
15.237.252.86zevrev.org:7080GET /wp-admin/css/colors/blue/blue.php?wall=ZWNobyAnQmxhY2sgQm9
1-120521100/290/582_
209.90579140.02.445.23
172.70.42.96cosmeticatravel.com:7081GET /chatbot/assets/css/typing.css HTTP/1.0
1-120521100/294/589_
210.34179180.02.194.96
172.70.39.114cosmeticatravel.com:7081GET /js/bootstrap-multiselect.js HTTP/1.0
2-120521380/366/609_
232.3414140.02.545.49
87.236.176.68

Found on 2024-09-04 01:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a947c81a5b

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Monday, 02-Sep-2024 13:53:27 EDT
Restart Time: Monday, 02-Sep-2024 12:08:17 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 1 hour 45 minutes 9 seconds
Server load: 2.25 2.27 2.32
Total accesses: 4837 - Total Traffic: 50.9 MB
CPU Usage: u62.47 s73.57 cu0 cs0 - 2.16% CPU load
.767 requests/sec - 8.3 kB/second - 10.8 kB/request
6 requests currently being processed, 94 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
17251141yes124000
17251311yes223000
17251431yes124000
17252542yes223000
Sum5 694000

____________W_______________W______________W____________________
_______W_______W___________W________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-017251140/39/39_
27.9218419930.00.340.34
162.158.203.21cosmeticatravel.fr:7081POST /wp-login.php HTTP/1.0
0-017251140/37/37_
27.97116410530.00.560.56
40.77.167.28technovationacademy.com:7080GET /list/1_4380?kg=dy HTTP/1.0
0-017251140/37/37_
28.305190.00.250.25
172.69.94.74otoplastie.info:7081GET //wp-includes/customize/wp-login.php HTTP/1.0
0-017251140/36/36_
28.1012220.00.460.46
172.69.94.74otoplastie.info:7081GET //.tmb/wp-login.php HTTP/1.0
0-017251140/39/39_
27.78229320.00.550.55
172.71.118.242implant-capillaire.org:7081GET /.well-known/traffic-advice HTTP/1.0
0-017251140/38/38_
27.87204410520.00.400.40
20.15.133.186technovationacademy.com:7081GET /products/disgusted265793?id=296 HTTP/1.0
0-017251140/39/39_
28.0817410520.00.420.42
40.77.167.28technovationacademy.com:7081GET /hysel/b700845.html HTTP/1.0
0-017251140/38/38_
28.0636410360.00.430.43
157.55.39.13technovationacademy.com:7081GET /list/5_461?kg=dy HTTP/1.0
0-017251140/36/36_
28.278220.00.110.11
172.69.94.74otoplastie.info:7081GET //wp-admin/maint/wp-login.php HTTP/1.0
0-017251140/38/38_
28.211121990.00.370.37
162.158.175.228cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-017251140/36/36_
27.83214650.00.300.30
162.158.174.218la-liposuccion.com:7081HEAD / HTTP/1.0
0-017251140/38/38_
27.83214220.00.150.15
172.68.27.7cosmeticatravel.com:7081GET /chatbot/assets/css/typing.css HTTP/1.0
0-017251140/35/35W
27.62800.00.200.20
157.55.39.55technovationacademy.com:7080GET /ovdgj/u689960.html HTTP/1.0
0-017251140/34/34_
28.249190.00.460.46
172.69.94.74otoplastie.info:7081GET //wp-admin/images/wp-login.php HTTP/1.0
0-017251140/37/37_
27.91190840.00.190.19
172.70.207.72en.cosmeticatravel.com:7081POST /guestbook.php HTTP/1.0
0-017251140/35/35_
28.0357240.00.380.38
172.71.166.40it.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-017251140/37/37_
27.79219410530.00.220.22
40.77.167.28technovationacademy.com:7080GET /tag/wkibl HTTP/1.0
0-017251140/38/38_
28.0456120.00.330.33
45.77.162.123doctor-london.co.uk:7081HEAD / HTTP/1.0
0-017251140/37/37_
28.258190.00.460.46
172.69.94.74otoplastie.info:7081GET //wp-admin/includes/wp-login.php HTTP/1.0
0-017251140/38/38_
28.314200.00.370.37
172.69.94.74otoplastie.info:7081GET //wp-includes/fonts/wp-login.php HTTP/1.0
0-017251140/39/39_
28.29770.00.210.21
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
0-017251140/35/35_
27.8420840.00.350.35
216.244.66.245amitoladesignconcepts.ca:7080GET /images3/abirr4b.jpg HTTP/1.0
0-017251140/36/36_
27.86206490.00.550.55
172.71.26.29en.cosmeticatravel.com:7081GET /eye-surgery.php HTTP/1.0
0-017251140/37/37_
28.231090.00.250.25
172.69.94.74otoplastie.info:7081GET //images/wp-login.php HTTP/1.0
0-017251140/37/37_
28.055560.00.510.51
45.77.162.123doctor-london.co.uk:7081HEAD /old HTTP/1.0
1-017251310/46/46_
29.8428410530.00.320.32
66.249.79.32technovationacademy.com:7081GET /products/monocular148514?id=378 HTTP/1.0
1-017251310/48/48_
29.71107410540.00.500.50
157.55.39.13technovationacademy.com:7081GET /lcfvp/s1202171.html HTTP/1.0
1-017251310/50/50_
29.833150.00.730.73
5.102.173.71doctor-london.co.uk:7081GET /robots.txt HTTP/1.0
1-017251310/50/50W
29.63000.00.440.44
172.70.251.99en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-017251310/48/48_
29.8711140.00.600.60
172.69.94.74otoplastie.info:7081GET //.well-known/pki-validation/wp-login.php HTTP/1.0
1-017251310/46/46_
29.8332460.00.980.98
172.70.42.250otoplastie.info:7081HEAD / HTTP/1.0
1-017251310/52/52_
30.031130.00.770.77
172.71.172.52en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-017251310/47/47_
29.7592520.00.630.63
172.69.65.54cosmeticatravel.com:7081HEAD / HTTP/1.0
1-017251310/51/51_
29.993210.00.880.88
172.69.94.74otoplastie.info:7081GET //wp-includes/IXR/wp-login.php HTTP/1.0
1-017251310/47/47_
29.70114490.00.150.15
172.68.26.137implant-capillaire.org:7081HEAD / HTTP/1.0
1-017251310/52/52_
29.8910190.00.690.69
172.69.94.74otoplastie.info:7081GET //wp-admin/css/wp-login.php HTTP/1.0
1-017251310/50/50_
29.916210.00.520.52
172.69.94.74otoplastie.info:7081GET //wp-content/languages/wp-login.php HTTP/1.0
1-017251310/49/49_
29.954410480.00.640.64
20.15.133.186technovationacademy.com:7081GET /products/nonviviparous2215471?id=837 HTTP/1.0
1-017251310/49/49_
29.945260.00.530.53
172.69.67.151otoplastie.info:7081HEAD / HTTP/1.0
1-017251310/49/49_
29.65150430.00.460.46
172.68.27.201en.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-017251310/47/47_
29.8519410510.00.720.72
40.77.167.28technovationacademy.com:7081GET /ciqrs/f1871701.html HTTP/1.0
1-017251310/50/50_
29.955200.00.860.86
172.69.94.74otoplastie.info:7081GET //wp-includes/certificates/wp-login.php HTTP/1.0
1-017251310/47/47_
29.68125410550.00.540.54
157.55.39.13technovationacademy.com:7080GET /asphs/f1249911.html HTTP/1.0
1-017251310/46/46W
29.431100.00.490.49
40.77.167.28technovationacademy.com:7080GET /ivdjl/m1124156.html HTTP/1.0
1-017251310/48/48_
29.993380.00.300.30
172.70.243.97en.cosmeticatravel.com:7081GET / HTTP/1.0
1-017251310/49/49_
29.906500.00.700.70
172.71.166.232gynecomastie.org:7081HEAD / HTTP/1.0
1-017251310/49/49_
30.012410.00.240.24
162.158.95.3en.cosmeticatravel.com:7081GET / HTTP/1.0
1-017251310/47/47_
29.68126410360.00.390.39
66.249.79.34technovationacademy.com:7081GET /products/maimer1028737?id=802 HTTP/1.0
1-017251310/48/48_
29.8056410560.00.500.50
157.55.39.13technovationacademy.com:7081GET /list/252_6185_351?kg=dy HTTP/1.0
1-017251310/49/49_
29.936190.00.340.34
172.69.94.74otoplastie.info:7081GET //wp-content/plugins/wp-login.php HTTP/1.0
2-017251430/42/42_
25.8496410510.00.410.41
83.97.73.245technovationacademy.com:7080GET /actuator/gateway/routes HTTP/1.0
2-017251430/40/40_
25.8110960.00.430.43
66.249.69.39tunisia-business-travel.com:708GET /robots.txt HTTP/1.0
2-017251430/41/41_
25.83108520.00.300.30
<

Found on 2024-09-02 17:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9d7b87fdc

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Sunday, 01-Sep-2024 17:27:05 EDT
Restart Time: Sunday, 01-Sep-2024 13:07:53 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 4 hours 19 minutes 11 seconds
Server load: 0.58 0.65 0.54
Total accesses: 13777 - Total Traffic: 148.2 MB
CPU Usage: u183.81 s188.49 cu0 cs0 - 2.39% CPU load
.886 requests/sec - 9.8 kB/second - 11.0 kB/request
1 requests currently being processed, 124 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
13105400yes025000
13105680yes025000
13105700yes124000
13107110yes025000
13949130yes025000
Sum0 1124000

_______________________________________________________W________
_____________________________________________________________...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-013105400/124/124_
78.043180.01.481.48
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-013105400/124/124_
78.101290.01.611.61
129.222.195.70nothim.ca:7081GET /wp-content/themes/dt-the7/inc/admin/assets/css/the7-dashbo
0-013105400/124/124_
77.9456100.00.740.74
172.70.207.5blepharoplastie.net:7081GET /robots.txt HTTP/1.0
0-013105400/122/122_
78.19090.01.911.91
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-013105400/125/125_
77.85981820.01.471.47
66.249.76.133technovationacademy.com:7081GET /?/information/csr_sdgs.php/bhwli/b121741.html HTTP/1.0
0-013105400/126/126_
77.888050.01.521.52
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
0-013105400/123/123_
78.1783230.01.401.40
185.191.171.10mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/node/node/node/node/node/node/nod
0-013105400/126/126_
78.0629470.01.841.84
162.158.175.199cosmeticatravel.com:7081HEAD / HTTP/1.0
0-013105400/123/123_
77.859250.01.491.49
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
0-013105400/125/125_
77.955560.01.571.57
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
0-013105400/127/127_
77.8499160.01.741.74
172.71.130.81cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
0-013105400/126/126_
78.0044470.00.960.96
172.68.245.16le-lifting.com:7081HEAD / HTTP/1.0
0-013105400/125/125_
77.906530.01.791.79
79.96.144.142ememem3dots.com:7080HEAD /wordpress/ HTTP/1.0
0-013105400/125/125_
78.1411170.01.521.52
129.222.195.70nothim.ca:7081GET /wp-content/plugins/elementor/assets/js/app-loader.min.js?v
0-013105400/128/128_
78.04292880.01.451.45
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-013105400/124/124_
78.082760.01.391.39
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
0-013105400/122/122_
77.906370.01.091.09
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
0-013105400/124/124_
77.9847290.01.681.68
172.71.214.149it.cosmeticatravel.com:7081GET /riduzione_mammaria.php HTTP/1.0
0-013105400/125/125_
78.023460.01.441.44
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
0-013105400/124/124_
77.9747300.01.381.38
172.71.214.149it.cosmeticatravel.com:7081GET /chirurgie_seins.php HTTP/1.0
0-013105400/124/124_
78.013770.01.461.46
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-013105400/127/127_
78.1411250.01.061.06
129.222.195.70nothim.ca:7081GET /wp-content/plugins/elementor/assets/js/admin.min.js?ver=3.
0-013105400/124/124_
78.131190.01.511.51
129.222.195.70nothim.ca:7081GET /wp-content/plugins/elementor/assets/js/media-hints.min.js?
0-013105400/124/124_
77.93561670.01.391.39
157.55.39.205technovationacademy.com:7080GET /bcwte/d545342.html HTTP/1.0
0-013105400/122/122_
77.926160.01.631.63
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/112/112_
81.005860.01.101.10
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/112/112_
81.133660.00.920.92
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/110/110_
81.153550.01.121.12
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/114/114_
81.172860.01.541.54
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-013105680/109/109_
81.20256110.01.041.04
62.171.191.70sirokotravel.com:7081GET /new.tar.gz HTTP/1.0
1-013105680/110/110_
81.123870.01.441.44
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/114/114_
81.192570.00.890.89
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/115/115_
81.2412100.01.151.15
129.222.195.70nothim.ca:7081GET /wp-content/plugins/elementor/assets/lib/backbone/backbone.
1-013105680/111/111_
81.04507590.01.121.12
113.141.91.58sirokotravel.com:7081GET / HTTP/1.0
1-013105680/109/109_
81.094350.01.221.22
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/111/111_
81.304420.00.900.90
172.70.250.54en.cosmeticatravel.com:7081GET / HTTP/1.0
1-013105680/114/114_
81.2511110.01.421.42
129.222.195.70nothim.ca:7081GET /wp-content/plugins/elementor/assets/js/web-cli.min.js?ver=
1-013105680/112/112_
81.271190.00.780.78
129.222.195.70nothim.ca:7081GET /wp-content/themes/dt-the7/inc/admin/assets/js/the7-plugins
1-013105680/111/111_
80.99596280.01.121.12
62.171.191.70sirokotravel.com:7081GET /public.tgz HTTP/1.0
1-013105680/111/111_
81.13361690.01.031.03
66.249.79.34technovationacademy.com:7081GET /qzxha/n1808603.html HTTP/1.0
1-013105680/113/113_
81.221460.00.800.80
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-013105680/113/113_
80.996016780.01.121.12
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-013105680/111/111_
81.035190.01.221.22
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/111/111_
81.074570.01.041.04
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-013105680/111/111_
81.281170.00.930.93
31.187.74.117muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-013105680/112/112_
81.054950.01.591.59
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/111/111_
81.103970.01.591.59
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/Sans-titre-1-_1_.webp HTTP/1.0
1-013105680/112/112_
81.163040.01.431.43
66.249.72.2daryljamieson.com:7080GET /en/research.html HTTP/1.0
1-013105680/113/113_
81.084570.01.031.03
221.8.172.227fit-tunisie.org:7081GET /wp-content/uploads/2023/04/San

Found on 2024-09-01 21:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9e2c4a956

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Friday, 30-Aug-2024 12:39:12 EDT
Restart Time: Tuesday, 27-Aug-2024 18:59:48 EDT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime: 2 days 17 hours 39 minutes 23 seconds
Server load: 1.85 1.84 2.16
Total accesses: 223840 - Total Traffic: 2.0 GB
CPU Usage: u1029.59 s1029.98 cu0 cs0 - .871% CPU load
.947 requests/sec - 9.1 kB/second - 9.6 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
41564990yes025000
41565270yes025000
41565520yes124000
41566360yes025000
Sum0 199000

________________________________________________________W_______
____________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-341564990/239/1421_
152.44511630.03.4915.47
52.167.144.210technovationacademy.com:7080GET /tag/fklsb HTTP/1.0
0-341564990/240/1430_
152.4166390.02.4613.26
167.172.232.142webmail.indemnia.ca:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-341564990/238/1423_
152.16259310.02.4312.85
162.158.49.29la-liposuccion.com:7081GET /blog/page-7/ HTTP/1.0
0-341564990/239/1424_
152.501210520.03.1914.41
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1725035938.35479998588562011718
0-341564990/235/1429_
152.367440.03.8116.13
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-341564990/240/1425_
152.501050.02.9114.05
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
0-341564990/237/1422_
152.112761730.03.8113.36
66.249.79.96technovationacademy.com:7081GET /?/list/ct.php/products/hexamita598665?id=880 HTTP/1.0
0-341564990/236/1425_
152.271551810.03.2813.10
66.249.79.96technovationacademy.com:7081GET /?/list/ct.php/products/inexistence1832256?id=96 HTTP/1.0
0-341564990/239/1420_
152.34953780.03.8013.39
208.88.4.121
0-341564990/238/1421_
152.1823540.02.4013.37
216.244.66.194bushleaguefactor.com:7081GET /robots.txt HTTP/1.0
0-341564990/237/1418_
152.386660.02.9611.91
167.172.232.142webmail.indemnia.ca:7081GET /.DS_Store HTTP/1.0
0-341564990/237/1419_
152.2122960.03.1914.43
65.108.78.33muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/login.php/log
0-341564990/239/1427_
152.46341670.03.2311.00
66.249.79.107technovationacademy.com:7081GET /?/hayami/hayami_tc.php/products/hygroscopical965822?id=82 
0-341564990/237/1422_
152.406670.03.2312.20
167.172.232.142webmail.indemnia.ca:7081GET /telescope/requests HTTP/1.0
0-341564990/237/1417_
152.537970.02.8514.98
172.69.33.73en.cosmeticatravel.com:7081GET /guestbook.php HTTP/1.0
0-341564990/236/1421_
152.1226470.03.0412.96
65.108.78.33muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/login.php/ind
0-341564990/238/1428_
152.561260.03.0011.67
172.69.194.21en.cosmeticatravel.com:7081GET /about HTTP/1.0
0-341564990/237/1420_
152.14264480.03.3713.90
172.69.65.16le-lifting.com:7081HEAD / HTTP/1.0
0-341564990/238/1417_
152.22229540.03.0613.25
172.71.174.170otoplastie.info:7081HEAD / HTTP/1.0
0-341564990/239/1428_
152.30142220.03.1213.30
162.158.111.91abdominoplastie.org:7081GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.
0-341564990/235/1417_
152.1923380.02.7114.44
65.108.78.33muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/login.php/log
0-341564990/238/1419_
152.4262990.02.3311.35
208.88.4.121
0-341564990/238/1422_
152.47302760.03.5011.96
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-341564990/236/1419_
152.454550.02.6511.76
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-341564990/238/1421_
152.386640.02.5415.07
167.172.232.142webmail.indemnia.ca:7081GET /v2/_catalog HTTP/1.0
1-341565270/229/1379_
161.672530.03.2511.92
141.101.98.241en.cosmeticatravel.com:7081GET / HTTP/1.0
1-341565270/224/1374_
161.1224590.02.9913.50
65.108.78.33muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/login.php/ind
1-341565270/231/1378_
161.38138540.03.0113.98
172.69.59.212cosmeticatravel.com:7081HEAD / HTTP/1.0
1-341565270/229/1378_
161.3913250.02.9514.45
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-341565270/230/1380_
161.51943600.02.9414.62
208.88.4.121
1-341565270/226/1379_
161.621224520.02.6812.41
24.222.58.196shorehamvillage.com:7081POST /AutoDiscover/autodiscover.xml HTTP/1.0
1-341565270/226/1368_
161.1621850.02.7811.65
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-341565270/226/1373_
161.30198290.02.9513.64
172.71.175.47blepharoplastie.net:7081HEAD / HTTP/1.0
1-341565270/227/1379_
161.15234100.02.8614.58
65.108.78.33muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/login.php/log
1-341565270/231/1385_
161.602742910.02.4711.91
208.88.4.121amitoladesignconcepts.ca:7080POST /wp-cron.php?doing_wp_cron=1725035920.38224101066589355468
1-341565270/228/1377_
161.47941390.03.2813.47
188.166.221.185nothim.ca:7080GET /?author=1 HTTP/1.0
1-341565270/229/1384_
161.57361770.02.6811.53
66.249.79.32technovationacademy.com:7081GET /products/aperea1261282?id=702 HTTP/1.0
1-341565270/227/1367_
161.4212821410.03.4113.02
208.88.4.121annexosteopathy.com:7081POST /wp-cron.php?doing_wp_cron=1725035821.67910194396972656250
1-341565270/229/1378_
161.64514160.03.4215.78
24.222.58.196shorehamvillage.com:7081POST /autodiscover/autodiscover.xml HTTP/1.0
1-341565270/232/1383_
161.45125280.02.2211.51
193.186.4.21kingbiryanihouse.com:7081GET / HTTP/1.0
1-341565270/228/1374_
161.11246370.02.7714.07
172.71.210.131cosmeticatravel.com:7081GET /login.php?s=Admin/login HTTP/1.0
1-341565270/228/1378_
161.4212918540.02.4511.71
77.75.78.170annexosteopathy.com:7081GET /sitemap-categories.xml HTTP/1.0
1-341565270/229/1380_
161.691120.03.8913.74
172.70.90.92en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-341565270/230/1383_
161.1423640.02.8512.22
154.197.27.93celeste.cirrushosting.com:7080GET / HTTP/1.0
1-341565270/226/1379_
161.3515833770.02.4313.05
172.69.130.22cosmeticatravel.fr:7081GET / HTTP/1.0
1-341565270/227/1370_
161.51946470.02.3711.21
188.166.221.185pennybeames.net:7080GET / HTTP/1.0
1-341565270/230/1371_
161.5467340.02.9313.37
167.172.232.142webmail.indemnia.ca:7081GET / HTTP/1.0
1-341565270/227/1377_
161.546640.02.7911.23
167.172.232.142webmail.indemnia.ca:7081GET /config.json HTTP/1.0
1-341565270/230/1372_
161.2820018590.03.2115.66
172.70.188.44cosmeticatravel.co.uk:7081GET / HTTP/1.0
1-341565270/229/1376_
161.50941860.02.7311.56
66.249.79.96technovationacademy.com:7081GET /?/list/ct.php/list/279_1937?kg=dy HTTP/1.0
2-341565520/282/1607_
176.68101480.03.2314.40
162.158.175.71cosmeticatravel.com:7081HEAD / HTTP/1.0
2-341565520/282/1610_
176.571821650.03.1913.74
207.46.13.6technovationacadem

Found on 2024-08-30 16:39

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9b85beee2

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Wednesday, 28-Aug-2024 14:33:31 EDT
Restart Time: Tuesday, 27-Aug-2024 18:59:48 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 19 hours 33 minutes 42 seconds
Server load: 2.62 2.20 1.86
Total accesses: 65609 - Total Traffic: 681.8 MB
CPU Usage: u521.3 s552.15 cu0 cs0 - 1.52% CPU load
.932 requests/sec - 9.9 kB/second - 10.6 kB/request
1 requests currently being processed, 224 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
31072430yes025000
31072700yes124000
31072990yes025000
31073780yes025000
32048900yes025000
32414300yes025000
32418410yes025000
32419980yes025000
32421990yes025000
Sum0 1224000

_______________________________W________________________________
________________________________________________________________
________________________________________________________________
_________________________________...............................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-131072430/160/393_
117.5841840.04.176.33
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-131072430/162/399_
117.297411630.01.934.35
40.77.167.36technovationacademy.com:7081GET /products/atz-19/ HTTP/1.0
0-131072430/158/394_
117.6040440.02.304.41
172.69.134.56it.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
0-131072430/158/396_
117.7421550.01.744.45
47.128.38.196technovationacademy.com:7080GET /images/facebook-logo-red-light.png HTTP/1.0
0-131072430/161/399_
117.525001730.01.875.83
40.77.167.3technovationacademy.com:7080GET /list/545_1086?kg=dy HTTP/1.0
0-131072430/160/397_
117.732201740.01.564.22
66.249.66.20technovationacademy.com:7081GET /zhaxf/l1616283.html HTTP/1.0
0-131072430/160/399_
117.307401710.01.703.94
40.77.167.3technovationacademy.com:7080GET /jhbzx/t1171428.html HTTP/1.0
0-131072430/164/402_
117.90181730.01.583.91
40.77.167.3technovationacademy.com:7081GET /products/atherosclerosis728430?id=467 HTTP/1.0
0-131072430/157/393_
117.554624590.01.373.00
208.88.4.121
0-131072430/157/393_
117.930170.01.465.76
172.70.111.165en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-131072430/159/394_
117.16909200.01.513.34
172.71.118.97cosmeticatravel.com:7081GET /blog/media/article/1548404757.jpg HTTP/1.0
0-131072430/157/393_
117.149121470.01.486.00
141.101.69.149cosmeticatravel.com:7081GET /blog/a-12-392-fibrome-uterin-de-quoi-sagit-il-et-comment-l
0-131072430/160/395_
117.37650210.00.922.99
172.71.99.137le-lifting.com:7081GET /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disab
0-131072430/160/399_
117.8014860.01.493.56
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-131072430/160/396_
117.4751390.04.607.04
47.128.37.131shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/menu_tail.png 
0-131072430/161/396_
117.3272660.01.764.40
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
0-131072430/162/401_
117.926190.01.253.35
217.113.194.248bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=rom HTTP/1.0
0-131072430/159/396_
117.4651460.01.524.01
47.128.37.131shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/top_tail.png H
0-131072430/159/395_
117.495031840.01.923.58
40.77.167.38technovationacademy.com:7080GET /list/663_455?kg=dy HTTP/1.0
0-131072430/161/398_
117.1889850.01.323.66
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-131072430/159/395_
117.515035740.01.804.71
216.194.174.77sirokotravel.com:7081POST /wp-login.php HTTP/1.0
0-131072430/157/395_
117.6828440.01.343.99
47.128.121.122bushleaguefactor.com:7081GET /baseball/teams/wpa.gif HTTP/1.0
0-131072430/159/397_
117.8211840.01.302.91
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-131072430/161/398_
117.267642720.01.343.65
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-131072430/158/397_
117.781671710.01.716.16
66.249.66.20technovationacademy.com:7081GET /sitemapimages844.xml HTTP/1.0
1-131072700/167/395_
126.604624570.01.493.04
208.88.4.121
1-131072700/166/394_
126.63427560.01.633.93
172.71.174.139le-lifting.com:7081HEAD / HTTP/1.0
1-131072700/169/396_
126.9119760.03.435.36
51.222.253.11daryljamieson.com:7081GET /en/works.html HTTP/1.0
1-131072700/165/393_
126.6640370.01.733.59
172.71.154.101it.cosmeticatravel.com:7081GET /login.action HTTP/1.0
1-131072700/170/399_
126.6640350.01.215.16
172.69.22.99it.cosmeticatravel.com:7081GET /.DS_Store HTTP/1.0
1-131072700/167/394_
127.0724150.01.273.83
217.113.194.130bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=nsh HTTP/1.0
1-131072700/166/391W
126.37000.01.603.57
172.70.115.20en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-131072700/167/393_
126.882151750.02.224.99
216.244.66.201technovationacademy.com:7080GET /pctcatalogmfbx/1534 HTTP/1.0
1-131072700/164/390_
126.446431770.03.876.10
52.167.144.22technovationacademy.com:7081GET /products/cloop428215?id=630 HTTP/1.0
1-131072700/165/395_
126.7435840.01.813.57
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-131072700/169/396_
126.8230237770.02.164.71
162.158.175.46cosmeticatravel.fr:7081GET / HTTP/1.0
1-131072700/169/397_
127.08231670.01.813.46
52.167.144.222technovationacademy.com:7080GET /tag/bgavj HTTP/1.0
1-131072700/159/389_
125.88403190.01.613.52
162.158.166.200it.cosmeticatravel.com:7081GET /.env HTTP/1.0
1-131072700/168/398_
126.584686040.01.676.71
97.107.137.14francinelalonde.com:7081POST /xmlrpc.php HTTP/1.0
1-131072700/167/399_
126.8921560.01.503.68
47.128.38.196technovationacademy.com:7080GET /images/twitter-logo-red.png HTTP/1.0
1-131072700/165/392_
126.53514100.04.326.06
47.128.37.131shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/blocks/testimonials-g
1-131072700/166/392_
126.7039270.01.574.07
172.69.150.136clients.cosmeticatravel.com:708GET /robots.txt HTTP/1.0
1-131072700/170/398_
127.052840.01.874.04
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-131072700/169/396_
126.7236850.01.293.98
120.92.108.177stayingstrong.ca:7080GET /?cat=4 HTTP/1.0
1-131072700/168/396_
127.0198450.02.394.73
172.68.245.191cosmeticatravel.com:7081GET /bypass.php HTTP/1.0
1-131072700/168/396_
126.971091670.01.133.70
40.77.167.56technovationacademy.com:7081GET /ljdkx/h591078.html HTTP/1.0
1-131072700/167/391_
126.783331060.01.383.18
185.231.155.169mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
1-131072700/166/394_
126.69395160.01.343.20
217.113.194.131bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=dlm HTTP/1.0
1-131072700/164/391_
126.55514170.01.856.01
217.113.194.131bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=bll HTTP/1.0
1-131072700/165/394_
126.763352060.01.473.54
185.231.155.169mrmohankumar.cirru

Found on 2024-08-28 18:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a90acad427

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Monday, 26-Aug-2024 16:02:21 EDT
Restart Time: Monday, 26-Aug-2024 01:07:53 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 14 hours 54 minutes 27 seconds
Server load: 2.29 1.84 1.37
Total accesses: 57872 - Total Traffic: 520.7 MB
CPU Usage: u579.03 s526.45 cu0 cs0 - 2.06% CPU load
1.08 requests/sec - 9.9 kB/second - 9.2 kB/request
1 requests currently being processed, 124 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
19999410yes124000
19999510yes025000
19999920yes025000
20003210yes025000
20446531yes025000
Sum1 1124000

W_______________________________________________________________
_____________________________________________________________...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

<SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-119999410/280/360W
165.74000.02.503.62
172.69.151.30en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
0-119999410/279/357_
165.945010530.02.743.26
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/281/362_
165.984260.03.003.70
192.99.36.61mrmohankumar.cirrusvps.ca:7081GET /robots.txt HTTP/1.0
0-119999410/278/357_
165.7811630.02.863.98
141.164.46.177celeste.cirrushosting.com:7080HEAD /main HTTP/1.0
0-119999410/278/357_
165.897310440.02.062.95
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/282/362_
165.9167200.03.243.88
172.69.94.245blepharoplastie.net:7081GET /wp-content/plugins/zedd/1.php HTTP/1.0
0-119999410/280/360_
165.8011660.02.403.21
47.128.53.74celeste.cirrushosting.com:7081GET /robots.txt HTTP/1.0
0-119999410/281/360_
166.04189760.01.962.59
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/280/360_
165.7711750.02.843.55
141.164.46.177celeste.cirrushosting.com:7080HEAD /bk HTTP/1.0
0-119999410/282/361_
166.116440.02.293.26
162.158.114.235cosmeticatravel.com:7081GET /dermopigmentation.php HTTP/1.0
0-119999410/279/359_
165.7711730.02.012.89
141.164.46.177celeste.cirrushosting.com:7080HEAD /new HTTP/1.0
0-119999410/281/359_
165.96491740.02.283.20
66.249.66.206technovationacademy.com:7081GET /snsul/u1115504.html HTTP/1.0
0-119999410/280/360_
166.08830.02.783.78
185.190.24.111carconesautomotiverepairservicePOST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disa
0-119999410/279/358_
165.811159210.02.593.55
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/279/359_
165.99313350.03.023.95
192.99.36.61mrmohankumar.cirrusvps.ca:7081GET /ottawa-divest HTTP/1.0
0-119999410/281/361_
165.88751640.02.443.21
147.185.132.174underwoodfinancial.com:7080GET / HTTP/1.0
0-119999410/283/361_
166.0899610.02.363.12
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/280/360_
165.935410100.01.632.33
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/284/364_
166.0515190.02.152.90
172.69.94.93blepharoplastie.net:7081GET /wp-content/plugins/mar.php HTTP/1.0
0-119999410/279/359_
166.122260.02.392.97
162.158.233.101implant-capillaire.org:7081GET /images/favicon/apple-touch-icon.png HTTP/1.0
0-119999410/278/358_
166.012910050.02.603.51
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/280/359_
166.06139400.01.872.61
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/281/360_
165.8510511140.01.692.47
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
0-119999410/281/361_
165.831131730.01.662.99
66.249.66.206technovationacademy.com:7081GET /zishb/c319685.html HTTP/1.0
0-119999410/279/359_
165.841139230.02.613.54
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
1-119999510/299/375_
170.632260.03.223.65
172.71.90.90implant-capillaire.org:7081GET /images/resources/noksha.html HTTP/1.0
1-119999510/295/370_
170.681270.01.973.08
162.158.233.18implant-capillaire.org:7081GET /images/favicon/favicon-16x16.png HTTP/1.0
1-119999510/303/379_
170.60380.02.763.20
172.71.90.72implant-capillaire.org:7081GET /js/lazysizes.min.js HTTP/1.0
1-119999510/295/369_
170.233211600.02.063.02
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
1-119999510/298/374_
170.312810210.02.382.97
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
1-119999510/300/376_
170.451610540.02.343.32
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
1-119999510/299/375_
170.559410.02.432.97
162.158.114.235cosmeticatravel.com:7081GET /facettes-dentaires.php HTTP/1.0
1-119999510/299/375_
170.2730210.02.262.77
172.71.202.65blepharoplastie.net:7081GET /wp-content/plugins/wp-freeform/black2llleaf.php HTTP/1.0
1-119999510/301/377_
170.31298940.02.863.66
172.71.158.166cosmeticatravel.co.uk:7081POST /wp-login.php HTTP/1.0
1-119999510/302/378_
170.51121420.02.813.54
162.158.114.235cosmeticatravel.com:7081GET /blog/ HTTP/1.0
1-119999510/300/375_
170.662440.02.773.64
172.71.90.86implant-capillaire.org:7081GET /images/favicon/favicon-32x32.png HTTP/1.0
1-119999510/298/374_
170.214010520.03.223.95
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
1-119999510/300/376_
170.41229580.03.083.84
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
1-119999510/300/375_
170.2531500.02.803.70
162.158.114.235cosmeticatravel.com:7081GET /implants-fessiers-tunisie.php HTTP/1.0
1-119999510/300/376_
170.4122440.02.052.89
162.158.114.235cosmeticatravel.com:7081GET /bypass.php HTTP/1.0
1-119999510/303/379_
170.652240.03.244.26
172.71.246.26en.cosmeticatravel.com:7081GET /server HTTP/1.0
1-119999510/297/373_
170.5311440.02.192.66
162.158.114.235cosmeticatravel.com:7081GET /chirurgie-fessier-tunisie.php HTTP/1.0
1-119999510/297/370_
170.61280.03.313.78
172.71.90.90implant-capillaire.org:7081GET /css/jquery.bxslider.css HTTP/1.0
1-119999510/299/375_
170.37239880.01.822.58
178.128.28.204shorehamvillage.com:7081POST //wp-login.php HTTP/1.0
1-119999510/301/375_
170.4516470.03.153.72
162.158.114.235cosmeticatravel.com:7081GET /chirurgie_seins.php HTTP/1.0
1-119999510/294/369_
170.4714450.02.202.86
162.158.114.235cosmeticatravel.com:7081GET /prothese_genou.php HTTP/1.0
1-119999510/300/374_
170.3625450.02.793.25
162.158.114.235cosmeticatravel.com:7081GET /lifting-hanches-tunisie.php HTTP/1.0
1-119999510/298/373_
170.3427500.02.954.21
162.158.114.235cosmeticatravel.com:7081GET /chirurgiens-esthetiques.php HTTP/1.0
1-119999510/298/372_
170.587920.02.613.77
162.158.114.235cosmeticatravel.com:7081GET /contact.php HTTP/1.0
1-119999510/300/374_
170.2929430.03.073.94
162.158.114.235cosmeticatravel.com:7081GET /operation-cataracte.php HTTP/1.0
2-119999920/394/473_
226.512170.03.734.25
162.158.233.16implant-capillaire.org:7081GET /assets/revolution/css/navigation.css HTTP/1.0

Found on 2024-08-26 20:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9a7fe11c6

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Saturday, 24-Aug-2024 13:26:02 EDT
Restart Time: Friday, 23-Aug-2024 13:08:30 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 1 day 17 minutes 31 seconds
Server load: 1.30 1.39 1.43
Total accesses: 79560 - Total Traffic: 623.0 MB
CPU Usage: u433.48 s298.13 cu0 cs0 - .837% CPU load
.91 requests/sec - 7.3 kB/second - 8.0 kB/request
1 requests currently being processed, 149 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
10415180yes025000
10415410yes025000
10415470yes025000
10416770yes025000
10704200yes025000
10706560yes124000
Sum0 1149000

________________________________________________________________
________________________________________________________________
_____W________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-110415180/143/444_
80.752711850.01.133.18
52.167.144.166technovationacademy.com:7081GET /gkshl/x1952551.html HTTP/1.0
0-110415180/143/444_
81.165690.01.294.25
197.1.76.40fit-tunisie.org:7081GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP
0-110415180/144/446_
81.193770.00.942.99
197.1.76.40fit-tunisie.org:7081GET /wp-content/themes/blocksy/static/bundle/466.41c76717f9171e
0-110415180/137/439_
80.63407230.00.583.75
172.69.86.82la-rhinoplastie.net:7081GET /sftp.json HTTP/1.0
0-110415180/144/440_
80.931841650.01.422.94
66.249.66.206technovationacademy.com:7081GET /ptnnr/e1367912.html HTTP/1.0
0-110415180/141/438_
81.06947720.01.174.22
66.249.77.69fit-tunisie.org:7081GET /robots.txt HTTP/1.0
0-110415180/144/447_
81.13581800.01.112.74
66.249.66.19technovationacademy.com:7081GET /?/information/csr_sdgs.php/olxkg/d1304012.html HTTP/1.0
0-110415180/140/443_
81.1556100.01.133.25
197.1.76.40fit-tunisie.org:7081GET /wp-content/themes/blocksy/style.css?ver=6.1.1 HTTP/1.0
0-110415180/144/445_
80.8822219820.01.014.05
172.68.27.41cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-110415180/144/446_
80.723161770.01.153.74
66.249.66.19technovationacademy.com:7081GET /?/list/ct.php/products/journeywoman432776?id=723 HTTP/1.0
0-110415180/138/441_
81.107250.01.043.59
47.128.17.58technovationacademy.com:7080GET /images/twitter-logo-red.png HTTP/1.0
0-110415180/144/443_
81.0114439570.01.133.95
172.68.26.113cosmeticatravel.fr:7081GET / HTTP/1.0
0-110415180/145/448_
80.9914870.01.173.00
207.46.13.127underwoodfinancial.com:7081GET /site/templates/js/jquery.scrollto.js HTTP/1.0
0-110415180/144/447_
80.703361650.01.553.86
66.249.66.19technovationacademy.com:7081GET /gdzrv/z469100.html HTTP/1.0
0-110415180/140/446_
81.079090.00.962.38
66.249.77.68fit-tunisie.org:7081GET /wp-content/themes/blocksy/static/bundle/main.js?ver=1.8.77
0-110415180/142/450_
80.6835210650.00.832.84
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1724520008.33222293853759765625
0-110415180/144/444_
80.941821800.01.072.96
66.249.66.19technovationacademy.com:7081GET /?/hayami/hayami_tc.php/jfrld/h871723.html HTTP/1.0
0-110415180/143/443_
80.951801760.00.943.30
66.249.66.19technovationacademy.com:7081GET /?/list/ct.php/utmrr/i1753804.html HTTP/1.0
0-110415180/139/441_
80.60415210.01.093.79
172.69.86.82la-rhinoplastie.net:7081GET /symfony/_profiler/phpinfo HTTP/1.0
0-110415180/141/446_
80.90219730.01.013.16
178.20.45.128mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
0-110415180/145/448_
81.243340.00.883.35
172.70.246.215en.cosmeticatravel.com:7081GET / HTTP/1.0
0-110415180/138/443_
81.097240.00.983.28
47.128.17.58technovationacademy.com:7080GET /images/twitter-logo-red-light.png HTTP/1.0
0-110415180/143/450_
81.21161760.01.533.86
66.249.66.19technovationacademy.com:7081GET /?/information/csr_sdgs.php/config/entry/review/add/product
0-110415180/143/444_
80.61414200.01.153.12
172.69.86.82la-rhinoplastie.net:7081GET /.local HTTP/1.0
0-110415180/143/442_
81.1358760.01.363.08
172.71.147.78implant-capillaire.org:7081GET /detail/11/calvitie--causes-et-symptomes.html HTTP/1.0
1-110415410/141/433_
81.1523510130.01.233.53
52.167.144.199theelectricians.ca:7081GET /contact-corey/ HTTP/1.0
1-110415410/139/431_
81.12240490.01.072.82
172.69.64.152cosmeticatravel.com:7081HEAD / HTTP/1.0
1-110415410/140/435_
81.102401690.00.923.80
40.77.167.72technovationacademy.com:7080GET /vsmxu/p781541.html HTTP/1.0
1-110415410/142/435_
81.455650.01.063.61
197.1.76.40fit-tunisie.org:7081GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.0
1-110415410/141/436_
81.35891860.00.872.97
66.249.66.19technovationacademy.com:7081GET /?/list/ct.php/products/bowerlet328269?id=399 HTTP/1.0
1-110415410/142/436_
81.222101710.01.113.22
66.249.66.19technovationacademy.com:7081GET /?/hayami/hayami_tc.php/config/entry/review/add/product_id/
1-110415410/142/439_
81.172192590.00.992.41
178.20.45.128mrmohankumar.cirrusvps.ca:7081GET /tutorial/carbon-pricing-101 HTTP/1.0
1-110415410/142/436_
81.192162250.01.003.56
178.20.45.128mrmohankumar.cirrusvps.ca:7081GET /tutorial/carbon-pricing-101 HTTP/1.0
1-110415410/142/437_
81.241851750.01.243.02
66.249.66.19technovationacademy.com:7081GET /?/information/csr_sdgs.php/tag/kxyjf HTTP/1.0
1-110415410/143/439_
81.072759970.01.423.62
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1724520085.72815704345703125000
1-110415410/140/433_
81.4840350.00.752.80
197.1.76.40fit-tunisie.org:7081GET /wp-content/uploads/2024/02/fit-equipe.jpg HTTP/1.0
1-110415410/139/431_
81.082741810.01.033.33
66.249.66.19technovationacademy.com:7081GET /?/information/csr_sdgs.php/tag/qzvvr HTTP/1.0
1-110415410/142/433_
81.5039440.01.703.10
197.1.76.40fit-tunisie.org:7081GET /wp-content/uploads/2022/02/ONTT-UK3-1536x1133.jpg HTTP/1.0
1-110415410/141/431_
81.37871740.01.103.30
66.249.66.19technovationacademy.com:7081GET /?/list/ct.php/config/entry/review/add/product_id/126463 HT
1-110415410/142/433_
81.321201700.01.102.83
66.249.66.19technovationacademy.com:7081GET /?/hayami/hayami_tc.php/config/entry/review/add/product_id/
1-110415410/141/435_
81.39821620.00.913.13
52.167.144.231technovationacademy.com:7081GET /a2f6 HTTP/1.0
1-110415410/144/433_
81.4654660.01.503.37
197.1.76.40fit-tunisie.org:7081GET /wp-content/uploads/brizy/imgs/272401355_3135585566761853_2
1-110415410/141/435_
81.445670.00.853.21
197.1.76.40fit-tunisie.org:7081GET /wp-content/plugins/translatepress-multilingual/assets/css/
1-110415410/141/431_
81.41592590.00.872.59
66.249.66.20technovationacademy.com:7081GET /?/information/csr_sdgs.php/dttip/b1114283.html HTTP/1.0
1-110415410/143/435_
81.28156260.01.163.66
162.158.187.3en.cosmeticatravel.com:7081GET /inc/captcha.php HTTP/1.0
1-110415410/143/435_
81.212142190.01.533.71
178.20.45.128mrmohankumar.cirrusvps.ca:7081GET /tutorial/carbon-pricing-101 HTTP/1.0
1-110415410/142/436_
81.042931680.01.493.78
52.167.144.231technovationacademy.com:7081GET /cliyz/i1020793.html HTTP/1.0
1-110415410/143/432_
81.033051730.01.383.23
66.249.66.206technovationacademy.com:7081GET /klmep/f734157.html HTTP/1.0
1-110415410/142/433_
81.30138110.01.504.41
52.167.144.189underwoodfinancial.co

Found on 2024-08-24 17:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9e53e8709

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Thursday, 22-Aug-2024 14:50:50 EDT
Restart Time: Thursday, 22-Aug-2024 14:07:38 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 43 minutes 12 seconds
Server load: 0.74 0.71 1.19
Total accesses: 2559 - Total Traffic: 16.7 MB
CPU Usage: u28.81 s19.19 cu0 cs0 - 1.85% CPU load
.987 requests/sec - 6.6 kB/second - 6.7 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
2557430yes025000
2557440yes025000
2557940yes025000
2558800yes124000
Sum0 199000

________________________________________________________________
________________W___________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-02557430/22/22_
9.6228380.00.190.19
172.69.135.159le-lifting.com:7081GET /2/lifting-visage.php HTTP/1.0
0-02557430/20/20_
9.5250390.00.120.12
172.71.170.38en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-02557430/22/22_
9.5150430.00.070.07
162.158.174.118la-rhinoplastie.net:7081HEAD / HTTP/1.0
0-02557430/22/22_
9.583990.00.190.19
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/legacy.js HTTP/1
0-02557430/22/22_
9.543970.00.040.04
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/action.js HTTP/1
0-02557430/20/20_
9.445360.00.040.04
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3613_mouseOver.sv
0-02557430/20/20_
9.583950.00.110.11
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/data/document.js HTTP/1.0
0-02557430/20/20_
9.553960.00.030.03
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/expr.js HTTP/1.0
0-02557430/22/22_
9.59361640.00.260.26
66.249.66.206technovationacademy.com:7081GET /enpmz/k1955102.html HTTP/1.0
0-02557430/22/22_
9.61335970.00.120.12
74.125.212.226theelectricians.ca:7081GET /.well-known/traffic-advice HTTP/1.0
0-02557430/21/21_
9.3654510.00.120.12
172.71.158.30le-lifting.com:7081GET /detail/77/chirurgie-esthetique-du-visage-le-bon-moment-sel
0-02557430/22/22_
9.563960.00.200.20
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/repeater.js HTTP
0-02557430/21/21_
9.425370.00.080.08
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/living_well/u748.svg HTTP/1.0
0-02557430/20/20_
9.3554240.00.160.16
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/living_well/u468.svg HTTP/1.0
0-02557430/20/20_
9.395480.00.050.05
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/living_well/u480.svg HTTP/1.0
0-02557430/21/21_
9.385480.00.300.30
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/living_well/u477.svg HTTP/1.0
0-02557430/21/21_
9.465290.00.300.30
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3613.svg HTTP/1.0
0-02557430/21/21_
9.455390.00.070.07
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3613_mouseOver.sv
0-02557430/21/21_
9.543960.00.220.22
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/events.js HTTP/1
0-02557430/19/19_
9.415350.00.060.06
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/images/transparent.gif HTTP/1.
0-02557430/21/21_
9.405460.00.250.25
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/living_well/u482.svg HTTP/1.0
0-02557430/21/21_
9.485190.00.250.25
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3673.svg HTTP/1.0
0-02557430/20/20_
9.435360.00.070.07
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/living_well/u1.svg HTTP/1.0
0-02557430/21/21_
9.3954110.00.340.34
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/living_well/u479.svg HTTP/1.0
0-02557430/21/21_
9.632440.00.070.07
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-02557440/22/22_
8.923950.00.120.12
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/tree.js HTTP/1.0
1-02557440/22/22_
9.0752660.00.060.06
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
1-02557440/23/23_
9.043123950.00.370.37
72.14.201.245theelectricians.ca:7081GET / HTTP/1.0
1-02557440/23/23_
9.05151750.00.270.27
40.77.167.79technovationacademy.com:7081GET /hoqgx/g613339.html HTTP/1.0
1-02557440/22/22_
9.120390.00.210.21
162.158.154.192en.cosmeticatravel.com:7081GET / HTTP/1.0
1-02557440/22/22_
8.913970.00.060.06
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/visibility.js HT
1-02557440/22/22_
8.275260.00.160.16
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3613.svg HTTP/1.0
1-02557440/22/22_
9.150340.00.200.20
172.70.231.3en.cosmeticatravel.com:7081GET /server HTTP/1.0
1-02557440/21/21_
8.255370.00.130.13
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3613.svg HTTP/1.0
1-02557440/23/23_
9.110520.00.060.06
172.70.230.115en.cosmeticatravel.com:7081GET / HTTP/1.0
1-02557440/23/23_
9.0842640.00.160.16
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
1-02557440/21/21_
8.854050.00.170.17
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/files/home/styles.css HTTP/1.0
1-02557440/23/23_
9.160260.00.270.27
162.158.154.158en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-02557440/22/22_
8.5151120.00.090.09
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3673.svg HTTP/1.0
1-02557440/22/22_
8.873950.00.030.03
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/variables.js HTT
1-02557440/21/21_
8.815180.00.040.04
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/health_library/u3613.svg HTTP/1.0
1-02557440/23/23_
8.82507280.00.080.08
208.88.4.121
1-02557440/20/20_
8.873950.00.090.09
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/utils.temp.js HT
1-02557440/21/21_
8.8442250.00.040.04
172.69.65.253it.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-02557440/21/21_
8.7651100.00.040.04
172.71.159.9le-lifting.com:7081GET /assets/js/jquery.stellar.min.js HTTP/1.0
1-02557440/22/22_
8.8639100.00.260.26
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/doc.js HTTP/1.0
1-02557440/22/22_
8.913950.00.110.11
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/style.js HTTP/1.
1-02557440/22/22_
8.923970.00.120.12
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/resources/scripts/axure/adaptive.js HTTP
1-02557440/21/21_
8.943980.00.090.09
75.154.239.242hlbc.number41media.com:7080GET /KBDS/AlphaTesting/images/home/u10790.png HTTP/1.0
1-02557440/21/21_
8.883970.00.050.05
75.154.239.242hlbc.numb

Found on 2024-08-22 18:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9dcd59b01

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Tuesday, 20-Aug-2024 05:46:10 EDT
Restart Time: Sunday, 18-Aug-2024 16:07:32 EDT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime: 1 day 13 hours 38 minutes 37 seconds
Server load: 1.27 1.41 1.45
Total accesses: 151510 - Total Traffic: 1.3 GB
CPU Usage: u253.03 s192.07 cu0 cs0 - .328% CPU load
1.12 requests/sec - 9.7 kB/second - 8.7 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
9026760yes025000
9027040yes025000
9027320yes025000
9029230yes124000
Sum0 199000

________________________________________________________________
___________________W________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-29026760/64/1228_
35.5461130.00.4911.00
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/montserrat-semibold-webfont.woff2 HTTP/
0-29026760/66/1225_
35.651290.00.6110.61
172.69.150.107en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-29026760/64/1220_
35.670290.00.6310.31
162.158.111.183en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
0-29026760/65/1224_
35.388270.00.6710.77
196.229.106.243sirokotravel.com:7081GET /wp-content/uploads/2023/10/Logo-EV.webp HTTP/1.0
0-29026760/65/1224_
35.368260.00.5210.73
196.229.106.243sirokotravel.com:7081GET /wp-content/themes/piemont/js/owl-carousel/owl.carousel.min
0-29026760/64/1218_
35.358240.00.258.70
196.229.106.243sirokotravel.com:7081GET /wp-content/themes/piemont/js/jquery.nanoscroller.min.js?ve
0-29026760/66/1223_
35.398260.00.4710.01
196.229.106.243sirokotravel.com:7081GET /wp-content/uploads/2019/08/walking.png HTTP/1.0
0-29026760/65/1217_
35.427740.00.689.86
45.148.10.59confluvium.ca:7081GET /jquery.js HTTP/1.0
0-29026760/64/1219_
35.4082100.00.6110.08
196.229.106.243sirokotravel.com:7081GET /wp-content/themes/piemont/fonts/fontawesome-webfont.woff2?
0-29026760/64/1221_
35.398250.00.8211.19
196.229.106.243sirokotravel.com:7081GET /wp-includes/js/comment-reply.min.js?ver=6.6.1 HTTP/1.0
0-29026760/65/1220_
35.358260.00.599.62
196.229.106.243sirokotravel.com:7081GET /wp-content/themes/piemont/js/template.js?ver=1.0 HTTP/1.0
0-29026760/66/1222_
35.4862260.00.6710.47
183.87.215.100underwoodfinancial.com:7081GET /site/templates/js/jquery-3.3.1.min.js HTTP/1.0
0-29026760/67/1223_
35.5062120.00.3611.16
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/jquery.fancybox.min.css HTTP/1.0
0-29026760/66/1218_
35.417750.00.5110.37
45.148.10.59confluvium.ca:7081GET //oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js HTTP/
0-29026760/66/1227_
35.446880.00.459.61
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/montserrat-semibold-webfont.woff2 HTTP/
0-29026760/63/1212_
35.536190.00.369.57
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/montserrat-light-webfont.woff2 HTTP/1.0
0-29026760/64/1218_
35.32827490.00.739.93
196.229.106.243sirokotravel.com:7081GET /parc-naturel-national-boukornine/ HTTP/1.0
0-29026760/66/1224_
35.4662160.00.499.44
183.87.215.100underwoodfinancial.com:7081GET /site/assets/files/1/underwood_logo.svg HTTP/1.0
0-29026760/67/1222_
35.63390.00.5710.27
172.70.80.72abdominoplastie.org:7081GET /robots.txt HTTP/1.0
0-29026760/66/1216_
35.57561730.00.309.79
66.249.66.206technovationacademy.com:7081GET /products/pythogenetic770302?id=70 HTTP/1.0
0-29026760/65/1211_
35.4862100.00.3710.49
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/normalize.css HTTP/1.0
0-29026760/65/1222_
35.566190.00.6612.14
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/fontawesome-webfont.woff2?v=4.7.0 HTTP/
0-29026760/66/1217_
35.60331750.00.379.21
52.167.144.168technovationacademy.com:7081GET /nipas/l959497.html HTTP/1.0
0-29026760/63/1217_
35.3982270.00.5910.13
196.229.106.243sirokotravel.com:7081GET /wp-content/themes/piemont/js/easing.js?ver=1.3 HTTP/1.0
0-29026760/66/1222_
35.536190.00.9310.45
183.87.215.100underwoodfinancial.com:7081GET /site/assets/files/1065/forward-businessman-globe-world-eur
1-29027040/62/1295_
35.436180.00.3010.66
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/montserrat-black-webfont.woff2 HTTP/1.0
1-29027040/64/1297_
35.3862120.00.3111.33
183.87.215.100underwoodfinancial.com:7081GET /site/modules/MarkupSocialShareButtons/themes/white/png/fac
1-29027040/64/1293_
35.231261810.00.5712.72
66.249.66.20technovationacademy.com:7081GET /sitemapmobile838.xml HTTP/1.0
1-29027040/63/1295_
35.32682480.00.6610.74
52.167.144.163technovationacademy.com:7081GET /tag/ifnai HTTP/1.0
1-29027040/62/1291_
35.201522990.00.6011.14
85.208.96.194mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/node/node/node/node/node/node/nod
1-29027040/64/1296_
35.47523290.00.4811.50
85.208.96.201mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/node/node/node/node/node/node/nod
1-29027040/63/1293_
35.3467910.00.4910.43
172.69.64.141en.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-29027040/65/1298_
35.3662170.00.4510.51
183.87.215.100underwoodfinancial.com:7081GET /site/templates/js/jquery.scrollto.js HTTP/1.0
1-29027040/65/1290_
35.4061230.00.5211.06
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/images/mag-icon.png HTTP/1.0
1-29027040/65/1297_
35.39621720.00.3710.35
37.60.237.76technovationacademy.com:7080GET /Cordyline/beige134516.html HTTP/1.0
1-29027040/64/1291_
35.4361100.00.7311.29
183.87.215.100underwoodfinancial.com:7081GET /site/templates/css/dancingscript-regular-webfont.woff2 HTT
1-29027040/66/1292_
35.5136190.01.2912.02
172.71.218.167lifting-mammaire.net:7081GET //wp-includes/id3/license.txt/wp1/wp-includes/wlwmanifest.x
1-29027040/65/1287_
35.44561670.00.4611.88
66.249.66.206technovationacademy.com:7081GET /products/petrarchist325793?id=211 HTTP/1.0
1-29027040/66/1298_
35.5039270.00.5710.28
172.71.218.167lifting-mammaire.net:7081GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.0
1-29027040/64/1291_
35.171581710.00.3710.37
52.167.144.23technovationacademy.com:7081GET /ganxx/f16157.html HTTP/1.0
1-29027040/65/1297_
35.5436200.00.339.14
172.71.218.167lifting-mammaire.net:7081GET //wp-includes/id3/license.txt/cms/wp-includes/wlwmanifest.x
1-29027040/64/1294_
35.47521740.00.5311.20
37.60.237.76technovationacademy.com:7080GET /Cordyline/beige1347321.html HTTP/1.0
1-29027040/66/1290_
35.5336230.00.8210.98
172.71.218.167lifting-mammaire.net:7081GET //wp-includes/id3/license.txt/test/wp-includes/wlwmanifest.
1-29027040/66/1294_
35.591110.00.9411.68
172.70.242.201en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-29027040/64/1289_
35.1715780.00.4110.62
192.99.36.61muslimmarriages.ca:7081GET /contact_us.php/registration_form.php/index.php/index.php/a
1-29027040/65/1293_
35.582270.00.579.79
172.68.195.146en.cosmeticatravel.com:7081GET /server HTTP/1.0
1-29027040/64/1296_
35.2114570.00.3310.78
192.99.36.61muslimmarriages.ca:7081GET /contact_us.php/registration_form.php/index.php/index.php/a
1-29027040/64/1291_
35.2611170.00.1810.24
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-29027040/63/1290_
35.298260.00.9311.33
196.229.106.2

Found on 2024-08-20 09:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a90931400a

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Sunday, 18-Aug-2024 04:59:50 EDT
Restart Time: Saturday, 17-Aug-2024 02:07:28 EDT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime: 1 day 2 hours 52 minutes 22 seconds
Server load: 1.33 1.42 1.43
Total accesses: 91096 - Total Traffic: 764.4 MB
CPU Usage: u40.54 s26.39 cu0 cs0 - .0692% CPU load
.942 requests/sec - 8.1 kB/second - 8.6 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
41513520yes025000
41513800yes025000
41513810yes124000
41514990yes025000
Sum0 199000

________________________________________________________________
__________W_________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-341513520/32/798_
14.1921280.00.127.07
172.70.174.207le-lifting.com:7081GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/31/801_
14.1428290.00.146.44
172.70.35.5le-lifting.com:7081GET //wp/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/32/803_
14.27217730.00.147.88
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-341513520/32/810_
14.093960.00.216.46
134.209.216.107carconesautomotiverepairserviceGET / HTTP/1.0
0-341513520/33/805_
14.430270.00.176.81
162.158.159.233en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-341513520/32/810_
14.2621220.00.126.44
172.70.174.207le-lifting.com:7081GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/32/806_
14.2721280.00.196.49
172.70.174.207le-lifting.com:7081GET //test/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/33/809_
14.1528230.00.487.42
172.70.35.5le-lifting.com:7081GET //site/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/32/803_
14.1821100.00.316.41
172.70.174.207le-lifting.com:7081GET //xmlrpc.php?rsd HTTP/1.0
0-341513520/33/801_
14.2121210.00.197.04
172.70.174.207le-lifting.com:7081GET //website/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/33/801_
14.2221230.00.187.96
172.70.174.207le-lifting.com:7081GET //wp/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/33/806_
14.2321270.00.126.20
172.70.174.207le-lifting.com:7081GET //2020/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/32/810_
14.2821210.00.095.79
172.70.174.207le-lifting.com:7081GET //cms/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/33/811_
14.30171830.00.107.19
66.249.66.20technovationacademy.com:7081GET /saponary/forcleave881655.html HTTP/1.0
0-341513520/32/808_
14.31151660.00.066.67
52.167.144.231technovationacademy.com:7080GET /list/257_1969?kg=dy HTTP/1.0
0-341513520/32/809_
14.3211540.00.136.92
172.68.27.181reduction-mammaire.org:7081HEAD / HTTP/1.0
0-341513520/33/811_
14.400260.00.306.23
162.158.62.136en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-341513520/33/805_
14.380400.00.296.28
172.70.115.183en.cosmeticatravel.com:7081GET / HTTP/1.0
0-341513520/32/806_
14.0466490.00.156.89
172.69.192.225reduction-mammaire.org:7081GET /detail/38/avoir-les-seins-qui-tombent-plus-un-probleme-med
0-341513520/33/809_
14.350390.00.096.36
172.70.230.24en.cosmeticatravel.com:7081GET / HTTP/1.0
0-341513520/33/806_
14.420280.00.087.29
162.158.63.154en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
0-341513520/32/803_
14.03711780.00.277.24
217.76.60.62technovationacademy.com:7080GET /Cevennian/Kilmarnock375671.html HTTP/1.0
0-341513520/32/801_
14.103660.00.106.85
208.88.4.121
0-341513520/32/802_
14.1229260.00.086.97
172.70.35.5le-lifting.com:7081GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.0
0-341513520/32/805_
14.06601770.00.207.40
52.167.144.231technovationacademy.com:7080GET /ndbho/i1054865.html HTTP/1.0
1-341513800/31/796_
16.29151830.00.367.24
52.167.144.231technovationacademy.com:7080GET /sitemapnews444.xml HTTP/1.0
1-341513800/28/796_
16.2128320.00.086.25
172.70.35.5le-lifting.com:7081GET //2019/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/31/799_
16.2028250.00.118.55
172.70.35.5le-lifting.com:7081GET //2020/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/31/794_
16.1829230.00.256.15
172.70.35.5le-lifting.com:7081GET //web/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/30/800_
16.1129320.00.195.67
172.70.35.5le-lifting.com:7081GET //wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/31/800_
16.07531800.00.447.02
66.249.66.207technovationacademy.com:7081GET /znigo/n1050039.html HTTP/1.0
1-341513800/30/793_
16.16291680.00.216.31
40.77.167.36technovationacademy.com:7080GET /sitemapnews458.xml HTTP/1.0
1-341513800/31/795_
16.1329100.00.166.30
172.70.35.5le-lifting.com:7081GET //xmlrpc.php?rsd HTTP/1.0
1-341513800/31/801_
16.1429390.00.218.03
172.70.35.5le-lifting.com:7081GET / HTTP/1.0
1-341513800/32/797_
16.2428200.00.085.86
172.70.35.5le-lifting.com:7081GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/31/796_
16.1928210.00.215.72
172.70.35.5le-lifting.com:7081GET //news/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/32/796_
16.2328210.00.245.65
172.70.35.5le-lifting.com:7081GET //shop/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/32/799_
16.2728190.00.206.58
172.70.35.5le-lifting.com:7081GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/31/797_
15.491381830.00.186.97
217.76.60.62technovationacademy.com:7080GET /Cevennian/Kilmarnock362636.html HTTP/1.0
1-341513800/32/797_
16.2628210.00.076.21
172.70.35.5le-lifting.com:7081GET //test/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/31/797_
15.5111660.00.126.92
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-341513800/31/796_
16.310260.00.226.55
162.158.159.68en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-341513800/31/795_
16.1629330.00.386.29
172.70.35.5le-lifting.com:7081GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0
1-341513800/29/796_
16.00921860.00.117.03
35.203.211.95technovationacademy.com:7080GET / HTTP/1.0
1-341513800/31/795_
16.018640.00.266.60
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-341513800/31/802_
16.0479250.00.347.36
162.158.175.25it.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-341513800/31/800_
16.03801750.00.196.73
52.167.144.145technovationacademy.com:7081GET /fdsoy/o1347108.html HTTP/1.0
1-341513800/31/797_
16.06555710.00.767.21
15.235.162.222sirokotravel.com:7081POST /xmlrpc.php HTTP/1.0
1-341513800/31/795_
16.093660.00.186.08
47.128.120.75celeste.cirrushosting.com:7081GET /robots.txt HTTP/1.0
1-341513800/31/798_
15.5311315540.00.096.42
122.114.14.77fit-tunisie.org:7081POST /xmlrpc.php HTTP/1.0
2-341513810/34/861_
15.53202920.00.067.38
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
2-341513810/35/849_
15.3828200.00.166.69
172.70.35.5le-lifting.com:7081GET //sito/wp-includes/wlwmanifest.xml HTTP/1.0

Found on 2024-08-18 08:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a96ed3aa81

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Friday, 16-Aug-2024 06:35:26 EDT
Restart Time: Thursday, 15-Aug-2024 06:11:35 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 1 day 23 minutes 51 seconds
Server load: 2.60 2.57 2.56
Total accesses: 89157 - Total Traffic: 726.6 MB
CPU Usage: u159.67 s124.19 cu0 cs0 - .323% CPU load
1.02 requests/sec - 8.5 kB/second - 8.3 kB/request
1 requests currently being processed, 124 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
23890570yes025000
23890850yes025000
23891130yes025000
23891890yes124000
24776140yes025000
Sum0 1124000

________________________________________________________________
_________________________________W___________________________...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-123890570/60/625_
32.8411720660.00.354.04
85.208.96.198shorehamvillage.com:7081GET /robots.txt HTTP/1.0
0-123890570/60/626_
32.9184580.00.464.65
172.68.245.148cosmeticatravel.com:7081GET /traitements-orthopediques.php HTTP/1.0
0-123890570/60/620_
32.937180.00.575.09
66.220.149.32bushleaguefactor.com:7081GET /hockey/teams/!ht.php?team=uti HTTP/1.0
0-123890570/60/621_
32.791321780.00.344.50
66.249.77.7technovationacademy.com:7081GET /ctsiv/s574232.html HTTP/1.0
0-123890570/59/622_
32.9833380.00.244.63
162.158.175.47it.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-123890570/59/624_
33.060270.00.634.92
172.71.250.32en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
0-123890570/59/625_
32.142451650.00.414.90
40.77.167.2technovationacademy.com:7080GET /list/257_1129?kg=dy HTTP/1.0
0-123890570/60/627_
33.031280.00.684.08
162.158.111.245en.cosmeticatravel.com:7081GET /about HTTP/1.0
0-123890570/60/626_
32.72178330.00.364.40
172.71.190.218implant-mammaire.net:7081GET /detail/72/augmentation-mammaire-par-protheses-ce-quil-faut
0-123890570/60/628_
33.01151640.00.433.22
52.167.144.209technovationacademy.com:7080GET /tag/uwbuz HTTP/1.0
0-123890570/60/625_
32.7613850.00.365.49
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-123890570/60/624_
32.84118380.00.435.00
172.69.195.203abdominoplastie.org:7081GET /?author=6 HTTP/1.0
0-123890570/60/626_
32.928411390.00.485.48
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1723804440.65412998199462890625
0-123890570/58/626_
33.051270.00.535.31
172.70.242.136en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-123890570/60/621_
32.963360.00.476.30
52.167.144.218atelierjaku.com:7080GET /resources/%E3%83%81%E3%83%A9%E3%82%B7%EF%BC%88%E8%A3%8F%EF
0-123890570/60/625_
33.100380.00.604.40
172.69.150.9en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-123890570/60/628_
32.063272620.00.475.94
66.220.149.115amitoladesignconcepts.ca:7080GET /?p=556 HTTP/1.0
0-123890570/60/621_
32.11281590.00.284.91
172.69.67.110implant-mammaire.net:7081HEAD / HTTP/1.0
0-123890570/60/620_
32.7913111600.00.635.73
162.158.103.90cosmeticatravel.co.uk:7081POST /wp-login.php HTTP/1.0
0-123890570/60/622_
32.672401820.00.445.42
40.77.167.46technovationacademy.com:7081GET /rtldj/a341747.html HTTP/1.0
0-123890570/60/628_
32.652456830.00.644.28
40.77.167.2technovationacademy.com:7081GET /products/lat69375?id=892 HTTP/1.0
0-123890570/59/625_
32.6524340.00.504.79
89.248.174.182kingbiryanihouse.com:7081GET /wp-json/wp/v2/users HTTP/1.0
0-123890570/59/626_
32.81119330.00.514.01
172.69.195.203abdominoplastie.org:7081GET /?author=5 HTTP/1.0
0-123890570/60/623_
32.731751890.00.694.28
40.77.167.2technovationacademy.com:7080GET /zdsbl/x940440.html HTTP/1.0
0-123890570/60/624_
32.59245270.00.424.24
51.79.69.229annexosteopathy.com:7081GET / HTTP/1.0
1-123890850/71/651_
40.45428240.00.895.75
157.245.118.163fit-tunisie.org:7081GET /.well-known/security.txt HTTP/1.0
1-123890850/72/655_
40.365670.00.796.37
173.252.83.40shorehamvillage.com:7081GET /wp-includes/fonts/dashicons.eot?99ac726223c749443b642ce33d
1-123890850/71/657_
40.5235310.00.564.48
172.71.182.84abdominoplastie.org:7081GET //wp/wp-includes/wlwmanifest.xml HTTP/1.0
1-123890850/72/652_
40.6223890.00.785.39
172.70.143.181la-rhinoplastie.net:7081GET /detail/34/rss.php HTTP/1.0
1-123890850/72/653_
40.3170110.00.584.67
173.252.83.39bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=drn HTTP/1.0
1-123890850/72/654_
40.4936150.00.765.60
172.71.182.84abdominoplastie.org:7081GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.0
1-123890850/71/652_
40.345760.00.474.87
216.244.66.194bushleaguefactor.com:7081GET /robots.txt HTTP/1.0
1-123890850/72/651_
40.3078100.00.445.17
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-123890850/73/652_
40.4736250.00.464.38
172.71.182.84abdominoplastie.org:7081GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0
1-123890850/71/653_
40.4442700.00.895.34
172.70.39.176cosmeticatravel.com:7081GET /lipofilling-fessiers-tunisie.php/blog/blog/images/favicon.
1-123890850/72/653_
40.38562770.00.765.18
51.222.253.17mrmohankumar.cirrusvps.ca:7080GET /quebecs-cap-and-trade-system HTTP/1.0
1-123890850/73/652_
40.562911690.00.484.76
40.77.167.136technovationacademy.com:7080GET /tag/bwnrr HTTP/1.0
1-123890850/73/656_
40.5434260.00.434.19
172.71.182.84abdominoplastie.org:7081GET //test/wp-includes/wlwmanifest.xml HTTP/1.0
1-123890850/73/655_
40.6719190.00.544.84
172.68.245.132cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
1-123890850/72/652_
40.4836230.00.414.84
172.71.182.84abdominoplastie.org:7081GET //web/wp-includes/wlwmanifest.xml HTTP/1.0
1-123890850/71/654_
40.40437480.00.586.18
157.245.118.163fit-tunisie.org:7081GET /security.txt HTTP/1.0
1-123890850/73/654_
40.6422470.00.504.19
172.70.42.96cosmeticatravel.com:7081GET /chatbot/assets/css/typing.css HTTP/1.0
1-123890850/73/647_
40.5824560.00.415.13
162.158.78.114cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
1-123890850/71/651_
40.34581800.00.645.19
40.77.167.51technovationacademy.com:7081GET /products/earbob2271374?id=492 HTTP/1.0
1-123890850/73/655_
40.6881740.00.895.72
40.77.167.51technovationacademy.com:7080GET /tag/omnhv HTTP/1.0
1-123890850/73/655_
40.271111730.00.494.49
185.191.171.2technovationacademy.com:7081GET /products/metachromasis880999?id=681 HTTP/1.0
1-123890850/73/649_
40.704620.00.545.04
172.68.27.60lifting-mammaire.net:7081HEAD / HTTP/1.0
1-123890850/72/654_
40.56301700.00.734.40
40.77.167.136technovationacademy.com:7080GET /products/pict2139003?id=722 HTTP/1.0
1-123890850/73/653_
40.6123520.00.447.31
172.70.43.105cosmeticatravel.com:7081GET /chatbot/assets/css/chat.css HTTP/1.0
1-123890850/73/650_
40.5035220.00.354.83
172.71.182.84abdominoplastie.org:7081GET //website/wp-includes/wlwmanifest.xml HTTP/1.0
2-123891130/99/766_
56.9137410.00.765.87
172.71.182.84abdominoplastie.org:7081

Found on 2024-08-16 10:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9e52e2708

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Wednesday, 14-Aug-2024 03:54:05 EDT
Restart Time: Tuesday, 13-Aug-2024 12:08:30 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 15 hours 45 minutes 34 seconds
Server load: 3.55 3.72 3.08
Total accesses: 64846 - Total Traffic: 453.8 MB
CPU Usage: u544.12 s406.23 cu0 cs0 - 1.68% CPU load
1.14 requests/sec - 8.2 kB/second - 7.2 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
7020750yes025000
7019210yes025000
7019490yes124000
7019770yes025000
Sum0 199000

_________________________.......................................
.............................................................___
_______________________________W________________________________
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-17020750/19/564_
9.12152040.00.064.35
85.208.96.200technovationacademy.com:7081GET /products/erotogenesis1351325?id=183 HTTP/1.0
0-17020750/23/564_
9.37210640.00.084.16
172.71.114.114cosmeticatravel.com:7081GET /js/script.js HTTP/1.0
0-17020750/22/567_
9.411320.00.183.33
162.158.170.28en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-17020750/22/564_
9.353410.00.104.31
188.114.103.4cosmeticatravel.com:7081GET /js/bootstrap-multiselect.js HTTP/1.0
0-17020750/20/560_
9.141235040.00.163.62
172.69.179.211cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/22/565_
9.09169030.00.093.91
66.249.79.68theelectricians.ca:7081GET /robots.txt HTTP/1.0
0-17020750/22/564_
9.3722490.00.113.98
40.77.167.41technovationacademy.com:7081GET /products/hyperpure173538?id=31 HTTP/1.0
0-17020750/20/557_
9.37212450.00.164.03
188.114.102.6cosmeticatravel.com:7081GET /chatbot/assets/js/responses.js HTTP/1.0
0-17020750/19/565_
9.343590.00.043.50
172.71.114.142cosmeticatravel.com:7081GET /chatbot/assets/css/chat.css HTTP/1.0
0-17020750/19/560_
9.392290.00.113.42
172.70.143.197en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
0-17020750/20/561_
9.343590.00.134.01
162.158.129.63cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
0-17020750/23/566_
9.42039130.00.084.85
172.71.202.100cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/21/564_
8.98351840.00.052.99
54.38.85.17technovationacademy.com:7080GET /Ctenoplana/lymphy1255166.html HTTP/1.0
0-17020750/20/562_
9.051933820.00.063.42
172.69.179.211cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/19/556_
9.042240770.00.053.94
172.71.202.89cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/21/562_
9.323660.00.364.22
188.114.102.58cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
0-17020750/21/559_
9.061735040.00.133.46
172.71.202.124cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/19/560_
9.12156030.00.133.85
66.249.72.224theelectricians.ca:7081GET /comments/feed/ HTTP/1.0
0-17020750/20/561_
9.166180.00.103.80
172.71.124.113en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
0-17020750/21/563_
9.012734360.00.073.87
172.69.179.124cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/19/560_
9.131340250.00.153.33
172.71.202.160cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/20/561_
9.37210480.00.053.60
172.71.115.57cosmeticatravel.com:7081GET /chatbot/assets/css/typing.css HTTP/1.0
0-17020750/21/562_
8.983139920.00.103.57
172.69.179.102cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/22/562_
9.41037820.00.183.40
172.69.179.222cosmeticatravel.fr:7081POST //wp-login.php HTTP/1.0
0-17020750/19/561_
9.1472130.00.104.03
54.38.85.17technovationacademy.com:7080GET /Ctenoplana/lymphy1257256.html HTTP/1.0
1-0-0/0/570.
273.253301710680.00.004.70
172.71.158.228cosmeticatravel.co.uk:7081GET /cosmetic-surgery-clinic/ HTTP/1.0
1-0-0/0/569.
273.233301640730.00.003.19
172.71.155.71cosmeticatravel.co.uk:7081GET /cosmetic-surgeries/ HTTP/1.0
1-0-0/0/569.
273.233301641570.00.004.38
172.69.135.28cosmeticatravel.co.uk:7081GET /cosmetic-surgery-tunisia/ HTTP/1.0
1-0-0/0/568.
273.253301640970.00.003.12
172.69.22.151cosmeticatravel.co.uk:7081GET /in-vitro-fertilization/ HTTP/1.0
1-0-0/0/564.
273.233301641080.00.003.48
172.69.135.123cosmeticatravel.co.uk:7081GET /bariatric-surgery/gastric-balloon/ HTTP/1.0
1-0-0/0/568.
273.293301371170.00.004.31
172.69.135.118cosmeticatravel.co.uk:7081GET /favicon.ico HTTP/1.0
1-0-0/0/568.
273.323301581220.00.003.62
172.69.135.123cosmeticatravel.co.uk:7081GET /bariatric-surgery/gastric-balloon/ HTTP/1.0
1-0-0/0/570.
273.313301631500.00.005.05
172.69.22.209cosmeticatravel.co.uk:7081GET /bariatric-surgery/gastric-sleeve/ HTTP/1.0
1-0-0/0/569.
273.313301570870.00.003.86
162.158.167.121cosmeticatravel.co.uk:7081GET /face-surgery/blepharoplasty/ HTTP/1.0
1-0-0/0/571.
273.243301641680.00.003.79
172.71.159.72cosmeticatravel.co.uk:7081GET /face-surgery/bichectomy/ HTTP/1.0
1-0-0/0/573.
273.273301640740.00.004.39
172.69.135.113cosmeticatravel.co.uk:7081GET /breast-surgery/breast-lift/ HTTP/1.0
1-0-0/0/568.
273.313301588920.00.003.96
172.69.135.118cosmeticatravel.co.uk:7081GET /favicon.ico HTTP/1.0
1-0-0/0/567.
273.233301640920.00.003.71
172.69.135.142cosmeticatravel.co.uk:7081GET /breast-surgery/breast-reduction/ HTTP/1.0
1-0-0/0/570.
273.21330110160.00.003.98
172.69.222.242cosmeticatravel.com:7081GET /chatbot/assets/js/responses.js HTTP/1.0
1-0-0/0/572.
273.293301410610.00.004.20
172.69.135.23cosmeticatravel.co.uk:7081GET /body-surgery/body-lift/ HTTP/1.0
1-0-0/0/574.
273.273301640730.00.003.32
172.71.158.104cosmeticatravel.co.uk:7081GET /body-surgery/hips-lift/ HTTP/1.0
1-0-0/0/565.
273.293301641370.00.004.89
172.69.135.118cosmeticatravel.co.uk:7081GET /favicon.ico HTTP/1.0
1-0-0/0/567.
273.233301640780.00.004.14
172.69.22.209cosmeticatravel.co.uk:7081GET /bariatric-surgery/gastric-sleeve/ HTTP/1.0
1-0-0/0/568.
273.233301640850.00.003.49
162.158.167.106cosmeticatravel.co.uk:7081GET /face-surgery/temporal-lift/ HTTP/1.0
1-0-0/0/568.
273.303301448450.00.004.15
172.69.22.151cosmeticatravel.co.uk:7081GET /in-vitro-fertilization/ HTTP/1.0
1-0-0/0/568.
273.273301420570.00.004.79
162.158.166.188cosmeticatravel.co.uk:7081GET /face-surgery/face-lift/ HTTP/1.0
1-0-0/0/572.
273.273301410530.00.004.34
172.71.154.140cosmeticatravel.co.uk:7081GET /face-surgery/neck-lift/ HTTP/1.0
1-0-0/0/564.
273.233301640900.00.004.12
172.71.154.55cosmeticatravel.co.uk:7081GET /free-quote/ HTTP/1.0
1-0-0/0/568.
273.233301641080.00.004.52
162.158.167.121cosmeticatravel.co.uk:7081GET /face-surgery/blepharoplasty/ HTTP/1.0
1-0-0/0/571.
273.323301587300.00.003.88
172.69.135.195cosmeticatravel.co.uk:7081GET /intimate-surgery/ HTTP/1.0
2-0-0/0/528.
247.063307640780.00.003.99
172.71.158.104cosmeticatravel.co.uk:7081GET /body-surgery/hips-lift/ HTTP/1.0
2-0-0/0/528.
247.013307640780.0

Found on 2024-08-14 07:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9ac3cb59b

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Monday, 12-Aug-2024 01:20:21 EDT
Restart Time: Tuesday, 06-Aug-2024 23:07:25 EDT
Parent Server Config. Generation: 7
Parent Server MPM Generation: 6
Server uptime: 5 days 2 hours 12 minutes 56 seconds
Server load: 0.31 0.33 0.34
Total accesses: 495031 - Total Traffic: 3.7 GB
CPU Usage: u1406.18 s1022.54 cu0 cs0 - .552% CPU load
1.13 requests/sec - 8.9 kB/second - 7.9 kB/request
1 requests currently being processed, 124 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
31530120yes025000
31530240yes124000
31530420yes025000
31531630yes025000
32087950yes025000
Sum0 1124000

_________________________W______________________________________
_____________________________________________________________...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-631530120/516/3235_
270.8914530.04.2624.78
165.22.235.3webmail.nothim.ca:7080GET /_all_dbs HTTP/1.0
0-631530120/517/3231_
272.085430.04.3924.09
172.70.189.151la-rhinoplastie.net:7081GET /detail/19/detail/29/Quelles-sont-les-suites-dune-rhinoplas
0-631530120/512/3224_
270.9014530.04.5924.53
165.22.235.3webmail.nothim.ca:7080GET /.DS_Store HTTP/1.0
0-631530120/512/3231_
270.88151420.05.0026.17
108.162.249.6otoplastie.info:7081GET / HTTP/1.0
0-631530120/514/3225_
271.931011810.05.2923.82
66.249.66.208technovationacademy.com:7081GET /products/gamophagia1280626?id=688 HTTP/1.0
0-631530120/514/3210_
271.391411770.05.4325.29
65.108.203.133technovationacademy.com:7080GET /Cordyline/beige604326.html HTTP/1.0
0-631530120/519/3235_
272.0781790.05.1622.94
65.108.203.133technovationacademy.com:7080GET /Cordyline/beige606086.html HTTP/1.0
0-631530120/518/3225_
271.871281720.05.0625.19
52.167.144.220technovationacademy.com:7080GET /tag/xyxvs HTTP/1.0
0-631530120/521/3233_
271.3714540.04.3025.64
165.22.235.3webmail.nothim.ca:7080GET /s/132313e243e28383e2830323/_/;/META-INF/maven/com.atlassia
0-631530120/515/3222_
272.00461740.04.4323.99
185.191.171.18technovationacademy.com:7081GET /ezrwx/m980453.html HTTP/1.0
0-631530120/513/3222_
270.851581650.04.2822.07
52.167.144.220technovationacademy.com:7081GET /list/252_3738_253?kg=dy HTTP/1.0
0-631530120/518/3238_
270.551451800.04.9626.11
165.22.235.3webmail.nothim.ca:7080GET /.env HTTP/1.0
0-631530120/513/3221_
272.042540.04.6722.03
167.99.182.39chirurgie-esthetique-tunisie.orGET /login.action HTTP/1.0
0-631530120/515/3233_
270.881471730.04.2723.89
52.167.144.192technovationacademy.com:7080GET /tag/bidpq HTTP/1.0
0-631530120/518/3223_
272.0522470.06.1526.55
172.69.67.175gynecomastie.org:7081HEAD / HTTP/1.0
0-631530120/516/3224_
271.9786140.04.5722.74
158.220.123.109muslimmarriages.ca:7081GET /contact_us.php/registration_form.php/contact_us.php/index.
0-631530120/516/3219_
272.03266240.04.9825.92
45.227.254.34theelectricians.ca:7081GET /cache/accesson0.php HTTP/1.0
0-631530120/515/3224_
271.901191770.05.0224.11
65.108.203.133technovationacademy.com:7080GET /Cordyline/beige604546.html HTTP/1.0
0-631530120/516/3228_
272.101250.04.1525.11
172.68.245.180en.cosmeticatravel.com:7081GET /l HTTP/1.0
0-631530120/513/3225_
271.94101470.04.3623.26
172.68.26.86lifting-mammaire.net:7081HEAD / HTTP/1.0
0-631530120/516/3213_
271.90121470.04.4622.36
172.69.67.119le-lifting.com:7081HEAD / HTTP/1.0
0-631530120/518/3234_
270.561451630.05.1024.78
165.22.235.3webmail.nothim.ca:7080GET /.git/config HTTP/1.0
0-631530120/519/3225_
271.401291830.04.7125.41
65.108.203.133technovationacademy.com:7080GET /Cordyline/beige604491.html HTTP/1.0
0-631530120/515/3220_
272.130420.04.3025.25
172.69.130.208en.cosmeticatravel.com:7081GET / HTTP/1.0
0-631530120/519/3237_
271.95891730.04.9024.25
85.208.96.202technovationacademy.com:7081GET /products/condisciple2130084?id=297 HTTP/1.0
1-631530240/577/3576W
299.50000.05.5827.52
172.69.214.55en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-631530240/581/3580_
299.6741170.06.0428.82
172.70.39.46cosmeticatravel.com:7081GET /blog/index.php?f=detail&cat=11&id=307 HTTP/1.0
1-631530240/582/3586_
299.852540.05.6928.78
167.99.182.39chirurgie-esthetique-tunisie.orGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-631530240/579/3581_
299.60761710.06.2728.15
66.249.77.229technovationacademy.com:7081GET /?/information/csr_sdgs.php/gyfxm/t639679.html HTTP/1.0
1-631530240/581/3582_
299.61716440.05.7624.42
40.77.167.51sirokotravel.com:7081GET /randonnees-pedestres-sud/ HTTP/1.0
1-631530240/581/3575_
299.511031610.06.3125.76
65.108.203.133technovationacademy.com:7080GET /Cordyline/beige604711.html HTTP/1.0
1-631530240/586/3597_
299.55882870.05.4227.97
185.191.171.4mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/node/node/node/node/node/node/nod
1-631530240/583/3577_
299.8029160.04.8327.75
158.220.123.109muslimmarriages.ca:7081GET /contact_us.php/registration_form.php/index.php/contact_us.
1-631530240/579/3585_
299.8825330.05.6326.89
167.99.182.39chirurgie-esthetique-tunisie.orGET /?rest_route=/wp/v2/users/ HTTP/1.0
1-631530240/577/3587_
299.58811830.05.2027.29
185.191.171.4technovationacademy.com:7081GET /qpwhj/e1251578.html HTTP/1.0
1-631530240/578/3579_
299.59771730.05.5527.96
52.167.144.192technovationacademy.com:7081GET /fzkfe/o1308360.html HTTP/1.0
1-631530240/580/3587_
299.541011700.05.8629.89
185.191.171.17technovationacademy.com:7081GET /xqeru/b1971866.html HTTP/1.0
1-631530240/581/3580_
299.521021800.05.1527.68
66.249.66.208technovationacademy.com:7081GET /bhsmc/z742216.html HTTP/1.0
1-631530240/584/3575_
299.832540.07.5429.39
167.99.182.39chirurgie-esthetique-tunisie.orGET /debug/default/view?panel=config HTTP/1.0
1-631530240/585/3587_
299.78381860.04.1524.97
172.68.245.115cosmeticatravel.com:7081GET /blog/?f=detail&cat=11&id=307 HTTP/1.0
1-631530240/583/3586_
299.940270.05.8227.69
172.69.130.3en.cosmeticatravel.com:7081GET /server HTTP/1.0
1-631530240/583/3577_
299.912280.05.0526.32
172.70.189.151la-rhinoplastie.net:7081GET /detail/19/chirurgie-esthetique-quen-est-il-de-la-prise-en-
1-631530240/580/3582_
299.63671690.05.2525.72
52.167.144.192technovationacademy.com:7080GET /tag/xrgul HTTP/1.0
1-631530240/583/3582_
299.842560.05.0226.03
167.99.182.39chirurgie-esthetique-tunisie.orGET /v2/_catalog HTTP/1.0
1-631530240/583/3580_
299.63681780.05.3027.68
65.108.203.133technovationacademy.com:7080GET /Cordyline/beige605371.html HTTP/1.0
1-631530240/581/3577_
299.8225360.06.6027.92
167.99.182.39chirurgie-esthetique-tunisie.orGET / HTTP/1.0
1-631530240/585/3591_
299.7039200.04.7427.77
172.70.39.46cosmeticatravel.com:7081GET /blog/index.php?f=detail&cat=11&id=307 HTTP/1.0
1-631530240/582/3587_
299.578260.04.5327.45
66.220.149.29shorehamvillage.com:7081GET /wp-content/uploads/2023/05/CEO-Report-on-Shoreham-Strategi
1-631530240/581/3578_
299.89221720.04.1328.02
65.108.203.133technovationacademy.com:7080GET /Cordyline/beige606031.html HTTP/1.0
1-631530240/584/3579_
299.68401710.04.4029.62
66.249.66.206

Found on 2024-08-12 05:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a92a70c373

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Friday, 09-Aug-2024 23:16:57 EDT
Restart Time: Tuesday, 06-Aug-2024 23:07:25 EDT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime: 3 days 9 minutes 32 seconds
Server load: 0.34 0.44 0.46
Total accesses: 305822 - Total Traffic: 2.1 GB
CPU Usage: u1219.64 s894.93 cu0 cs0 - .814% CPU load
1.18 requests/sec - 8.6 kB/second - 7.3 kB/request
2 requests currently being processed, 173 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
19589590yes124000
19589710yes025000
19589880yes025000
19591930yes025000
22836510yes025000
23252500yes124000
23252930yes025000
Sum0 2173000

W_______________________________________________________________
________________________________________________________________
__________W____________________________________.................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-319589590/550/1891W
267.01000.03.9212.75
172.69.150.159en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
0-319589590/546/1884_
267.141881870.03.2713.20
85.208.96.207technovationacademy.com:7081GET /mxoaq/o1093863.html HTTP/1.0
0-319589590/541/1881_
267.231066560.03.7813.17
104.196.37.13sirokotravel.com:7081GET /excursions-et-circuits/ HTTP/1.0
0-319589590/543/1886_
267.131892800.03.8313.80
208.88.4.121amitoladesignconcepts.ca:7080POST /wp-cron.php?doing_wp_cron=1723259628.42612195014953613281
0-319589590/544/1883_
267.30671730.02.8112.15
158.220.111.44technovationacademy.com:7080GET /Cordyline/beige1943961.html HTTP/1.0
0-319589590/539/1867_
267.1716911730.04.4613.32
52.167.144.161technovationacademy.com:7080GET /tag/cvpak HTTP/1.0
0-319589590/545/1888_
267.161701810.04.1412.35
52.167.144.161technovationacademy.com:7080GET /products/berberidaceous89018?id=839 HTTP/1.0
0-319589590/542/1881_
267.26951750.03.7413.57
52.167.144.187technovationacademy.com:7080GET /category/SepexH7r HTTP/1.0
0-319589590/545/1884_
267.28851710.03.5813.30
158.220.111.44technovationacademy.com:7080GET /Cordyline/beige1941211.html HTTP/1.0
0-319589590/545/1881_
267.259750.03.9813.22
138.246.253.24en.atelierjaku.com:7081GET /robots.txt HTTP/1.0
0-319589590/544/1880_
267.278550.03.6012.00
34.221.39.196daryljamieson.com:7081GET /robots.txt HTTP/1.0
0-319589590/545/1882_
267.0426640.04.2713.26
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-319589590/545/1887_
267.1815840.03.4211.37
195.191.219.131roundtwoboutique.com:7080GET /robots.txt HTTP/1.0
0-319589590/544/1885_
267.3355210.03.9112.87
172.71.99.129implant-mammaire.net:7081GET //web/wp-includes/wlwmanifest.xml HTTP/1.0
0-319589590/547/1885_
267.072411810.04.5514.42
52.167.144.161technovationacademy.com:7081GET /jjdql/e1741492.html HTTP/1.0
0-319589590/547/1879_
267.1022560.03.2112.14
66.249.77.2shorehamvillage.com:7080GET /visiting-shoreham HTTP/1.0
0-319589590/547/1883_
267.032701820.03.6714.36
158.220.111.44technovationacademy.com:7080GET /Cordyline/beige1908101.html HTTP/1.0
0-319589590/542/1882_
267.32631730.04.1012.54
66.249.77.227technovationacademy.com:7081GET /cacnl/dQMzQnvd1095329.html HTTP/1.0
0-319589590/544/1884_
267.36291970.03.8114.37
185.191.171.6technovationacademy.com:7081GET /ziknm/a1372085.html HTTP/1.0
0-319589590/545/1885_
267.392640.04.1712.64
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-319589590/537/1873_
267.372770.04.4812.11
172.71.150.237otoplastie.info:7081GET /robots.txt HTTP/1.0
0-319589590/546/1891_
267.3927470.04.2013.58
172.71.151.45otoplastie.info:7081GET /detail/19/lotoplastie-pour-remedier-aux-oreilles-decollees
0-319589590/546/1876_
267.306340.03.6512.02
89.104.110.3tunisia-wellness-travel.com:708GET /favicon.ico HTTP/1.0
0-319589590/543/1881_
267.2015150.03.9412.60
172.69.130.241cosmeticatravel.fr:7081GET //wp-json/wp/v2/users/ HTTP/1.0
0-319589590/544/1890_
267.06251270.04.2712.91
172.71.174.148blepharoplastie.net:7081HEAD / HTTP/1.0
1-319589710/634/2184_
322.6613160.05.6416.88
173.252.83.7daryljamieson.com:7080GET /files/archive-march-2022.html HTTP/1.0
1-319589710/636/2178_
322.823140.05.0615.34
195.154.122.157celeste.cirrushosting.com:7081GET /css/style.css HTTP/1.0
1-319589710/636/2184_
322.601501640.03.5313.51
52.167.144.161technovationacademy.com:7080GET /tag/zeihl HTTP/1.0
1-319589710/630/2181_
322.631391770.05.1314.87
158.220.111.44technovationacademy.com:7080GET /Cordyline/beige193806.html HTTP/1.0
1-319589710/635/2176_
322.502051710.03.7513.73
66.249.77.228technovationacademy.com:7081GET /?/information/csr_sdgs.php/lomya/h1741724.html HTTP/1.0
1-319589710/636/2180_
322.7554270.04.6213.84
172.71.99.129implant-mammaire.net:7081GET //2020/wp-includes/wlwmanifest.xml HTTP/1.0
1-319589710/635/2184_
322.52195300.04.4315.97
162.158.41.160cosmeticatravel.com:7081GET / HTTP/1.0
1-319589710/631/2172_
322.5915350.03.6014.02
85.208.96.203daryljamieson.com:7080GET /files/d3eedabd6d6d4c3b1478d314b220cc39-10.html HTTP/1.0
1-319589710/636/2184_
322.6114640.04.3215.53
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-319589710/635/2184_
322.561731850.05.1115.19
24.199.81.155technovationacademy.com:7081GET /t4 HTTP/1.0
1-319589710/637/2182_
322.5717350.04.5715.64
24.199.81.155technovationacademy.com:7081GET /favicon.ico HTTP/1.0
1-319589710/636/2180_
322.671301850.04.6617.67
185.191.171.19technovationacademy.com:7081GET /heuue/m1069036.html HTTP/1.0
1-319589710/635/2177_
322.823250.04.6916.63
51.222.253.20celeste.cirrushosting.com:7081GET / HTTP/1.0
1-319589710/633/2178_
322.83221740.04.2415.90
40.77.167.4technovationacademy.com:7080GET /products/hellene525520?id=312 HTTP/1.0
1-319589710/636/2181_
322.7752220.04.4514.30
172.71.99.129implant-mammaire.net:7081GET //test/wp-includes/wlwmanifest.xml HTTP/1.0
1-319589710/637/2184_
322.641345980.04.2515.35
104.196.37.13sirokotravel.com:7081GET /feed/ HTTP/1.0
1-319589710/631/2174_
322.551731730.05.2915.85
24.199.81.155technovationacademy.com:7081GET / HTTP/1.0
1-319589710/635/2179_
322.7851210.04.6514.97
172.71.99.129implant-mammaire.net:7081GET //site/wp-includes/wlwmanifest.xml HTTP/1.0
1-319589710/634/2177_
322.8051230.04.5414.54
172.71.99.129implant-mammaire.net:7081GET //sito/wp-includes/wlwmanifest.xml HTTP/1.0
1-319589710/631/2176_
322.691211770.04.0316.32
66.249.66.206technovationacademy.com:7081GET /arbdh/w495235.html HTTP/1.0
1-319589710/632/2172_
322.8811570.04.6615.24
172.69.71.136cosmeticatravel.com:7081GET /reduction_mammaire.php HTTP/1.0
1-319589710/634/2182_
322.73651760.06.2816.48
85.208.96.193technovationacademy.com:7081GET /bvyar/j1927437.html HTTP/1.0
1-319589710/631/2178_
322.531882860.04.9016.36
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
1-319589710/635/2177_
322.8515160.04.2014.83
35.237.148.148muslimmarriages.ca:7081GET /contact_us.php HTTP/1.0
1-319589710/633/2179_
322.641351660.05.0616.29
85.208.96.212technova

Found on 2024-08-10 03:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9282b03c7

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Thursday, 08-Aug-2024 20:22:53 EDT
Restart Time: Tuesday, 06-Aug-2024 23:07:25 EDT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime: 1 day 21 hours 15 minutes 28 seconds
Server load: 7.90 2.78 1.27
Total accesses: 192409 - Total Traffic: 1.3 GB
CPU Usage: u835.6 s615.92 cu0 cs0 - .891% CPU load
1.18 requests/sec - 8.5 kB/second - 7.2 kB/request
2 requests currently being processed, 223 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
12705080yes025000
12705310yes025000
12705370yes025000
12706990yes025000
16182000yes025000
16343840yes025000
16344190yes025000
16344780yes124000
16345090yes124000
Sum0 2223000

________________________________________________________________
________________________________________________________________
________________________________________________________________
___C___________________________W_...............................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-212705080/436/1275_
221.984440.02.668.36
2.57.122.209celeste.cirrushosting.com:7081GET / HTTP/1.0
0-212705080/437/1272_
222.063560.03.839.58
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
0-212705080/439/1275_
222.0243100.02.569.01
2.57.122.209tunisia-wellness-travel.com:708GET / HTTP/1.0
0-212705080/441/1277_
222.223030670.02.909.42
2.57.122.209eleven5p.ca:7081GET / HTTP/1.0
0-212705080/436/1273_
222.1134100.02.768.74
2.57.122.209rrudemo.number41media.com:7081GET /favicon.ico HTTP/1.0
0-212705080/436/1263_
222.034340.02.688.61
2.57.122.209bizone.ca:7081GET / HTTP/1.0
0-212705080/438/1278_
222.133460.02.257.81
2.57.122.209cinarium.com:7081GET /favicon.ico HTTP/1.0
0-212705080/435/1274_
222.02433100.01.988.93
2.57.122.209webmail.zeinstra.ca:7081GET / HTTP/1.0
0-212705080/440/1274_
222.133460.02.619.30
2.57.122.209qualitasbusiness.com:7081GET / HTTP/1.0
0-212705080/440/1270_
222.0143150.03.128.64
2.57.122.209celeste.cirrushosting.com:7081GET /favicon.ico HTTP/1.0
0-212705080/436/1270_
221.9344820.02.157.85
2.57.122.209celeste.cirrushosting.com:7081GET / HTTP/1.0
0-212705080/437/1271_
222.0543140.03.378.36
2.57.122.209confluvium.ca:7081GET /favicon.ico HTTP/1.0
0-212705080/434/1276_
221.95441970.02.497.42
2.57.122.209tunisia-business-travel.com:708GET / HTTP/1.0
0-212705080/438/1275_
222.083540.02.858.38
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
0-212705080/440/1273_
222.2727167800.02.699.48
2.57.122.209theelectricians.ca:7081GET / HTTP/1.0
0-212705080/435/1267_
222.340330.02.668.23
162.158.94.49en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-212705080/435/1272_
222.2130136340.02.8710.17
2.57.122.209francinelalonde.com:7081GET / HTTP/1.0
0-212705080/438/1274_
221.9344110.02.868.18
2.57.122.209celeste.cirrushosting.com:7081GET / HTTP/1.0
0-212705080/439/1275_
222.322290.02.649.96
162.158.86.119en.cosmeticatravel.com:7081GET /server HTTP/1.0
0-212705080/437/1275_
221.984420.02.708.08
2.57.122.209lonomail.com:7081GET / HTTP/1.0
0-212705080/434/1271_
222.014360.02.367.37
2.57.122.209celeste.cirrushosting.com:7081GET / HTTP/1.0
0-212705080/440/1280_
222.153360.03.129.02
2.57.122.209doctor-london.co.uk:7081GET /images/favicon.ico HTTP/1.0
0-212705080/433/1265_
222.313200.02.097.86
162.158.6.28gynecomastie.org:7081GET /wp-content/languages/about.php HTTP/1.0
0-212705080/434/1272_
222.044340.02.507.95
2.57.122.209confluvium.ca:7081GET /favicon.ico HTTP/1.0
0-212705080/440/1280_
222.143450.02.588.18
2.57.122.209learnfrominternet.com:7081GET /favicon.ico HTTP/1.0
1-212705310/517/1478_
263.84329540.04.7210.81
2.57.122.209webmail.nothim.ca:7080GET /login.php HTTP/1.0
1-212705310/513/1470_
263.921250.03.719.91
172.70.242.80en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-212705310/516/1476_
263.902430.03.259.40
172.70.250.142en.cosmeticatravel.com:7081GET / HTTP/1.0
1-212705310/518/1478_
263.743580.03.369.18
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
1-212705310/514/1469_
263.886180.03.179.61
162.158.6.28gynecomastie.org:7081GET /wp-includes/rest-api/about.php HTTP/1.0
1-212705310/518/1472_
263.852761500.03.368.92
2.57.122.209sirokotravel.com:7081GET / HTTP/1.0
1-212705310/513/1477_
263.803400.03.9510.74
2.57.122.209lonomail.com:7080GET / HTTP/1.0
1-212705310/514/1469_
263.664470.03.769.83
2.57.122.209celeste.cirrushosting.com:7081GET / HTTP/1.0
1-212705310/515/1477_
263.684450.03.2010.90
2.57.122.209celeste.cirrushosting.com:7081GET /favicon.ico HTTP/1.0
1-212705310/514/1477_
263.83333470.02.889.61
2.57.122.209webmail.zeinstra.ca:7081GET /login.php HTTP/1.0
1-212705310/519/1473_
263.733530.03.6010.71
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
1-212705310/512/1471_
263.694340.04.5012.47
2.57.122.209carconesautomotiverepairserviceGET / HTTP/1.0
1-212705310/512/1469_
263.714060.03.4311.57
2.57.122.209dependable.ca:7081GET /favicon.ico HTTP/1.0
1-212705310/517/1472_
263.723530.03.3411.28
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
1-212705310/511/1472_
263.674460.03.069.39
2.57.122.209stayingstrong.ca:7081GET / HTTP/1.0
1-212705310/517/1474_
263.753530.03.4310.59
2.57.122.209celeste.cirrushosting.com:7080GET / HTTP/1.0
1-212705310/515/1470_
263.753540.03.099.88
2.57.122.209celeste.cirrushosting.com:7080GET / HTTP/1.0
1-212705310/516/1472_
263.763540.02.769.77
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
1-212705310/517/1471_
263.70433520.03.169.48
2.57.122.209webmail.bizone.ca:7081GET /login.php HTTP/1.0
1-212705310/518/1474_
263.79343270.02.9711.96
2.57.122.209confluvium.ca:7080GET /favicon.ico HTTP/1.0
1-212705310/515/1468_
263.843360.03.059.66
2.57.122.209webmail.iqbalprofessional.com:7GET /themes/default/graphics/favicon.ico HTTP/1.0
1-212705310/517/1476_
263.80342310.03.069.70
2.57.122.209webmail.iqbalprofessional.com:7GET / HTTP/1.0
1-212705310/516/1475_
263.763530.03.6110.66
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
1-212705310/515/1470_
263.940200.03.4810.32
162.158.6.28gynecomastie.org:7081GET /wp-content/upgrade-temp-backup/about.php HTTP/1.0
1-212705310/516/1473_
263.743520.03.2310.61
2.57.122.209celeste.cirrushosting.com:7080GET /favicon.ico HTTP/1.0
2-212705370/442/1274_
232.341181780.02.178.17
52.167.144.235technovationacademy.com:7081GET /xvqcl/p189629.html HTTP/1.0
2-212705370/438/1274_
232.534180.02.688.84
2.57.12

Found on 2024-08-09 00:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a966682105

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Tuesday, 06-Aug-2024 23:07:31 EDT
Restart Time: Tuesday, 06-Aug-2024 23:07:25 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 6 seconds
Server load: 1.10 0.71 0.62
Total accesses: 43 - Total Traffic: 931 kB
CPU Usage: u.7 s.24 cu0 cs0 - 15.7% CPU load
7.17 requests/sec - 155.2 kB/second - 21.7 kB/request
3 requests currently being processed, 97 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
5075230yes025000
5075510yes124000
5075712yes223000
5076660yes025000
Sum2 397000

_________________________________________W______________WW______
____________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-05075230/1/1_
0.026230.00.010.01
192.99.35.94muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-05075230/1/1_
0.0742030.00.020.02
172.70.251.21en.cosmeticatravel.com:7081GET / HTTP/1.0
0-05075230/1/1_
0.10311960.00.010.01
162.158.110.68en.cosmeticatravel.com:7081GET / HTTP/1.0
0-05075230/1/1_
0.13210550.00.010.01
162.158.95.139en.cosmeticatravel.com:7081GET / HTTP/1.0
0-05075230/1/1_
0.132310.00.030.03
172.68.195.192en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-05075230/1/1_
0.161280.00.030.03
172.70.246.95en.cosmeticatravel.com:7081GET /server HTTP/1.0
0-05075230/1/1_
0.171280.00.030.03
162.158.95.116en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-05075230/1/1_
0.191380.00.030.03
172.71.246.145en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-05075230/1/1_
0.211130.00.000.00
172.70.243.160en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-05075510/1/1_
0.07310690.00.010.01
172.70.246.214en.cosmeticatravel.com:7081GET / HTTP/1.0
1-05075510/1/1_
0.08312140.00.010.01
172.69.151.209en.cosmeticatravel.com:7081GET / HTTP/1.0
1-05075510/1/1_
0.06450.00.000.00
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-05075510/1/1_
0.093130.00.000.00
172.68.195.147en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-05075510/1/1_
0.121300.00.030.03
162.158.110.68en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-05075510/1/1_
0.131120.00.000.00
172.70.251.205en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-05075510/1/1_
0.15170.00.000.00
17.241.219.38shorehamvillage.com:7081GET /wp-content/uploads/bb-plugin/cache/82-layout.js?ver=6bcb44
1-05075510/1/1_
0.161260.00.030.03
172.70.242.112en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-05075510/1/1_
0.181270.00.030.03
172.71.250.78en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-05075510/1/1_
0.200300.00.030.03
162.158.94.33en.cosmeticatravel.com:7081GET /login.action HTTP/1.0
1-05075510/1/1_
0.2203000.00.000.00
40.77.167.70technovationacademy.com:7081GET /products/humpbacked379277?id=326 HTTP/1.0
1-05075510/1/1_
0.240340.00.030.03
172.70.242.243en.cosmeticatravel.com:7081GET /login.action HTTP/1.0
1-05075510/1/1_
0.250310.00.030.03
162.158.110.219en.cosmeticatravel.com:7081GET /.DS_Store HTTP/1.0
1-05075510/1/1_
0.270310.00.030.03
162.158.110.100en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-05075510/1/1_
0.290210.00.030.03
172.70.250.43en.cosmeticatravel.com:7081GET /_all_dbs HTTP/1.0
1-05075510/0/0W
0.00000.00.000.00
162.158.110.150en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
2-05075710/1/1_
0.13311970.00.010.01
172.71.246.19en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.12311990.00.010.01
172.68.194.160en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.053320.00.030.03
172.70.34.43en.cosmeticatravel.com:7081GET /conditions_vente.php HTTP/1.0
2-05075710/1/1_
0.093470.00.010.01
172.70.246.214en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.113450.00.010.01
172.71.250.68en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.142170.00.000.00
162.158.94.30en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
2-05075710/0/0W
0.00200.00.000.00
172.71.174.234cosmeticatravel.co.uk:7081GET / HTTP/1.0
2-05075710/0/0W
0.00200.00.000.00
128.199.148.65francinelalonde.com:7081POST /wp-login.php HTTP/1.0
2-05075710/1/1_
0.192340.00.030.03
162.158.94.27en.cosmeticatravel.com:7081GET /about HTTP/1.0
2-05075710/1/1_
0.202250.00.030.03
172.71.250.141en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
2-05075710/1/1_
0.22180.00.000.00
17.241.227.177shorehamvillage.com:7081GET /wp-content/uploads/bb-plugin/cache/82-layout.css?ver=6bcb4
2-05075710/1/1_
0.241270.00.030.03
172.69.150.112en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
2-05075710/1/1_
0.270400.00.000.00
172.71.246.30en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
2-05075710/1/1_
0.270350.00.030.03
172.68.195.192en.cosmeticatravel.com:7081GET /_all_dbs HTTP/1.0
2-05075710/1/1_
0.300280.00.030.03
162.158.95.141en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
3-05076660/1/1_
0.023480.00.010.01
172.69.150.107en.cosmeticatravel.com:7081GET / HTTP/1.0
3-05076660/1/1_
0.053290.00.030.03
172.69.150.159en.cosmeticatravel.com:7081GET /server HTTP/1.0
3-05076660/1/1_
0.14210510.00.020.02
172.70.250.118en.cosmeticatravel.com:7081GET / HTTP/1.0
3-05076660/1/1_
0.13210510.00.010.01
172.70.243.119en.cosmeticatravel.com:7081GET / HTTP/1.0
3-05076660/1/1_
0.102280.00.030.03
162.158.95.143en.cosmeticatravel.com:7081GET /server HTTP/1.0
3-05076660/1/1_
0.122270.00.030.03
162.158.111.125en.cosmeticatravel.com:7081GET /about HTTP/1.0

 
SrvChild Server number - generation
PIDOS process ID
AccNumber of accesses this connection / this child / this slot
MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
ReqMilliseconds required to process most recent request
ConnKilobytes transferred this connection
ChildMegabytes transferred this child
SlotTotal megabytes transferred this slot




SSL/TLS Session Cache Status: 

cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5 misstotal removes since starting: 0 hit, 0 miss


mod_fcgid status:
Total FastCGI processes: 8

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
507703220Working

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccesse

Found on 2024-08-07 03:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f43d4578a9992c81b0

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 Phusion_Passenger/6.0.22
Server MPM: event
Server Built: Jun 7 2024 15:31:09

Current Time: Tuesday, 06-Aug-2024 23:07:30 EDT
Restart Time: Tuesday, 06-Aug-2024 23:07:25 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 5 seconds
Server load: 1.10 0.71 0.62
Total accesses: 35 - Total Traffic: 712 kB
CPU Usage: u.6 s.19 cu0 cs0 - 15.8% CPU load
7 requests/sec - 142.4 kB/second - 20.3 kB/request
5 requests currently being processed, 95 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
5075230yes025000
5075510yes124000
5075712yes421000
5076660yes025000
Sum2 595000

___________________________________R____________________WW____WW
____________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-05075230/1/1_
0.025230.00.010.01
192.99.35.94muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-05075230/1/1_
0.0732030.00.020.02
172.70.251.21en.cosmeticatravel.com:7081GET / HTTP/1.0
0-05075230/1/1_
0.10211960.00.010.01
162.158.110.68en.cosmeticatravel.com:7081GET / HTTP/1.0
0-05075230/1/1_
0.13110550.00.010.01
162.158.95.139en.cosmeticatravel.com:7081GET / HTTP/1.0
0-05075230/1/1_
0.131310.00.030.03
172.68.195.192en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-05075230/1/1_
0.161280.00.030.03
172.70.246.95en.cosmeticatravel.com:7081GET /server HTTP/1.0
0-05075230/1/1_
0.171280.00.030.03
162.158.95.116en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-05075230/1/1_
0.190380.00.030.03
172.71.246.145en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-05075230/1/1_
0.210130.00.000.00
172.70.243.160en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-05075510/1/1_
0.07210690.00.010.01
172.70.246.214en.cosmeticatravel.com:7081GET / HTTP/1.0
1-05075510/1/1_
0.08212140.00.010.01
172.69.151.209en.cosmeticatravel.com:7081GET / HTTP/1.0
1-05075510/1/1_
0.06350.00.000.00
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-05075510/1/1_
0.092130.00.000.00
172.68.195.147en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-05075510/1/1_
0.120300.00.030.03
162.158.110.68en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-05075510/1/1_
0.130120.00.000.00
172.70.251.205en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-05075510/1/1_
0.15070.00.000.00
17.241.219.38shorehamvillage.com:7081GET /wp-content/uploads/bb-plugin/cache/82-layout.js?ver=6bcb44
1-05075510/1/1_
0.160260.00.030.03
172.70.242.112en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-05075510/1/1_
0.180270.00.030.03
172.71.250.78en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-05075510/1/1_
0.200300.00.030.03
162.158.94.33en.cosmeticatravel.com:7081GET /login.action HTTP/1.0
1-05075510/0/0R
0.00000.00.000.00
208.88.4.125
2-05075710/1/1_
0.13211970.00.010.01
172.71.246.19en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.12211990.00.010.01
172.68.194.160en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.053320.00.030.03
172.70.34.43en.cosmeticatravel.com:7081GET /conditions_vente.php HTTP/1.0
2-05075710/1/1_
0.092470.00.010.01
172.70.246.214en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.112450.00.010.01
172.71.250.68en.cosmeticatravel.com:7081GET / HTTP/1.0
2-05075710/1/1_
0.141170.00.000.00
162.158.94.30en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
2-05075710/0/0W
0.00100.00.000.00
172.71.174.234cosmeticatravel.co.uk:7081GET / HTTP/1.0
2-05075710/0/0W
0.00100.00.000.00
128.199.148.65francinelalonde.com:7081POST /wp-login.php HTTP/1.0
2-05075710/1/1_
0.191340.00.030.03
162.158.94.27en.cosmeticatravel.com:7081GET /about HTTP/1.0
2-05075710/1/1_
0.201250.00.030.03
172.71.250.141en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
2-05075710/1/1_
0.22180.00.000.00
17.241.227.177shorehamvillage.com:7081GET /wp-content/uploads/bb-plugin/cache/82-layout.css?ver=6bcb4
2-05075710/1/1_
0.240270.00.030.03
172.69.150.112en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
2-05075710/0/0W
0.00000.00.000.00
172.71.246.30en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
2-05075710/0/0W
0.00000.00.000.00
172.68.195.192en.cosmeticatravel.com:7081GET /_all_dbs HTTP/1.0
3-05076660/1/1_
0.023480.00.010.01
172.69.150.107en.cosmeticatravel.com:7081GET / HTTP/1.0
3-05076660/1/1_
0.052290.00.030.03
172.69.150.159en.cosmeticatravel.com:7081GET /server HTTP/1.0
3-05076660/1/1_
0.14110510.00.020.02
172.70.250.118en.cosmeticatravel.com:7081GET / HTTP/1.0
3-05076660/1/1_
0.13110510.00.010.01
172.70.243.119en.cosmeticatravel.com:7081GET / HTTP/1.0
3-05076660/1/1_
0.102280.00.030.03
162.158.95.143en.cosmeticatravel.com:7081GET /server HTTP/1.0
3-05076660/1/1_
0.122270.00.030.03
162.158.111.125en.cosmeticatravel.com:7081GET /about HTTP/1.0

 
SrvChild Server number - generation
PIDOS process ID
AccNumber of accesses this connection / this child / this slot
MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
ReqMilliseconds required to process most recent request
ConnKilobytes transferred this connection
ChildMegabytes transferred this child
SlotTotal megabytes transferred this slot




SSL/TLS Session Cache Status: 

cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5 misstotal removes since starting: 0 hit, 0 miss


mod_fcgid status:
Total FastCGI processes: 7

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
507703110Working

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
507702110Working

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
5077002020Ready507699212Ready507698221Ready507697221Ready507664327Ready

Active and Idle are time active and time since
last request, in seconds.

Found on 2024-08-07 03:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b88bf61f8

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Thursday, 24-Aug-2023 03:50:39 EDT
Restart Time: Wednesday, 23-Aug-2023 03:09:11 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 1 day 41 minutes 27 seconds
Server load: 2.11 2.16 2.85
Total accesses: 63819 - Total Traffic: 528.3 MB
CPU Usage: u482.26 s448.44 cu0 cs0 - 1.05% CPU load
.718 requests/sec - 6.1 kB/second - 8.5 kB/request
1 requests currently being processed, 249 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
41878740yes025000
41879030yes025000
41879720yes025000
1133520yes025000
1133560yes025000
1133610yes025000
1133770yes025000
1133940yes025000
1134120yes025000
1134130yes124000
Sum0 1249000

_________________________.........................______________
____________________________________............................
......................__________________________________________
_________________________________.........................______
___________________.........................____________________
_____.........................__________________________________
W_______________
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

<SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-141878740/80/290_
62.179712830.00.592.03
162.158.18.87en.cosmeticatravel.com:7081GET /images/accreditation.png HTTP/1.0
0-141878740/82/294_
62.06107925650.00.592.47
172.70.142.73cosmeticatravel.fr:7081POST /wp-login.php HTTP/1.0
0-141878740/82/291_
62.777071140.00.682.18
141.101.68.222la-rhinoplastie.net:7081GET /assets/js/jquery.js HTTP/1.0
0-141878740/81/292_
62.707384260.00.772.96
66.249.66.161underwoodfinancial.com:7081GET /site/templates/js/parallax.min.js HTTP/1.0
0-141878740/79/291_
63.4439913860.00.812.48
208.88.4.121
0-141878740/81/292_
63.207069700.00.281.27
141.101.69.107la-rhinoplastie.net:7081GET /images/article/1364399940.jpg HTTP/1.0
0-141878740/82/292_
63.057064370.00.451.89
141.101.69.14la-rhinoplastie.net:7081GET /images/article/1426665327.jpg HTTP/1.0
0-141878740/80/291_
63.5129140.00.591.91
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-141878740/82/295_
63.7115830140.00.813.09
172.71.167.144cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-141878740/81/290_
62.74711910.00.732.34
162.158.174.58abdominoplastie.org:7081HEAD / HTTP/1.0
0-141878740/79/289_
61.9911473860.00.391.85
172.71.166.159blepharoplastie.net:7081HEAD / HTTP/1.0
0-141878740/79/292_
62.169712150.00.542.03
162.158.18.57en.cosmeticatravel.com:7081GET /images/logo.png HTTP/1.0
0-141878740/77/289_
62.11100612310.00.471.96
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1692862430.96182107925415039062
0-141878740/79/290_
63.117066830.00.742.41
141.101.68.71la-rhinoplastie.net:7081GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.0
0-141878740/78/284_
62.199551640.00.321.90
185.191.171.12technovationacademy.com:7081GET /v/C968580.html HTTP/1.0
0-141878740/81/292_
62.298111990.00.822.46
85.208.96.198technovationacademy.com:7081GET /mediatress684480.html HTTP/1.0
0-141878740/81/293_
63.42403480.00.562.01
172.71.175.15cosmeticatravel.com:7081HEAD / HTTP/1.0
0-141878740/79/291_
62.13977390.00.942.27
157.55.39.216premierdoorservices.ca:7081GET /js3/scripts.js HTTP/1.0
0-141878740/79/289_
62.367561140.00.231.40
162.158.87.42cosmeticatravel.com:7081GET /chatbot/assets/css/chat.css HTTP/1.0
0-141878740/82/292_
63.53291130.00.762.36
5.188.62.21sirokotravel.com:7081GET / HTTP/1.0
0-141878740/79/290_
62.3675515060.00.452.51
162.158.86.72cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
0-141878740/82/292_
63.4042124180.00.922.72
114.119.136.150annexosteopathy.com:7081GET /category/humor/ HTTP/1.0
0-141878740/81/292_
63.5327650.00.391.82
216.218.206.69carconesautomotiverepairserviceGET /geoserver/web/ HTTP/1.0
0-141878740/81/290_
63.2956740.00.601.74
138.68.133.118tunisia-golf-travel.com:7081GET /.vscode/sftp.json HTTP/1.0
0-141878740/82/293_
62.727312180.00.461.83
172.71.174.155gynecomastie.org:7081HEAD / HTTP/1.0
1-1-0/0/301.
48.26220071030490.00.001.81
185.191.171.18technovationacademy.com:7081GET /robots.txt HTTP/1.0
1-1-0/0/299.
48.28220071347810.00.002.29
132.148.166.93eleven5p.ca:7081POST /xmlrpc.php HTTP/1.0
1-1-0/0/299.
40.052200780.00.002.24
135.181.213.219muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-1-0/0/303.
48.2422007596510.00.002.61
172.71.182.107abdominoplastie.org:7081GET / HTTP/1.0
1-1-0/0/296.
48.2422007755500.00.002.98
172.69.64.136le-lifting.com:7081HEAD / HTTP/1.0
1-1-0/0/299.
40.102200710420.00.002.23
45.90.109.191shorehamvillage.com:7081POST /wp-login.php HTTP/1.0
1-1-0/0/300.
48.26220072007140.00.002.25
185.191.171.5technovationacademy.com:7081GET /v/M1776280.html HTTP/1.0
1-1-0/0/302.
40.0322007380.00.002.01
114.119.151.0doctor-london.co.uk:7081GET /services/3/prevention-and-health-assessment.html HTTP/1.0
1-1-0/0/301.
48.25220071167650.00.001.74
172.71.166.75implant-capillaire.org:7081HEAD / HTTP/1.0
1-1-0/0/304.
40.072200780.00.002.27
135.181.213.219muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-1-0/0/302.
48.25220071762250.00.002.58
172.69.67.34lifting-mammaire.net:7081GET / HTTP/1.0
1-1-0/0/305.
48.2522007322350.00.002.27
172.69.64.231reduction-mammaire.org:7081GET / HTTP/1.0
1-1-0/0/300.
40.13220079970.00.001.99
45.90.109.191shorehamvillage.com:7081GET /xmlrpc.php HTTP/1.0
1-1-0/0/299.
48.2622007353350.00.002.15
185.191.171.2technovationacademy.com:7081GET /v/Q1653122.html HTTP/1.0
1-1-0/0/301.
48.27220071346610.00.002.43
162.158.174.88en.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-1-0/0/300.
48.27220071444350.00.001.91
40.77.167.248technovationacademy.com:7081GET /information/staff.php?/yorozu/counsel.html HTTP/1.0
1-1-0/0/301.
40.0922007100.00.001.81
135.181.213.219muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-1-0/0/304.
48.24220071147020.00.002.65
135.181.213.219muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-1-0/0/301.
48.2522007963060.00.002.45
172.69.65.221reduction-mammaire.org:7081HEAD / HTTP/1.0
1-1-0/0/298.
40.062200740.00.002.70
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-1-0/0/301.
48.2622007643300.00.002.57
162.158.175.40implant-mammaire.net:7081GET / HTTP/1.0
1-1-0/0/302.
48.2622007643900.00.002.17
172.71.166.63implant-capillaire.org:7081GET / HTTP/1.0
1-1-0/0/299.
48.23220071798160.00.002.53
27.124.21.147daryljamieson.com:7080GET / HTTP/1.0
1-1-0/0/302.
48.2922007685750.00.002.69
216.245.221.82amitoladesignconcepts.ca:7080GET / HTTP/1.0
1-1-0/0/301.
40.152200790.00.002.41
135.181.213.219muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
2-141879030/82/355_
66.11707305

Found on 2023-08-24 07:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b7688ca3c

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Tuesday, 22-Aug-2023 23:22:46 EDT
Restart Time: Tuesday, 22-Aug-2023 18:11:52 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 5 hours 10 minutes 54 seconds
Server load: 1.30 1.50 1.71
Total accesses: 12412 - Total Traffic: 109.3 MB
CPU Usage: u130.01 s81.02 cu0 cs0 - 1.13% CPU load
.665 requests/sec - 6.0 kB/second - 9.0 kB/request
1 requests currently being processed, 99 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
35989170yes124000
35989450yes025000
35989580yes025000
35990550yes025000
Sum0 199000

__________________W_____________________________________________
____________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-135989170/80/104_
42.9218048150.00.630.71
106.0.49.122sikhan.online:7081POST /wp-login.php HTTP/1.0
0-135989170/79/104_
43.19501450.00.490.58
85.208.96.203technovationacademy.com:7081GET /v/L1776643.html HTTP/1.0
0-135989170/80/105_
43.3011110.00.790.99
172.71.158.35en.cosmeticatravel.com:7081GET /about HTTP/1.0
0-135989170/80/105_
43.011541170.00.640.88
188.114.111.48gynecomastie.org:7081GET / HTTP/1.0
0-135989170/79/104_
42.981671390.00.870.98
172.71.166.210le-lifting.com:7081HEAD / HTTP/1.0
0-135989170/81/106_
42.9018650.00.340.44
103.27.222.106stayingstrong.ca:7080HEAD /main HTTP/1.0
0-135989170/81/105_
42.971741320.00.690.83
172.71.150.119cosmeticatravel.com:7081GET /lipofilling-fessiers-tunisie.php HTTP/1.0
0-135989170/81/104_
42.742079990.00.680.93
139.59.95.236shorehamvillage.com:7081GET /wp-login.php HTTP/1.0
0-135989170/78/102_
42.87203300.00.500.88
172.71.154.23gynecomastie.org:7081GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.
0-135989170/82/106_
43.21421480.00.520.98
172.71.167.77la-liposuccion.com:7081HEAD / HTTP/1.0
0-135989170/79/103_
42.9717330.00.450.68
208.69.59.172celeste.cirrushosting.com:7080GET / HTTP/1.0
0-135989170/79/103_
43.0313150.00.810.90
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-135989170/78/102_
42.88194430.00.480.53
51.222.253.19bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=wmi HTTP/1.0
0-135989170/80/104_
42.9118630.00.680.77
103.27.222.106stayingstrong.ca:7080HEAD /home HTTP/1.0
0-135989170/80/103_
43.291400.01.051.12
172.71.154.84en.cosmeticatravel.com:7081GET / HTTP/1.0
0-135989170/78/102_
42.8520724770.00.810.98
172.71.166.145cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-135989170/81/105_
43.04130410.00.420.48
111.202.101.163bushleaguefactor.com:7081GET / HTTP/1.0
0-135989170/80/104_
43.16661890.00.810.94
172.71.150.112cosmeticatravel.com:7081GET /blog/?f=detail&cat=12&id=295 HTTP/1.0
0-135989170/79/103W
42.71000.00.650.77
172.69.134.57en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
0-135989170/79/103_
42.8918740.00.400.46
103.27.222.106stayingstrong.ca:7080HEAD /backup HTTP/1.0
0-135989170/78/102_
43.17631340.00.740.93
185.191.171.15technovationacademy.com:7081GET /leptocephalia683603.html HTTP/1.0
0-135989170/80/103_
42.72218450.00.700.94
85.208.98.53premierdoorservices.ca:7081GET /wayne-dalton-8300-8500.php HTTP/1.0
0-135989170/82/106_
43.2751370.00.820.89
185.191.171.16technovationacademy.com:7081GET /v/K1824040.html HTTP/1.0
0-135989170/79/102_
43.26923210.00.720.78
66.249.66.67francinelalonde.com:7080GET / HTTP/1.0
0-135989170/81/103_
43.23373050.00.620.73
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
1-135989450/82/105_
44.081211540.00.510.69
172.71.151.8cosmeticatravel.com:7081GET /images/laser-yeux-femto/operation-laser-myopie.jpg HTTP/1.
1-135989450/82/105_
44.300270.00.680.76
172.69.23.102en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-135989450/81/104_
44.0017680.01.341.68
69.162.124.236talismanmovers.ca:7081HEAD /index.html HTTP/1.0
1-135989450/83/107_
44.223311340.00.961.12
68.178.148.77sikhan.online:7081POST /wp-login.php HTTP/1.0
1-135989450/81/105_
43.941895480.00.771.63
103.27.222.106stayingstrong.ca:7080HEAD /wordpress/ HTTP/1.0
1-135989450/83/106_
44.2135170.00.760.97
208.88.4.121sikhan.online:7081POST /wp-cron.php?doing_wp_cron=1692760930.36414408683776855468
1-135989450/81/104_
43.9718440.00.750.84
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
1-135989450/82/105_
44.03155990.00.890.96
172.71.166.77implant-capillaire.org:7081HEAD / HTTP/1.0
1-135989450/82/105_
44.17638690.00.360.49
208.88.4.121
1-135989450/82/105_
44.11991350.00.590.63
185.191.171.10technovationacademy.com:7081GET /calm683521.html HTTP/1.0
1-135989450/80/103_
43.9618750.00.590.83
103.27.222.106stayingstrong.ca:7080HEAD /bk HTTP/1.0
1-135989450/79/102_
43.9219440.00.340.39
51.222.253.19celeste.cirrushosting.com:7081GET /robots.txt HTTP/1.0
1-135989450/82/105_
44.24261680.00.800.97
172.69.65.239implant-mammaire.net:7081HEAD / HTTP/1.0
1-135989450/81/105_
44.320290.00.670.91
172.69.134.156en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
1-135989450/80/103_
43.9319160.00.660.80
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-135989450/80/103_
44.1375300.00.740.78
54.36.149.74ememem3dots.com:7080GET /members/members.html HTTP/1.0
1-135989450/82/103_
44.09110740.01.331.60
173.201.180.24ememem3dots.com:7080GET /wp-login.php HTTP/1.0
1-135989450/79/102_
43.991771160.00.640.70
172.70.175.202gynecomastie.org:7081GET /blog/page-3/ HTTP/1.0
1-135989450/80/103_
44.242150.00.641.01
45.156.129.22celeste.cirrushosting.com:7081GET / HTTP/1.0
1-135989450/81/104_
43.9120510540.00.780.94
139.59.95.236shorehamvillage.com:7081POST /wp-login.php HTTP/1.0
1-135989450/81/104_
44.2812030.01.121.21
172.71.154.252en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
1-135989450/80/103_
43.9618850.00.370.67
103.27.222.106stayingstrong.ca:7080HEAD /bc HTTP/1.0
1-135989450/82/105_
44.15711990.00.610.73
172.71.151.110le-lifting.com:7081GET /images/gallery/img11354265246.jpg HTTP/1.0
1-135989450/81/104_
44.20361380.00.540.60
85.208.96.208technovationacademy.com:7081GET /v/U1823998.html HTTP/1.0
1-135989450/81/104_
44.011741310.00.831.03
85.208.96.204technovationacademy.com:7081GET /engrammic671800.html HTTP/1.0
2-135989580/95/120_
52.7919030.01.181.46
103.27.222.106stayingstrong.ca:7080HEAD /wordpress HTTP/1.0
2-135989580/97/123_
53.0954270.00.921.08
162.158.174.18blepharoplastie.net:7081HEAD / HTTP/1.0
2-135989580/97/122_
53.03751280.01.071.19
185.191.171.12technovationacademy.com:7081GET /v/O1277654.html HTTP/1.0
2-135989580/96/120_
53.161140.0

Found on 2023-08-23 03:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567beb4a8566

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Monday, 21-Aug-2023 04:48:53 EDT
Restart Time: Monday, 21-Aug-2023 03:09:28 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 1 hour 39 minutes 24 seconds
Server load: 1.64 2.07 2.61
Total accesses: 4011 - Total Traffic: 42.5 MB
CPU Usage: u55.06 s76.08 cu0 cs0 - 2.2% CPU load
.673 requests/sec - 7.3 kB/second - 10.9 kB/request
1 requests currently being processed, 174 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
19291100yes025000
19291380yes124000
19291390yes025000
19292530yes025000
19340040yes025000
19340890yes025000
19342880yes025000
Sum0 1174000

_______________________________W________________________________
________________________________________________________________
_______________________________________________.................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

<SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-019291100/16/16_
17.68184700.00.090.09
162.158.175.144le-lifting.com:7081HEAD / HTTP/1.0
0-019291100/16/16_
17.8010011150.00.080.08
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1692607631.66640710830688476562
0-019291100/16/16_
17.926850.00.140.14
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-019291100/16/16_
17.632363280.00.110.11
208.88.4.121eleven5p.ca:7081POST /wp-cron.php?doing_wp_cron=1692607495.51455497741699218750
0-019291100/16/16_
17.992470.00.040.04
172.69.214.194abdominoplastie.org:7081GET /sitemap.xml HTTP/1.0
0-019291100/16/16_
17.42500360.00.190.19
102.218.50.135premierdoorservices.ca:7081GET /wp-login.php HTTP/1.0
0-019291100/14/14_
18.0014180.00.220.22
108.162.241.78abdominoplastie.org:7081GET /security.txt HTTP/1.0
0-019291100/16/16_
17.592854180.00.120.12
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-019291100/14/14_
17.229150.00.070.07
172.70.110.88clients.cosmeticatravel.com:708GET /.env HTTP/1.0
0-019291100/16/16_
17.945170.00.220.22
104.244.122.153shorehamvillage.com:7080POST /xmlrpc.php HTTP/1.0
0-019291100/16/16_
17.46459790.00.180.18
162.158.174.12otoplastie.info:7081HEAD / HTTP/1.0
0-019291100/14/14_
17.365516990.00.380.38
47.242.107.149nothim.ca:7081POST /wp-login.php HTTP/1.0
0-019291100/16/16_
17.974330.00.090.09
66.249.69.239atelierjaku.com:7080GET /robots.txt HTTP/1.0
0-019291100/16/16_
17.7116060.00.190.19
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-019291100/16/16_
17.72157320.00.210.21
162.158.175.139blepharoplastie.net:7081HEAD / HTTP/1.0
0-019291100/15/15_
17.3754840.00.130.13
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-019291100/16/16_
17.53372480.00.070.07
172.71.167.127implant-mammaire.net:7081HEAD / HTTP/1.0
0-019291100/16/16_
17.7712470.00.220.22
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-019291100/16/16_
17.75139100.00.250.25
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-019291100/16/16_
17.8292110.00.090.09
172.70.111.47clients.cosmeticatravel.com:708GET /wp-login.php HTTP/1.0
0-019291100/16/16_
17.8984700.00.350.35
141.101.69.33cosmeticatravel.com:7081GET /css/style.css HTTP/1.0
0-019291100/16/16_
17.955070.00.070.07
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-019291100/16/16_
18.032240.00.090.09
31.220.1.83carconesautomotiverepairserviceGET / HTTP/1.0
0-019291100/16/16_
18.0114550.00.120.12
108.162.241.161abdominoplastie.org:7081GET /.well-known/security.txt HTTP/1.0
0-019291100/16/16_
17.819860.00.070.07
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-019291380/16/16_
19.14514500.00.480.48
31.13.103.4fit-tunisie.org:7081GET / HTTP/1.0
1-019291380/14/14_
18.412374720.00.060.06
208.109.201.170en.sirokotravel.com:7081GET /wp-login.php HTTP/1.0
1-019291380/16/16_
18.918980.00.080.08
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-019291380/17/17_
19.18511090.00.390.39
31.13.103.9fit-tunisie.org:7081GET / HTTP/1.0
1-019291380/16/16_
18.791793530.00.080.08
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-019291380/17/17_
19.220300.00.150.15
172.70.243.144en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-019291380/16/16W
18.32000.00.440.44
162.158.111.229en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-019291380/16/16_
18.97587290.00.160.16
151.106.32.107nothim.ca:7081GET /wp-login.php HTTP/1.0
1-019291380/17/17_
18.8017570.00.130.13
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-019291380/17/17_
18.392391170.00.060.06
172.71.222.18le-lifting.com:7081GET /js/jcarousellite_1.0.1c4.js HTTP/1.0
1-019291380/18/18_
19.05163220.00.070.07
172.69.214.214abdominoplastie.org:7081GET /devis.php HTTP/1.0
1-019291380/17/17_
18.4123613820.00.150.15
183.91.11.200eleven5p.ca:7081GET /wp-login.php HTTP/1.0
1-019291380/17/17_
18.8910370.00.610.61
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-019291380/16/16_
18.909970.00.200.20
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-019291380/17/17_
18.84154530.00.120.12
172.71.174.156gynecomastie.org:7081HEAD / HTTP/1.0
1-019291380/17/17_
19.201310.00.130.13
172.70.247.171en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-019291380/17/17_
19.0613190.00.120.12
108.162.241.89abdominoplastie.org:7081GET /humans.txt HTTP/1.0
1-019291380/17/17_
19.00509990.00.090.09
104.244.122.153shorehamvillage.com:7081GET /xmlrpc.php HTTP/1.0
1-019291380/15/15_
18.3624860.00.160.16
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-019291380/16/16_
18.966230.00.240.24
208.69.59.172celeste.cirrushosting.com:7080GET / HTTP/1.0
1-019291380/17/17_
18.82159450.00.070.07
172.71.170.188otoplastie.info:7081HEAD / HTTP/1.0
1-019291380/17/17_
18.9484140.00.210.21
141.101.69.129cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
1-019291380/17/17_
18.98576150.00.090.09
151.106.32.107nothim.ca:7081POST /wp-login.php HTTP/1.0
1-019291380/16/16_
18.34259880.00.140.14
8.222.152.244mrmohankumar.cirrusvps.ca:7081GET /node/5 HTTP/1.0
1-019291380/17/17_
19.0322910.00.140.14
172.69.214.189abdominoplastie.org:7081GET /2/plastie-abdominale.php HTTP/1.0
2-019291390/21/21_
20.8359100.00.320.32
135.181.75.58muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
2-019291390/21/21

Found on 2023-08-21 08:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567bf986f896

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Saturday, 19-Aug-2023 09:12:08 EDT
Restart Time: Friday, 18-Aug-2023 21:09:48 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 2 minutes 20 seconds
Server load: 2.72 2.17 1.90
Total accesses: 43400 - Total Traffic: 413.2 MB
CPU Usage: u536.99 s482.49 cu0 cs0 - 2.35% CPU load
1 requests/sec - 9.8 kB/second - 9.7 kB/request
2 requests currently being processed, 198 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
6634210yes025000
6634290yes025000
6634570yes025000
6635580yes025000
6680641yes124000
7204020yes025000
7204650yes025000
7205760yes124000
Sum1 2198000

________________________________________________________________
______________________________________W_________________________
__________________________________________________________W_____
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

<SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-06634210/111/111_
84.91146150.00.990.99
156.57.130.34shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/blocks/single-testimo
0-06634210/111/111_
84.7435050.00.700.70
208.69.59.172celeste.cirrushosting.com:7080GET / HTTP/1.0
0-06634210/112/112_
84.64471370.01.131.13
172.69.64.143la-rhinoplastie.net:7081HEAD / HTTP/1.0
0-06634210/111/111_
83.937778470.00.740.74
173.249.22.198sirokotravel.com:7081POST /xmlrpc.php HTTP/1.0
0-06634210/112/112_
84.921355330.00.900.90
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-06634210/112/112_
84.9687440.01.411.41
138.68.133.118carconesautomotiverepairserviceGET /info.php HTTP/1.0
0-06634210/108/108_
84.99756940.00.810.81
209.141.55.144en.sirokotravel.com:7081POST /wp-login.php HTTP/1.0
0-06634210/111/111_
84.614931120.01.091.09
108.162.241.217cosmeticatravel.fr:7081GET /wp-content/uploads/2019/12/im2-300x300.jpg HTTP/1.0
0-06634210/110/110_
83.9082026010.00.860.86
172.69.65.3cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-06634210/110/110_
84.5262460.01.361.36
93.158.91.29lonomail.com:7081GET /favicon.ico HTTP/1.0
0-06634210/110/110_
84.7137440.00.840.84
38.170.9.37celeste.cirrushosting.com:7081GET /css/style.css HTTP/1.0
0-06634210/110/110_
85.015850.00.840.84
114.119.149.109muslimmarriages.ca:7081GET /robots.txt HTTP/1.0
0-06634210/112/112_
84.83231520.00.880.88
172.71.167.225otoplastie.info:7081HEAD / HTTP/1.0
0-06634210/111/111_
84.407311830.01.121.12
190.92.158.4eleven5p.ca:7081POST /xmlrpc.php HTTP/1.0
0-06634210/111/111_
84.47700860.01.131.13
162.158.233.79cosmeticatravel.com:7081GET /blog/media/article/1574683502.jpg HTTP/1.0
0-06634210/110/110_
84.6741450.00.650.65
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-06634210/110/110_
84.862091300.00.640.64
136.243.228.194technovationacademy.com:7080GET /v/F990137.html HTTP/1.0
0-06634210/111/111_
84.99751360.01.571.57
136.243.228.194technovationacademy.com:7080GET /v/L989025.html HTTP/1.0
0-06634210/110/110_
84.79271560.01.271.27
162.158.102.121la-liposuccion.com:7081GET /?author=1 HTTP/1.0
0-06634210/111/111_
85.073670.00.980.98
162.158.62.10en.cosmeticatravel.com:7081GET / HTTP/1.0
0-06634210/108/108_
84.437021500.00.660.66
172.71.90.2cosmeticatravel.com:7081GET /js/script.js HTTP/1.0
0-06634210/109/109_
84.9114680.01.201.20
156.57.130.34shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/blocks/testimonials-l
0-06634210/111/111_
84.7137340.01.141.14
38.207.148.204daryljamieson.com:7080GET / HTTP/1.0
0-06634210/112/112_
85.070870.01.241.24
66.249.75.168doctor-london.co.uk:7081GET /robots.txt HTTP/1.0
0-06634210/111/111_
84.3776868680.01.201.20
172.71.167.230cosmeticatravel.co.uk:7081GET / HTTP/1.0
1-06634290/120/120_
85.075191840.00.630.63
136.243.228.194technovationacademy.com:7080GET /v/N583557.html HTTP/1.0
1-06634290/121/121_
84.857791250.01.221.22
136.243.228.194technovationacademy.com:7080GET /v/O584260.html HTTP/1.0
1-06634290/121/121_
85.005781280.00.650.65
136.243.228.194technovationacademy.com:7080GET /v/K582592.html HTTP/1.0
1-06634290/121/121_
85.50230.01.331.33
103.194.187.2daryljamieson.com:7080GET /data/admin/allowurl.txt HTTP/1.0
1-06634290/119/119_
84.8282890.01.131.13
70.26.96.177shorehamvillage.com:7081GET /wp-content/plugins/accordion-blocks/js/accordion-blocks.mi
1-06634290/120/120_
85.2033430.01.611.61
69.167.39.251celeste.cirrushosting.com:7080HEAD /wp HTTP/1.0
1-06634290/119/119_
84.907271240.00.910.91
136.243.228.194technovationacademy.com:7080GET /v/C582870.html HTTP/1.0
1-06634290/121/121_
85.1933530.01.241.24
69.167.39.251celeste.cirrushosting.com:7080HEAD /wordpress HTTP/1.0
1-06634290/120/120_
85.3914670.01.651.65
156.57.130.34shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/blocks/random-testimo
1-06634290/121/121_
85.2432340.00.980.98
47.128.31.103carconesautomotiverepairserviceGET /robots.txt HTTP/1.0
1-06634290/122/122_
85.449160.00.870.87
138.68.133.118carconesautomotiverepairserviceGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-06634290/120/120_
85.263001270.01.231.23
136.243.228.194technovationacademy.com:7080GET /v/V989269.html HTTP/1.0
1-06634290/119/119_
85.381501100.00.970.97
172.71.175.33abdominoplastie.org:7081HEAD / HTTP/1.0
1-06634290/120/120_
84.105242630.01.501.50
180.243.17.28chirurgie-esthetique-tunisie.orGET /.git/ HTTP/1.0
1-06634290/120/120_
85.2133112860.01.451.45
72.0.153.86annexosteopathy.com:7081GET /wp-login.php HTTP/1.0
1-06634290/120/120_
85.035421560.01.021.02
136.243.228.194technovationacademy.com:7080GET /v/K583216.html HTTP/1.0
1-06634290/119/119_
85.37151550.01.751.75
162.158.174.30cosmeticatravel.com:7081HEAD / HTTP/1.0
1-06634290/119/119_
84.28428690.01.271.27
104.234.204.134celeste.cirrushosting.com:7081GET /.env HTTP/1.0
1-06634290/120/120_
85.458950.01.551.55
138.68.133.118carconesautomotiverepairserviceGET /s/732313e243e28383e2830323/_/;/META-INF/maven/com.atlassia
1-06634290/118/118_
85.055271340.00.900.90
136.243.228.194technovationacademy.com:7080GET /v/B582531.html HTTP/1.0
1-06634290/120/120_
85.439140.00.840.84
138.68.133.118carconesautomotiverepairserviceGET /v2/_catalog HTTP/1.0
1-06634290/120/120_
85.2033430.00.920.92
69.167.39.251celeste.cirrushosting.com:7080HEAD /bc HTTP/1.0
1-06634290/119/119_
84.867761300.01.571.57
77.75.78.166technovationacademy.com:7080GET /Chaetosomidae679472.html HTTP/1.0
1-06634290/120/120_
84.936811230.01.121.12
136.243.228.194technovationacademy.com:7080GET /v/Z584427.html HTTP/1.0
1-06634290/119/119_
85.1046550.00.830.83
193.7.176.89shorehamvillage.com:7080GET /wp-login.php HTTP/1.0
2-06634570/137/137_
92.2621930970.00.990.99
172.69.65.9cosmeticatravel.co.uk:7081GET / HTTP/1.0

Found on 2023-08-19 13:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b378149aa

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Friday, 18-Aug-2023 08:45:58 EDT
Restart Time: Wednesday, 16-Aug-2023 10:49:52 EDT
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime: 1 day 21 hours 56 minutes 6 seconds
Server load: 8.33 15.26 10.44
Total accesses: 157386 - Total Traffic: 1.4 GB
CPU Usage: u480.62 s481.86 cu0 cs0 - .582% CPU load
.952 requests/sec - 8.6 kB/second - 9.0 kB/request
7 requests currently being processed, 243 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
37511010yes025000
37561420yes025000
41255450yes025000
41255601yes124000
41255640yes025000
41255670yes025000
41255842yes223000
41256102yes223000
41256192yes223000
41256240yes025000
Sum7 7243000

..................................................______________
___________.........................____________________________
_______________________________W________________________________
______________________________________________W_________W_......
...................______W____W_____________________________W_W_
______________________________..................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-2-0/0/494.
51.7726426791660.00.003.59
172.71.167.190reduction-mammaire.org:7081HEAD / HTTP/1.0
0-2-0/0/501.
51.7526426202210.00.002.89
114.119.136.243celeste.cirrushosting.com:7081GET /en/media-menu-en/news-menu?start=56 HTTP/1.0
0-2-0/0/498.
46.12264268200.00.003.84
208.88.4.121
0-2-0/0/499.
45.89264266270.00.004.41
129.154.226.3nothim.ca:7081POST /wp-login.php HTTP/1.0
0-2-0/0/500.
45.91264264370.00.003.28
45.55.195.83en.sirokotravel.com:7081GET /wp-login.php HTTP/1.0
0-2-0/0/497.
45.882642612190.00.003.83
129.154.226.3nothim.ca:7081GET /wp-login.php HTTP/1.0
0-2-0/0/496.
46.0126426210.00.003.24
208.88.4.121nothim.ca:7081POST /wp-cron.php?doing_wp_cron=1692336005.24685192108154296875
0-2-0/0/495.
45.90264264330.00.003.25
144.217.77.80en.sirokotravel.com:7081GET /wp-login.php HTTP/1.0
0-2-0/0/498.
46.12264262740.00.004.88
172.70.134.247cosmeticatravel.com:7081GET /blog/a-1-297-soffrir-des-protheses-mammaires-est-ce-vraime
0-2-0/0/502.
45.85264262090.00.004.01
172.71.222.57gynecomastie.org:7081GET /detail/19/gynecomastie-traitements-naturels.html HTTP/1.0
0-2-0/0/500.
46.02264263590.00.002.41
185.191.171.6mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/node/node/node/node/node/node/nod
0-2-0/0/498.
51.74264261020050.00.004.64
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-2-0/0/505.
46.07264262780.00.004.51
54.36.148.245mrmohankumar.cirrusvps.ca:7080GET /file/55 HTTP/1.0
0-2-0/0/503.
51.76264261022180.00.003.86
172.71.167.22abdominoplastie.org:7081GET / HTTP/1.0
0-2-0/0/502.
45.8426426390.00.003.36
172.71.122.190cosmeticatravel.com:7081GET /visage.php HTTP/1.0
0-2-0/0/499.
52.1726426804120.00.003.15
208.88.4.121
0-2-0/0/501.
45.95264263240.00.003.68
208.88.4.121
0-2-0/0/495.
51.77264261314660.00.004.63
172.70.135.172otoplastie.info:7081GET / HTTP/1.0
0-2-0/0/497.
45.99264261800.00.003.97
172.70.38.139cosmeticatravel.com:7081GET /blog/a-12-185-tunisie-la-penoplastie-seduit-ces-messieurs.
0-2-0/0/500.
51.77264261544910.00.004.69
172.71.174.190lifting-mammaire.net:7081HEAD / HTTP/1.0
0-2-0/0/500.
52.16264261159230.00.003.14
162.158.174.169it.cosmeticatravel.com:7081GET / HTTP/1.0
0-2-0/0/496.
51.75264261692960.00.003.84
77.75.77.54technovationacademy.com:7080GET /images/peel-dsb-bhm-event/49.JPG HTTP/1.0
0-2-0/0/496.
51.74264261664920.00.004.06
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-2-0/0/495.
45.93264264430.00.003.60
45.55.195.83en.sirokotravel.com:7081POST /xmlrpc.php HTTP/1.0
0-2-0/0/492.
52.1526426801710.00.004.35
172.71.170.190cosmeticatravel.com:7081GET / HTTP/1.0
1-2-0/0/497.
54.53264122042270.00.003.57
198.98.53.91shorehamvillage.com:7081GET /wp-login.php HTTP/1.0
1-2-0/0/504.
54.4426412859170.00.003.35
172.71.146.144implant-mammaire.net:7081GET /sitemap.xml HTTP/1.0
1-2-0/0/501.
54.4426412304900.00.004.57
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-2-0/0/500.
54.48264121165600.00.003.91
172.71.222.204otoplastie.info:7081GET / HTTP/1.0
1-2-0/0/503.
54.5526412735010.00.003.92
213.152.161.15nothim.ca:7081POST /xmlrpc.php HTTP/1.0
1-2-0/0/504.
54.52264122187770.00.003.13
148.202.23.189en.sirokotravel.com:7081GET /wp-login.php HTTP/1.0
1-2-0/0/507.
54.5326412987630.00.005.12
103.82.20.184shorehamvillage.com:7081POST /wp-login.php HTTP/1.0
1-2-0/0/502.
54.52264121780300.00.003.19
148.202.23.189en.sirokotravel.com:7081POST /xmlrpc.php HTTP/1.0
1-2-0/0/503.
54.47264121571000.00.003.97
172.71.174.229otoplastie.info:7081HEAD / HTTP/1.0
1-2-0/0/505.
54.5126412981380.00.003.56
172.71.130.151cosmeticatravel.com:7081POST /formulaire_preconsultation.php?etape=2 HTTP/1.0
1-2-0/0/499.
54.4726412638070.00.003.27
172.71.166.183implant-mammaire.net:7081HEAD / HTTP/1.0
1-2-0/0/502.
54.4826412848690.00.003.70
162.158.174.227implant-capillaire.org:7081GET / HTTP/1.0
1-2-0/0/504.
44.052641215550.00.003.78
185.208.182.229nothim.ca:7081GET /wp-login.php HTTP/1.0
1-2-0/0/499.
54.53264122049840.00.003.60
46.101.103.136shorehamvillage.com:7081GET /wp-login.php HTTP/1.0
1-2-0/0/498.
54.46264121441860.00.003.87
172.69.67.131implant-capillaire.org:7081HEAD / HTTP/1.0
1-2-0/0/505.
54.5226412568350.00.003.85
103.82.20.184shorehamvillage.com:7081POST /xmlrpc.php HTTP/1.0
1-2-0/0/497.
54.4726412980890.00.003.90
162.158.175.8lifting-mammaire.net:7081GET / HTTP/1.0
1-2-0/0/503.
54.4426412792700.00.003.62
216.245.221.82celeste.cirrushosting.com:7080HEAD / HTTP/1.0
1-2-0/0/498.
44.07264129460.00.003.35
45.55.195.83nothim.ca:7081POST /xmlrpc.php HTTP/1.0
1-2-0/0/502.
44.032641222850.00.004.28
172.71.123.38cosmeticatravel.com:7081POST /formulaire_preconsultation.php HTTP/1.0
1-2-0/0/500.
54.43264121788840.00.003.64
157.55.39.214annexosteopathy.com:7081GET /wp-content/et-cache/global/et-divi-customizer-global.min.c
1-2-0/0/500.
54.4526412596420.00.004.76
185.191.171.9mrmohankumar.cirrusvps.ca:7080GET /robots.txt HTTP/1.0
1-2-0/0/499.
44.12264121840.00.002.82
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-2-0/0/499.
54.48264121033290.00.004.50
172.71.167.63otoplastie.info:7081GET / HTTP/1.0
1-2-0/0/495.
43.97264122910.00.003.20
208.88.4.121amitoladesignconcepts.ca:7080POST /wp-cron.php?doing_wp_cron=1692335921.10399603843688964843
2-237511010/117/630_
88.1316194010.01.244.61
185.191.171.19mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/node/node/node/node/node/node/nod
2-237511010/119/639_
88.5696240.01.335.2

Found on 2023-08-18 12:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b546fa06f

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Thursday, 17-Aug-2023 07:21:35 EDT
Restart Time: Wednesday, 16-Aug-2023 10:49:52 EDT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime: 20 hours 31 minutes 43 seconds
Server load: 4.02 4.14 4.37
Total accesses: 75278 - Total Traffic: 661.9 MB
CPU Usage: u460.76 s293.46 cu0 cs0 - 1.02% CPU load
1.02 requests/sec - 9.2 kB/second - 9.0 kB/request
4 requests currently being processed, 196 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
31615721yes124000
31616000yes025000
31616280yes025000
31617040yes025000
31638190yes025000
31638272yes223000
31638320yes025000
31638350yes124000
Sum3 4196000

_______W________________________________________________________
________________________________________________________________
___________W_____W______________________________________________
______W_........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-131615720/70/326_
51.7812601910.00.422.17
20.15.240.93zevrev.org:7080GET /petition. HTTP/1.0
0-131615720/73/329_
52.10856180.00.571.74
162.158.86.141gynecomastie.org:7081GET //pi.php HTTP/1.0
0-131615720/71/327_
51.1010106980.00.692.42
3.134.77.155zevrev.org:7081GET /media../.git/config HTTP/1.0
0-131615720/73/328_
52.5229415330.00.583.15
208.88.4.121
0-131615720/72/328_
52.0591960.00.491.81
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-131615720/71/330_
52.5525211570.01.042.20
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1692271042.26047801971435546875
0-131615720/73/324_
52.28606260.00.601.84
172.71.114.190cosmeticatravel.com:7081GET /images/lifting-fesses/lifting-fesses.jpg HTTP/1.0
0-131615720/72/327W
51.69000.00.692.18
125.212.214.217shorehamvillage.com:7081POST /xmlrpc.php HTTP/1.0
0-131615720/72/326_
52.26606220.00.873.40
172.71.114.126cosmeticatravel.com:7081GET /images/lifting-cou-tunisie/lifting-cou-tunisie.jpg HTTP/1.
0-131615720/73/331_
52.039287330.00.302.38
103.93.131.178nothim.ca:7081POST /wp-login.php HTTP/1.0
0-131615720/72/329_
52.315595470.00.281.29
5.255.231.53theelectricians.ca:7081GET /robots.txt HTTP/1.0
0-131615720/74/330_
52.602068900.01.023.08
31.210.75.211nothim.ca:7081GET /wp-login.php HTTP/1.0
0-131615720/73/334_
51.7512974280.00.572.75
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
0-131615720/73/330_
51.73130030.00.662.60
167.99.184.41celeste.cirrushosting.com:7050GET /.DS_Store HTTP/1.1
0-131615720/74/333_
52.74132380.00.612.15
162.158.110.125la-liposuccion.com:7081GET / HTTP/1.0
0-131615720/72/329_
51.091010290.00.381.85
3.134.77.155zevrev.org:7081GET /wp-includes/js/.git/config HTTP/1.0
0-131615720/73/330_
51.9310333150.00.542.36
185.191.171.11mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/sign-updates?page=3 HTTP/1.0
0-131615720/72/327_
52.572513540.01.093.25
185.191.171.15mrmohankumar.cirrusvps.ca:7080GET /news/node/node/node/node/node/node/node/node/node/node/nod
0-131615720/72/326_
52.434091350.00.802.46
34.136.13.174shorehamvillage.com:7081GET /wp-content/uploads/2022/11/E_CCAFlyer_VirtualInfoSessions_
0-131615720/73/330_
52.513036840.00.582.51
139.99.133.153nothim.ca:7081POST /xmlrpc.php HTTP/1.0
0-131615720/70/328_
51.7512983370.00.612.08
208.88.4.121amitoladesignconcepts.ca:7080POST /wp-cron.php?doing_wp_cron=1692269997.09690999984741210937
0-131615720/68/324_
52.039266690.00.412.69
103.93.131.178nothim.ca:7081POST /xmlrpc.php HTTP/1.0
0-131615720/70/327_
52.39460180.00.642.59
178.128.151.41carconesautomotiverepairserviceGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-131615720/73/324_
52.3453240.00.802.00
161.35.27.144celeste.cirrushosting.com:7080GET /_all_dbs HTTP/1.0
0-131615720/68/320_
51.131010850.00.662.94
3.134.77.155zevrev.org:7081GET /lib../.git/config HTTP/1.0
1-131616000/80/325_
57.906064770.00.572.10
172.71.114.26cosmeticatravel.com:7081GET /images/mesolift/mesolift.jpg HTTP/1.0
1-131616000/80/332_
57.9553350.00.872.30
161.35.27.144celeste.cirrushosting.com:7080GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-131616000/81/330_
57.58877700.00.792.84
162.158.86.141gynecomastie.org:7081GET //admin/controller/extension/wpm.php HTTP/1.0
1-131616000/76/325_
58.05427140.00.672.46
208.88.4.121sikhan.online:7081POST /wp-cron.php?doing_wp_cron=1692270868.29356098175048828125
1-131616000/81/334_
57.8262440.00.641.93
35.87.15.229celeste.cirrushosting.com:7081GET /favicon.ico HTTP/1.0
1-131616000/80/331_
57.6384360.00.742.15
17.22.237.164zevrev.org:7080GET /sites/all/themes/bestbrand/bestbrand/fonts/sourcecodepro-f
1-131616000/80/332_
58.0245940.01.143.62
178.128.151.41carconesautomotiverepairserviceGET /telescope/requests HTTP/1.1
1-131616000/79/328_
57.68800220.00.372.20
162.158.86.141gynecomastie.org:7081GET //xx.php HTTP/1.0
1-131616000/80/331_
57.856206560.00.411.87
5.45.207.183theelectricians.ca:7081GET /robots.txt HTTP/1.0
1-131616000/80/329_
57.65842280.00.722.22
162.158.86.141gynecomastie.org:7081GET //wp-admin/includes/media.php HTTP/1.0
1-131616000/80/325_
57.78678930.00.552.31
208.88.4.121sikhan.online:7081POST /wp-cron.php?doing_wp_cron=1692270616.58619809150695800781
1-131616000/80/329_
57.628531740.00.832.28
172.71.114.67cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
1-131616000/80/332_
58.06424110.01.132.60
108.162.241.214abdominoplastie.org:7081GET /images/article/1410964189.jpg HTTP/1.0
1-131616000/80/326_
58.23209340.00.532.32
162.158.175.183abdominoplastie.org:7081HEAD / HTTP/1.0
1-131616000/79/325_
58.133275990.00.562.66
115.124.111.206en.sirokotravel.com:7081GET /wp-login.php HTTP/1.0
1-131616000/79/331_
58.172625210.01.062.34
172.81.119.79en.sirokotravel.com:7081POST /xmlrpc.php HTTP/1.0
1-131616000/79/324_
58.2122420740.00.602.37
5.45.207.170shorehamvillage.com:7081GET / HTTP/1.0
1-131616000/79/329_
57.72767340.00.672.26
20.15.242.138chirurgie-esthetique-tunisie.orGET /index.php?f=chirurgien&id_chirurgien=41 HTTP/1.0
1-131616000/77/326_
57.866151460.00.652.09
172.71.170.130la-liposuccion.com:7081HEAD / HTTP/1.0
1-131616000/80/330_
57.9653150.01.542.95
161.35.27.144celeste.cirrushosting.com:7080GET /config.json HTTP/1.0
1-131616000/78/327_
57.23460370.00.621.81
178.128.151.41carconesautomotiverepairserviceGET /.git/config HTTP/1.1
1-131616000/79/326_
58.2419530.01.253.38
208.69.59.172celeste.cirrushosting.com:7080GET / HTTP/1.0
1-131616000/79/327_
57.7276790.00.581.92
54.226.187.190zevrev.org:7080GET /sites/all/libraries/superfish/supersubs.js?oyl1i6 HTTP/1.0
1-131616000/80/326_
58.3712230.00.643.37
54.36.148.40kingbiryanihouse.com:7081GET /robots.txt HTTP/1.0
1-131616000/80/325_
57.3436412770.00.501.97
87.236.176.118celeste.cirrushosting.com:7080\x16\x03\x01\x01\x1b\x01
2-1316162

Found on 2023-08-17 11:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b1d6b272a

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Wednesday, 16-Aug-2023 08:22:08 EDT
Restart Time: Saturday, 12-Aug-2023 21:16:32 EDT
Parent Server Config. Generation: 5
Parent Server MPM Generation: 4
Server uptime: 3 days 11 hours 5 minutes 36 seconds
Server load: 4.05 3.43 2.84
Total accesses: 205566 - Total Traffic: 2.1 GB
CPU Usage: u649.71 s455.11 cu0 cs0 - .369% CPU load
.687 requests/sec - 7.2 kB/second - 10.5 kB/request
2 requests currently being processed, 248 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
25307720yes025000
25307801yes124000
25308120yes025000
27907130yes025000
27907240yes025000
27907270yes025000
27907280yes025000
27907300yes025000
27907341yes124000
27907350yes025000
Sum2 2248000

_______________________________W________________________________
___________..................................................___
______________________........................._________________
________________________________________________________________
___________________........................._______________W____
______________________________..................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-425307720/149/508_
93.487682110.02.046.09
172.70.230.137gallery.cosmeticatravel.com:708GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-425307720/150/512_
93.96501020.01.885.80
172.71.131.94reduction-mammaire.org:7081GET /css/responsive.css HTTP/1.0
0-425307720/149/512_
94.0912100.01.344.01
17.241.227.246shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/blocks/testimonials-g
0-425307720/147/509_
93.37824620.02.596.12
172.71.131.24la-rhinoplastie.net:7081GET /images/article/1518687878.jpg HTTP/1.0
0-425307720/150/510_
94.11260.02.065.07
139.144.150.205sikhan.ca:7081GET /debug/default/view?panel=config HTTP/1.0
0-425307720/149/510_
93.4677070.01.384.57
172.70.110.28gallery.cosmeticatravel.com:708GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-425307720/148/508_
93.8717240.00.864.06
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-425307720/149/508_
94.04481680.01.004.73
172.71.130.184reduction-mammaire.org:7081GET /images/gallery/img31352735460.jpg HTTP/1.0
0-425307720/146/508_
94.024890.02.135.18
172.71.131.124reduction-mammaire.org:7081GET /js/jquery.countup.min.js HTTP/1.0
0-425307720/147/503_
94.05481390.01.394.22
172.71.131.18reduction-mammaire.org:7081GET /images/bg/1.jpg HTTP/1.0
0-425307720/148/507_
93.428052750.01.845.34
198.41.230.186cosmeticatravel.com:7081GET /chatbot/assets/js/Chat.js HTTP/1.0
0-425307720/148/511_
93.348551270.01.615.44
172.71.118.11cosmeticatravel.com:7081GET /blog/media/article/1587635854.jpg HTTP/1.0
0-425307720/148/508_
94.0348170.01.745.44
172.71.130.69reduction-mammaire.org:7081GET /js/VideoPlayerPopUp.js HTTP/1.0
0-425307720/150/512_
93.9110940.01.884.60
20.15.240.75celeste.cirrushosting.com:7081GET /living-independently/wellness HTTP/1.0
0-425307720/150/510_
93.2889240.01.464.75
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-425307720/147/503_
93.418052000.01.854.29
198.41.230.124cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
0-425307720/149/505_
93.2789612920.01.374.54
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1692187631.30073308944702148437
0-425307720/149/510_
93.6551911680.01.314.34
188.53.57.217shorehamvillage.com:7081POST /wp-login.php HTTP/1.0
0-425307720/148/507_
93.9948400.01.816.80
172.71.131.30reduction-mammaire.org:7081GET /js/animated-text.js HTTP/1.0
0-425307720/150/508_
93.93951190.01.585.39
162.158.23.50chirurgiens.cosmeticatravel.comGET /css/jquery-ui.min.css HTTP/1.0
0-425307720/151/506_
93.99481770.01.484.40
172.71.131.171reduction-mammaire.org:7081GET /js/bootstrap.min.js HTTP/1.0
0-425307720/149/506_
93.54688390.01.714.62
172.71.167.134cosmeticatravel.com:7081GET /images/medias/m6.jpg HTTP/1.0
0-425307720/151/506_
94.11360.01.955.58
159.203.94.228sikhan.ca:7081GET /.DS_Store HTTP/1.0
0-425307720/152/509_
94.04483440.02.095.84
172.71.130.170reduction-mammaire.org:7081GET /images/gallery/img31352735500.jpg HTTP/1.0
0-425307720/147/506_
93.4577070.01.525.45
172.70.111.20gallery.cosmeticatravel.com:708GET /v2/_catalog HTTP/1.0
1-425307800/149/535_
90.34741130.01.475.35
34.133.143.47shorehamvillage.com:7081GET /wp-content/uploads/2023/03/Jan12.pdf HTTP/1.0
1-425307800/150/536_
90.48050.01.194.09
128.199.62.55muslimmarriages.ca:7081GET /s/132313e243e28383e2830323/_/;/META-INF/maven/com.atlassia
1-425307800/147/532_
90.394860.00.944.91
172.71.131.87reduction-mammaire.org:7081GET /js/dyscrollup.js HTTP/1.0
1-425307800/150/532_
90.4611440.02.156.21
17.241.219.142shorehamvillage.com:7081GET /wp-content/plugins/accordion-blocks/build/index.css?ver=1.
1-425307800/152/538_
90.2421320520.01.675.14
188.53.57.217shorehamvillage.com:7081POST /wp-login.php HTTP/1.0
1-425307800/150/537_
89.80806510.01.594.86
198.41.230.226cosmeticatravel.com:7081GET /js/core.min.js HTTP/1.0
1-425307800/147/534W
89.53000.01.875.54
172.70.110.67en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-425307800/151/538_
90.404870.01.845.79
172.71.130.87reduction-mammaire.org:7081GET /images/gallery/img21352735460.jpg HTTP/1.0
1-425307800/148/537_
89.887142630.01.355.06
216.245.221.82amitoladesignconcepts.ca:7080HEAD / HTTP/1.0
1-425307800/148/535_
89.47340.01.915.75
159.203.94.228sikhan.ca:7081GET /.env HTTP/1.0
1-425307800/147/533_
90.43473010.01.635.51
172.71.130.212reduction-mammaire.org:7081GET /images/gallery/img21352735500.jpg HTTP/1.0
1-425307800/149/536_
89.778061010.01.735.25
198.41.230.150cosmeticatravel.com:7081GET /css/style.css HTTP/1.0
1-425307800/150/536_
90.183064590.02.155.93
107.189.8.238theelectricians.ca:7081POST /wp-login.php HTTP/1.0
1-425307800/151/541_
90.29152190.02.045.87
40.83.2.77celeste.cirrushosting.com:7081GET /explore-opportunities/student-loan-check-list HTTP/1.0
1-425307800/148/536_
89.63858350.02.055.96
172.71.118.108cosmeticatravel.com:7081GET /js/core.min.js HTTP/1.0
1-425307800/147/535_
89.65858430.02.355.56
172.71.118.62cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
1-425307800/149/537_
89.95635148700.01.674.93
41.216.188.92underwoodfinancial.com:7080GET /simple.php HTTP/1.0
1-425307800/150/536_
89.5689526400.01.346.64
24.222.113.164shorehamvillage.com:7081POST /autodiscover/autodiscover.xml HTTP/1.0
1-425307800/148/533_
90.1040316120.01.725.23
17.241.219.215shorehamvillage.com:7081GET /working-here/ HTTP/1.0
1-425307800/147/529_
89.5888040.01.195.37
20.15.240.191en.atelierjaku.com:7080GET /2gardens-en/cage.html HTTP/1.0
1-425307800/150/540_
90.42479840.01.635.53
172.71.131.72reduction-mammaire.org:7081GET /js/wow.min.js HTTP/1.0
1-425307800/148/537_
89.9070714980.01.424.59
77.75.78.164theelectricians.ca:7081GET /our-work/ HTTP/1.0
1-425307800/148/534_
89.82793150.01.164.77
208.88.4.121nothim.ca:7081POST /wp-cron.php?doing_wp_cron=1692187734.80975794792175292968
1-425307800/149/528_
89.6782680.01.865.10
188.5

Found on 2023-08-16 12:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b354fa616

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Tuesday, 15-Aug-2023 17:06:58 EDT
Restart Time: Saturday, 12-Aug-2023 21:16:32 EDT
Parent Server Config. Generation: 4
Parent Server MPM Generation: 3
Server uptime: 2 days 19 hours 50 minutes 25 seconds
Server load: 3.25 3.12 3.43
Total accesses: 166691 - Total Traffic: 1.7 GB
CPU Usage: u1070.99 s876.74 cu0 cs0 - .798% CPU load
.683 requests/sec - 7.2 kB/second - 10.5 kB/request
2 requests currently being processed, 248 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
18073770yes025000
18073781yes124000
18074330yes025000
18075091yes124000
18931070yes025000
20196680yes025000
20196690yes025000
20196760yes025000
20196810yes025000
20196890yes025000
Sum2 2248000

__________________________________________W_____________________
__________________________________W_____________________________
_______________________________________________.................
..........................................................______
___________________.........................____________________
_____........................._________________________.........
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-318073770/135/345_
105.0560350.01.554.04
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/home/u118.svg HTTP/1.0
0-318073770/138/348_
105.01604570.01.013.82
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/home/u102.svg HTTP/1.
0-318073770/138/349_
105.0760240.00.962.57
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/home/u135.svg HTTP/1.0
0-318073770/138/348_
105.0660240.01.323.52
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/home/u151.svg HTTP/1.0
0-318073770/137/347_
105.3327660.00.942.99
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
0-318073770/139/348_
105.49129260.01.133.16
197.184.182.220shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/shoreham-villa
0-318073770/138/347_
105.0460380.00.913.19
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/home/u144.svg HTTP/1.0
0-318073770/138/346_
105.55841780.01.243.66
208.88.4.121nothim.ca:7081POST /wp-cron.php?doing_wp_cron=1692133532.78555703163146972656
0-318073770/139/349_
105.491311890.00.953.02
197.184.182.220shorehamvillage.com:7081GET /wp-content/plugins/captcha/css/front_end_style.css?ver=4.4
0-318073770/136/342_
105.0360360.00.932.80
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/home/u487.svg HTTP/1.
0-318073770/137/346_
105.41174130.01.273.01
14.18.80.54celeste.cirrushosting.com:7080GET /?author=19 HTTP/1.0
0-318073770/138/349_
105.1158870.01.103.80
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/global_search_results
0-318073770/140/347_
105.538770.01.373.60
141.101.68.30gynecomastie.org:7081GET /assets/js/lazysizes.min.js HTTP/1.0
0-318073770/139/348_
105.0360340.00.872.65
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/home/u489.svg HTTP/1.
0-318073770/139/347_
105.6214170.00.873.15
172.71.178.128en.cosmeticatravel.com:7081GET /about HTTP/1.0
0-318073770/134/342_
105.1258060.00.862.43
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/global_search_results
0-318073770/136/342_
105.0760260.00.903.15
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/home/u121.svg HTTP/1.0
0-318073770/138/348_
105.362364330.00.882.97
20.92.138.57theelectricians.ca:7081POST /wp-login.php HTTP/1.0
0-318073770/138/347_
105.46133630.01.874.96
197.184.182.220shorehamvillage.com:7081GET /wp-content/plugins/easy-testimonials/blocks/testimonials-c
0-318073770/139/345_
105.491311240.00.813.58
197.184.182.220shorehamvillage.com:7081GET /wp-content/plugins/ubermenu/pro/assets/css/ubermenu.min.cs
0-318073770/136/341_
105.0060440.01.152.68
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/home/fill_7_u42.svg H
0-318073770/137/344_
105.1557460.01.792.90
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/global_search_results/
0-318073770/135/343_
105.46133360.01.273.60
197.184.182.220shorehamvillage.com:7081GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2.1
0-318073770/137/345_
105.1059350.01.213.74
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/global_search_results
0-318073770/139/346_
105.1457760.01.413.91
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/global_search_results/
1-318073780/134/372_
111.4859660.01.423.86
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/home/u914.svg HTTP/1.0
1-318073780/135/372_
111.4759660.01.062.84
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/home/u894.svg HTTP/1.0
1-318073780/135/371_
111.5158870.01.183.71
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/global_search_results
1-318073780/131/368_
111.5855616860.00.933.99
172.71.134.129cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
1-318073780/136/372_
111.97125220.00.933.46
197.184.182.220shorehamvillage.com:7081GET /wp-content/uploads/2018/12/cropped-Shoreham-Village_Logo-R
1-318073780/135/373_
111.5058950.01.233.25
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/global_search_results
1-318073780/134/373_
111.67423580.01.303.60
35.91.40.3bizone.ca:7081GET / HTTP/1.0
1-318073780/136/373_
111.9412770.01.173.93
197.184.182.220shorehamvillage.com:7081GET /wp-content/plugins/bb-plugin/img/bxslider/bx_loader.gif HT
1-318073780/136/375_
111.4959050.01.423.62
75.157.18.172mha.number41media.com:7080GET /wireframes/2023DesktopUpdates/images/global_search_results
1-318073780/134/373_
111.6051950.01.133.51
167.248.133.188webmail.iqbalprofessional.com:7GET /favicon.ico HTTP/1.0
1-318073780/136/373_
112.009650.01.333.87
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-318073780/136/374_
111.931291250.00.903.49
197.184.182.220shorehamvillage.com:7081GET /wp-content/uploads/dynamik-gen/theme/images/menu_tail.png 
1-318073780/135/372_
111.79269490.01.393.76
162.158.174.166reduction-mammaire.org:7081HEAD / HTTP/1.0
1-318073780/137/376_
111.8717550.00.653.82
14.18.80.54celeste.cirrushosting.com:7080GET /?author=15 HTTP/1.0
1-318073780/137/374_
111.9512660.01.083.78
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-318073780/135/374_
111.5357770.00.993.18
75.157.18.172mha.number41media.com:7080GET /wireframes/2023MobileUpdates/images/global_search_results/
1-318073780/136/374_
111.822571490.01.313.24
172.69.67.39otoplastie.info:7081HEAD / HTTP/1.0
1-318073780/134/372W
111.45100.01.625.01
157.55.39.253technovationacademy.com:7080GET /index.php/16/ER35qsnyjor/21611-p/ HTTP/1.0
1-318073780/134/372_
112.064020500.01.223.42
205.236.155.137shorehamvillage.com:7081POST /xmlrpc.php HTTP/1.0
1-318073780/132/369_
112.038690.01.964.12
141.101.68.54gynecomastie.org:7081GET /images/article/1367669873.jpeg HTTP/1.0
1-318073780/137/376_
111.753251240.01.643.78
172.69.65.151le-lifting.com:7081HEAD / HTTP/1.0
1-318073780/136/375_
111.92133110.01.

Found on 2023-08-15 21:06

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567bd436dc6f

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Saturday, 12-Aug-2023 19:08:26 EDT
Restart Time: Saturday, 12-Aug-2023 06:10:19 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 58 minutes 6 seconds
Server load: 2.71 2.24 2.47
Total accesses: 28854 - Total Traffic: 352.0 MB
CPU Usage: u380.54 s393.89 cu0 cs0 - 1.66% CPU load
.618 requests/sec - 7.7 kB/second - 12.5 kB/request
1 requests currently being processed, 174 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
3195390yes025000
3195400yes025000
3195682yes124000
3197100yes025000
3875400yes025000
4049270yes025000
5155670yes025000
Sum2 1174000

______________________________________________________________W_
________________________________________________________________
_______________________________________________.................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-03195390/136/136_
111.041003540.01.511.51
172.69.67.3cosmeticatravel.com:7081HEAD / HTTP/1.0
0-03195390/138/138_
111.6521313830.01.321.32
20.15.133.172en.sirokotravel.com:7081GET /general-information/ HTTP/1.0
0-03195390/137/137_
111.365841800.01.311.31
194.169.175.92doctor-london.co.uk:7081GET /.well-known/ HTTP/1.0
0-03195390/137/137_
111.845170.04.034.03
172.70.243.90en.cosmeticatravel.com:7081GET /blog HTTP/1.0
0-03195390/135/135_
111.069687410.01.831.83
122.17.135.89indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-03195390/140/140_
111.802439380.01.811.81
8.218.75.158shorehamvillage.com:7081POST /xmlrpc.php HTTP/1.0
0-03195390/139/139_
111.774660.01.661.66
123.160.154.0underwoodfinancial.com:7080GET /robots.txt HTTP/1.0
0-03195390/139/139_
111.3065212910.01.221.22
162.158.174.65en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.84110711450.01.281.28
172.71.130.181cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
0-03195390/135/135_
111.36586800.01.381.38
172.71.210.198cosmeticatravel.com:7081GET /robots.txt HTTP/1.0
0-03195390/135/135_
110.80113360.01.191.19
65.21.232.254muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/137/137_
111.188188830.02.112.11
114.119.136.185shorehamvillage.com:7081GET /wp-content/uploads/2021/09/Shoreham-Village-Scorecard-Resi
0-03195390/140/140_
111.7932300.01.231.23
172.71.170.149abdominoplastie.org:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.871093950.01.401.40
172.71.170.188otoplastie.info:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.78115170.01.991.99
192.95.30.21muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/139/139_
111.870490.01.371.37
162.158.155.150en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-03195390/136/136_
111.701387660.02.292.29
171.244.61.154indemnia.ca:7081POST /wp-login.php HTTP/1.0
0-03195390/139/139_
110.99105822600.02.142.14
172.71.166.25cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-03195390/140/140_
110.76115270.02.012.01
65.21.232.254muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/137/137_
111.4155460.01.651.65
194.169.175.92doctor-london.co.uk:7081GET /wp-content/uploads/ HTTP/1.0
0-03195390/140/140_
111.6124900.01.121.12
127.0.0.1softwareandprocessdesign.ca:708GET /mambots/editors/fckeditor/editor/filemanager/browser/defau
0-03195390/138/138_
111.25696310.01.201.20
172.69.59.103abdominoplastie.org:7081GET /detail/67/faire-une-abdominoplastie-avant-la-grossesse-est
0-03195390/139/139_
111.395586710.01.551.55
117.53.45.249indemnia.ca:7081POST /wp-login.php HTTP/1.0
0-03195390/139/139_
110.86109340.01.401.40
54.36.149.61celeste.cirrushosting.com:7081GET / HTTP/1.0
0-03195390/137/137_
111.51416270.02.142.14
172.70.127.123abdominoplastie.org:7081GET /detail/23/abdominoplastie-ou-une-liposuccion-apres-la-gros
1-03195400/138/138_
102.502483840.01.921.92
173.252.83.2premierdoorservices.ca:7081GET /data1/thumbnails/docksealflaps.jpg HTTP/1.0
1-03195400/140/140_
102.41353330.01.231.23
172.69.64.135en.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-03195400/140/140_
102.7531760.01.841.84
172.70.243.90en.cosmeticatravel.com:7081GET /database.sql HTTP/1.0
1-03195400/141/141_
102.793300.02.222.22
162.158.87.47en.cosmeticatravel.com:7081GET /production.ini HTTP/1.0
1-03195400/142/142_
102.7012600.01.961.96
172.70.243.214en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/141/141_
102.901490.01.191.19
172.70.85.3en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.920490.01.341.34
172.71.246.83en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-03195400/140/140_
102.665840.01.351.35
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.8911720.01.041.04
162.158.159.87en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/142/142_
102.1769657820.01.131.13
162.158.174.47la-rhinoplastie.net:7081HEAD / HTTP/1.0
1-03195400/142/142_
102.743650.01.031.03
172.71.246.104en.cosmeticatravel.com:7081GET /dump.sql HTTP/1.0
1-03195400/141/141_
102.3935860.01.931.93
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-03195400/139/139_
102.72415220.04.194.19
162.158.110.194en.cosmeticatravel.com:7081GET /.vscode/settings.json HTTP/1.0
1-03195400/141/141_
102.295081500.01.411.41
208.88.4.121nothim.ca:7081POST /wp-cron.php?doing_wp_cron=1691881195.99594092369079589843
1-03195400/141/141_
102.601211240.01.461.46
172.69.64.235implant-mammaire.net:7081HEAD / HTTP/1.0
1-03195400/140/140_
102.851720.01.871.87
162.158.111.80en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.783480.04.224.22
172.70.242.167en.cosmeticatravel.com:7081GET /database.tar.gz HTTP/1.0
1-03195400/140/140_
102.8811080.04.334.33
172.70.247.55en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/139/139_
101.9170225390.00.890.89
208.88.4.121eleven5p.ca:7081POST /wp-cron.php?doing_wp_cron=1691881000.35561299324035644531
1-03195400/138/138_
101.51510350.01.911.91
172.69.150.101en.cosmeticatravel.com:7081GET /.env.php HTTP/1.0
1-03195400/138/138_
102.65594780.01.441.44
208.88.4.121rrudemo.number41media.com:7081POST /wp-cron.php?doing_wp_cron=1691881646.28094696998596191406
1-03195400/141/141_
102.803250.01.771.77
172.71.246.117en.cosmeticatravel.com:7081GET /backup.sql HTTP/1.0
1-03195400/140/140_
102.4726111170.01.961.96
172.68.138.152cosmeticatravel.co.uk:7081GET /gfhoklzw.php HTTP/1.0
1-03195400/139/139_
102.55191680.01.311.31
172.71.182.53abdominoplastie.org:7081GET /detail/48/les-grosses-fesses-facon-femme-noire-devenues-un
1-03195400/140/140_
102.823240.01.801.80
172.70.247.157en.cosmeticatravel.com:7081GET /.docker/Dockerfile HTTP/1.0
2-03195680/177/177_
125.614410.02.082.08
172.70.250.83en.co

Found on 2023-08-12 23:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b90c5c4e7

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Saturday, 12-Aug-2023 19:08:27 EDT
Restart Time: Saturday, 12-Aug-2023 06:10:19 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 58 minutes 8 seconds
Server load: 2.71 2.24 2.47
Total accesses: 28865 - Total Traffic: 352.2 MB
CPU Usage: u380.68 s393.92 cu0 cs0 - 1.66% CPU load
.618 requests/sec - 7.7 kB/second - 12.5 kB/request
2 requests currently being processed, 173 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
3195390yes025000
3195400yes025000
3195680yes025000
3197100yes025000
3875400yes124000
4049270yes025000
5155671yes124000
Sum1 2173000

________________________________________________________________
_______________________________________________________W________
_________________________________W_____________.................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-03195390/136/136_
111.041004540.01.511.51
172.69.67.3cosmeticatravel.com:7081HEAD / HTTP/1.0
0-03195390/138/138_
111.6521513830.01.321.32
20.15.133.172en.sirokotravel.com:7081GET /general-information/ HTTP/1.0
0-03195390/137/137_
111.365861800.01.311.31
194.169.175.92doctor-london.co.uk:7081GET /.well-known/ HTTP/1.0
0-03195390/137/137_
111.847170.04.034.03
172.70.243.90en.cosmeticatravel.com:7081GET /blog HTTP/1.0
0-03195390/135/135_
111.069707410.01.831.83
122.17.135.89indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-03195390/140/140_
111.802539380.01.811.81
8.218.75.158shorehamvillage.com:7081POST /xmlrpc.php HTTP/1.0
0-03195390/139/139_
111.774860.01.661.66
123.160.154.0underwoodfinancial.com:7080GET /robots.txt HTTP/1.0
0-03195390/139/139_
111.3065312910.01.221.22
162.158.174.65en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.84110911450.01.281.28
172.71.130.181cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
0-03195390/135/135_
111.36588800.01.381.38
172.71.210.198cosmeticatravel.com:7081GET /robots.txt HTTP/1.0
0-03195390/135/135_
110.80113460.01.191.19
65.21.232.254muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/137/137_
111.188208830.02.112.11
114.119.136.185shorehamvillage.com:7081GET /wp-content/uploads/2021/09/Shoreham-Village-Scorecard-Resi
0-03195390/140/140_
111.7933300.01.231.23
172.71.170.149abdominoplastie.org:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.871094950.01.401.40
172.71.170.188otoplastie.info:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.78115270.01.991.99
192.95.30.21muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/139/139_
111.871490.01.371.37
162.158.155.150en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-03195390/136/136_
111.701407660.02.292.29
171.244.61.154indemnia.ca:7081POST /wp-login.php HTTP/1.0
0-03195390/139/139_
110.99106022600.02.142.14
172.71.166.25cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-03195390/140/140_
110.76115470.02.012.01
65.21.232.254muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/137/137_
111.4155660.01.651.65
194.169.175.92doctor-london.co.uk:7081GET /wp-content/uploads/ HTTP/1.0
0-03195390/140/140_
111.6125100.01.121.12
127.0.0.1softwareandprocessdesign.ca:708GET /mambots/editors/fckeditor/editor/filemanager/browser/defau
0-03195390/138/138_
111.25698310.01.201.20
172.69.59.103abdominoplastie.org:7081GET /detail/67/faire-une-abdominoplastie-avant-la-grossesse-est
0-03195390/139/139_
111.395606710.01.551.55
117.53.45.249indemnia.ca:7081POST /wp-login.php HTTP/1.0
0-03195390/139/139_
110.86109440.01.401.40
54.36.149.61celeste.cirrushosting.com:7081GET / HTTP/1.0
0-03195390/137/137_
111.51418270.02.142.14
172.70.127.123abdominoplastie.org:7081GET /detail/23/abdominoplastie-ou-une-liposuccion-apres-la-gros
1-03195400/138/138_
102.502493840.01.921.92
173.252.83.2premierdoorservices.ca:7081GET /data1/thumbnails/docksealflaps.jpg HTTP/1.0
1-03195400/140/140_
102.41354330.01.231.23
172.69.64.135en.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-03195400/140/140_
102.7551760.01.841.84
172.70.243.90en.cosmeticatravel.com:7081GET /database.sql HTTP/1.0
1-03195400/141/141_
102.794300.02.222.22
162.158.87.47en.cosmeticatravel.com:7081GET /production.ini HTTP/1.0
1-03195400/142/142_
102.7014600.01.961.96
172.70.243.214en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/141/141_
102.902490.01.191.19
172.70.85.3en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.922490.01.341.34
172.71.246.83en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-03195400/140/140_
102.665940.01.351.35
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.8921720.01.041.04
162.158.159.87en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/142/142_
102.1769857820.01.131.13
162.158.174.47la-rhinoplastie.net:7081HEAD / HTTP/1.0
1-03195400/142/142_
102.745650.01.031.03
172.71.246.104en.cosmeticatravel.com:7081GET /dump.sql HTTP/1.0
1-03195400/141/141_
102.3935960.01.931.93
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-03195400/139/139_
102.72515220.04.194.19
162.158.110.194en.cosmeticatravel.com:7081GET /.vscode/settings.json HTTP/1.0
1-03195400/141/141_
102.295091500.01.411.41
208.88.4.121nothim.ca:7081POST /wp-cron.php?doing_wp_cron=1691881195.99594092369079589843
1-03195400/141/141_
102.601231240.01.461.46
172.69.64.235implant-mammaire.net:7081HEAD / HTTP/1.0
1-03195400/140/140_
102.852720.01.871.87
162.158.111.80en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.784480.04.224.22
172.70.242.167en.cosmeticatravel.com:7081GET /database.tar.gz HTTP/1.0
1-03195400/140/140_
102.8821080.04.334.33
172.70.247.55en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/139/139_
101.9170425390.00.890.89
208.88.4.121eleven5p.ca:7081POST /wp-cron.php?doing_wp_cron=1691881000.35561299324035644531
1-03195400/138/138_
101.51710350.01.911.91
172.69.150.101en.cosmeticatravel.com:7081GET /.env.php HTTP/1.0
1-03195400/138/138_
102.65604780.01.441.44
208.88.4.121rrudemo.number41media.com:7081POST /wp-cron.php?doing_wp_cron=1691881646.28094696998596191406
1-03195400/141/141_
102.804250.01.771.77
172.71.246.117en.cosmeticatravel.com:7081GET /backup.sql HTTP/1.0
1-03195400/140/140_
102.4726311170.01.961.96
172.68.138.152cosmeticatravel.co.uk:7081GET /gfhoklzw.php HTTP/1.0
1-03195400/139/139_
102.55192680.01.311.31
172.71.182.53abdominoplastie.org:7081GET /detail/48/les-grosses-fesses-facon-femme-noire-devenues-un
1-03195400/140/140_
102.824240.01.801.80
172.70.247.157en.cosmeticatravel.com:7081GET /.docker/Dockerfile HTTP/1.0
2-03195680/177/177_
125.616410.02.082.08
172.70.250.83en.co

Found on 2023-08-12 23:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4fcf8567b03ce15d4

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Server MPM: event
Server Built: Jun 9 2023 19:20:27

Current Time: Saturday, 12-Aug-2023 19:08:26 EDT
Restart Time: Saturday, 12-Aug-2023 06:10:19 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 58 minutes 6 seconds
Server load: 2.71 2.24 2.47
Total accesses: 28855 - Total Traffic: 352.0 MB
CPU Usage: u380.56 s393.9 cu0 cs0 - 1.66% CPU load
.618 requests/sec - 7.7 kB/second - 12.5 kB/request
2 requests currently being processed, 173 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
3195390yes025000
3195400yes025000
3195681yes124000
3197100yes124000
3875400yes025000
4049270yes025000
5155670yes025000
Sum1 2173000

______________________________________________________________W_
_____________________W__________________________________________
_______________________________________________.................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-03195390/136/136_
111.041003540.01.511.51
172.69.67.3cosmeticatravel.com:7081HEAD / HTTP/1.0
0-03195390/138/138_
111.6521413830.01.321.32
20.15.133.172en.sirokotravel.com:7081GET /general-information/ HTTP/1.0
0-03195390/137/137_
111.365851800.01.311.31
194.169.175.92doctor-london.co.uk:7081GET /.well-known/ HTTP/1.0
0-03195390/137/137_
111.846170.04.034.03
172.70.243.90en.cosmeticatravel.com:7081GET /blog HTTP/1.0
0-03195390/135/135_
111.069687410.01.831.83
122.17.135.89indemnia.ca:7081POST /xmlrpc.php HTTP/1.0
0-03195390/140/140_
111.802439380.01.811.81
8.218.75.158shorehamvillage.com:7081POST /xmlrpc.php HTTP/1.0
0-03195390/139/139_
111.774660.01.661.66
123.160.154.0underwoodfinancial.com:7080GET /robots.txt HTTP/1.0
0-03195390/139/139_
111.3065212910.01.221.22
162.158.174.65en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.84110711450.01.281.28
172.71.130.181cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
0-03195390/135/135_
111.36586800.01.381.38
172.71.210.198cosmeticatravel.com:7081GET /robots.txt HTTP/1.0
0-03195390/135/135_
110.80113360.01.191.19
65.21.232.254muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/137/137_
111.188198830.02.112.11
114.119.136.185shorehamvillage.com:7081GET /wp-content/uploads/2021/09/Shoreham-Village-Scorecard-Resi
0-03195390/140/140_
111.7932300.01.231.23
172.71.170.149abdominoplastie.org:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.871093950.01.401.40
172.71.170.188otoplastie.info:7081HEAD / HTTP/1.0
0-03195390/138/138_
110.78115170.01.991.99
192.95.30.21muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/139/139_
111.870490.01.371.37
162.158.155.150en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-03195390/136/136_
111.701397660.02.292.29
171.244.61.154indemnia.ca:7081POST /wp-login.php HTTP/1.0
0-03195390/139/139_
110.99105922600.02.142.14
172.71.166.25cosmeticatravel.co.uk:7081GET / HTTP/1.0
0-03195390/140/140_
110.76115270.02.012.01
65.21.232.254muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
0-03195390/137/137_
111.4155460.01.651.65
194.169.175.92doctor-london.co.uk:7081GET /wp-content/uploads/ HTTP/1.0
0-03195390/140/140_
111.6124900.01.121.12
127.0.0.1softwareandprocessdesign.ca:708GET /mambots/editors/fckeditor/editor/filemanager/browser/defau
0-03195390/138/138_
111.25696310.01.201.20
172.69.59.103abdominoplastie.org:7081GET /detail/67/faire-une-abdominoplastie-avant-la-grossesse-est
0-03195390/139/139_
111.395586710.01.551.55
117.53.45.249indemnia.ca:7081POST /wp-login.php HTTP/1.0
0-03195390/139/139_
110.86109340.01.401.40
54.36.149.61celeste.cirrushosting.com:7081GET / HTTP/1.0
0-03195390/137/137_
111.51417270.02.142.14
172.70.127.123abdominoplastie.org:7081GET /detail/23/abdominoplastie-ou-une-liposuccion-apres-la-gros
1-03195400/138/138_
102.502483840.01.921.92
173.252.83.2premierdoorservices.ca:7081GET /data1/thumbnails/docksealflaps.jpg HTTP/1.0
1-03195400/140/140_
102.41353330.01.231.23
172.69.64.135en.cosmeticatravel.com:7081HEAD / HTTP/1.0
1-03195400/140/140_
102.7531760.01.841.84
172.70.243.90en.cosmeticatravel.com:7081GET /database.sql HTTP/1.0
1-03195400/141/141_
102.793300.02.222.22
162.158.87.47en.cosmeticatravel.com:7081GET /production.ini HTTP/1.0
1-03195400/142/142_
102.7012600.01.961.96
172.70.243.214en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/141/141_
102.901490.01.191.19
172.70.85.3en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.920490.01.341.34
172.71.246.83en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-03195400/140/140_
102.665840.01.351.35
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.8911720.01.041.04
162.158.159.87en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/142/142_
102.1769657820.01.131.13
162.158.174.47la-rhinoplastie.net:7081HEAD / HTTP/1.0
1-03195400/142/142_
102.743650.01.031.03
172.71.246.104en.cosmeticatravel.com:7081GET /dump.sql HTTP/1.0
1-03195400/141/141_
102.3935860.01.931.93
77.95.113.242celeste.cirrushosting.com:7081GET / HTTP/1.0
1-03195400/139/139_
102.72415220.04.194.19
162.158.110.194en.cosmeticatravel.com:7081GET /.vscode/settings.json HTTP/1.0
1-03195400/141/141_
102.295081500.01.411.41
208.88.4.121nothim.ca:7081POST /wp-cron.php?doing_wp_cron=1691881195.99594092369079589843
1-03195400/141/141_
102.601221240.01.461.46
172.69.64.235implant-mammaire.net:7081HEAD / HTTP/1.0
1-03195400/140/140_
102.851720.01.871.87
162.158.111.80en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/140/140_
102.783480.04.224.22
172.70.242.167en.cosmeticatravel.com:7081GET /database.tar.gz HTTP/1.0
1-03195400/140/140_
102.8811080.04.334.33
172.70.247.55en.cosmeticatravel.com:7081GET / HTTP/1.0
1-03195400/139/139_
101.9170325390.00.890.89
208.88.4.121eleven5p.ca:7081POST /wp-cron.php?doing_wp_cron=1691881000.35561299324035644531
1-03195400/138/138_
101.51610350.01.911.91
172.69.150.101en.cosmeticatravel.com:7081GET /.env.php HTTP/1.0
1-03195400/138/138_
102.65594780.01.441.44
208.88.4.121rrudemo.number41media.com:7081POST /wp-cron.php?doing_wp_cron=1691881646.28094696998596191406
1-03195400/141/141_
102.803250.01.771.77
172.71.246.117en.cosmeticatravel.com:7081GET /backup.sql HTTP/1.0
1-03195400/140/140_
102.4726211170.01.961.96
172.68.138.152cosmeticatravel.co.uk:7081GET /gfhoklzw.php HTTP/1.0
1-03195400/139/139_
102.55191680.01.311.31
172.71.182.53abdominoplastie.org:7081GET /detail/48/les-grosses-fesses-facon-femme-noire-devenues-un
1-03195400/140/140_
102.823240.01.801.80
172.70.247.157en.cosmeticatravel.com:7081GET /.docker/Dockerfile HTTP/1.0
2-03195680/177/177_
125.614410.02.082.08
172.70.250.83en.cos

Found on 2023-08-12 23:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd12c2230d3

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Feb 20 2023 08:30:10

Current Time: Friday, 14-Apr-2023 19:09:32 EDT
Restart Time: Friday, 14-Apr-2023 07:09:01 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 30 seconds
Server load: 4.35 2.90 2.56
Total accesses: 101594 - Total Traffic: 791.7 MB
CPU Usage: u685.25 s154.65 cu0 cs0 - 1.94% CPU load
2.35 requests/sec - 18.8 kB/second - 8.0 kB/request
14 requests currently being processed, 111 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
17558780yes025000
17558790yes322000
17558801yes124000
17560751yes520000
18103082yes520000
Sum4 14111000

______________________________WR_______________W_____W__________
_____________________W___WRW______W____W__W________WW_____W__...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-017558780/497/497_
111.103230.03.323.32
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/js/lazysizes-ob
0-017558780/495/495_
111.133230.03.653.65
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver
0-017558780/497/497_
111.0165100.03.203.20
94.23.203.202muslimmarriages.ca:7081GET /other_services.php/about_us.php/about_us.php/about_us.php/
0-017558780/497/497_
111.093350.03.733.73
172.59.217.228victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/js/third/nicescroll.min.j
0-017558780/501/501_
111.063330.03.203.20
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/google-calendar-events/assets/js/vendor
0-017558780/497/497_
111.103240.04.014.01
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/photoswi
0-017558780/491/491_
111.2306050.02.722.72
108.162.241.16en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
0-017558780/498/498_
111.04444680.03.133.13
208.88.4.121victoriaballet.com:7081POST /wp-cron.php?doing_wp_cron=1681513727.19918608665466308593
0-017558780/497/497_
111.093340.02.972.97
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-modal-window/assets/js/main.min.j
0-017558780/493/493_
111.177380.03.603.60
172.71.154.135en.cosmeticatravel.com:7081GET / HTTP/1.0
0-017558780/496/496_
111.133230.03.153.15
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/trillium-logo-o9l51ycj
0-017558780/492/492_
111.133230.03.673.67
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/ROTMAN-LOGO-FINAL-01-p
0-017558780/498/498_
111.063360.04.194.19
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/google-calendar-events/assets/js/vendor
0-017558780/496/496_
111.2015190.04.084.08
156.38.151.68victoriaballet.com:7081POST /xmlrpc.php HTTP/1.0
0-017558780/497/497_
111.23010260.04.054.05
108.162.242.74en.cosmeticatravel.com:7081GET / HTTP/1.0
0-017558780/498/498_
111.14226770.03.973.97
185.191.171.23victoriaballet.com:7081GET /Glue-Clay-for-Diamond-Painting-AUEAR-Pack-X2cm/Counted-Kit
0-017558780/492/492_
111.19312440.03.033.03
208.88.4.121annexosteopathy.com:7081POST /wp-cron.php?doing_wp_cron=1681513767.57002496719360351562
0-017558780/497/497_
111.093380.03.353.35
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-posts-slider/assets/js/main.min.j
0-017558780/496/496_
111.1332140.04.614.61
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/js/script.min.j
0-017558780/493/493_
111.133230.03.663.66
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoint
0-017558780/496/496_
111.093340.03.893.89
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/photoswi
0-017558780/498/498_
111.19230740.03.233.23
138.199.21.200annexosteopathy.com:7081GET /contact-osteopathy-annex-toronto/ HTTP/1.0
0-017558780/494/494_
111.054370.03.023.02
172.70.127.18gynecomastie.org:7081GET /style.css HTTP/1.0
0-017558780/492/492_
111.044410330.04.434.43
185.191.171.2victoriaballet.com:7081GET /FT-Stainless-Steel-Anchor-Chain-Marine/Patio-Lawn-&-Garden
0-017558780/493/493_
110.998310.04.334.33
51.15.131.129default:7080HEAD / HTTP/1.0
1-017558790/757/757_
159.384830.05.955.95
5.102.173.71doctor-london.co.uk:7081GET /robots.txt HTTP/1.0
1-017558790/753/753_
159.375830.011.6111.61
178.62.97.128celeste.cirrushosting.com:7081GET / HTTP/1.0
1-017558790/759/759_
159.413540.05.145.14
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/swiper/c
1-017558790/759/759_
159.453290.05.295.29
172.59.217.228victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/fontawe
1-017558790/756/756_
159.48243200.04.624.62
185.191.171.7victoriaballet.com:7081GET /Glue-Clay-for-Diamond-Painting-AUEAR-Pack-X2cm/Counted-Kit
1-017558790/762/762W
159.30000.06.006.00
172.71.30.17en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-017558790/762/762R
159.32030.06.006.00
208.88.4.121
1-017558790/758/758_
159.5013300.05.775.77
172.69.65.195abdominoplastie.org:7081HEAD / HTTP/1.0
1-017558790/759/759_
159.463216840.05.545.54
185.191.171.43aarangallery.com:7081GET /robots.txt HTTP/1.0
1-017558790/758/758_
159.329240.05.295.29
200.68.170.77victoriaballet.com:7081GET /wp-content/plugins/ocean-extra/assets/css/widgets.css?ver=
1-017558790/752/752_
159.394814510.05.615.61
185.191.171.37edu.victoriaballet.ca:7081GET /review/ywjefrrrej/ HTTP/1.0
1-017558790/755/755_
159.35758860.05.525.52
69.162.124.228hubbardinsurance.com:7081HEAD / HTTP/1.0
1-017558790/762/762_
159.453230.06.306.30
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/viba-company-logo-o9l5
1-017558790/753/753_
159.50138040.05.705.70
185.191.171.19victoriaballet.com:7081GET /MS-PCGS-American/Individual-Coins-posokl-765078.jsp HTTP/1
1-017558790/763/763_
159.443240.04.994.99
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/LOGO_VIBA-WHITE-o9i4ot
1-017558790/753/753_
159.40426990.05.985.98
185.191.171.22victoriaballet.com:7081GET /FT-Stainless-Steel-Anchor-Chain-Marine/Patio-Lawn-&-Garden
1-017558790/757/757_
159.3664130.011.2011.20
51.222.253.4bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=rnc HTTP/1.0
1-017558790/760/760_
159.5112220.04.214.21
94.23.203.202muslimmarriages.ca:7081GET /other_services.php/contact_us.php/about_us.php/registratio
1-017558790/759/759_
159.54010270.05.385.38
162.158.126.180en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
1-017558790/760/760_
159.423450.05.505.50
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-extra/assets/css/widgets.css?ver=
1-017558790/762/762_
159.357220.06.906.90
66.249.75.99iqbalprofessional.com:7081GET /js/jquery.cycle2.tile.min.js HTTP/1.0
1-017558790/760/760_
159.3948120.05.635.63
5.102.173.71doctor-london.co.uk:7081GET /6/services/5/4/fees.html HTTP/1.0
1-017558790/761/761W
159.31000.05.575.57
108.162.238.49en.cosmeticatravel.com:7081GET / HTTP/1.0
1-017558790/760/760_
159.443250.06.046.04
172.59.217.228victoriaballet.com:7081G

Found on 2023-04-14 23:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1695e231d

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Feb 20 2023 08:30:10

Current Time: Friday, 14-Apr-2023 19:09:33 EDT
Restart Time: Friday, 14-Apr-2023 07:09:01 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 31 seconds
Server load: 4.35 2.90 2.56
Total accesses: 101621 - Total Traffic: 792.3 MB
CPU Usage: u685.46 s154.69 cu0 cs0 - 1.94% CPU load
2.35 requests/sec - 18.8 kB/second - 8.0 kB/request
9 requests currently being processed, 116 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
17558780yes025000
17558790yes124000
17558800yes223000
17560750yes421000
18103081yes223000
Sum1 9116000

_________________________________________W__________W_________W_
____________W__W__W__________W____________________W____W_____...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-017558780/497/497_
111.103430.03.323.32
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/js/lazysizes-ob
0-017558780/495/495_
111.133430.03.653.65
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver
0-017558780/498/498_
111.250180.03.223.22
172.68.79.169en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-017558780/497/497_
111.093450.03.733.73
172.59.217.228victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/js/third/nicescroll.min.j
0-017558780/501/501_
111.063430.03.203.20
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/google-calendar-events/assets/js/vendor
0-017558780/497/497_
111.103440.04.014.01
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/photoswi
0-017558780/491/491_
111.2326050.02.722.72
108.162.241.16en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
0-017558780/499/499_
111.270270.03.133.13
172.68.79.142en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
0-017558780/497/497_
111.093440.02.972.97
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-modal-window/assets/js/main.min.j
0-017558780/493/493_
111.179380.03.603.60
172.71.154.135en.cosmeticatravel.com:7081GET / HTTP/1.0
0-017558780/496/496_
111.133430.03.153.15
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/trillium-logo-o9l51ycj
0-017558780/492/492_
111.133430.03.673.67
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/ROTMAN-LOGO-FINAL-01-p
0-017558780/498/498_
111.063460.04.194.19
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/google-calendar-events/assets/js/vendor
0-017558780/496/496_
111.2035190.04.084.08
156.38.151.68victoriaballet.com:7081POST /xmlrpc.php HTTP/1.0
0-017558780/497/497_
111.23110260.04.054.05
108.162.242.74en.cosmeticatravel.com:7081GET / HTTP/1.0
0-017558780/498/498_
111.14246770.03.973.97
185.191.171.23victoriaballet.com:7081GET /Glue-Clay-for-Diamond-Painting-AUEAR-Pack-X2cm/Counted-Kit
0-017558780/492/492_
111.19412440.03.033.03
208.88.4.121annexosteopathy.com:7081POST /wp-cron.php?doing_wp_cron=1681513767.57002496719360351562
0-017558780/497/497_
111.093480.03.353.35
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-posts-slider/assets/js/main.min.j
0-017558780/496/496_
111.1334140.04.614.61
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/js/script.min.j
0-017558780/493/493_
111.133430.03.663.66
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoint
0-017558780/496/496_
111.093440.03.893.89
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/photoswi
0-017558780/498/498_
111.19330740.03.233.23
138.199.21.200annexosteopathy.com:7081GET /contact-osteopathy-annex-toronto/ HTTP/1.0
0-017558780/494/494_
111.054570.03.023.02
172.70.127.18gynecomastie.org:7081GET /style.css HTTP/1.0
0-017558780/492/492_
111.044510330.04.434.43
185.191.171.2victoriaballet.com:7081GET /FT-Stainless-Steel-Anchor-Chain-Marine/Patio-Lawn-&-Garden
0-017558780/494/494_
111.250240.04.344.34
172.70.142.136en.cosmeticatravel.com:7081GET / HTTP/1.0
1-017558790/757/757_
159.385030.05.955.95
5.102.173.71doctor-london.co.uk:7081GET /robots.txt HTTP/1.0
1-017558790/753/753_
159.375930.011.6111.61
178.62.97.128celeste.cirrushosting.com:7081GET / HTTP/1.0
1-017558790/759/759_
159.413640.05.145.14
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/swiper/c
1-017558790/759/759_
159.453490.05.295.29
172.59.217.228victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/fontawe
1-017558790/756/756_
159.48253200.04.624.62
185.191.171.7victoriaballet.com:7081GET /Glue-Clay-for-Diamond-Painting-AUEAR-Pack-X2cm/Counted-Kit
1-017558790/763/763_
159.561480.06.036.03
172.71.30.17en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-017558790/763/763_
159.59010480.06.046.04
172.71.26.95en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
1-017558790/758/758_
159.5015300.05.775.77
172.69.65.195abdominoplastie.org:7081HEAD / HTTP/1.0
1-017558790/759/759_
159.463316840.05.545.54
185.191.171.43aarangallery.com:7081GET /robots.txt HTTP/1.0
1-017558790/759/759_
159.591150.05.305.30
172.71.22.191en.cosmeticatravel.com:7081GET /config.json HTTP/1.0
1-017558790/752/752_
159.394914510.05.615.61
185.191.171.37edu.victoriaballet.ca:7081GET /review/ywjefrrrej/ HTTP/1.0
1-017558790/756/756_
159.591160.05.555.55
108.162.238.65en.cosmeticatravel.com:7081GET /about HTTP/1.0
1-017558790/762/762_
159.453430.06.306.30
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/viba-company-logo-o9l5
1-017558790/753/753_
159.50148040.05.705.70
185.191.171.19victoriaballet.com:7081GET /MS-PCGS-American/Individual-Coins-posokl-765078.jsp HTTP/1
1-017558790/763/763_
159.443440.04.994.99
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/LOGO_VIBA-WHITE-o9i4ot
1-017558790/753/753_
159.40436990.05.985.98
185.191.171.22victoriaballet.com:7081GET /FT-Stainless-Steel-Anchor-Chain-Marine/Patio-Lawn-&-Garden
1-017558790/757/757W
159.36000.011.2011.20
172.68.79.179en.cosmeticatravel.com:7081GET /.env HTTP/1.0
1-017558790/760/760_
159.5113220.04.214.21
94.23.203.202muslimmarriages.ca:7081GET /other_services.php/contact_us.php/about_us.php/registratio
1-017558790/759/759_
159.54110270.05.385.38
162.158.126.180en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
1-017558790/760/760_
159.423650.05.505.50
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-extra/assets/css/widgets.css?ver=
1-017558790/763/763_
159.591130.06.936.93
108.162.237.89en.cosmeticatravel.com:7081GET /api/search?folderIds=0 HTTP/1.0
1-017558790/760/760_
159.3950120.05.635.63
5.102.173.71doctor-london.co.uk:7081GET /6/services/5/4/fees.html HTTP/1.0
1-017558790/762/762_
159.561400.05.585.58
108.162.238.49en.cosmeticatravel.com:7081GET / HTTP/1.0
1-017558790/760/760_
159.443450.06.046.04
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/lib/dialog/di

Found on 2023-04-14 23:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1dbfa8c96

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Feb 20 2023 08:30:10

Current Time: Friday, 14-Apr-2023 19:09:30 EDT
Restart Time: Friday, 14-Apr-2023 07:09:01 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 hours 29 seconds
Server load: 4.35 2.90 2.56
Total accesses: 101573 - Total Traffic: 791.2 MB
CPU Usage: u684.97 s154.6 cu0 cs0 - 1.94% CPU load
2.35 requests/sec - 18.7 kB/second - 8.0 kB/request
7 requests currently being processed, 118 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
17558780yes223000
17558790yes025000
17558800yes025000
17560750yes124000
18103083yes421000
Sum3 7118000

______W_______R_________________________________________________
____________________________W_________________W___W____W_W___...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-017558780/497/497_
111.103130.03.323.32
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/js/lazysizes-ob
0-017558780/495/495_
111.133130.03.653.65
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver
0-017558780/497/497_
111.0164100.03.203.20
94.23.203.202muslimmarriages.ca:7081GET /other_services.php/about_us.php/about_us.php/about_us.php/
0-017558780/497/497_
111.093150.03.733.73
172.59.217.228victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/js/third/nicescroll.min.j
0-017558780/501/501_
111.063130.03.203.20
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/google-calendar-events/assets/js/vendor
0-017558780/497/497_
111.103140.04.014.01
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/photoswi
0-017558780/490/490W
110.98000.02.692.69
108.162.241.16en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
0-017558780/498/498_
111.04424680.03.133.13
208.88.4.121victoriaballet.com:7081POST /wp-cron.php?doing_wp_cron=1681513727.19918608665466308593
0-017558780/497/497_
111.093140.02.972.97
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-modal-window/assets/js/main.min.j
0-017558780/493/493_
111.176380.03.603.60
172.71.154.135en.cosmeticatravel.com:7081GET / HTTP/1.0
0-017558780/496/496_
111.133130.03.153.15
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/trillium-logo-o9l51ycj
0-017558780/492/492_
111.133130.03.673.67
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/ROTMAN-LOGO-FINAL-01-p
0-017558780/498/498_
111.063160.04.194.19
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/google-calendar-events/assets/js/vendor
0-017558780/496/496_
111.2005190.04.084.08
156.38.151.68victoriaballet.com:7081POST /xmlrpc.php HTTP/1.0
0-017558780/496/496R
110.99080.04.044.04
208.88.4.121
0-017558780/498/498_
111.14216770.03.973.97
185.191.171.23victoriaballet.com:7081GET /Glue-Clay-for-Diamond-Painting-AUEAR-Pack-X2cm/Counted-Kit
0-017558780/492/492_
111.19112440.03.033.03
208.88.4.121annexosteopathy.com:7081POST /wp-cron.php?doing_wp_cron=1681513767.57002496719360351562
0-017558780/497/497_
111.093180.03.353.35
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-posts-slider/assets/js/main.min.j
0-017558780/496/496_
111.1331140.04.614.61
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/js/script.min.j
0-017558780/493/493_
111.133130.03.663.66
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoint
0-017558780/496/496_
111.093140.03.893.89
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/photoswi
0-017558780/498/498_
111.19030740.03.233.23
138.199.21.200annexosteopathy.com:7081GET /contact-osteopathy-annex-toronto/ HTTP/1.0
0-017558780/494/494_
111.054270.03.023.02
172.70.127.18gynecomastie.org:7081GET /style.css HTTP/1.0
0-017558780/492/492_
111.044210330.04.434.43
185.191.171.2victoriaballet.com:7081GET /FT-Stainless-Steel-Anchor-Chain-Marine/Patio-Lawn-&-Garden
0-017558780/493/493_
110.998210.04.334.33
51.15.131.129default:7080HEAD / HTTP/1.0
1-017558790/757/757_
159.384730.05.955.95
5.102.173.71doctor-london.co.uk:7081GET /robots.txt HTTP/1.0
1-017558790/753/753_
159.375730.011.6111.61
178.62.97.128celeste.cirrushosting.com:7081GET / HTTP/1.0
1-017558790/759/759_
159.413340.05.145.14
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/swiper/c
1-017558790/759/759_
159.453190.05.295.29
172.59.217.228victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/fontawe
1-017558790/756/756_
159.48223200.04.624.62
185.191.171.7victoriaballet.com:7081GET /Glue-Clay-for-Diamond-Painting-AUEAR-Pack-X2cm/Counted-Kit
1-017558790/762/762_
159.309670.06.006.00
173.176.192.131victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/trillium-logo-o9l51ycj
1-017558790/762/762_
159.329530.06.006.00
173.176.192.131victoriaballet.com:7081GET /wp-content/uploads/2022/11/positivessl_trust_seal_sm_124x3
1-017558790/758/758_
159.5012300.05.775.77
172.69.65.195abdominoplastie.org:7081HEAD / HTTP/1.0
1-017558790/759/759_
159.463016840.05.545.54
185.191.171.43aarangallery.com:7081GET /robots.txt HTTP/1.0
1-017558790/758/758_
159.329040.05.295.29
200.68.170.77victoriaballet.com:7081GET /wp-content/plugins/ocean-extra/assets/css/widgets.css?ver=
1-017558790/752/752_
159.394714510.05.615.61
185.191.171.37edu.victoriaballet.ca:7081GET /review/ywjefrrrej/ HTTP/1.0
1-017558790/755/755_
159.35748860.05.525.52
69.162.124.228hubbardinsurance.com:7081HEAD / HTTP/1.0
1-017558790/762/762_
159.453130.06.306.30
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/viba-company-logo-o9l5
1-017558790/753/753_
159.50128040.05.705.70
185.191.171.19victoriaballet.com:7081GET /MS-PCGS-American/Individual-Coins-posokl-765078.jsp HTTP/1
1-017558790/763/763_
159.443140.04.994.99
172.59.217.228victoriaballet.com:7081GET /wp-content/uploads/elementor/thumbs/LOGO_VIBA-WHITE-o9i4ot
1-017558790/753/753_
159.40416990.05.985.98
185.191.171.22victoriaballet.com:7081GET /FT-Stainless-Steel-Anchor-Chain-Marine/Patio-Lawn-&-Garden
1-017558790/757/757_
159.3662130.011.2011.20
51.222.253.4bushleaguefactor.com:7081GET /baseball/teams/!bt.php?team=rnc HTTP/1.0
1-017558790/760/760_
159.5111220.04.214.21
94.23.203.202muslimmarriages.ca:7081GET /other_services.php/contact_us.php/about_us.php/registratio
1-017558790/758/758_
159.309630.05.355.35
173.176.192.131victoriaballet.com:7081GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver
1-017558790/760/760_
159.423350.05.505.50
172.59.217.228victoriaballet.com:7081GET /wp-content/plugins/ocean-extra/assets/css/widgets.css?ver=
1-017558790/762/762_
159.357120.06.906.90
66.249.75.99iqbalprofessional.com:7081GET /js/jquery.cycle2.tile.min.js HTTP/1.0
1-017558790/760/760_
159.3947120.05.635.63
5.102.173.71doctor-london.co.uk:7081GET /6/services/5/4/fees.html HTTP/1.0
1-017558790/761/761_
159.319550.05.575.57
173.176.192.131victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/fontawe
1-017558790/760/760_
159.443150.0</

Found on 2023-04-14 23:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd135ef6f9d

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Monday, 13-Feb-2023 18:09:27 EST
Restart Time: Monday, 13-Feb-2023 18:09:22 EST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 4 seconds
Server load: 4.82 3.45 2.82
Total accesses: 30 - Total Traffic: 584 kB
CPU Usage: u.95 s.14 cu0 cs0 - 27.3% CPU load
7.5 requests/sec - 146.0 kB/second - 19.5 kB/request
15 requests currently being processed, 85 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
1167072yes223000
1167103yes322000
1167316yes718000
1168473yes322000
Sum14 1585000

__WW______________________W_____________W__W________WWWW_WW__W__
____________________________W_WW____............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-01167070/1/1_
0.2535240.00.000.00
114.119.151.113join.victoriaballet.com:7080GET /XXL-per-Soggiorno-Prodotto-in-UE-Orologio-da-Parete-Modern
0-01167070/0/0W
0.00400.00.000.00
54.36.148.110theelectricians.ca:7081GET / HTTP/1.0
0-01167070/0/0W
0.00400.00.000.00
173.32.139.99theelectricians.ca:7081GET / HTTP/1.0
0-01167070/1/1_
0.2536460.00.000.00
141.101.96.140en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-01167070/1/1_
0.30131480.00.040.04
172.68.35.48cosmeticatravel.fr:7081GET / HTTP/1.0
0-01167070/1/1_
0.272480.00.020.02
172.71.154.193en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.311470.00.010.01
172.70.230.196en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.321240.00.020.02
172.68.110.151en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.370520.00.020.02
172.69.134.179en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-01167070/1/1_
0.380140.00.040.04
172.71.154.192en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
0-01167070/1/1_
0.370200.00.030.03
172.71.154.118en.cosmeticatravel.com:7081GET /s/938313e223e26323e2430313/_/;/META-INF/maven/com.atlassia
0-01167070/1/1_
0.390100.00.000.00
172.71.178.98en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-01167100/1/1_
0.174400.00.010.01
202.61.253.63muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-01167100/0/0W
0.00400.00.000.00
173.32.139.99theelectricians.ca:7081GET / HTTP/1.0
1-01167100/1/1_
0.244900.00.010.01
172.71.134.99la-liposuccion.com:7081GET /devis-2.php HTTP/1.0
1-01167100/1/1_
0.254250.00.000.00
172.71.134.99la-liposuccion.com:7081GET /devis.php HTTP/1.0
1-01167100/1/1_
0.24420.00.010.01
216.244.66.194aarangallery.com:7081GET /wp-content/uploads/2016/06/aliyarrasti-22.jpg HTTP/1.0
1-01167100/1/1_
0.440600.00.010.01
172.71.242.51en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.342660.00.020.02
172.70.230.58en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.352520.00.020.02
172.70.230.196en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.381270.00.000.00
162.158.166.182en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-01167100/0/0W
0.00000.00.000.00
172.69.134.118en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
1-01167100/1/1_
0.400430.00.030.03
172.71.158.101en.cosmeticatravel.com:7081GET /.env HTTP/1.0
1-01167100/1/1_
0.400320.00.030.03
172.71.158.210en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
1-01167100/0/0W
0.00000.00.000.00
172.71.242.51en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
1-01167100/1/1_
0.440370.00.030.03
172.70.90.118en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
2-01167310/0/0W
0.00000.00.000.00
172.71.178.23en.cosmeticatravel.com:7081GET /.env HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.70.90.118en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
162.158.167.10en.cosmeticatravel.com:7081GET /.DS_Store HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.71.158.134en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
2-01167310/1/1_
0.110270.00.030.03
172.70.91.80en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.71.242.50en.cosmeticatravel.com:7081GET /.DS_Store HTTP/1.0
2-01167310/0/0W
0.00100.00.000.00
172.71.154.48en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
2-01167310/1/1_
0.0411420.00.030.03
172.71.154.193en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
2-01167310/1/1_
0.110200.00.000.00
172.71.178.58en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.68.110.151en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
3-01168470/1/1_
0.150280.00.030.03
172.70.86.34en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
3-01168470/0/0W
0.00000.00.000.00
172.70.85.120en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
3-01168470/1/1_
0.150540.00.030.03
172.71.178.98en.cosmeticatravel.com:7081GET /s/534313e28363e27363e2237313/_/;/META-INF/maven/com.atlass
3-01168470/0/0W
0.00000.00.000.00
162.158.166.231en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/0/0W
0.00100.00.000.00
185.191.171.11victoriaballet.com:7081GET /Heat-Resistant-Burner-Glass-Oil-Lamp/Home-D%C3%A9cor-yvqgb
3-01168470/1/1_
0.091390.00.010.01
172.70.110.97en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.071560.00.010.01
172.70.114.253en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.042390.00.020.02
172.71.178.119en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.10113240.00.020.02
162.158.63.105en.cosmeticatravel.com:7081GET / HTTP/1.0

 
SrvChild Server number - generation
PIDOS process ID
AccNumber of accesses this connection / this child / this slot
MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
ReqMilliseconds required to process most recent request
ConnKilobytes transferred this connection
ChildMegabytes transferred this child
SlotTotal megabytes transferred this slot




SSL/TLS Session Cache Status: 

cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 10 misstotal removes since starting: 0 hit, 0 miss


mod_fcgid status:
Total FastCGI processes: 7

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
1167944016Ready116885106Ready

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116877330Working116797</

Found on 2023-02-13 23:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd113afc3f1

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Monday, 13-Feb-2023 18:09:26 EST
Restart Time: Monday, 13-Feb-2023 18:09:22 EST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 3 seconds
Server load: 4.82 3.45 2.82
Total accesses: 16 - Total Traffic: 224 kB
CPU Usage: u.69 s.08 cu0 cs0 - 25.7% CPU load
5.33 requests/sec - 74.7 kB/second - 14.0 kB/request
7 requests currently being processed, 93 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
1167073yes223000
1167101yes223000
1167311yes223000
1168471yes124000
Sum6 793000

__WW______________________W____________W__________________WW____
_______________________________W____............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-01167070/1/1_
0.2525240.00.000.00
114.119.151.113join.victoriaballet.com:7080GET /XXL-per-Soggiorno-Prodotto-in-UE-Orologio-da-Parete-Modern
0-01167070/0/0W
0.00300.00.000.00
54.36.148.110theelectricians.ca:7081GET / HTTP/1.0
0-01167070/0/0W
0.00300.00.000.00
173.32.139.99theelectricians.ca:7081GET / HTTP/1.0
0-01167070/1/1_
0.2526460.00.000.00
141.101.96.140en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-01167070/1/1_
0.30031480.00.040.04
172.68.35.48cosmeticatravel.fr:7081GET / HTTP/1.0
0-01167070/1/1_
0.271480.00.020.02
172.71.154.193en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.310470.00.010.01
172.70.230.196en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.320240.00.020.02
172.68.110.151en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.173400.00.010.01
202.61.253.63muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-01167100/0/0W
0.00300.00.000.00
173.32.139.99theelectricians.ca:7081GET / HTTP/1.0
1-01167100/1/1_
0.243900.00.010.01
172.71.134.99la-liposuccion.com:7081GET /devis-2.php HTTP/1.0
1-01167100/1/1_
0.253250.00.000.00
172.71.134.99la-liposuccion.com:7081GET /devis.php HTTP/1.0
1-01167100/1/1_
0.24320.00.010.01
216.244.66.194aarangallery.com:7081GET /wp-content/uploads/2016/06/aliyarrasti-22.jpg HTTP/1.0
1-01167100/1/1_
0.341660.00.020.02
172.70.230.58en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.351520.00.020.02
172.70.230.196en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/0/0W
0.00000.00.000.00
162.158.166.182en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.71.154.48en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.71.154.193en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
3-01168470/0/0W
0.00000.00.000.00
185.191.171.11victoriaballet.com:7081GET /Heat-Resistant-Burner-Glass-Oil-Lamp/Home-D%C3%A9cor-yvqgb
3-01168470/1/1_
0.090390.00.010.01
172.70.110.97en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.070560.00.010.01
172.70.114.253en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.041390.00.020.02
172.71.178.119en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.10013240.00.020.02
162.158.63.105en.cosmeticatravel.com:7081GET / HTTP/1.0

 
SrvChild Server number - generation
PIDOS process ID
AccNumber of accesses this connection / this child / this slot
MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
ReqMilliseconds required to process most recent request
ConnKilobytes transferred this connection
ChildMegabytes transferred this child
SlotTotal megabytes transferred this slot




SSL/TLS Session Cache Status: 

cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 9 misstotal removes since starting: 0 hit, 0 miss


mod_fcgid status:
Total FastCGI processes: 7

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116794309Ready116885001Working

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116877220Working116797330Working116796330Working

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116791331Ready

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116886000Working

Active and Idle are time active and time since
last request, in seconds.

Found on 2023-02-13 23:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd14cfdf401

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Monday, 13-Feb-2023 18:09:26 EST
Restart Time: Monday, 13-Feb-2023 18:09:22 EST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 3 seconds
Server load: 4.82 3.45 2.82
Total accesses: 23 - Total Traffic: 423 kB
CPU Usage: u.8 s.12 cu0 cs0 - 30.7% CPU load
7.67 requests/sec - 141.0 kB/second - 18.4 kB/request
12 requests currently being processed, 88 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
1167072yes322000
1167102yes322000
1167313yes322000
1168472yes322000
Sum9 1288000

__WW________W_____________W_________W___W_____________WW__W_____
_____________________________RWW____............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-01167070/1/1_
0.2535240.00.000.00
114.119.151.113join.victoriaballet.com:7080GET /XXL-per-Soggiorno-Prodotto-in-UE-Orologio-da-Parete-Modern
0-01167070/0/0W
0.00300.00.000.00
54.36.148.110theelectricians.ca:7081GET / HTTP/1.0
0-01167070/0/0W
0.00300.00.000.00
173.32.139.99theelectricians.ca:7081GET / HTTP/1.0
0-01167070/1/1_
0.2526460.00.000.00
141.101.96.140en.cosmeticatravel.com:7081HEAD / HTTP/1.0
0-01167070/1/1_
0.30031480.00.040.04
172.68.35.48cosmeticatravel.fr:7081GET / HTTP/1.0
0-01167070/1/1_
0.271480.00.020.02
172.71.154.193en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.310470.00.010.01
172.70.230.196en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.320240.00.020.02
172.68.110.151en.cosmeticatravel.com:7081GET / HTTP/1.0
0-01167070/1/1_
0.370520.00.020.02
172.69.134.179en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-01167070/1/1_
0.380140.00.040.04
172.71.154.192en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
0-01167070/1/1_
0.370200.00.030.03
172.71.154.118en.cosmeticatravel.com:7081GET /s/938313e223e26323e2430313/_/;/META-INF/maven/com.atlassia
0-01167070/0/0W
0.00000.00.000.00
172.71.178.98en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-01167100/1/1_
0.173400.00.010.01
202.61.253.63muslimmarriages.ca:7081GET /contact_us.php/index.php/index.php/login.php/privacy_polic
1-01167100/0/0W
0.00300.00.000.00
173.32.139.99theelectricians.ca:7081GET / HTTP/1.0
1-01167100/1/1_
0.243900.00.010.01
172.71.134.99la-liposuccion.com:7081GET /devis-2.php HTTP/1.0
1-01167100/1/1_
0.253250.00.000.00
172.71.134.99la-liposuccion.com:7081GET /devis.php HTTP/1.0
1-01167100/1/1_
0.24320.00.010.01
216.244.66.194aarangallery.com:7081GET /wp-content/uploads/2016/06/aliyarrasti-22.jpg HTTP/1.0
1-01167100/0/0W
0.00000.00.000.00
172.71.242.51en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.341660.00.020.02
172.70.230.58en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.351520.00.020.02
172.70.230.196en.cosmeticatravel.com:7081GET / HTTP/1.0
1-01167100/1/1_
0.380270.00.000.00
162.158.166.182en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-01167100/0/0W
0.00000.00.000.00
172.69.134.118en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
1-01167100/1/1_
0.400430.00.030.03
172.71.158.101en.cosmeticatravel.com:7081GET /.env HTTP/1.0
1-01167100/1/1_
0.400320.00.030.03
172.71.158.210en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
2-01167310/0/0W
0.00000.00.000.00
162.158.167.10en.cosmeticatravel.com:7081GET /.DS_Store HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.71.158.134en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
2-01167310/0/0W
0.00000.00.000.00
172.71.154.48en.cosmeticatravel.com:7081GET /.vscode/sftp.json HTTP/1.0
2-01167310/1/1_
0.0401420.00.030.03
172.71.154.193en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
3-01168470/0/0W
0.00000.00.000.00
172.71.178.98en.cosmeticatravel.com:7081GET /s/534313e28363e27363e2237313/_/;/META-INF/maven/com.atlass
3-01168470/0/0W
0.00000.00.000.00
162.158.166.231en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/0/0W
0.00000.00.000.00
185.191.171.11victoriaballet.com:7081GET /Heat-Resistant-Burner-Glass-Oil-Lamp/Home-D%C3%A9cor-yvqgb
3-01168470/1/1_
0.090390.00.010.01
172.70.110.97en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.071560.00.010.01
172.70.114.253en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.041390.00.020.02
172.71.178.119en.cosmeticatravel.com:7081GET / HTTP/1.0
3-01168470/1/1_
0.10013240.00.020.02
162.158.63.105en.cosmeticatravel.com:7081GET / HTTP/1.0

 
SrvChild Server number - generation
PIDOS process ID
AccNumber of accesses this connection / this child / this slot
MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
ReqMilliseconds required to process most recent request
ConnKilobytes transferred this connection
ChildMegabytes transferred this child
SlotTotal megabytes transferred this slot




SSL/TLS Session Cache Status: 

cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 10 misstotal removes since starting: 0 hit, 0 miss


mod_fcgid status:
Total FastCGI processes: 7

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
1167943012Ready116885004Ready

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116877220Working116797330Working116796330Working

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116791331Ready

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)
PidActiveIdleAccessesState
116886000Working

Active and Idle are time active and time since
last request, in seconds.

Found on 2023-02-13 23:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1172b2cbc

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Thursday, 15-Dec-2022 17:08:35 EST
Restart Time: Thursday, 15-Dec-2022 17:08:21 EST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 14 seconds
Server load: 6.41 4.37 3.87
Total accesses: 75 - Total Traffic: 11.3 MB
CPU Usage: u1.16 s.31 cu0 cs0 - 10.5% CPU load
5.36 requests/sec - 0.8 MB/second - 154.7 kB/request
17 requests currently being processed, 83 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
15857753yes322000
15857762yes619000
15857771yes223000
15859091yes619000
Sum7 1783000

___________________WW__W___WW_____________WW____WW_________W____
_____W______W____W_WW_W___W_________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-015857750/1/1_
0.0911270.00.010.01
172.71.130.64cosmeticatravel.com:7081GET /chatbot/assets/css/typing.css HTTP/1.0
0-015857750/1/1_
0.0811890.00.010.01
172.71.130.94cosmeticatravel.com:7081GET /js/bootstrap-multiselect.js HTTP/1.0
0-015857750/1/1_
0.0611450.00.010.01
172.71.130.94cosmeticatravel.com:7081GET /chatbot/assets/js/responses.js HTTP/1.0
0-015857750/1/1_
0.15819360.00.000.00
162.236.21.230cubaron.com:7081GET /en/component/ajax/?format=json HTTP/1.0
0-015857750/1/1_
0.119260.00.000.00
172.71.130.35cosmeticatravel.com:7081GET /blog/media/article/1590088338.jpg HTTP/1.0
0-015857750/1/1_
0.138100.00.000.00
172.71.130.44cosmeticatravel.com:7081GET /blog/media/article/1587635854.jpg HTTP/1.0
0-015857750/1/1_
0.158580.00.000.00
172.71.130.67cosmeticatravel.com:7081GET /blog/media/article/1585667159.png HTTP/1.0
0-015857750/1/1_
0.1671870.00.060.06
66.249.73.235technovationacademy.com:7081GET /?Cordyline/beige1473271.html HTTP/1.0
0-015857750/1/1_
0.24516590.04.114.11
66.249.73.237technovationacademy.com:7081GET /?bastionet/diatessaron2287968.html HTTP/1.0
0-015857750/1/1_
0.24517920.00.010.01
185.119.81.103annexosteopathy.com:7081POST /wp-login.php HTTP/1.0
0-015857750/1/1_
0.1961910.00.040.04
66.249.73.239technovationacademy.com:7081GET /?Cevennian/Kilmarnock2364911.html HTTP/1.0
0-015857750/1/1_
0.2051920.00.070.07
66.249.73.235technovationacademy.com:7081GET /?portio/chasm269011.html HTTP/1.0
0-015857750/1/1_
0.2647260.00.120.12
157.90.209.79cubaron.com:7081GET /en/our-company/rum-masters/cuban-rum-masters-menu/104-all-
0-015857750/1/1_
0.2732100.00.200.20
66.249.73.249technovationacademy.com:7081GET /?libatory/redbird950367.html HTTP/1.0
0-015857750/1/1_
0.2923030.00.030.03
162.158.129.160en.cosmeticatravel.com:7081GET /.aws/credentials HTTP/1.0
0-015857750/1/1_
0.37010330.00.020.02
172.71.82.129en.cosmeticatravel.com:7081GET / HTTP/1.0
0-015857750/1/1_
0.321280.00.030.03
172.70.178.192en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
0-015857750/1/1_
0.361510.00.020.02
172.70.178.43en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-015857750/1/1_
0.351190.00.010.01
172.70.178.32en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
0-015857750/0/0W
0.00100.00.000.00
172.70.178.55en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
0-015857750/0/0W
0.00100.00.000.00
172.70.178.54en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-015857750/1/1_
0.361150.00.030.03
172.70.179.18en.cosmeticatravel.com:7081GET /s/938313e233e26323e2430313/_/;/META-INF/maven/com.atlassia
0-015857750/1/1_
0.3802310.00.090.09
66.249.73.237technovationacademy.com:7081GET /?acrylic/dabber911023.html HTTP/1.0
0-015857750/0/0W
0.00000.00.000.00
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1671142114.42442297935485839843
1-015857760/0/0W
0.00000.00.000.00
108.162.249.30en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-015857760/0/0W
0.00000.00.000.00
172.68.210.80en.cosmeticatravel.com:7081GET /.env HTTP/1.0
1-015857760/1/1_
0.1372140.00.050.05
66.249.73.237technovationacademy.com:7081GET /?antisimoniacal/monosomatic1416323.html HTTP/1.0
1-015857760/1/1_
0.021011720.00.000.00
172.71.130.72cosmeticatravel.com:7081GET /chatbot/assets/css/chat.css HTTP/1.0
1-015857760/1/1_
0.0392020.00.060.06
66.249.73.239technovationacademy.com:7081GET /?Kilmarnock/dissoluteness211922.html HTTP/1.0
1-015857760/1/1_
0.059180.00.000.00
172.71.130.49cosmeticatravel.com:7081GET /blog/media/article/1447143442.jpg HTTP/1.0
1-015857760/1/1_
0.0583510.00.050.05
66.249.73.237technovationacademy.com:7081GET /?dabber/Lora1248049.html HTTP/1.0
1-015857760/1/1_
0.088220.00.000.00
172.71.130.27cosmeticatravel.com:7081GET /blog/media/article/1581936263.jpg HTTP/1.0
1-015857760/1/1_
0.108420.00.000.00
172.71.130.108cosmeticatravel.com:7081GET /blog/media/article/1586348988.png HTTP/1.0
1-015857760/1/1_
0.1082410.00.070.07
66.249.73.239technovationacademy.com:7081GET /?flourishy/saponary105234.html HTTP/1.0
1-015857760/1/1_
0.1281940.00.070.07
66.249.73.237technovationacademy.com:7081GET /?portio/chasm1787176.html HTTP/1.0
1-015857760/1/1_
0.1421730.00.030.03
66.249.73.249technovationacademy.com:7081GET /?lignose/bastionet2130682.html HTTP/1.0
1-015857760/1/1_
0.1512130.00.080.08
66.249.73.245technovationacademy.com:7081GET /?dopa/Cordyline1707420.html HTTP/1.0
1-015857760/1/1_
0.23010310.00.020.02
172.69.134.119en.cosmeticatravel.com:7081GET / HTTP/1.0
1-015857760/1/1_
0.1812160.00.090.09
66.249.73.239technovationacademy.com:7081GET /?overspeech/micron400080.html HTTP/1.0
1-015857760/0/0W
0.00100.00.000.00
172.70.178.32en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-015857760/0/0W
0.00100.00.000.00
172.70.178.93en.cosmeticatravel.com:7081GET / HTTP/1.0
1-015857760/1/1_
0.211180.00.030.03
172.70.178.193en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
1-015857760/1/1_
0.2202850.00.060.06
66.249.73.243technovationacademy.com:7081GET /?Lora/gumihan1350225.html HTTP/1.0
1-015857760/1/1_
0.240390.00.010.01
172.71.26.160en.cosmeticatravel.com:7081GET / HTTP/1.0
1-015857760/1/1_
0.250170.00.030.03
172.69.62.50en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
1-015857760/0/0W
0.00000.00.000.00
172.68.146.3en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
1-015857760/0/0W
0.00000.00.000.00
172.68.66.14en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
2-015857770/1/1_
0.271320.00.020.02
172.71.154.119en.cosmeticatravel.com:7081GET / HTTP/1.0
2-015857770/1/1_
0.121217670.04.104.10
66.249.73.241technovationacademy.com:7081GET /?bastionet/diatessaron1591173.html HTTP/1.0
2-015857770/1/1_
0.07136450.00.000.00
114.119.145.129join.victoriaballet.com:7080GET /Aquadimmer-Grohe-Sedile/Rubinetti-per-lavandini-bagno-vmfh
2-015857770/1/1_
0.081214320.00.080.08
66.249.73.235technovationacademy.com:7081GET /?overspeech/micron1062830.html HTTP/1.0
2-015857770/0/0W
0.00

Found on 2022-12-15 22:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1a44881b7

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Thursday, 15-Dec-2022 17:08:36 EST
Restart Time: Thursday, 15-Dec-2022 17:08:21 EST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 15 seconds
Server load: 6.29 4.38 3.88
Total accesses: 103 - Total Traffic: 12.4 MB
CPU Usage: u1.38 s.38 cu0 cs0 - 11.7% CPU load
6.87 requests/sec - 0.8 MB/second - 123.3 kB/request
6 requests currently being processed, 94 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
15857751yes421000
15857760yes025000
15857771yes124000
15859091yes124000
Sum3 694000

___W__WW_______________W___________________________________W____
_________________________W__________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-015857750/2/2_
0.4501540.00.060.06
66.249.73.243technovationacademy.com:7081GET /?deflowerer/chylocele1518879.html HTTP/1.0
0-015857750/2/2_
0.440720.00.030.03
172.69.134.119en.cosmeticatravel.com:7081GET / HTTP/1.0
0-015857750/2/2_
0.420220.00.040.04
172.70.178.190en.cosmeticatravel.com:7081GET /api/search?folderIds=0 HTTP/1.0
0-015857750/1/1W
0.15000.00.000.00
172.70.219.37en.cosmeticatravel.com:7081GET /.DS_Store HTTP/1.0
0-015857750/2/2_
0.460120.00.040.04
162.158.227.244en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
0-015857750/2/2_
0.460120.00.040.04
162.158.227.205en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
0-015857750/1/1W
0.15000.00.000.00
172.70.218.177en.cosmeticatravel.com:7081GET / HTTP/1.0
0-015857750/2/2_
0.490140.00.090.09
172.71.198.139en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
0-015857750/1/1_
0.24616590.04.114.11
66.249.73.237technovationacademy.com:7081GET /?bastionet/diatessaron2287968.html HTTP/1.0
0-015857750/1/1_
0.24617920.00.010.01
185.119.81.103annexosteopathy.com:7081POST /wp-login.php HTTP/1.0
0-015857750/1/1_
0.1971910.00.040.04
66.249.73.239technovationacademy.com:7081GET /?Cevennian/Kilmarnock2364911.html HTTP/1.0
0-015857750/1/1_
0.2061920.00.070.07
66.249.73.235technovationacademy.com:7081GET /?portio/chasm269011.html HTTP/1.0
0-015857750/1/1_
0.2657260.00.120.12
157.90.209.79cubaron.com:7081GET /en/our-company/rum-masters/cuban-rum-masters-menu/104-all-
0-015857750/1/1_
0.2742100.00.200.20
66.249.73.249technovationacademy.com:7081GET /?libatory/redbird950367.html HTTP/1.0
0-015857750/1/1_
0.2933030.00.030.03
162.158.129.160en.cosmeticatravel.com:7081GET /.aws/credentials HTTP/1.0
0-015857750/1/1_
0.37210330.00.020.02
172.71.82.129en.cosmeticatravel.com:7081GET / HTTP/1.0
0-015857750/1/1_
0.322280.00.030.03
172.70.178.192en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
0-015857750/1/1_
0.362510.00.020.02
172.70.178.43en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-015857750/1/1_
0.352190.00.010.01
172.70.178.32en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
0-015857750/1/1_
0.39113580.00.030.03
172.70.178.55en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
0-015857750/1/1_
0.39113340.00.030.03
172.70.178.54en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-015857750/1/1_
0.362150.00.030.03
172.70.179.18en.cosmeticatravel.com:7081GET /s/938313e233e26323e2430313/_/;/META-INF/maven/com.atlassia
0-015857750/1/1_
0.3812310.00.090.09
66.249.73.237technovationacademy.com:7081GET /?acrylic/dabber911023.html HTTP/1.0
0-015857750/0/0W
0.00100.00.000.00
208.88.4.121shorehamvillage.com:7081POST /wp-cron.php?doing_wp_cron=1671142114.42442297935485839843
0-015857750/1/1_
0.401180.00.030.03
172.70.179.18en.cosmeticatravel.com:7081GET /v2/_catalog HTTP/1.0
1-015857760/1/1_
0.310440.00.030.03
162.158.129.5en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
1-015857760/1/1_
0.301270.00.010.01
108.162.249.30en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-015857760/1/1_
0.33010780.00.030.03
172.68.210.80en.cosmeticatravel.com:7081GET /.env HTTP/1.0
1-015857760/1/1_
0.1392140.00.050.05
66.249.73.237technovationacademy.com:7081GET /?antisimoniacal/monosomatic1416323.html HTTP/1.0
1-015857760/1/1_
0.021111720.00.000.00
172.71.130.72cosmeticatravel.com:7081GET /chatbot/assets/css/chat.css HTTP/1.0
1-015857760/1/1_
0.03102020.00.060.06
66.249.73.239technovationacademy.com:7081GET /?Kilmarnock/dissoluteness211922.html HTTP/1.0
1-015857760/1/1_
0.0510180.00.000.00
172.71.130.49cosmeticatravel.com:7081GET /blog/media/article/1447143442.jpg HTTP/1.0
1-015857760/1/1_
0.05103510.00.050.05
66.249.73.237technovationacademy.com:7081GET /?dabber/Lora1248049.html HTTP/1.0
1-015857760/1/1_
0.0810220.00.000.00
172.71.130.27cosmeticatravel.com:7081GET /blog/media/article/1581936263.jpg HTTP/1.0
1-015857760/1/1_
0.1010420.00.000.00
172.71.130.108cosmeticatravel.com:7081GET /blog/media/article/1586348988.png HTTP/1.0
1-015857760/1/1_
0.1092410.00.070.07
66.249.73.239technovationacademy.com:7081GET /?flourishy/saponary105234.html HTTP/1.0
1-015857760/1/1_
0.1291940.00.070.07
66.249.73.237technovationacademy.com:7081GET /?portio/chasm1787176.html HTTP/1.0
1-015857760/1/1_
0.1431730.00.030.03
66.249.73.249technovationacademy.com:7081GET /?lignose/bastionet2130682.html HTTP/1.0
1-015857760/1/1_
0.1532130.00.080.08
66.249.73.245technovationacademy.com:7081GET /?dopa/Cordyline1707420.html HTTP/1.0
1-015857760/1/1_
0.23110310.00.020.02
172.69.134.119en.cosmeticatravel.com:7081GET / HTTP/1.0
1-015857760/1/1_
0.1822160.00.090.09
66.249.73.239technovationacademy.com:7081GET /?overspeech/micron400080.html HTTP/1.0
1-015857760/1/1_
0.30113230.00.030.03
172.70.178.32en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
1-015857760/1/1_
0.30113780.00.010.01
172.70.178.93en.cosmeticatravel.com:7081GET / HTTP/1.0
1-015857760/1/1_
0.212180.00.030.03
172.70.178.193en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
1-015857760/1/1_
0.2222850.00.060.06
66.249.73.243technovationacademy.com:7081GET /?Lora/gumihan1350225.html HTTP/1.0
1-015857760/1/1_
0.241390.00.010.01
172.71.26.160en.cosmeticatravel.com:7081GET / HTTP/1.0
1-015857760/1/1_
0.251170.00.030.03
172.69.62.50en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
1-015857760/1/1_
0.33010580.00.020.02
172.68.146.3en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
1-015857760/1/1_
0.33010400.00.030.03
172.68.66.14en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
2-015857770/1/1_
0.272320.00.020.02
172.71.154.119en.cosmeticatravel.com:7081GET / HTTP/1.0
2-015857770/1/1_
0.121317670.04.104.10
66.249.73.241technovationacademy.com:7081GET /?bastionet/diatessaron1591173.html HTTP/1.0
2-015857770/1/1_
0.07146450.00.000.00
114.119.145.129join.victoriaballet.com:7080GET /Aquadimmer-Grohe-Sedile/Rubinet

Found on 2022-12-15 22:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1004df3de

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Thursday, 15-Dec-2022 17:08:33 EST
Restart Time: Thursday, 15-Dec-2022 17:08:21 EST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 12 seconds
Server load: 6.41 4.37 3.87
Total accesses: 59 - Total Traffic: 10.8 MB
CPU Usage: u.99 s.27 cu0 cs0 - 10.5% CPU load
4.92 requests/sec - 0.9 MB/second - 187.9 kB/request
7 requests currently being processed, 93 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
15857751yes322000
15857761yes223000
15857771yes223000
15859090yes025000
Sum3 793000

_______________W_WW_____________________W_R________________W____
__W_________________________________............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-015857750/1/1_
0.099270.00.010.01
172.71.130.64cosmeticatravel.com:7081GET /chatbot/assets/css/typing.css HTTP/1.0
0-015857750/1/1_
0.089890.00.010.01
172.71.130.94cosmeticatravel.com:7081GET /js/bootstrap-multiselect.js HTTP/1.0
0-015857750/1/1_
0.069450.00.010.01
172.71.130.94cosmeticatravel.com:7081GET /chatbot/assets/js/responses.js HTTP/1.0
0-015857750/1/1_
0.15719360.00.000.00
162.236.21.230cubaron.com:7081GET /en/component/ajax/?format=json HTTP/1.0
0-015857750/1/1_
0.118260.00.000.00
172.71.130.35cosmeticatravel.com:7081GET /blog/media/article/1590088338.jpg HTTP/1.0
0-015857750/1/1_
0.137100.00.000.00
172.71.130.44cosmeticatravel.com:7081GET /blog/media/article/1587635854.jpg HTTP/1.0
0-015857750/1/1_
0.157580.00.000.00
172.71.130.67cosmeticatravel.com:7081GET /blog/media/article/1585667159.png HTTP/1.0
0-015857750/1/1_
0.1661870.00.060.06
66.249.73.235technovationacademy.com:7081GET /?Cordyline/beige1473271.html HTTP/1.0
0-015857750/1/1_
0.24416590.04.114.11
66.249.73.237technovationacademy.com:7081GET /?bastionet/diatessaron2287968.html HTTP/1.0
0-015857750/1/1_
0.24317920.00.010.01
185.119.81.103annexosteopathy.com:7081POST /wp-login.php HTTP/1.0
0-015857750/1/1_
0.1941910.00.040.04
66.249.73.239technovationacademy.com:7081GET /?Cevennian/Kilmarnock2364911.html HTTP/1.0
0-015857750/1/1_
0.2041920.00.070.07
66.249.73.235technovationacademy.com:7081GET /?portio/chasm269011.html HTTP/1.0
0-015857750/1/1_
0.2637260.00.120.12
157.90.209.79cubaron.com:7081GET /en/our-company/rum-masters/cuban-rum-masters-menu/104-all-
0-015857750/1/1_
0.2712100.00.200.20
66.249.73.249technovationacademy.com:7081GET /?libatory/redbird950367.html HTTP/1.0
0-015857750/1/1_
0.2903030.00.030.03
162.158.129.160en.cosmeticatravel.com:7081GET /.aws/credentials HTTP/1.0
0-015857750/0/0W
0.00000.00.000.00
172.71.82.129en.cosmeticatravel.com:7081GET / HTTP/1.0
0-015857750/1/1_
0.320280.00.030.03
172.70.178.192en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0
0-015857750/0/0W
0.00000.00.000.00
172.70.178.43en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-015857750/0/0W
0.00000.00.000.00
172.70.178.32en.cosmeticatravel.com:7081GET /server-status HTTP/1.0
1-015857760/1/1_
0.1362140.00.050.05
66.249.73.237technovationacademy.com:7081GET /?antisimoniacal/monosomatic1416323.html HTTP/1.0
1-015857760/1/1_
0.02811720.00.000.00
172.71.130.72cosmeticatravel.com:7081GET /chatbot/assets/css/chat.css HTTP/1.0
1-015857760/1/1_
0.0382020.00.060.06
66.249.73.239technovationacademy.com:7081GET /?Kilmarnock/dissoluteness211922.html HTTP/1.0
1-015857760/1/1_
0.058180.00.000.00
172.71.130.49cosmeticatravel.com:7081GET /blog/media/article/1447143442.jpg HTTP/1.0
1-015857760/1/1_
0.0573510.00.050.05
66.249.73.237technovationacademy.com:7081GET /?dabber/Lora1248049.html HTTP/1.0
1-015857760/1/1_
0.087220.00.000.00
172.71.130.27cosmeticatravel.com:7081GET /blog/media/article/1581936263.jpg HTTP/1.0
1-015857760/1/1_
0.107420.00.000.00
172.71.130.108cosmeticatravel.com:7081GET /blog/media/article/1586348988.png HTTP/1.0
1-015857760/1/1_
0.1072410.00.070.07
66.249.73.239technovationacademy.com:7081GET /?flourishy/saponary105234.html HTTP/1.0
1-015857760/1/1_
0.1261940.00.070.07
66.249.73.237technovationacademy.com:7081GET /?portio/chasm1787176.html HTTP/1.0
1-015857760/1/1_
0.1411730.00.030.03
66.249.73.249technovationacademy.com:7081GET /?lignose/bastionet2130682.html HTTP/1.0
1-015857760/1/1_
0.1502130.00.080.08
66.249.73.245technovationacademy.com:7081GET /?dopa/Cordyline1707420.html HTTP/1.0
1-015857760/0/0W
0.00000.00.000.00
172.69.134.119en.cosmeticatravel.com:7081GET / HTTP/1.0
1-015857760/1/1_
0.1802160.00.090.09
66.249.73.239technovationacademy.com:7081GET /?overspeech/micron400080.html HTTP/1.0
1-015857760/0/0W
0.00000.00.000.00
172.70.178.32en.cosmeticatravel.com:7081GET /debug/default/view?panel=config HTTP/1.0
2-015857770/1/1_
0.270320.00.020.02
172.71.154.119en.cosmeticatravel.com:7081GET / HTTP/1.0
2-015857770/1/1_
0.121117670.04.104.10
66.249.73.241technovationacademy.com:7081GET /?bastionet/diatessaron1591173.html HTTP/1.0
2-015857770/1/1_
0.07126450.00.000.00
114.119.145.129join.victoriaballet.com:7080GET /Aquadimmer-Grohe-Sedile/Rubinetti-per-lavandini-bagno-vmfh
2-015857770/1/1_
0.081114320.00.080.08
66.249.73.235technovationacademy.com:7081GET /?overspeech/micron1062830.html HTTP/1.0
2-015857770/0/0W
0.001200.00.000.00
194.165.17.28shorehamvillage.com:7081GET /wp-content/plugins/wpconfig.bak.php?act=sf HTTP/1.0
2-015857770/1/1_
0.229180.00.010.01
172.71.130.7cosmeticatravel.com:7081GET /chatbot/assets/css/style.css HTTP/1.0
2-015857770/1/1_
0.229280.00.010.01
172.71.130.130cosmeticatravel.com:7081GET /chatbot/assets/js/app.js HTTP/1.0
2-015857770/1/1_
0.23519080.00.000.00
208.88.4.121annexosteopathy.com:7081POST /wp-cron.php?doing_wp_cron=1671142106.68159794807434082031
2-015857770/1/1_
0.2432520.00.060.06
66.249.73.235technovationacademy.com:7081GET /?flourishy/saponary1522034.html HTTP/1.0
2-015857770/1/1_
0.2532080.00.070.07
66.249.73.239technovationacademy.com:7081GET /?declensional/flourishy2230393.html HTTP/1.0
2-015857770/1/1_
0.280370.00.010.01
172.69.134.135en.cosmeticatravel.com:7081GET / HTTP/1.0
2-015857770/0/0W
0.00000.00.000.00
172.70.178.43en.cosmeticatravel.com:7081GET /.DS_Store HTTP/1.0
3-015859090/1/1_
0.3392230.00.040.04
66.249.73.237technovationacademy.com:7081GET /?forcleave/bibliomania1091246.html HTTP/1.0
3-015859090/1/1_
0.2992630.00.060.06
66.249.73.239technovationacademy.com:7081GET /?mercurous/portio719145.html HTTP/1.0
3-015859090/1/1_
0.08108150.00.020.02
172.71.130.116cosmeticatravel.com:7081GET /blog/a-12-156-eva-longoria-sest-finalement-mise-a-la-chiru
3-015859090/1/1_
0.33920050.00.120.12
157.90.209.79cubaron.com:7081GET /en/our-company/past-events-menu/rum-colloquiums/i-colloqui
3-015859090/1/1_
0.05112370.00.060.06
66.249.73.237technovationacademy.com:7081GET /?derationalize/deflowerer275343.html HTTP/1.0
3-015859090/1/1_
0.13101900.00.070.07
66.249.73.239technovationacademy.com:7081G

Found on 2022-12-15 22:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1a9b8c6b2

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Sunday, 16-Oct-2022 18:08:42 EDT
Restart Time: Sunday, 16-Oct-2022 06:10:45 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 11 hours 57 minutes 57 seconds
Server load: 5.10 3.95 3.56
Total accesses: 93197 - Total Traffic: 1.1 GB
CPU Usage: u716.47 s158.82 cu0 cs0 - 2.03% CPU load
2.16 requests/sec - 27.1 kB/second - 12.5 kB/request
24 requests currently being processed, 176 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
19587250yes421000
19587271yes124000
19587281yes124000
19588530yes025000
20097281yes124000
20152566yes718000
21234750yes124000
21412499yes916000
Sum18 24176000

____W_____W___WW_____________W__________________________________
_W______________________________________________________W_______
W_W_W______WW___WW__________________________W_____W_W__W___WWW__
_W____WW........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-019587250/276/276W
78.76000.03.093.09
162.158.162.38en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0
0-019587250/279/279_
78.98576580.02.912.91
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/279/279_
78.98536090.03.373.37
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/275/275_
78.79214370.02.482.48
72.76.14.154premierdoorservices.ca:7081GET /images/facebook-logo.png HTTP/1.0
0-019587250/276/276W
78.71000.03.143.14
172.70.147.32en.cosmeticatravel.com:7081GET / HTTP/1.0
0-019587250/275/275_
78.90141130.03.513.51
211.249.246.131hillsidepines.com:7081GET /component/search/?Itemid=115&format=opensearch HTTP/1.0
0-019587250/279/279_
78.911407180.02.972.97
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.871556040.03.133.13
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.8417120.02.372.37
211.249.246.131fit-tunisie.org:7081GET /js/jquery.mobilemenu.js HTTP/1.0
0-019587250/278/278_
78.851696210.02.922.92
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277W
78.74000.02.782.78
162.158.170.192en.cosmeticatravel.com:7081GET /info.php HTTP/1.0
0-019587250/278/278_
78.8417130.02.922.92
211.249.246.131fit-tunisie.org:7081GET /js/superfish.js HTTP/1.0
0-019587250/277/277_
78.78214230.03.083.08
72.76.14.154premierdoorservices.ca:7081GET /images/garage-door-service-area-map.jpg HTTP/1.0
0-019587250/276/276_
78.97616160.02.502.50
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276W
78.72000.02.682.68
162.158.170.196en.cosmeticatravel.com:7081GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor
0-019587250/277/277W
78.71000.02.372.37
172.71.154.118en.cosmeticatravel.com:7081GET /about HTTP/1.0
0-019587250/275/275_
78.8317218050.03.573.57
208.88.4.121MasaroMedia.com:7081POST /wp-cron.php?doing_wp_cron=1665957947.87250804901123046875
0-019587250/276/276_
78.911405390.04.434.43
136.243.228.194cubaron.com:7081GET /en/media-menu-en/multimedia-en/rss/81/video HTTP/1.0
0-019587250/276/276_
78.79214320.04.334.33
72.76.14.154premierdoorservices.ca:7081GET /images/bbb-accredited-business-logo.png HTTP/1.0
0-019587250/276/276_
78.941016230.02.472.47
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.802075300.04.474.47
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.78214220.02.712.71
72.76.14.154premierdoorservices.ca:7081GET /images/google-plus-logo.png HTTP/1.0
0-019587250/277/277_
78.8914360.03.853.85
211.249.246.131hillsidepines.com:7081GET /media/system/css/modal.css?3fdc6b2b311db493ae2d39a150e2908
0-019587250/279/279W
78.78000.03.683.68
162.158.163.67en.cosmeticatravel.com:7081GET /.env HTTP/1.0
0-019587250/276/276_
78.851709890.06.266.26
69.164.220.109shorehamvillage.com:7081GET /visiting-shoreham/ HTTP/1.0
1-019587270/343/343_
92.31304800.03.873.87
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/347/347_
92.092236020.04.804.80
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.28635530.04.864.86
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.01309700.04.054.05
172.70.34.160cosmeticatravel.com:7081GET /js/script.js HTTP/1.0
1-019587270/344/344W
91.93100.03.263.26
172.71.154.58en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
1-019587270/344/344_
92.161796370.03.923.92
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/339/339_
92.2863410.03.603.60
172.71.170.61le-lifting.com:7081HEAD / HTTP/1.0
1-019587270/347/347_
92.3377410.04.994.99
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/345/345_
92.360210.03.063.06
172.70.143.95en.cosmeticatravel.com:7081GET /s/3130342e32362e322e313839/_/;/META-INF/maven/com.atlassia
1-019587270/342/342_
92.151875860.03.983.98
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.141884750.04.724.72
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.221421230.03.973.97
211.249.246.131hillsidepines.com:7081GET /templates/hillsidepines/fonts/asap-regular-webfont.woff HT
1-019587270/345/345_
92.032705520.03.533.53
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/346/346_
92.1518618710.03.583.58
69.164.220.109shorehamvillage.com:7081GET /shoreham-news/ HTTP/1.0
1-019587270/343/343_
91.96343260.03.193.19
162.158.90.22la-liposuccion.com:7081GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.
1-019587270/343/343_
91.973425550.04.454.45
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.06259340.03.403.40
172.71.174.8la-rhinoplastie.net:7081HEAD / HTTP/1.0
1-019587270/344/344_
92.1021450.03.703.70
66.249.93.178dcrtech.net:7081GET /Dcrtech.xml HTTP/1.0
1-019587270/345/345_
92.191449250.04.044.04
211.249.246.131hillsidepines.com:7081GET / HTTP/1.0
1-019587270/342/342_
92.201436310.04.194.19
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/343/343_
92.131886930.02.712.71
69.164.220.109shorehamvillage.com:7081GET /shoreham-news HTTP/1.0
1-019587270/342/342_
92.12189210.03.913.91
172.71.160.31implant-mammaire.net:7081GET /blog/ HTTP/1.0
1-019587270/344/344_
91.953604140.03.783.78
136.144.35.135theelectricians.ca:7081POST //wp-login.php HTTP/1.0
1-019587270/343/343_
92.32135560.02.942.94
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.2114370.03.693.69
211.249.246.131hillsidepines.com:7081GET /templates/hillsidepines/css/camera.css HTTP/1.0
2-019587280/473/473_
114.8955

Found on 2022-10-16 22:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1016ebd14

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Sunday, 16-Oct-2022 18:08:41 EDT
Restart Time: Sunday, 16-Oct-2022 06:10:45 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 11 hours 57 minutes 56 seconds
Server load: 5.10 3.95 3.56
Total accesses: 93188 - Total Traffic: 1.1 GB
CPU Usage: u716.35 s158.8 cu0 cs0 - 2.03% CPU load
2.16 requests/sec - 27.1 kB/second - 12.5 kB/request
19 requests currently being processed, 181 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
19587250yes025000
19587271yes124000
19587281yes124000
19588531yes025000
20097280yes025000
20152564yes520000
21234750yes025000
21412494yes1213000
Sum11 19181000

_____________________________W__________________________________
_W______________________________________________________________
__W_W__W___W____W______________________________W__WWWWW_W_W_WW__
_W____W_........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-019587250/276/276_
78.762204740.03.093.09
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/279/279_
78.98566580.02.912.91
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/279/279_
78.98526090.03.373.37
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/275/275_
78.79213370.02.482.48
72.76.14.154premierdoorservices.ca:7081GET /images/facebook-logo.png HTTP/1.0
0-019587250/276/276_
78.712684730.03.143.14
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/275/275_
78.90140130.03.513.51
211.249.246.131hillsidepines.com:7081GET /component/search/?Itemid=115&format=opensearch HTTP/1.0
0-019587250/279/279_
78.911397180.02.972.97
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.871546040.03.133.13
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.8417020.02.372.37
211.249.246.131fit-tunisie.org:7081GET /js/jquery.mobilemenu.js HTTP/1.0
0-019587250/278/278_
78.851686210.02.922.92
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.742396040.02.782.78
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/278/278_
78.8417030.02.922.92
211.249.246.131fit-tunisie.org:7081GET /js/superfish.js HTTP/1.0
0-019587250/277/277_
78.78213230.03.083.08
72.76.14.154premierdoorservices.ca:7081GET /images/garage-door-service-area-map.jpg HTTP/1.0
0-019587250/276/276_
78.97606160.02.502.50
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.722655530.02.682.68
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.712696650.02.372.37
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/275/275_
78.8317118050.03.573.57
208.88.4.121MasaroMedia.com:7081POST /wp-cron.php?doing_wp_cron=1665957947.87250804901123046875
0-019587250/276/276_
78.911395390.04.434.43
136.243.228.194cubaron.com:7081GET /en/media-menu-en/multimedia-en/rss/81/video HTTP/1.0
0-019587250/276/276_
78.79213320.04.334.33
72.76.14.154premierdoorservices.ca:7081GET /images/bbb-accredited-business-logo.png HTTP/1.0
0-019587250/276/276_
78.941006230.02.472.47
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.802065300.04.474.47
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.78213220.02.712.71
72.76.14.154premierdoorservices.ca:7081GET /images/google-plus-logo.png HTTP/1.0
0-019587250/277/277_
78.8914260.03.853.85
211.249.246.131hillsidepines.com:7081GET /media/system/css/modal.css?3fdc6b2b311db493ae2d39a150e2908
0-019587250/279/279_
78.78213160.03.683.68
72.76.14.154premierdoorservices.ca:7081GET /images/homestars.png HTTP/1.0
0-019587250/276/276_
78.851699890.06.266.26
69.164.220.109shorehamvillage.com:7081GET /visiting-shoreham/ HTTP/1.0
1-019587270/343/343_
92.31294800.03.873.87
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/347/347_
92.092226020.04.804.80
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.28625530.04.864.86
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.01308700.04.054.05
172.70.34.160cosmeticatravel.com:7081GET /js/script.js HTTP/1.0
1-019587270/344/344W
91.93000.03.263.26
172.71.154.58en.cosmeticatravel.com:7081GET /telescope/requests HTTP/1.0
1-019587270/344/344_
92.161796370.03.923.92
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/339/339_
92.2862410.03.603.60
172.71.170.61le-lifting.com:7081HEAD / HTTP/1.0
1-019587270/347/347_
92.3367410.04.994.99
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
91.933607180.03.023.02
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.151865860.03.983.98
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.141874750.04.724.72
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.221411230.03.973.97
211.249.246.131hillsidepines.com:7081GET /templates/hillsidepines/fonts/asap-regular-webfont.woff HT
1-019587270/345/345_
92.032695520.03.533.53
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/346/346_
92.1518518710.03.583.58
69.164.220.109shorehamvillage.com:7081GET /shoreham-news/ HTTP/1.0
1-019587270/343/343_
91.96342260.03.193.19
162.158.90.22la-liposuccion.com:7081GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.
1-019587270/343/343_
91.973415550.04.454.45
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.06258340.03.403.40
172.71.174.8la-rhinoplastie.net:7081HEAD / HTTP/1.0
1-019587270/344/344_
92.1021350.03.703.70
66.249.93.178dcrtech.net:7081GET /Dcrtech.xml HTTP/1.0
1-019587270/345/345_
92.191439250.04.044.04
211.249.246.131hillsidepines.com:7081GET / HTTP/1.0
1-019587270/342/342_
92.201426310.04.194.19
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/343/343_
92.131876930.02.712.71
69.164.220.109shorehamvillage.com:7081GET /shoreham-news HTTP/1.0
1-019587270/342/342_
92.12188210.03.913.91
172.71.160.31implant-mammaire.net:7081GET /blog/ HTTP/1.0
1-019587270/344/344_
91.953594140.03.783.78
136.144.35.135theelectricians.ca:7081POST //wp-login.php HTTP/1.0
1-019587270/343/343_
92.32125560.02.942.94
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.2114270.03.693.69
211.249.246.131hillsidepines.com:7081GET /templates/hillsidepines/css/camera.css HTTP/1.0
2-019587280/473/473_
114.89556640.04.704.70
136.243.228.194cubaron.com:7081

Found on 2022-10-16 22:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4ab3cfbd1a872a4ef

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)
Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Sunday, 16-Oct-2022 18:08:41 EDT
Restart Time: Sunday, 16-Oct-2022 06:10:45 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 11 hours 57 minutes 56 seconds
Server load: 5.10 3.95 3.56
Total accesses: 93180 - Total Traffic: 1.1 GB
CPU Usage: u716.15 s158.78 cu0 cs0 - 2.03% CPU load
2.16 requests/sec - 27.1 kB/second - 12.5 kB/request
14 requests currently being processed, 186 idle workers


PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
19587250yes025000
19587270yes025000
19587280yes223000
19588531yes124000
20097280yes124000
20152564yes421000
21234750yes025000
21412494yes619000
Sum9 14186000

______________________________________________________W_________
_W______________________W_________________________________W_____
__W____W___W____W__________________________________W__W_W___W___
___W_W__........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection,
"S" Starting up,
"R" Reading Request,
"W" Sending Reply,
"K" Keepalive (read),
"D" DNS Lookup,
"C" Closing connection,
"L" Logging,
"G" Gracefully finishing,
"I" Idle cleanup of worker,
"." Open slot with no current process

SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest
0-019587250/276/276_
78.762204740.03.093.09
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/279/279_
78.98566580.02.912.91
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/279/279_
78.98526090.03.373.37
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/275/275_
78.79213370.02.482.48
72.76.14.154premierdoorservices.ca:7081GET /images/facebook-logo.png HTTP/1.0
0-019587250/276/276_
78.712674730.03.143.14
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/275/275_
78.90139130.03.513.51
211.249.246.131hillsidepines.com:7081GET /component/search/?Itemid=115&format=opensearch HTTP/1.0
0-019587250/279/279_
78.911387180.02.972.97
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.871546040.03.133.13
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.8417020.02.372.37
211.249.246.131fit-tunisie.org:7081GET /js/jquery.mobilemenu.js HTTP/1.0
0-019587250/278/278_
78.851686210.02.922.92
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.742386040.02.782.78
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/278/278_
78.8417030.02.922.92
211.249.246.131fit-tunisie.org:7081GET /js/superfish.js HTTP/1.0
0-019587250/277/277_
78.78213230.03.083.08
72.76.14.154premierdoorservices.ca:7081GET /images/garage-door-service-area-map.jpg HTTP/1.0
0-019587250/276/276_
78.97606160.02.502.50
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.722655530.02.682.68
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/277/277_
78.712696650.02.372.37
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/275/275_
78.8317118050.03.573.57
208.88.4.121MasaroMedia.com:7081POST /wp-cron.php?doing_wp_cron=1665957947.87250804901123046875
0-019587250/276/276_
78.911395390.04.434.43
136.243.228.194cubaron.com:7081GET /en/media-menu-en/multimedia-en/rss/81/video HTTP/1.0
0-019587250/276/276_
78.79213320.04.334.33
72.76.14.154premierdoorservices.ca:7081GET /images/bbb-accredited-business-logo.png HTTP/1.0
0-019587250/276/276_
78.941006230.02.472.47
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.802065300.04.474.47
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
0-019587250/276/276_
78.78213220.02.712.71
72.76.14.154premierdoorservices.ca:7081GET /images/google-plus-logo.png HTTP/1.0
0-019587250/277/277_
78.8914260.03.853.85
211.249.246.131hillsidepines.com:7081GET /media/system/css/modal.css?3fdc6b2b311db493ae2d39a150e2908
0-019587250/279/279_
78.78213160.03.683.68
72.76.14.154premierdoorservices.ca:7081GET /images/homestars.png HTTP/1.0
0-019587250/276/276_
78.851699890.06.266.26
69.164.220.109shorehamvillage.com:7081GET /visiting-shoreham/ HTTP/1.0
1-019587270/343/343_
92.31294800.03.873.87
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/347/347_
92.092216020.04.804.80
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.28615530.04.864.86
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.01307700.04.054.05
172.70.34.160cosmeticatravel.com:7081GET /js/script.js HTTP/1.0
1-019587270/344/344_
91.933614240.03.263.26
136.144.35.135theelectricians.ca:7081POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.161786370.03.923.92
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/339/339_
92.2862410.03.603.60
172.71.170.61le-lifting.com:7081HEAD / HTTP/1.0
1-019587270/347/347_
92.3367410.04.994.99
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
91.933607180.03.023.02
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.151865860.03.983.98
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.141874750.04.724.72
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.221411230.03.973.97
211.249.246.131hillsidepines.com:7081GET /templates/hillsidepines/fonts/asap-regular-webfont.woff HT
1-019587270/345/345_
92.032695520.03.533.53
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/346/346_
92.1518518710.03.583.58
69.164.220.109shorehamvillage.com:7081GET /shoreham-news/ HTTP/1.0
1-019587270/343/343_
91.96342260.03.193.19
162.158.90.22la-liposuccion.com:7081GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.
1-019587270/343/343_
91.973405550.04.454.45
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/342/342_
92.06258340.03.403.40
172.71.174.8la-rhinoplastie.net:7081HEAD / HTTP/1.0
1-019587270/344/344_
92.1021350.03.703.70
66.249.93.178dcrtech.net:7081GET /Dcrtech.xml HTTP/1.0
1-019587270/345/345_
92.191439250.04.044.04
211.249.246.131hillsidepines.com:7081GET / HTTP/1.0
1-019587270/342/342_
92.201426310.04.194.19
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/343/343_
92.131876930.02.712.71
69.164.220.109shorehamvillage.com:7081GET /shoreham-news HTTP/1.0
1-019587270/342/342_
92.12187210.03.913.91
172.71.160.31implant-mammaire.net:7081GET /blog/ HTTP/1.0
1-019587270/344/344_
91.953594140.03.783.78
136.144.35.135theelectricians.ca:7081POST //wp-login.php HTTP/1.0
1-019587270/343/343_
92.32115560.02.942.94
65.109.69.137pennybeames.net:7080POST //xmlrpc.php HTTP/1.0
1-019587270/344/344_
92.2114170.03.693.69
211.249.246.131hillsidepines.com:7081GET /templates/hillsidepines/css/camera.css HTTP/1.0
2-019587280/473/473_
114.89546640.04.704.70
136.243.228.194cubaron.com:7081GET /en/m

Found on 2022-10-16 22:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4108eb2f4c0b43b61

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)

Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Wednesday, 17-Aug-2022 19:10:34 EDT
Restart Time: Wednesday, 17-Aug-2022 19:09:56 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  38 seconds
Server load: 3.18 2.83 2.27
Total accesses: 235 - Total Traffic: 1.2 MB
CPU Usage: u1.7 s.37 cu0 cs0 - 5.45% CPU load
6.18 requests/sec - 33.4 kB/second - 5.4 kB/request
12 requests currently being processed, 88 idle workers



PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
14820600yes520000
14820611yes223000
14820880yes025000
14821864yes520000
Sum5 1288000

_____W____WWWW___________________W__W___________________________
____________WR____________W_____WW__............................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-014820600/1/1_
0.221570.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/fonts/opensans-light-webfont.wo

0-014820600/1/1_
0.2016100.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/css/animate.css HTTP/1.0

0-014820600/1/1_
0.191650.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /media/com_rsform/css/front.css?54cb6e09cb53324e398ba5bd69d

0-014820600/1/1_
0.201680.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /media/jui/js/jquery-noconflict.js?54cb6e09cb53324e398ba5bd

0-014820600/1/1_
0.142540.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u257.svg 

0-014820600/1/1W
0.07000.00.000.00
139.59.168.195en.cosmeticatravel.com:7081GET /s/3230382e38382e342e313231/_/;/META-INF/maven/com.atlassia

0-014820600/2/2_
0.23650.00.000.00
66.249.75.103artsandscienceacademy.ca:7081GET /wp-content/cache/autoptimize/css/autoptimize_single_f06387

0-014820600/2/2_
0.23640.00.000.00
66.249.75.103artsandscienceacademy.ca:7081GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/a

0-014820600/2/2_
0.2436030.00.000.00
142.54.174.10pennybeames.net:7081POST /xmlrpc.php HTTP/1.0

0-014820600/2/2_
0.24420.00.000.00
66.249.75.103artsandscienceacademy.ca:7081GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.0

0-014820600/1/1W
0.05000.00.000.00
139.59.168.195en.cosmeticatravel.com:7081GET /.git/config HTTP/1.0

0-014820600/1/1W
0.09000.00.010.01
139.59.168.195en.cosmeticatravel.com:7081GET /?rest_route=/wp/v2/users/ HTTP/1.0

0-014820600/1/1W
0.10000.00.000.00
139.59.168.195en.cosmeticatravel.com:7081GET /info.php HTTP/1.0

0-014820600/1/1W
0.11000.00.000.00
139.59.168.195en.cosmeticatravel.com:7081GET /server-status HTTP/1.0

0-014820600/1/1_
0.112640.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/resources/scripts/axu

0-014820600/1/1_
0.122690.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/resources/scripts/axu

0-014820600/1/1_
0.1225320.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/files/l3_-_workbc_ord

0-014820600/1/1_
0.152540.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u716.png 

0-014820600/1/1_
0.152540.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u726.svg 

0-014820600/1/1_
0.162530.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u736.svg 

0-014820600/1/1_
0.172590.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u759.png 

0-014820600/1/1_
0.162550.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u731.svg 

0-014820600/1/1_
0.172440.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u120.png 

0-014820600/1/1_
0.181680.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /media/com_rsform/css/frameworks/responsive/responsive.css?

0-014820600/1/1_
0.201670.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/css/responsive.css HTTP/1.0

1-014820610/3/3_
0.53140.00.000.00
173.212.240.227talismanmovers.ca:7081HEAD /wp HTTP/1.0

1-014820610/3/3_
0.471550.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/fonts/opensans-regular-webfont.

1-014820610/3/3_
0.51547440.00.200.20
54.185.161.154annexosteopathy.com:7081GET /conditions/pregnancy-discomfort/ HTTP/1.0

1-014820610/1/1_
0.498231950.00.010.01
54.185.161.154annexosteopathy.com:7081GET /services/myofascial-release-therapy/ HTTP/1.0

1-014820610/3/3_
0.4615190.00.020.02
173.231.60.197blepharoplastie.net:7081GET /4/detail/47/contact.php HTTP/1.0

1-014820610/3/3_
0.49830.00.000.00
66.249.75.103artsandscienceacademy.ca:7081GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/b

1-014820610/3/3_
0.5178130.00.070.07
46.161.11.227pennybeames.net:7080GET /contact/ HTTP/1.0

1-014820610/2/2_
0.51770.00.000.00
66.249.75.103artsandscienceacademy.ca:7081GET /wp-content/themes/oceanwp/assets/css/third/magnific-popup.

1-014820610/3/3W
0.35200.00.000.00
51.222.253.11futurestart.ca:7081GET / HTTP/1.0

1-014820610/3/3_
0.5305840.00.010.01
142.54.174.10pennybeames.net:7081GET /wp-login.php HTTP/1.0

1-014820610/3/3_
0.54070.00.000.00
173.212.240.227talismanmovers.ca:7081HEAD /backup HTTP/1.0

1-014820610/2/2W
0.37000.00.000.00
139.59.168.195en.cosmeticatravel.com:7081GET / HTTP/1.0

1-014820610/2/2_
0.392560.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/resources/images/tran

1-014820610/2/2_
0.402530.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u722.svg 

1-014820610/2/2_
0.402530.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/images/home/u721.svg 

1-014820610/2/2_
0.4316140.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/js/css_browser_selector.js HTTP

1-014820610/3/3_
0.4416180.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/js/jquery.mobile-1.4.5.js HTTP/

1-014820610/2/2_
0.4516160.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/js/wow.min.js HTTP/1.0

1-014820610/2/2_
0.4316130.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /templates/hubbardinsurance/js/jquery.sumoselect.js HTTP/1.

1-014820610/1/1_
0.2831270.00.000.00
70.67.17.45aved.number41media.com:7080GET /Wireframes/design-refresh/Mobile2022/resources/scripts/axu

1-014820610/2/2_
0.4516170.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /media/system/js/core.js?54cb6e09cb53324e398ba5bd69d0dee6 H

1-014820610/2/2_
0.4416190.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /media/com_rsform/js/script.js?54cb6e09cb53324e398ba5bd69d0

1-014820610/2/2_
0.4516180.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /media/system/js/caption.js?54cb6e09cb53324e398ba5bd69d0dee

1-014820610/2/2_
0.4416170.00.000.00
195.154.123.91hubbardinsurance.com:7081GET /media/plg_system_rsfprecaptchav2/js/recaptchav2.js

Found on 2022-08-17 23:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31108eb2f4108eb2f49c7d0806

Apache Status

Apache Server Status for en.cosmeticatravel.com (via 208.88.4.121)

Server Version: Apache/2.4.6 (CloudLinux) OpenSSL/1.0.2k-fips Apache mod_fcgid/2.3.9
Server MPM: event
Server Built: Mar 30 2022 04:22:20

Current Time: Saturday, 18-Jun-2022 20:08:05 EDT
Restart Time: Saturday, 18-Jun-2022 09:42:30 EDT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 hours 25 minutes 35 seconds
Server load: 2.33 1.07 0.96
Total accesses: 76087 - Total Traffic: 683.4 MB
CPU Usage: u600.47 s120.31 cu0 cs0 - 1.92% CPU load
2.03 requests/sec - 18.6 kB/second - 9.2 kB/request
11 requests currently being processed, 139 idle workers



PIDConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
10847860yes025000
10847870yes025000
10847906yes619000
10849442yes223000
11438541yes124000
11588901yes223000
Sum10 11139000

_____________________________________________________R__________
__RR_R__R_R_W______________W____________________W______________W
___________________R__..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-010847860/269/269_
74.9528140.01.821.82
20.37.8.195act-on.ca:7081GET /admin/filemanager/dialog.php HTTP/1.0

0-010847860/269/269_
75.07192150.02.132.13
182.52.19.37muslimmarriages.ca:7080GET / HTTP/1.0

0-010847860/270/270_
75.151117010.02.432.43
114.119.129.198victoriaballet.com:7081GET /05oz-x-Reusable-Plant-Covers-for-Winter-Frost/Gardening-ar

0-010847860/271/271_
75.215640.02.252.25
95.108.213.68pennybeames.net:7081GET /wp-content/plugins/fusion-builder/assets/js/min/general/fu

0-010847860/269/269_
75.2531100.02.172.17
106.129.64.200victoriaballet.com:7081GET /wp-content/plugins/visual-portfolio/assets/vendor/photoswi

0-010847860/271/271_
75.262530.01.951.95
5.255.253.165pennybeames.net:7081GET /wp-content/plugins/fusion-core/js/min/avada-portfolio.js?v

0-010847860/272/272_
75.262230.02.122.12
95.108.213.24pennybeames.net:7081GET /wp-content/themes/Avada/includes/lib/assets/min/js/library

0-010847860/269/269_
74.903251200.01.401.40
31.13.127.5cosmeticatravel.com:7081GET /blog/a-18-369-la-douleur-suite-a-une-cruroplastie-lifting-

0-010847860/271/271_
75.18837160.02.182.18
148.72.208.193artsandscienceacademy.ca:7081POST /wp-login.php HTTP/1.0

0-010847860/271/271_
75.28310300.02.262.26
35.209.183.206cubaron.com:7081GET / HTTP/1.0

0-010847860/269/269_
74.9925118530.01.631.63
47.54.105.153shorehamvillage.com:7081POST /autodiscover/autodiscover.xml HTTP/1.0

0-010847860/271/271_
75.101562810.03.023.02
114.119.141.191victoriaballet.com:7081GET /Relief-Desk-Toy-for-Adults-Magnetic-Balls-Speks-Classic/No

0-010847860/269/269_
74.923078450.02.102.10
157.230.45.193cosmeticatravel.co.uk:7081POST /wp-login.php HTTP/1.0

0-010847860/269/269_
75.051937150.02.042.04
114.119.155.145cubaron.com:7081GET /es/productos/estancia-menu/lineas-la-estancia HTTP/1.0

0-010847860/271/271_
75.19718220.01.661.66
35.198.94.155indemnia.ca:7081GET /wp-login.php HTTP/1.0

0-010847860/270/270_
74.9925250.02.362.36
69.162.124.236talismanmovers.ca:7081HEAD /index.html HTTP/1.0

0-010847860/269/269_
75.131282630.01.751.75
192.99.37.133victoriaballet.com:7081GET /Decorations-Cheesecloth-Fabric-Purple-ziyue-Yards-X-Includ

0-010847860/271/271_
75.081862860.02.532.53
192.99.37.133victoriaballet.com:7081GET /Decoration-for-Outdoor-Decor-DearHouse-Artificial-Ivy-Priv

0-010847860/269/269_
75.17975300.01.491.49
208.88.4.121elementary.victoriaballet.com:7POST /wordpress/wp-cron.php?doing_wp_cron=1655597187.2429440021

0-010847860/270/270_
75.022334020.01.741.74
208.88.4.121victoriaballet.com:7081POST /wp-cron.php?doing_wp_cron=1655597051.60395193099975585937

0-010847860/269/269_
75.042036370.02.152.15
192.99.37.133victoriaballet.com:7081GET /Decoration-cm-Wood-Red/Seasonal-D%C3%A9cor-ktpls-118171.js

0-010847860/271/271_
75.233840.01.831.83
5.255.253.189pennybeames.net:7081GET /wp-content/plugins/fusion-builder/assets/js/min/general/fu

0-010847860/269/269_
75.233430.02.142.14
95.108.213.59pennybeames.net:7081GET /wp-content/plugins/fusion-builder/assets/js/min/library/jq

0-010847860/270/270_
75.121512680.02.622.62
40.77.167.24victoriaballet.com:7081GET /for-planting-full-instructions-for-easy-planting-and-growi

0-010847860/268/268_
74.9430510870.01.491.49
208.88.4.121lazaruk.com:7081POST /wp-cron.php?doing_wp_cron=1655596978.76155090332031250000

1-010847870/305/305_
81.664770.02.122.12
141.8.142.83pennybeames.net:7081GET /wp-content/themes/Avada/includes/lib/assets/min/js/general

1-010847870/303/303_
81.39241580.02.532.53
94.181.152.181lifting-mammaire.net:7081POST /contact.php HTTP/1.0

1-010847870/301/301_
81.581107380.02.802.80
205.210.31.131shorehamvillage.com:7081GET / HTTP/1.0

1-010847870/305/305_
81.63707810.02.132.13
35.198.94.155indemnia.ca:7081POST /wp-login.php HTTP/1.0

1-010847870/305/305_
81.6931110.02.372.37
106.129.64.200victoriaballet.com:7081GET /wp-content/themes/oceanwp/assets/js/third/lightbox.min.js?

1-010847870/303/303_
81.501735370.03.223.22
114.119.141.152lazaruk.com:7081GET /?p=4054?share=linkedin HTTP/1.0

1-010847870/304/304_
81.5711480.03.303.30
208.88.4.125technovationacademy.com:7080POST /wp-cron.php?doing_wp_cron=1655597171.18463993072509765625

1-010847870/307/307_
81.521591760.02.942.94
34.235.115.252cubaron.com:7081GET /error-404-es HTTP/1.0

1-010847870/304/304_
81.531543100.02.382.38
54.227.174.104cubaron.com:7081GET /es/eventos-menu/eventos-pasados-menu?format=feed&type=atom

1-010847870/303/303_
81.432338070.02.512.51
40.77.167.50victoriaballet.com:7081GET /present-doublesided-gold-fanice-eos-new-baby-gifts-for-par

1-010847870/306/306_
81.3824720040.02.542.54
208.88.4.130canadianmeatgoat.com:7081POST /wp-cron.php?doing_wp_cron=1655597035.81269097328186035156

1-010847870/305/305_
81.69319050.02.302.30
51.210.99.98cosmeticatravel.co.uk:7081GET /wp-login.php HTTP/1.0

1-010847870/306/306_
81.692940.02.012.01
87.250.224.177pennybeames.net:7081GET /wp-content/themes/Avada/includes/lib/assets/min/js/library

1-010847870/304/304_
81.60903470.02.252.25
66.249.69.136victoriaballet.com:7081GET /robots.txt HTTP/1.0

1-010847870/303/303_
81.511681060.02.492.49
34.138.206.140zeinstra.ca:7081GET /contacts/henry-mail/ HTTP/1.0

1-010847870/306/306_
81.664050.02.592.59
5.45.207.68pennybeames.net:7081GET /wp-content/plugins/fusion-builder/assets/js/min/general/fu

1-010847870/307/307_
81.673230.01.781.78
87.250.224.137pennybeames.net:7081GET /wp-content/plugins/fusion-builder/assets/js/min/library/Ch

1-010847870/303/303_
81.62753600.02.402.40
208.88.4.121theelectricians.ca:7081POST /wp-cron.php?doing_wp_cron=1655597209.20492196083068847656

1-010847870/303/303_
81.551306580.01.971.97
40.77.167.50victoriaballet.com:7081GET /scibor-edmund-roman-orlik/mini-table-games-pxdyo-31951.jsp

1-010847870/304/304_
81.422398090.02.592.59
212.193.140.55lazaruk.com:7081GET / HTTP/1.0

1-010847870/306/306_
81.735340.02.402.40
195.211.77.140en.cosmeticatravel.com:7081GET / HTTP/1.0

1-010847870/303/303_
81.461956700.02.552.55
114.119.148.175amitoladesignconcepts.ca:7080GET /green-community-natural-systems-design HTTP/1.0

1-010847870/303/303_
81.41240120.02.472.47
208.88.4.121nothim.ca:7081POST /wp-cron.php?doing_wp_cron=1655597044.63280606269836425781

1-010847870/304/304_
81.6371168

Found on 2022-06-19 00:08

Create report

Open service 104.26.3.189:443 · en.cosmeticatravel.com

2024-09-14 11:07

HTTP/1.1 200 OK
Date: Sat, 14 Sep 2024 11:07:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
content-security-policy: media-src 'none';
referrer-policy: same-origin
x-content-type-options: nosniff
feature-policy: microphone 'none'; geolocation 'none'; camera 'self'; fullscreen 'self'
pragma: no-cache
x-powered-by: Cosmetica Travel
x-powered-by: PleskLin
set-cookie: name=value; httpOnly
last-modified: Mon, 25 Mar 2024 12:15:53 GMT
vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yP3czHo9zzpBmJpXbnA9ScpcDw97deDp3cbNfjvaWEDK%2FW5XYuwJ21bHHvcD9ukgTGR5NXnSKY4ZY3Kjnx0%2FPMv9kAYI4qCZRslEbtTUkYQw5%2BMdXMT4vVJzNfehzN1lguBuxQ%2FnXqE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8c2fe95fe9085e70-EWR

Found 2024-09-14 by HttpPlugin

Domain en.cosmeticatravel.com

United States

Software information

Apache server-status page is publicly available

cosmeticatravel.com*.cosmeticatravel.com

cosmeticatravel.com*.cosmeticatravel.com

Domain summary

IP summary