Domain ftp.emba35.com
Thailand
CS LOXINFO Public Company Limited.
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2023-01-17 06:48
Last seen 2024-02-02 23:47
Open for 381 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcf054f1affApache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 06:47:54 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 96 Parent Server MPM Generation: 95 Server uptime: 28 days 20 hours 46 minutes 33 seconds Server load: 2.00 2.01 2.00 Total accesses: 1852159 - Total Traffic: 23.8 GB - Total Duration: 2141175070 CPU Usage: u182.16 s109.19 cu32168.2 cs2235.83 - 1.39% CPU load .743 requests/sec - 10.0 kB/second - 13.5 kB/request - 1156.04 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03668no0yes032000 13956no0yes032000 23678no0yes131000 33671no0yes032000 Sum400 1127000 ________________________________________________________________ ____________W___________________________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-9536680/9/14817_ 3.4960160261260.00.01193.85 167.172.232.142http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-9536680/9/15306_ 3.0690139013740.00.01198.98 138.68.163.10http/1.1localhost:80GET /about HTTP/1.1 0-9536680/7/14877_ 3.4950150319580.00.01192.76 167.172.232.142http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-9536680/12/15066_ 3.0660145875390.00.01186.04 138.68.163.10http/1.1localhost:80GET /config.json HTTP/1.1 0-9536680/11/14963_ 3.0550147711780.00.07185.53 107.170.247.44h2localhost:443[0/0] Software caused connection abort 0-9536680/8/15185_ 2.5120156649300.00.03188.58 138.68.163.10http/1.1localhost:443GET /login.action HTTP/1.1 0-9536680/12/14861_ 3.46130145589130.00.03200.34 128.199.195.68http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-9536680/8/15166_ 3.5000150182130.00.03187.63 178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-9536680/7/15123_ 2.07120145227020.00.01229.92 165.22.74.203http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-9536680/12/15265_ 3.4990148853530.00.01194.94 167.172.232.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-9536680/12/14830_ 3.47130154393670.00.05200.80 128.199.195.68http/1.1localhost:80GET /server-status HTTP/1.1 0-9536680/11/14840_ 3.0460147156500.00.03195.50 159.65.138.217http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-9536680/12/14710_ 3.4970137182850.00.01185.58 167.172.232.142http/1.1localhost:80GET /login.action HTTP/1.1 0-9536680/10/14859_ 2.46137169086770.00.01186.06 128.199.195.68http/1.1localhost:80GET /server-status HTTP/1.1 0-9536680/10/15814_ 3.47120141620710.00.01187.83 128.199.195.68http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-9536680/9/14862_ 3.4610165341500.00.02182.55 128.199.195.68http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-9536680/8/14910_ 3.0520143405310.00.01206.41 107.170.247.44http/1.1 0-9536680/5/14967_ 3.06100144940210.00.00189.34 138.68.163.10http/1.1localhost:80GET / HTTP/1.1 0-9536680/9/14791_ 3.47120160388590.00.01200.59 167.172.232.142http/1.1localhost:80\x16\x03\x01\x01\x01\x01 0-9536680/10/15013_ 3.49110144644860.00.01193.86 167.172.232.142http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-9536680/6/15002_ 3.47120181496170.00.01193.48 128.199.195.68http/1.1localhost:80GET /.git/config HTTP/1.1 0-9536680/5/15025_ 3.03100147053990.00.02204.16 178.62.3.65http/1.1localhost:80GET /config.json HTTP/1.1 0-9536680/11/15485_ 3.0690150756300.00.03188.34 138.68.163.10http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-9536680/12/14693_ 3.06110138772100.00.03190.25 147.182.130.98http/1.1localhost:80GET /config.json HTTP/1.1 0-9536680/6/14995_ 2.48100162205980.00.03186.98 164.90.222.93http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-9536680/12/14675_ 3.0360135981730.00.01197.07 178.128.151.41h2localhost:443[0/0] Software caused connection abort 0-9536680/6/15170_ 3.03100144713810.00.03194.56 147.182.130.98http/1.1localhost:80\x16\x03\x01\x01\x04\x01 0-9536680/11/14958_ 3.5010159195810.00.02213.36 178.128.151.41http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-9536680/9/14755_ 3.0510152174910.00.01175.97 159.65.138.217http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-9536680/11/15203_ 3.0680135139200.00.03225.21 138.68.163.10http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-9536680/10/14693_ 3.48110155579100.00.01199.17 167.172.232.142http/1.1localhost:80GET / HTTP/1.1 0-9536680/14/14959_ 3.4920145815280.00.07185.27 178.128.151.41http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-9539560/12/15743_ 2.23130138460150.00.05219.34 147.182.130.98http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-9539560/4/15817_ 2.2211960136849760.00.01198.69 107.170.247.44http/1.1 1-9539560/9/15611_ 2.2218390174090290.00.02199.98 64.227.126.135http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-9539560/8/15326_ 1.7211900150896210.00.01189.47 107.170.247.44h2localhost:443[0/0] Software caused connection abort 1-9539560/9/15285_ 1.6912010146566350.00.03197.95 107.170.247.44h2localhost:443[0/0] Software caused connection abort 1-9539560/8/15663_ 2.2211930134152160.00.01198.80 107.170.247.44h2localhost:443[0/0] Software caused connection abort 1-9539560/6/15357_ 1.4611980172789950.00.01188.16 107.170.247.44http/1.1 1-9539560/12/15197_ 2.60130165483500.00.03189.10 128.199.195.68http/1.1localhost:80\x16\x03\x01\x01\x02\x01 1-9539560/7/15342_ 2.60130127395530.00.01211.77 128.199.195.68http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-9539560/9/14965_ 2.2390152319240.00.01188.75 138.68.163.10http/1.1localhost:80\x16\x03\x01\x01\v\x01 1-9539560/10/15051_ 2.60120148013890.00.01204.88 167.172.232.142http/1.1localhost:80GET / HTTP/1.1 1-9539560/10/15516_ 2.23120159268190.00.03208.76 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.1 1-9539560/7/15336_ 2.6860159504130.00.01200.57 167.172.232.142http/1.1localhost:80GET /.env HTTP/1.1 1-9539560/9/15198_ 2.19100137016440.00.03183.07 178.62.3.65<
Found on 2024-02-02 23:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcf5da2a346Apache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 12:48:46 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 2 hours 47 minutes 25 seconds Server load: 3.68 3.27 3.00 Total accesses: 849074 - Total Traffic: 11.5 GB - Total Duration: 1054930996 CPU Usage: u211.23 s17.48 cu14405.2 cs756.42 - 8.42% CPU load 4.64 requests/sec - 65.8 kB/second - 14.2 kB/request - 1242.45 ms/request 11 requests currently being processed, 53 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 014738no8yes527004 229763no4yes626000 Sum2012 1153004 ___RR_____________W____W______W_................................ WW____W_____W_____________R__W__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7147380/147/6699_ 72.511089783380.02.4098.81 134.122.89.242http/1.1localhost:80GET /.git/config HTTP/1.1 0-7147380/105/7158_ 72.51184371069150.01.08100.19 3.224.220.101http/1.1www.chonlateeboi.com:443GET /14043sdslitems/etidm.htm HTTP/1.1 0-7147380/189/6745_ 71.97041877423110.02.1398.02 89.149.37.83http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 0-7147380/135/6969R 71.994104674602790.01.5490.33 52.70.240.171http/1.1www.chonlateeadmin.com:443 0-7147380/250/6809R 71.82484075078020.01.9187.01 23.22.35.162http/1.1www.chonlateeboi.com:443 0-7147380/120/7098_ 72.503085396470.01.7994.18 46.101.103.192http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-7147380/151/6889_ 72.350569360960.02.26104.42 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.1 0-7147380/113/6951_ 71.49184372460410.01.3991.23 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /kpzfciu-47213metidm94.html HTTP/1.1 0-7147380/130/7167_ 72.622067654800.01.86142.00 137.184.106.30http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-7147380/145/6950_ 72.533076517600.01.6088.51 137.184.106.30http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-7147380/307/6798_ 72.65184281406520.03.37109.71 23.22.35.162http/1.1www.chonlateeboi.com:443GET /5903yktqetidm26bq.html HTTP/1.1 0-7147380/120/6562_ 72.74067182860090.01.8085.85 185.191.171.11http/1.1www.chonlateefood.com:443GET /items/xem12035obletidm4.html HTTP/1.1 0-7147380/119/6605_ 72.42184362657850.01.3886.96 85.208.96.205http/1.1www.chonlateeboi.com:443GET /46444tzwaetidm8 HTTP/1.1 0-7147380/134/6835_ 72.58333193519160.01.7993.49 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=aikido-meaning-in-japanese-i-PvPVjQi9 HTTP/1.1 0-7147380/129/7455_ 72.65135170766860.01.4094.46 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=lyta-alexander-babylon-by-04brutale-on-deviantart-8-ii- 0-7147380/160/6670_ 72.75035192738480.01.2186.01 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=ban-f1-2018-lebih-rentan-dari-tahun-tahun-sebelumnya-10 0-7147380/121/6803_ 72.07130971555450.01.4088.09 137.184.106.30h2localhost:443[0/0] Software caused connection abort 0-7147380/125/6918_ 72.520070496300.01.5492.95 134.122.89.242http/1.1localhost:80GET /config.json HTTP/1.1 0-7147381/127/6877W 72.010087206600.01.4386.95 185.191.171.14http/1.1www.chonlateeboi.com:443GET /8802tzwaetid.htm HTTP/1.1 0-7147380/158/6912_ 72.73141773718130.01.8094.11 107.189.8.132http/1.1www.leadingservice.co.th:443POST /wp-login.php HTTP/1.1 0-7147380/140/6943_ 72.493411111548180.01.5695.59 89.149.37.83http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 0-7147380/126/6659_ 72.74063777267250.01.3689.65 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /tvifciu-8846vitems/etidm23g.html HTTP/1.1 0-7147380/137/7204_ 72.691085166120.01.4495.36 137.184.106.30http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-7147381/129/6745W 72.300068170580.01.4695.91 3.224.220.101http/1.1www.chonlateeboi.com:443GET /34717qbkeitems/etidm64 HTTP/1.1 0-7147380/131/6676_ 72.583090755340.02.0185.28 137.184.106.30http/1.1localhost:443GET /about HTTP/1.1 0-7147380/163/6967_ 72.520062331650.02.3588.84 134.122.89.242http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-7147380/122/6785_ 72.411075725710.01.4196.44 144.126.198.24http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-7147380/128/6810_ 72.53042086254580.01.66117.94 89.149.37.83http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 0-7147380/122/6671_ 72.372374751980.01.2484.02 134.122.89.242http/1.1localhost:80GET /server-status HTTP/1.1 0-7147380/125/6972_ 72.51384577632040.01.33123.03 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zsofciu-35216bitems/etidm59mfb.html HTTP/1.1 0-7147381/132/6642W 71.1523076561730.01.4996.72 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7147380/140/6974_ 72.74041574987790.01.7789.56 89.149.37.83http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 1-7-0/0/6811. 0.00170285577198050.00.0088.63 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /nbcwaok-45682petid HTTP/1.1 1-7-0/0/6543. 0.00170284377731840.00.0083.51 23.22.35.162http/1.1www.chonlateeboi.com:443GET /6557eslwetidm81.html HTTP/1.1 1-7-0/0/6560. 0.001702121892104286500.00.0084.46 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 1-7-0/0/6294. 0.00170286982119470.00.0083.47 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?ufuhlzs-27359hetidm6.htm HTTP/1.1 1-7-0/0/6484. 0.00170286179232700.00.0096.75 23.22.35.162http/1.1www.chonlateeboi.com:443GET /19619sdsletidm.html HTTP/1.1 1-7-0/0/6515. 0.00170284577280230.00.0086.32 52.70.240.171http/1.1www.chonlateeboi.com:443GET /11225zypyeti.html HTTP/1.1 1-7-0/0/6520. 0.00170296526189333620.00.0083.42 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 1-7-0/0/6619. 0.00170284289627780.00.0088.41 3.224.220.101http/1.1www.chonlateeboi.com:443GET /43080qbkeetidm80yqn.htm HTTP/1.1 1-7-0/0/6662. 0.00170287859781440.00.0086.12 52.70.240.171http/1.1www.chonlateeboi.com:443GET /18606hevyetidm31q.htm HTTP/1.1 1-7-0/0/6557. 0.00170288682311080.00.0091.07 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /yrnarie-35891aetidm.html HTTP/1.1 1-7-0/0/6322. 0.00170285285353090.00.0089.56 66.249.73.9http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 1-7-0/0/6784. 0.00170272185278030140.00.0097.98 94.228.169.107http/1.1www.thesungolden.com:443
Found on 2024-01-07 05:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcf6a32d4caApache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 04:25:29 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 4 Parent Server MPM Generation: 3 Server uptime: 18 hours 24 minutes 8 seconds Server load: 3.01 3.01 2.92 Total accesses: 322556 - Total Traffic: 4.5 GB - Total Duration: 301072115 CPU Usage: u44.99 s4.97 cu5368.74 cs287.12 - 8.61% CPU load 4.87 requests/sec - 71.6 kB/second - 14.7 kB/request - 933.395 ms/request 13 requests currently being processed, 115 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 131365no7yes626004 431495no3yes329001 531496no2yes131000 631500no5yes329000 Sum4017 13115005 ................................____W________W______W___W_W____W ................................................................ W__R__________________W___________________W_____________________ __________W________________RW___................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-3-0/0/3197. 0.0050883828794620.00.0047.16 40.77.167.26h2www.chonlateenextbiz.com:443[0/0] init 0-3-0/0/3457. 0.00508104924920150.00.0045.31 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?dushsbr-307440fetidm13qhf.htm HTTP/1.1 0-3-0/0/3121. 0.0050883837618890.00.0053.59 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?puehsbr-278488retidm68chr HTTP/1.1 0-3-0/0/3383. 0.005082627408330.00.0042.74 157.55.39.62h2www.chonlateeaa.com:443GET /sitemap654.xml HTTP/2.0 0-3-0/0/3238. 0.0050884425519520.00.0040.45 40.77.167.26h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /wade-logan-furniture-manufacturer-e- 0-3-0/0/3479. 0.0050889032497720.00.0043.89 185.191.171.17http/1.1www.chonlateefood.com:443GET /items/kjz6692jxxftidm21.html HTTP/1.1 0-3-0/0/3263. 0.0050884025491150.00.0055.73 3.224.220.101http/1.1www.chonlateeboi.com:443GET /862cafjetidm61e HTTP/1.1 0-3-0/0/3289. 0.0050883926539240.00.0042.51 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?xumhsbr-299660zitems/etidm9.html HTTP/1.1 0-3-0/0/3338. 0.00508182226330900.00.0084.97 193.70.81.116http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B8%9E%E0%B8%B1%E0%B8%81 0-3-0/0/3257. 0.0050879625457030.00.0042.03 91.92.252.141http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-includes/images/include.php HTTP/1.1 0-3-0/0/3174. 0.00508117328818450.00.0038.87 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?jafaonh-59042setidm.html HTTP/1.1 0-3-0/0/3151. 0.0050888625715070.00.0040.28 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?howhsbr-345014jitems/etidm83u.html HTTP/1.1 0-3-0/0/3099. 0.00508176425515810.00.0042.13 193.70.81.116http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B8%9E%E0%B8%B1%E0%B8%81 0-3-0/0/3370. 0.0050883836737120.00.0046.01 193.70.81.116http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B8%9E%E0%B8%B1%E0%B8%81 0-3-0/0/3431. 0.0050884328933940.00.0045.92 23.22.35.162http/1.1www.chonlateeboi.com:443GET /15371tbrmetidm.html HTTP/1.1 0-3-0/0/3141. 0.0050884030664290.00.0040.47 52.70.240.171http/1.1www.chonlateeboi.com:443GET /15347tbrmetidm.html HTTP/1.1 0-3-0/0/3143. 0.00508104429759900.00.0040.26 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?jqfggdh-241250setidm.html HTTP/1.1 0-3-0/0/3396. 0.00508104826723090.00.0044.80 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?eedvrsm-1733qeti.html HTTP/1.1 0-3-0/0/3303. 0.00508104724900520.00.0043.00 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?iexhsbr-285631kitems/etidm16vr HTTP/1.1 0-3-0/0/3158. 0.0050884329506320.00.0046.19 3.224.220.101http/1.1www.chonlateeboi.com:443GET /49069gcmpitems/etidm85 HTTP/1.1 0-3-0/0/3250. 0.0050884824853440.00.0050.06 185.191.171.13http/1.1www.chonlateeboi.com:443GET /17518cafjetidm23u HTTP/1.1 0-3-0/0/3264. 0.0050883927269360.00.0046.07 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ufjhsbr-284525wetidm37.html HTTP/1.1 0-3-0/0/3611. 0.00508108525360900.00.0045.83 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?iqhadej-311189ueti.html HTTP/1.1 0-3-0/0/3169. 0.005083225101100.00.0040.90 193.70.81.116http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B8%9E%E0%B8%B1%E0%B8%81 0-3-0/0/3163. 0.0050883925373180.00.0040.32 195.191.219.130http/1.1www.1smestartup.com:443GET /%E0%B8%95%E0%B9%88%E0%B8%AD%E0%B8%AD%E0%B8%B2%E0%B8%A2%E0% 0-3-0/0/3166. 0.0050883926244240.00.0040.79 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?aiwsvcw-74893jetidm98n HTTP/1.1 0-3-0/0/3227. 0.00508124228285370.00.0051.28 85.208.96.205http/1.1www.chonlateenextbiz.com:443GET /uftriw/vanshaj-upcoming-story.html HTTP/1.1 0-3-0/0/3172. 0.0050883631872270.00.0070.96 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?toihsbr-278518vetidm20g HTTP/1.1 0-3-0/0/3113. 0.0050884225434050.00.0039.06 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?lwmqxjd-321878zetidm6 HTTP/1.1 0-3-0/0/3457. 0.0050896524094380.00.0079.56 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?loahsbr-285998nitems/etidm49y.html HTTP/1.1 0-3-0/0/3135. 0.0050894727823180.00.0047.85 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?mfbhsbr-286025oeti.html HTTP/1.1 0-3-0/0/3521. 0.00508112528035970.00.0043.24 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?fouhsbr-285602hitems/etid.html HTTP/1.1 1-3313650/19/2663_ 8.83490420130000.00.2735.00 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?fuuhsbr-302580hetidm8.htm HTTP/1.1 1-3313650/16/2409_ 8.952021947670.00.1731.07 159.89.83.196http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-3313650/17/2548_ 8.97083920687430.00.2434.72 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?fibvrsm-378240oitems/eti.htm HTTP/1.1 1-3313650/16/2387_ 8.895020872390.00.1931.91 64.227.126.135http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-3313651/11/2380W 8.090028955080.00.1135.43 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /rvuhtid-11418hetid HTTP/1.1 1-3313650/16/2557_ 9.000019456560.00.2833.60 159.89.83.196http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-3313650/16/2441_ 8.852719787050.00.2230.18 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1704489921.79110407829284667968 1-3313650/15/2513_ 8.943020359630.00.1734.58 159.89.83.196http/1.1localhost:443GET /about HTTP/1.1 1-3313650/15/2492_ 8.47491220421560.00.1933.95 185.191.171.9http/1.1www.chonlateefood.com:443GET /items/yrn24386sbrztidm.html HTTP/1.1 1-3313650/12/2392_ 8.57010919026310.00.2031.10 47.128.54.76http/1.1www.focusfilmthailand.com:80
Found on 2024-01-05 21:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcfe39a4d6dApache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 04:16:34 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 44 Parent Server MPM Generation: 43 Server uptime: 11 days 3 hours 53 minutes 36 seconds Server load: 0.88 0.83 0.72 Total accesses: 4419826 - Total Traffic: 56.6 GB - Total Duration: 4165735976 CPU Usage: u87.4 s41.79 cu79757.4 cs4172.6 - 8.72% CPU load 4.58 requests/sec - 61.6 kB/second - 13.4 kB/request - 942.511 ms/request 7 requests currently being processed, 121 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031012no2yes230100 131030no4yes131003 431190no0yes131000 531192no7yes329105 Sum4013 7121208 ____R__________________R______________________________________W_ ................................................................ ______________________W__________________R______________WW______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43310120/8/39705_ 4.031863361011810.00.09502.39 207.46.13.156h2www.chonlateefood.com:443GET /items/nrn12259jiortidm514175.html HTTP/2.0 0-43310120/10/39108_ 4.1230367107180.00.14494.06 46.101.103.192http/1.1localhost:80GET / HTTP/1.1 0-43310120/10/39571_ 4.3210402274210.00.11510.88 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /ejlewrv121593yitems/eti HTTP/1.1 0-43310120/9/39523_ 3.903846390699820.00.11515.61 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?187184spgditems/etidm28ksz.html HTTP/1.1 0-43310120/7/40051R 4.1950372814250.00.04569.51 3.224.220.101http/1.1www.chonlateeadmin.com:443 0-43310120/6/39105_ 3.563881400011500.00.10495.19 95.91.42.78http/1.1www.cnb.co.th:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B9%80 0-43310120/8/39424_ 4.321899404393320.00.10496.04 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?210025spgditems/eti HTTP/1.1 0-43310120/9/40210_ 3.430907368855290.00.13504.04 85.208.96.212http/1.1www.chonlateeboi.com:443GET /43636sabfetidm6 HTTP/1.1 0-43310120/6/39189_ 4.113903381199980.00.11512.36 95.91.42.78http/1.1www.cnb.co.th:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B9%80 0-43310120/9/39563_ 4.3500369114980.00.09504.81 137.184.150.232http/1.1localhost:80GET /.env HTTP/1.1 0-43310120/9/39180_ 4.2540385780460.00.12476.39 46.101.103.192http/1.1localhost:80GET /.env HTTP/1.1 0-43310120/6/39201_ 4.1620370185120.00.06525.43 46.101.103.192http/1.1localhost:80GET /about HTTP/1.1 0-43310120/7/39130_ 3.671896376943200.00.07477.74 207.46.13.156h2www.chonlateefood.com:443[0/0] init 0-43310120/9/39309_ 4.1610408709490.00.12506.24 159.65.58.104http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-43310120/2/39474_ 3.9522139381390120.00.02495.48 62.65.188.98http/1.1www.chonlateeaa.com:443POST /wp-login.php HTTP/1.1 0-43310120/7/39161_ 3.4940374475800.00.08550.26 138.68.163.10h2localhost:443[0/0] Software caused connection abort 0-43310120/9/40133_ 3.681863376105590.00.13529.77 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?npgcvmt-13728tetidm19a HTTP/1.1 0-43310120/7/39649_ 4.3030367822230.00.07488.05 46.101.103.192http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-43310120/5/39700_ 4.311649369265120.00.06512.29 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?iqxqxjd-65723ketidm.html HTTP/1.1 0-43310120/5/39921_ 3.4110385680430.00.05548.81 207.46.13.156h2www.chonlateefood.com:443[1/1] done: stream 1, GET /items/nrn12259jiortidm514175.html 0-43310120/10/39372_ 4.3020366025890.00.26518.19 137.184.150.232http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-43310120/8/39504_ 4.1900389316440.00.11509.47 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /beiewrv256582vitems/etidm97o.html HTTP/1.1 0-43310120/7/39259_ 4.253860409486090.00.09519.09 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?209977spgditems/eti HTTP/1.1 0-43310120/6/38666R 3.65615362916570.00.06479.68 23.22.35.162http/1.1 0-43310120/5/39664_ 4.3020373185020.00.04524.89 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /frmewrv256664zetidm44sez.htm HTTP/1.1 0-43310120/6/38930_ 4.161900389751380.00.09475.85 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?jdyqxjd-464litems/etidm18wql.html HTTP/1.1 0-43310120/6/39628_ 4.2530374203830.00.05589.82 46.101.103.192http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-43310120/5/38838_ 4.2530371439490.00.03514.76 137.184.150.232http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-43310120/7/39424_ 3.844741412923900.00.07528.10 185.191.171.14http/1.1www.chonlateefood.com:443GET /get/rxg14785exqwitems HTTP/1.1 0-43310120/10/39403_ 4.104851376200770.00.11509.05 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?219330spgdetid.htm HTTP/1.1 0-43310120/7/39398_ 4.3210371182850.00.05498.17 159.65.58.104http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-43310120/7/39134_ 4.263881379302610.00.10542.98 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?wqlqxjd-399yitems/etidm15jd.htm HTTP/1.1 1-43310300/10/40547_ 4.152863376871330.00.12511.40 52.167.144.182h2www.nakindogtraining.com:443GET /wzy.php?involvement-MCGRAW.xml HTTP/2.0 1-43310300/9/40463_ 3.215648385694000.00.07554.43 138.68.163.10h2localhost:443[0/0] Software caused connection abort 1-43310300/5/40251_ 4.143882387304210.00.08561.42 95.91.42.78http/1.1www.cnb.co.th:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B9%80 1-43310300/4/40480_ 3.705862394784350.00.05569.04 52.167.144.182h2www.nakindogtraining.com:443[0/0] init 1-43310300/7/41340_ 3.273880366675850.00.08629.54 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?236241spgditems/eti.htm HTTP/1.1 1-43310300/8/40047_ 3.9440363787600.00.09575.25 52.167.144.182h2www.nakindogtraining.com:443[1/1] done: stream 1, GET /wzy.php?involvement-MCGRAW.xml 1-43310300/9/40171_ 3.962897366365350.00.09536.13 52.167.144.182h2www.nakindogtraining.com:443[2/2] done: stream 3, GET /wzy.php?involvement-MCGRAW.xml 1-43310300/7/40707_ 4.1430390398630.00.09518.09 46.101.103.192http/1.1localhost:80GET /config.json HTTP/1.1 1-43310300/8/40335_ 4.1510378977540.00.08507.11 138.68.163.10http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-43310300/6/40421_ 3.660686371201080.00.06516.44 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?vyoymlj-1698betidm87ilb HTTP/1.1 1-43310300/8/40968_ 3.945862367765020.00.08540.25 157.55.39.9h2www.nakindogtraining.com:443GET
Found on 2023-12-11 21:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcfec934e8dApache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 17-Nov-2023 00:25:50 ICT Restart Time: Sunday, 12-Nov-2023 01:49:47 ICT Parent Server Config. Generation: 16 Parent Server MPM Generation: 15 Server uptime: 4 days 22 hours 36 minutes 2 seconds Server load: 17.38 18.07 17.89 Total accesses: 1268760 - Total Traffic: 15.9 GB - Total Duration: 2678904938 CPU Usage: u36.26 s13.77 cu11941 cs689.16 - 2.97% CPU load 2.97 requests/sec - 39.1 kB/second - 13.2 kB/request - 2111.44 ms/request 6 requests currently being processed, 122 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 04937no0yes032000 25160no1yes032000 45162no32yes5270028 65164no6yes131103 Sum4039 61221031 ________________________________................................ ________________________________................................ __________________R_WW_____WR___................................ ____________________W___________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1549370/7/11660_ 1.0000172879640.00.08158.44 167.71.185.75h2localhost:443[0/0] Software caused connection abort 0-1549370/5/12103_ 1.054899248618720.00.02133.92 31.184.236.42http/1.1 0-1549370/3/11665_ 1.2921422215364760.00.02136.42 162.240.48.121http/1.1www.siwapower.com:80POST /wp-login.php HTTP/1.1 0-1549370/7/12019_ 1.2910174355100.00.08152.10 159.89.83.196http/1.1www.emba35.com:80GET /.env HTTP/1.1 0-1549370/5/11815_ 1.2910211254430.00.03162.07 161.35.27.144http/1.1www.emba35.com:80GET /config.json HTTP/1.1 0-1549370/5/11715_ 1.1346172541920.00.06148.60 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.1 0-1549370/6/12104_ 1.293470241989630.00.04171.87 198.199.121.22http/1.1localhost:80GET /server-status HTTP/1.1 0-1549370/3/11644_ 0.991874206800390.00.04160.35 23.22.35.162http/1.1www.chonlateeboi.com:443GET /27941lvxaetidm67.html HTTP/1.1 0-1549370/6/11850_ 1.2440246434980.00.04127.18 143.198.72.96http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-1549370/3/11435_ 1.2010193318760.00.01158.73 51.81.245.138http/1.1localhost:443GET / HTTP/1.1 0-1549370/3/11667_ 1.044477234743600.00.05147.10 167.71.185.75http/1.1 0-1549370/4/12232_ 1.1820180147260.00.02144.72 114.119.150.15http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 0-1549370/4/12073_ 0.9730192387120.00.04167.60 40.77.167.60h2www.nakindogtraining.com:443[1/1] done: stream 1, GET /wzy.php?jokes-CHALLENGING.xml 0-1549370/4/11506_ 0.610946174125890.00.03189.64 159.203.94.228http/1.1 0-1549370/2/12259_ 1.0920172766420.00.02155.19 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /ijpewrv244369ceti.html HTTP/1.1 0-1549370/2/11545_ 1.0630230669880.00.00131.47 138.68.163.10h2localhost:443[0/0] Software caused connection abort 0-1549370/1/11940_ 0.8222038174569400.00.00166.06 114.119.150.15http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 0-1549370/1/12002_ 0.313834195223760.00.01162.44 167.71.185.75h2localhost:443[0/0] Software caused connection abort 0-1549370/4/11433_ 1.1210168645870.00.03142.20 23.178.112.106http/1.1www.emba35.com:443GET /.well-known/acme-challenge/UVJ4ngIr29HrSP63FPD_ZCnopRhyt7V 0-1549370/4/12118_ 1.2830171138850.00.04147.64 139.144.150.8http/1.1localhost:443GET / HTTP/1.1 0-1549370/2/12001_ 0.894806212797160.00.02180.83 168.63.250.198http/1.1 0-1549370/2/12323_ 1.2910232937130.00.01169.37 167.71.185.75http/1.1localhost:443GET / HTTP/1.1 0-1549370/3/12256_ 1.0441629178419310.00.02155.46 161.35.176.95h2localhost:443[0/0] Software caused connection abort 0-1549370/2/11920_ 1.1735226789310.00.04145.77 198.199.121.22http/1.1localhost:80GET /server-status HTTP/1.1 0-1549370/2/11546_ 1.292862174851620.00.02163.38 66.249.66.194http/1.1www.chonlateefood.com:443GET /mds.php?items/cz25378tidm59.html HTTP/1.1 0-1549370/10/11466_ 1.2730222456090.00.06142.47 198.199.121.22http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-1549370/5/12067_ 1.2830240985350.00.04152.52 159.89.83.196http/1.1www.emba35.com:80GET /login.action HTTP/1.1 0-1549370/4/12171_ 1.2920229270130.00.03153.88 161.35.27.144http/1.1www.emba35.com:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-1549370/2/11595_ 1.274820244639000.00.03128.92 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.1 0-1549370/6/11660_ 1.134861221998250.00.09127.10 139.144.150.8h2localhost:443[0/0] Software caused connection abort 0-1549370/6/11544_ 1.2830174821550.00.08141.41 143.198.72.96http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-1549370/3/11608_ 0.313738171721890.00.10147.28 198.251.76.39http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 1-15-0/0/11493. 0.00400883155832770.00.00152.50 184.22.103.134h2www.tafa.or.th:443[1/1] done: stream 1, GET /advisory/ 1-15-0/0/10748. 0.00400264155011750.00.00149.27 184.22.103.134h2www.tafa.or.th:443[4/4] done: stream 7, POST /wp-admin/admin-ajax.php 1-15-0/0/10932. 0.004000159596930.00.00211.17 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /vecewrv85418petid.htm HTTP/1.1 1-15-0/0/10808. 0.00400536155340780.00.00125.72 184.22.103.134h2www.tafa.or.th:443[2/2] done: stream 3, POST /wp-admin/admin-ajax.php?_panelsnonc 1-15-0/0/11120. 0.004005799154628910.00.00169.10 23.22.35.162http/1.1www.chonlateeboi.com:443GET /47662oqmietidm23e HTTP/1.1 1-15-0/0/10976. 0.00400858163100110.00.00132.94 184.22.103.134h2www.tafa.or.th:443[10/10] done: stream 19, GET /wp-content/uploads/2023/10/tafa-t 1-15-0/0/10811. 0.00400551157692660.00.00164.48 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m23924263044.html HTTP/1.1 1-15-0/0/11442. 0.00400828212676070.00.00133.98 54.36.149.1h2www.12gobiz.com:443[1/1] done: stream 1, GET /%E0%B8%82%E0%B8%AD%E0%B9%83%E0%B8%9A 1-15-0/0/11400. 0.00400736157798380.00.00146.42 198.251.76.39http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 1-15-0/0/11291. 0.00400885165022360.00.00153.86 66.249.71.67http/1.1www.chonlateefood.com:443GET /mds.php?items/bhq24311xrohtidm13461.html HTTP/1.1 1-15-0/0/11021. 0.00400470156166360.00.00156.90 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m23924222890.html HTTP/1.1 1-15-0/0/11443. 0.004000154829300.00.00162.24 203.170.192.183http/1.1www.chonlateefood.com:443POST /wp-cron.php?doing_wp_cron=1700155079.23500895500183105468
Found on 2023-11-16 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bc70d0a258Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 10:15:04 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 6 hours 12 minutes 53 seconds Server load: 1.16 1.21 0.96 Total accesses: 35898 - Total Traffic: 543.8 MB - Total Duration: 49120020 CPU Usage: u2891.3 s5187.08 cu51101900 cs12502300 - 284000% CPU load 1.6 requests/sec - 24.9 kB/second - 15.5 kB/request - 1368.32 ms/request 4 requests currently being processed, 7 idle workers ____.W_W..CC__.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762321590/7/3002_ 1.171138234200.00.0454.62 162.243.186.177http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-1762321680/3/2783_ 1.441202839226060.00.0656.05 172.69.214.32http/1.1www.siamerp.com:443GET /category/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0% 2-1762321690/4/2930_ 1.871039615350.00.0635.98 172.71.123.2http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST /xmlrpc.php HTTP/1.0 3-1762320200/36/2678_ 10.762035756150.00.5537.14 162.243.186.177http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 4-1762-0/0/2830. 0.008035881200.00.0050.03 165.232.76.155http/1.1localhost:80GET /_all_dbs HTTP/1.0 5-1762317560/86/2736W 82.680040702520.01.3333.58 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 6-1762319160/55/2556_ 15.882134958100.00.7332.29 162.243.186.177http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-1762319500/54/2392W 12.440031209420.01.1135.16 162.243.161.105http/1.1www.emba35.com:443GET /about HTTP/1.1 8-1762-0/0/2104. 0.0078029168120.00.0026.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1762-0/0/2043. 0.0096028435820.00.0027.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1762320471/33/2016C 35.991552271821214.71.1826.60 162.243.161.105http/1.1www.emba35.com:443GET /.vscode/sftp.json HTTP/1.1 11-1762320531/32/1772C 9.120026862411.40.3925.54 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1762320670/35/1273_ 8.481018548900.07.2228.67 162.243.186.177http/1.1localhost:443GET /about HTTP/1.1 13-1762316410/93/1223_ 83.33035617634930.01.9716.15 162.158.110.57http/1.1www.accprogress.com:80GET /wp-login.php HTTP/1.0 14-1762-0/0/1109. 0.0064015932400.00.0017.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/970. 0.005012116050.00.0013.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1762-0/0/677. 0.0048608708800.00.009.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/117. 0.0035101267220.00.002.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/228. 0.0058004514880.00.004.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/193. 0.0059302580020.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1762-0/0/119. 0.0058501371060.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/97. 0.009401093080.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/13. 0.00576069640.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/23. 0.00586092140.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/13. 0.00590039470.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/1. 0.002964000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 71subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 110 seconds, (range: 14...217)index usage: 2%, cache usage: 3%total entries stored since starting: 4937total entries replaced since starting: 0total entries expired since starting: 4866total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 174 hit, 11934 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 03:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bce223f979Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 15:29:12 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 11 hours 26 minutes 59 seconds Server load: 1.54 1.05 1.06 Total accesses: 71649 - Total Traffic: 1.5 GB - Total Duration: 108644030 CPU Usage: u2764.98 s5153.52 cu50886100 cs12455800 - 154000% CPU load 1.74 requests/sec - 37.0 kB/second - 21.3 kB/request - 1516.34 ms/request 11 requests currently being processed, 5 idle workers W_WCWW__W_WWWWC_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-174391340/34/5870W 11.119092067180.00.64147.87 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 1-174393430/3/5773_ 2.420769688921950.00.03139.11 27.254.96.168http/1.1www.emba35.com:443POST /wp-cron.php?doing_wp_cron=1695112144.19110989570617675781 2-174390190/63/5822W 23.081086973030.01.03116.13 162.158.186.238http/1.1www.jrajar.com:80GET /wp-login.php HTTP/1.0 3-174393491/7/5658C 2.8901022820465917.50.05109.17 162.158.111.16http/1.1www.anumotanaboon.com:443GET /wp-content/plugins/core-plugin/include.php HTTP/1.1 4-174391490/48/5415W 15.930081220600.00.74110.08 172.68.234.155http/1.1www.jrajar.com:80POST /wp-cron.php?doing_wp_cron=1695112151.96607899665832519531 5-174393550/1/5300W 1.476077403400.00.02126.55 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1695112145.94711709022521972656 6-174391560/41/5062_ 13.090072275010.00.4794.63 207.154.240.169http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 7-174391620/52/4769_ 10.020072075190.00.9494.72 139.144.150.23http/1.1localhost:443GET /about HTTP/1.1 8-174391720/34/4819W 9.3819077481860.00.3388.00 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 9-174389510/77/4366_ 25.200166924810.01.0279.97 139.144.150.23http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-174393690/15/3983W 0.031061099290.00.0273.45 27.254.96.168http/1.1www.1smestartup.com:443GET /%E0%B8%82%E0%B9%88%E0%B8%B2%E0%B8%A7-%E0%B8%88%E0%B8%94%E0 11-174389590/71/3154W 35.390052860490.04.1164.57 139.144.150.23http/1.1localhost:443GET /server-status HTTP/1.1 12-174393770/4/2984W 1.43048445746400.00.0165.82 134.122.89.242http/1.1www.emba35.com:443GET / HTTP/1.1 13-174391820/37/2309W 9.7820037863430.00.5046.14 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1695112131.67954397201538085937 14-174393791/6/1618C 0.080023410161.40.0129.58 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-174394040/0/1208_ 0.000018077270.00.0023.88 184.22.232.72http/1.1www.chonlateeboi.com:443GET /wp-content/uploads/2023/09/placeholder-2-300x169.png HTTP/ 16-1743-0/0/1038. 0.00774014202110.00.0023.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/543. 0.002228437561560.00.0024.76 172.68.234.160http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1695111928.60715389251708984375 18-1743-0/0/338. 0.0076803252050.00.005.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/112. 0.0077601810530.00.002.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/106. 0.0015430925920.00.002.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/39. 0.0016640514610.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/135. 0.00150702288680.00.002.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/57. 0.0016600741160.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/139. 0.001263301688780.00.001.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1743-0/0/41. 0.00126300648490.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/43. 0.00126310740610.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/12. 0.00126100286800.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743-0/0/150. 0.001198401644400.00.002.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1743-0/0/13. 0.00126200440100.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/12. 0.00126190325260.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743-0/0/197. 0.001167713975970.00.005.21 139.144.150.205http/1.1localhost:80GET /.DS_Store HTTP/1.0 32-1743-0/0/80. 0.001262701026530.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743-0/0/98. 0.001185523392384530.00.001.28 35.164.89.242http/1.1www.ckt-trading.com:443GET / HTTP/1.1 34-1743-0/0/14. 0.00126080415030.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/20. 0.00126090499850.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743-0/0/48. 0.00124300579330.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1743-0/0/14. 0.00126280314670.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/13. 0.00126260388600.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/119. 0.001259901026510.00.002.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743-0/0/99. 0.001261801279860.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1743-0/0/2. 0.0018171078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.0018176041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.00181470128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.00179750756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.0018183000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.0018146080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.0018159050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.0018182010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.0018158025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request
Found on 2023-09-19 08:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bc254445ceApache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 00:27:58 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 1 second Server load: 0.95 1.24 1.11 Total accesses: 7 - Total Traffic: 29 kB - Total Duration: 1092 CPU Usage: u2617.88 s5099.07 cu50709400 cs12418300 - 6.31e+9% CPU load 7 requests/sec - 29.0 kB/second - 4242 B/request - 156 ms/request 13 requests currently being processed, 0 idle workers CCCCCRRRCWRRW..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-173332411/1/1C 0.010352.90.000.00 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-173332421/1/1C 0.000242.90.000.00 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-173332461/1/1C 0.000232.90.000.00 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-173332611/1/1C 0.000132.80.000.00 162.243.186.177http/1.1localhost:443GET /about HTTP/1.1 4-173332671/1/1C 0.540533106614.90.010.01 45.79.83.159http/1.1www.emba35.com:443GET /about HTTP/1.1 5-173332880/0/0R 0.000000.00.000.00 134.122.63.192http/1.1www.emba35.com:443 6-173332900/0/0R 0.000000.00.000.00 7-173332920/0/0R 0.000000.00.000.00 8-173332971/1/1C 0.000362.90.000.00 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 9-173333030/0/0W 0.000000.00.000.00 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 10-173333090/0/0R 0.000000.00.000.00 11-173333150/1/1R 0.000110.00.000.00 167.172.20.95http/1.1www.emba35.com:80GET /telescope/requests HTTP/1.0 12-173333200/0/0W 0.000000.00.000.00 172.70.92.152http/1.1www.smebkk.com:80GET /tag/%E0%B8%97%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A3%E0%B8%B7 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 2 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bc870507b6Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 19-May-2023 00:23:10 +07 Restart Time: Friday, 19-May-2023 00:22:37 +07 Parent Server Config. Generation: 1239 Parent Server MPM Generation: 1238 Server uptime: 32 seconds Server load: 1.33 1.84 1.81 Total accesses: 207 - Total Traffic: 718 kB - Total Duration: 73833 CPU Usage: u1885 s3270.24 cu30811900 cs7377910 - 1.19e+8% CPU load 6.47 requests/sec - 22.4 kB/second - 3551 B/request - 356.681 ms/request 14 requests currently being processed, 4 idle workers RWCW_CW__CC_CCWWCR................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1238149150/27/27R 3.950176010.00.050.05 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 1-1238149220/21/21W 3.080060630.00.040.04 185.191.171.10http/1.1www.thaiquickservice.net:443GET /logo-design/ HTTP/1.1 2-1238149391/14/14C 3.290065941.40.060.06 134.122.63.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1238149450/13/13W 5.8100134430.00.080.08 185.220.101.10http/1.1www.chonlateevip.com:443GET /?author=3 HTTP/1.1 4-1238149470/18/18_ 4.7700102120.00.090.09 35.210.151.25http/1.1localhost:80GET / HTTP/1.0 5-1238149611/23/23C 4.100089201.40.180.18 104.248.140.11http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1238149690/16/16W 2.950059280.00.060.06 104.248.140.11http/1.1localhost:443GET /server-status HTTP/1.1 7-1238149770/14/14_ 3.05039264150.00.050.05 138.68.163.10http/1.1www.emba35.com:443GET /.vscode/sftp.json HTTP/1.1 8-1238149830/20/20_ 2.490049240.00.030.03 35.210.151.25http/1.1localhost:80GET /robots.txt HTTP/1.0 9-1238149901/13/13C 0.1510182.60.010.01 167.71.185.75http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1238149981/15/15C 0.44008511.40.010.01 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1238150050/7/7_ 0.4904779620.00.010.01 64.227.126.135http/1.1www.emba35.com:443GET /.vscode/sftp.json HTTP/1.1 12-1238150111/3/3C 0.39008141.30.000.00 167.71.185.75http/1.1localhost:443GET /about HTTP/1.1 13-1238150161/2/2C 0.52053810769.90.010.01 138.68.163.10http/1.1www.emba35.com:443GET /about HTTP/1.1 14-1238150240/0/0W 0.000000.00.000.00 138.68.163.10http/1.1www.emba35.com:443GET /debug/default/view?panel=config HTTP/1.1 15-1238150300/0/0W 0.000000.00.000.00 172.70.110.11http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 16-1238150361/1/1C 0.000243.40.000.00 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 17-1238150420/0/0R 0.000000.00.000.00 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 35subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 280 seconds, (range: 266...295)index usage: 1%, cache usage: 1%total entries stored since starting: 35total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 98 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-05-18 17:22 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bcff25a024Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 19-Mar-2023 00:26:10 +07 Restart Time: Sunday, 19-Mar-2023 00:25:12 +07 Parent Server Config. Generation: 1018 Parent Server MPM Generation: 1017 Server uptime: 58 seconds Server load: 1.14 1.42 1.28 Total accesses: 203 - Total Traffic: 1019 kB - Total Duration: 124633 CPU Usage: u1533.47 s2685.21 cu25407300 cs6115360 - 5.44e+7% CPU load 3.5 requests/sec - 17.6 kB/second - 5.0 kB/request - 613.956 ms/request 25 requests currently being processed, 0 idle workers RRRCRRCRRRCWRRCCRCC.CCCCRR........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1017231560/10/10R 3.920297430.00.070.07 178.62.73.12http/1.1 1-1017231590/12/12R 3.89052697900.00.040.04 68.183.13.153http/1.1 2-1017231740/15/15R 5.200483144180.00.060.06 68.183.13.153http/1.1 3-1017231811/13/13C 3.5501150572.70.100.10 178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1017231870/21/21R 5.650524211870.00.110.11 178.62.73.12http/1.1 5-1017232020/16/16R 4.610579125880.00.080.08 139.144.150.26http/1.1www.emba35.com:443 6-1017232111/11/11C 3.030158552.60.090.09 178.62.73.12http/1.1localhost:443GET /.env HTTP/1.1 7-1017232230/16/16R 3.36053470540.00.080.08 68.183.13.153http/1.1 8-1017232250/11/11R 4.160527119130.00.060.06 68.183.13.153http/1.1 9-1017232720/8/8R 2.06035845260.00.040.04 139.144.150.26http/1.1www.emba35.com:443 10-1017233011/6/6C 0.49018172.60.010.01 178.62.73.12http/1.1localhost:443GET /telescope/requests HTTP/1.1 11-1017233090/12/12W 0.710011860.00.020.02 178.62.73.12http/1.1localhost:443GET /server-status HTTP/1.1 12-1017233110/19/19R 0.72058211940.00.030.03 139.144.150.26http/1.1 13-1017233230/9/9R 0.64062112540.00.020.02 139.144.150.26http/1.1 14-1017233251/6/6C 0.670112232.30.020.02 178.62.73.12http/1.1localhost:443GET / HTTP/1.1 15-1017233311/4/4C 0.130072.60.000.00 178.62.73.12http/1.1localhost:443GET /.git/config HTTP/1.1 16-1017233370/4/4R 0.53050410130.00.020.02 68.183.13.153http/1.1 17-1017233501/1/1C 0.4114268529.90.010.01 128.199.195.68http/1.1www.emba35.com:443GET /about HTTP/1.1 18-1017233521/2/2C 0.040112192.50.090.09 178.62.73.12http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 19-1017-0/0/2. 0.00009630.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1017233641/2/2C 0.49019272.60.010.01 178.62.73.12http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 21-1017233731/1/1C 0.4314418829.90.010.01 128.199.195.68http/1.1www.emba35.com:443GET /login.action HTTP/1.1 22-1017233751/1/1C 0.4614759509.90.010.01 128.199.195.68http/1.1www.emba35.com:443GET /config.json HTTP/1.1 23-1017233771/1/1C 0.060242.60.000.00 178.62.73.12http/1.1localhost:443GET /info.php HTTP/1.1 24-1017233810/0/0R 0.000000.00.000.00 178.62.73.12http/1.1 25-1017234120/0/0R 0.000000.00.000.00 68.183.13.153http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 286 seconds, (range: 252...296)index usage: 0%, cache usage: 0%total entries stored since starting: 15total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 155 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-03-18 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bce5f98572Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 17-Jan-2023 13:51:27 +07 Restart Time: Tuesday, 17-Jan-2023 13:50:55 +07 Parent Server Config. Generation: 796 Parent Server MPM Generation: 795 Server uptime: 31 seconds Server load: 1.12 1.17 1.42 Total accesses: 282 - Total Traffic: 1013 kB - Total Duration: 122270 CPU Usage: u1180.91 s2165.43 cu20441000 cs4960630 - 8.2e+7% CPU load 9.1 requests/sec - 32.7 kB/second - 3678 B/request - 433.582 ms/request 36 requests currently being processed, 10 idle workers CC_CCCCCCCCRCCCRCCCCCC_WWWCCCCRCRCCCCR________.... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-79589411/17/17C 4.9612131811.20.100.10 172.104.249.218http/1.1www.emba35.com:443GET /login.action HTTP/1.1 1-79589421/10/10C 3.7611142142.70.070.07 139.144.188.181http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 2-79589440/13/13_ 3.9100122320.00.100.10 139.144.188.181http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 3-79589551/15/15C 3.511189981.20.050.05 172.104.249.218http/1.1www.emba35.com:443GET /config.json HTTP/1.1 4-79589621/12/12C 2.5411130642.60.070.07 139.144.188.181http/1.1localhost:443GET /info.php HTTP/1.1 5-79589881/15/15C 3.361165221.30.100.10 139.144.188.181http/1.1localhost:443GET /about HTTP/1.1 6-79590011/10/10C 3.4711153721.20.070.07 172.104.249.218http/1.1www.emba35.com:443GET /about HTTP/1.1 7-79590031/12/12C 3.770197692.70.070.07 139.144.188.181http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 8-79590161/25/25C 3.4410102332.60.060.06 139.144.188.181http/1.1localhost:443GET /.git/config HTTP/1.1 9-79590251/10/10C 2.1101102402.60.040.04 139.144.188.181http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-79590271/14/14C 1.391123462.60.060.06 139.144.188.181http/1.1localhost:443GET /telescope/requests HTTP/1.1 11-79590530/19/19R 0.1501240.00.020.02 139.144.188.181http/1.1 12-79591091/2/5C 0.0510142.60.010.02 139.144.188.181http/1.1localhost:443GET /.env HTTP/1.1 13-79591161/2/8C 0.010114922.60.000.03 139.144.188.181http/1.1localhost:443GET /.git/config HTTP/1.1 14-79590801/44/44C 0.1311472.60.040.04 139.144.188.181http/1.1localhost:443GET /telescope/requests HTTP/1.1 15-79591180/2/9R 0.0100200.00.000.01 139.144.188.181http/1.1 16-79590871/6/6C 1.121121352.70.020.02 139.144.188.181http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-79590891/20/20C 0.941122952.60.030.03 139.144.188.181http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 18-79591281/1/1C 0.011232.70.000.00 139.144.188.181http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-79591301/1/1C 0.021122.60.000.00 139.144.188.181http/1.1localhost:443GET /info.php HTTP/1.1 20-79591311/1/1C 0.011232.60.000.00 139.144.188.181http/1.1localhost:443GET /.git/config HTTP/1.1 21-79591371/1/1C 0.011242.70.000.00 139.144.188.181http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 22-79591520/2/2_ 0.010180.00.000.00 139.144.188.181http/1.1localhost:443GET /.DS_Store HTTP/1.1 23-79591540/0/0W 0.000000.00.000.00 20.125.141.33http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 24-79591600/1/1W 0.030050.00.010.01 139.144.188.181http/1.1localhost:443GET /server-status HTTP/1.1 25-79591660/0/0W 0.000000.00.000.00 162.240.211.236http/1.1www.ckt-trading.com:443POST /xmlrpc.php HTTP/1.1 26-79591721/1/1C 0.001241.30.000.00 139.144.188.181http/1.1localhost:443GET /config.json HTTP/1.1 27-79591781/1/1C 0.001241.30.000.00 139.144.188.181http/1.1localhost:443GET /login.action HTTP/1.1 28-79591841/2/2C 0.010022.60.000.00 139.144.188.181http/1.1localhost:443GET /.env HTTP/1.1 29-79591901/2/2C 0.010032.70.000.00 139.144.188.181http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 30-79592000/0/0R 0.000000.00.000.00 139.144.188.181http/1.1 31-79592021/1/1C 0.000231.30.000.00 139.144.188.181http/1.1localhost:443GET /about HTTP/1.1 32-79592080/0/0R 0.000000.00.000.00 139.144.188.181http/1.1 33-79592221/1/1C 0.000241.40.000.00 139.144.188.181http/1.1localhost:443GET /api/search?folderIds=0 HTTP/1.1 34-79592241/1/1C 0.000241.30.000.00 139.144.188.181http/1.1localhost:443GET /config.json HTTP/1.1 35-79592351/1/1C 0.000241.30.000.00 139.144.188.181http/1.1localhost:443GET /login.action HTTP/1.1 36-79592431/1/1C 0.000241.30.000.00 139.144.188.181http/1.1localhost:443GET /v2/_catalog HTTP/1.1 37-79592460/0/0R 0.000000.00.000.00 108.179.251.69http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 23subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 287 seconds, (range: 274...297)index usage: 0%, cache usage: 1%total entries stored since starting: 23total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 148 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-01-17 06:48
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2023-01-17 06:48
Last seen 2024-02-02 03:36
Open for 380 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcfb21f672dApache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 10:36:25 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 35 minutes 4 seconds Server load: 2.00 2.00 2.00 Total accesses: 1845306 - Total Traffic: 23.8 GB - Total Duration: 2140724525 CPU Usage: u187.91 s110.1 cu32089.3 cs2210.25 - 1.43% CPU load .762 requests/sec - 10.3 kB/second - 13.5 kB/request - 1160.09 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes032000 329394no0yes032000 529374no0yes131000 Sum400 1127000 ________________________________................................ ________________________________________________________________ ................................______________________________W_ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/16/14764_ 6.302580160256560.00.02193.64 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/15/15258_ 6.3500139008970.00.03198.89 139.59.230.191http/1.1localhost:80\x16\x03\x01\x01\x01\x01 0-92293730/20/14833_ 5.982677150306420.00.05192.62 134.122.89.242http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/15/15008_ 5.132590145868980.00.01185.89 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-92293730/15/14913_ 5.142658147705980.00.05185.32 138.68.133.118http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/15/15142_ 6.282670156642950.00.04188.45 134.122.89.242http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/13/14813_ 6.202640145587220.00.03200.13 138.68.163.10http/1.1localhost:443GET / HTTP/1.1 0-92293730/13/15120_ 6.282660150176800.00.03187.53 134.122.89.242http/1.1localhost:80GET /login.action HTTP/1.1 0-92293730/21/15088_ 6.262530145223170.00.02229.82 134.122.89.242http/1.1localhost:80GET / HTTP/1.1 0-92293730/20/15214_ 6.252620148852890.00.08194.80 143.198.72.96http/1.1localhost:80GET / HTTP/1.1 0-92293730/17/14777_ 5.092650154280510.00.02200.61 142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/20/14793_ 6.282650147116930.00.01195.38 134.122.89.242http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/22/14653_ 6.302560137181880.00.04185.40 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/22/14813_ 5.122620169077180.00.04185.97 138.68.163.10h2localhost:443[0/0] Software caused connection abort 0-92293730/18/15764_ 6.282650141543220.00.06187.72 138.68.133.118http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/19/14811_ 5.582550165338320.00.04182.43 167.99.182.39h2localhost:443[0/0] Software caused connection abort 0-92293730/18/14857_ 5.242620143397190.00.02206.28 192.53.126.23http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/20/14927_ 5.582520144891060.00.04189.22 139.144.150.205http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/17/14745_ 6.252600160243170.00.02200.50 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-92293730/20/14965_ 5.772640144636800.00.04193.72 167.94.138.125h2clocalhost:80[0/0] done 0-92293730/13/14950_ 5.9800181446090.00.02193.28 159.89.83.196http/1.1localhost:443GET / HTTP/1.1 0-92293730/19/14984_ 6.302560147004850.00.02204.00 207.154.240.169http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/21/15439_ 6.292640150748210.00.05188.18 134.122.89.242http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/15/14646_ 5.772640138763960.00.01190.06 46.101.103.192http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/18/14942_ 5.242620162204880.00.02186.79 192.53.126.23http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/16/14619_ 6.272520135973730.00.03196.88 134.122.89.242http/1.1localhost:80GET /about HTTP/1.1 0-92293730/15/15122_ 6.282670144712730.00.01194.46 138.68.133.118http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/16/14901_ 5.952560159153260.00.01213.26 159.223.102.13http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/20/14707_ 6.292640152163350.00.05175.87 138.68.133.118http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/17/15165_ 6.302540135117430.00.03225.07 207.154.240.169http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/23/14642_ 6.272670155554220.00.02199.10 134.122.89.242http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/15/14905_ 5.052640145814300.00.02185.01 167.94.138.125h2clocalhost:80[0/0] init 1-92-0/0/15731. 0.00229710138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00229710136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00229710174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00229710150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00229710146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00229710134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00229710172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00229710165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00229710127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00229710152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00229710148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00229710159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00229710159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-
Found on 2024-02-02 03:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcf17dc50a1Apache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 09:12:14 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 23 hours 10 minutes 53 seconds Server load: 2.33 2.52 2.63 Total accesses: 799434 - Total Traffic: 10.8 GB - Total Duration: 976965568 CPU Usage: u486.1 s31.73 cu13326.1 cs698.67 - 8.56% CPU load 4.71 requests/sec - 66.8 kB/second - 14.2 kB/request - 1222.07 ms/request 9 requests currently being processed, 119 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425no1yes230000 111360no3yes329001 216287no2yes131100 316453no3yes329001 Sum409 9119102 __________________W_________W____________W_R_____R______________ _W___________________________________WW__________________W______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-784250/271/6159_ 165.231163584210700.03.5491.07 66.249.73.11http/1.1www.chonlateeadmin.com:443GET /trust.php?buahsbr-120420netidm81ohn.htm HTTP/1.1 0-784250/290/6642_ 165.40074561565200.03.2587.71 113.161.93.118http/1.1www.chonlateekeyman.com:443POST /xmlrpc.php HTTP/1.1 0-784250/247/6151_ 165.28784573409190.03.1291.43 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /vykjflh-49538xitems/etid.html HTTP/1.1 0-784250/268/6476_ 164.71083670813350.03.0684.05 3.224.220.101http/1.1www.chonlateeboi.com:443GET /35808oqmietidm32gov.htm HTTP/1.1 0-784250/269/6214_ 164.90284267902740.03.1580.43 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /csrjflh-47465eeti.html HTTP/1.1 0-784250/329/6575_ 164.60684679185350.04.4586.61 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wsljflh-40777yitems/eti HTTP/1.1 0-784250/279/6386_ 165.30542259852700.03.5197.93 203.170.192.183http/1.1www.thaicarsale.com:80GET /logofav/ HTTP/1.1 0-784250/276/6434_ 165.021084168700290.03.4084.25 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?efdhlzs-218495qetidm.html HTTP/1.1 0-784250/333/6447_ 165.38284563889650.03.52126.38 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /zyojflh-49542betidm22m.htm HTTP/1.1 0-784250/318/6361_ 164.9411572729210.03.5681.81 216.244.66.229http/1.1www.chonlateenextbiz.com:443GET /uftriw/ryzen-7900-ppt.html HTTP/1.1 0-784250/251/6112_ 165.37289177416010.02.7877.99 66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ggzogxt-36991metidm52.html HTTP/1.1 0-784250/263/6069_ 164.67284176529110.03.3079.12 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wuljflh-40699yitems/etidm HTTP/1.1 0-784250/278/6137_ 165.22183554380140.03.4381.36 23.22.35.162http/1.1www.chonlateeboi.com:443GET /31348ymuietidm7 HTTP/1.1 0-784250/278/6343_ 164.721183982817550.03.2385.52 85.208.96.200http/1.1www.chonlateeadmin.com:443GET /xrmxzet-36514zetid HTTP/1.1 0-784250/263/6782_ 165.05784357851640.03.0487.46 3.224.220.101http/1.1www.chonlateeboi.com:443GET /6035eslwetidm.html HTTP/1.1 0-784250/336/6111_ 164.89285985446480.03.2779.61 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /aupjflh-14339cetidm.html HTTP/1.1 0-784250/287/6283_ 165.296165546170.03.0681.73 203.170.192.183http/1.1www.thaicarsale.com:80GET /wp-content/themes/flatsome/assets/libs/ie-flexibility.js H 0-784250/269/6420_ 165.230228360419050.02.9683.34 216.244.66.229http/1.1www.chonlateenextbiz.com:443GET /uftriw/ryzen-7900-ppt.html HTTP/1.1 0-784251/277/6440W 164.950063179980.03.1881.97 139.59.230.191http/1.1localhost:80GET /server-status HTTP/1.1 0-784250/260/6196_ 165.37389769647270.03.3287.15 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /wsljflh-4949yetidm95.html HTTP/1.1 0-784250/347/6464_ 164.261183793584310.03.4789.66 23.22.35.162http/1.1www.chonlateeboi.com:443GET /31062ymuietidm41s.htm HTTP/1.1 0-784250/243/6151_ 165.03784272108260.02.7883.50 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /kuzjflh-1687mitems/etidm26xh HTTP/1.1 0-784250/247/6727_ 163.87684774673110.03.1689.72 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dysjflh-666fetid.htm HTTP/1.1 0-784250/276/6241_ 165.297264146390.03.0089.95 203.170.192.183http/1.1www.thaicarsale.com:80GET /wp-content/themes/flatsome/assets/libs/ie-flexibility.js H 0-784250/345/6156_ 164.65568676276190.03.8677.30 52.167.144.238h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /tniivak-370vetid 0-784250/265/6273_ 165.381103858630410.03.0981.22 185.191.171.8http/1.1www.chonlateeadmin.com:443GET /vxkkawv-32716xetidm5 HTTP/1.1 0-784250/266/6284_ 165.27883857733710.03.1391.01 23.22.35.162http/1.1www.chonlateeboi.com:443GET /41377crwditems/eti HTTP/1.1 0-784250/267/6263_ 165.241184478825080.03.41111.51 23.22.35.162http/1.1www.chonlateeboi.com:443GET /31222ymuietidm77w HTTP/1.1 0-784251/257/6193W 149.721191055125010.02.8778.25 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-784250/368/6467_ 164.825073731640.04.10117.24 35.92.105.159http/1.1localhost:443GET /themes/.git/config HTTP/1.1 0-784250/242/6153_ 165.36384768451800.02.9490.59 52.70.240.171http/1.1www.chonlateeboi.com:443GET /34497lvxaitems/eti.htm HTTP/1.1 0-784250/276/6477_ 165.29684666244860.03.5083.27 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /pwejflh-49532ritems/etidm1.html HTTP/1.1 1-7113600/286/6390_ 157.66483474271380.03.3582.92 52.70.240.171http/1.1www.chonlateeboi.com:443GET /34500lvxaetidm1.htm HTTP/1.1 1-7113600/315/6179_ 157.33847467925960.03.6278.58 185.118.196.22http/1.1www.kncintergroup.com:443POST /wp-login.php HTTP/1.1 1-7113600/290/6165_ 157.45385394759920.03.5079.73 3.224.220.101http/1.1www.chonlateeboi.com:443GET /10863sabfitems/etidm82vf.htm HTTP/1.1 1-7113600/288/5848_ 157.45083277230410.03.8177.64 23.22.35.162http/1.1www.chonlateeboi.com:443GET /18837tbrmitems/etidm33.htm HTTP/1.1 1-7113600/264/6076_ 157.03982676461790.03.1289.88 39.96.216.30http/1.1www.siamsolarrooftop.com:443POST /xmlrpc.php HTTP/1.1 1-7113600/269/6142_ 157.740066073040.03.3080.76 139.59.230.191http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-7113600/241/6173_ 157.60746070036890.02.8078.04 203.170.192.183http/1.1www.thaicarsale.com:80GET /cropped-logofav-png/ HTTP/1.1 1-7113600/252/6251_ 157.56966279116290.03.8083.66 45.149.78.28http/1.1www.smtts.co.th:443POST /wp-login.php HTTP/1.1 1-7113600/270/6217_ 157.56984056750880.03.4180.13 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /lyajflh-49554netid.htm HTTP/1.1 1-7113601/255/6173W 154.97112070892640.02.8286.04 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 1-7113600/242/5958_ 157.
Found on 2024-01-07 02:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcf70549327Apache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 22:31:39 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 12 hours 30 minutes 18 seconds Server load: 2.52 2.48 2.48 Total accesses: 222184 - Total Traffic: 3.2 GB - Total Duration: 178527854 CPU Usage: u128.99 s7.87 cu3522.42 cs190.09 - 8.55% CPU load 4.94 requests/sec - 74.4 kB/second - 15.1 kB/request - 803.514 ms/request 7 requests currently being processed, 57 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 012776no1yes428000 112906no0yes329000 Sum201 757000 ___________W_______W__W_____W___________W_____________W________W ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0127760/103/2420_ 69.47190319797410.01.3237.36 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /jzymeuk-45912letidm69wml.htm HTTP/1.1 0-0127760/88/2522_ 69.20184218704570.01.0331.13 91.92.247.88http/1.1www.nptpropertythailand.com:443GET /cms HTTP/1.1 0-0127760/100/2362_ 69.20268130947180.01.2144.60 85.208.96.201http/1.1www.chonlateefood.com:443GET /get/wil43962pzigitems.htm HTTP/1.1 0-0127760/92/2582_ 69.47194819136290.01.0933.41 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?qemvrsm-24833zitems/etid.html HTTP/1.1 0-0127760/97/2491_ 67.81284819481020.01.1731.12 31.184.236.34http/1.1 0-0127760/108/2772_ 69.30285119511720.01.4134.89 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /oxdmeuk-45891qitems/etidm.htm HTTP/1.1 0-0127760/146/2429_ 69.72189019164600.01.3729.74 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ubyaonh-192277letidm53h.htm HTTP/1.1 0-0127760/105/2495_ 69.64384919902560.01.4332.70 138.68.133.118http/1.1localhost:80\x16\x03\x01\x01\x01\x01 0-0127760/106/2517_ 69.71285818914000.01.4366.29 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /pzemeuk-45840retidm97cmr.htm HTTP/1.1 0-0127760/115/2491_ 69.83084318934960.01.5832.24 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?nrqadej-325598detidm54a.htm HTTP/1.1 0-0127760/98/2447_ 68.43264322404280.01.2530.12 91.92.247.88http/1.1www.nptpropertythailand.com:443GET /web HTTP/1.1 0-0127761/99/2371W 69.480018992620.01.2230.96 185.191.171.7http/1.1www.chonlateeadmin.com:443GET /whlrfru-5027yetidm.html HTTP/1.1 0-0127760/91/2340_ 69.721019145590.01.1433.01 138.68.133.118http/1.1localhost:80GET /about HTTP/1.1 0-0127760/113/2665_ 68.974128119950000.01.4235.27 91.92.247.88http/1.1www.nptpropertythailand.com:443GET /tmp HTTP/1.1 0-0127760/103/2695_ 69.66284722149450.01.4636.89 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?rauaonh-207302hetidm45e.htm HTTP/1.1 0-0127760/99/2421_ 69.830019245150.01.2432.30 138.68.133.118http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0127760/103/2366_ 69.47167719463310.01.3331.11 85.208.96.200http/1.1www.chonlateefood.com:443GET /get/dps37105jpuzitems HTTP/1.1 0-0127760/102/2550_ 69.210019225910.01.2935.26 31.184.236.42http/1.1 0-0127760/102/2562_ 69.70285018800040.01.2333.71 91.92.247.88http/1.1www.nptpropertythailand.com:443GET /web HTTP/1.1 0-0127761/99/2403W 67.763020858850.01.2629.62 66.249.69.227http/1.1www.chonlateenextbiz.com:443GET /sitemap64.xml HTTP/1.1 0-0127760/98/2466_ 69.77199919061030.01.2035.58 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /fzumeuk-45856hetidm13smh HTTP/1.1 0-0127760/113/2477_ 69.70268220029860.01.3236.16 85.208.96.212http/1.1www.chonlateefood.com:443GET /items/lta23177htewtid.html HTTP/1.1 0-0127761/103/2732W 69.210018756970.01.3434.11 3.224.220.101http/1.1www.chonlateeboi.com:443GET /45221lvxaetidm14.html HTTP/1.1 0-0127760/94/2385_ 69.71284618337850.01.1731.80 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?bwyqxjd-128922letidm9 HTTP/1.1 0-0127760/99/2396_ 69.72185919292950.01.2031.37 3.224.220.101http/1.1www.chonlateeboi.com:443GET /33397lvxaitems/etidm41 HTTP/1.1 0-0127760/101/2412_ 69.500106018696560.01.3731.29 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?ebhaonh-14057uitems/eti.htm HTTP/1.1 0-0127760/106/2344_ 69.48085018448330.01.5230.11 85.208.96.201http/1.1www.chonlateeadmin.com:443GET /gmvuzzo-11849ieti.html HTTP/1.1 0-0127760/84/2477_ 68.07252818796690.01.0262.15 185.220.101.28http/1.1www.thai-pack.com:80POST /xmlrpc.php HTTP/1.1 0-0127761/107/2369W 68.970018933380.01.3629.99 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /fzumeuk-45908hitems/etidm3.html HTTP/1.1 0-0127760/101/2692_ 69.800018225710.01.1770.59 138.68.133.118http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-0127760/95/2368_ 69.63385218885950.01.1837.44 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /yxnmeuk-35423aetidm65lk.html HTTP/1.1 0-0127760/90/2694_ 69.702018936660.01.1032.80 138.68.133.118http/1.1localhost:80GET / HTTP/1.1 1-0129060/98/1906_ 60.1652614441260.01.2825.22 31.184.236.34http/1.1 1-0129060/100/1689_ 61.42484613919290.01.2422.05 40.77.167.64h2www.thesungolden.com:443[0/0] init 1-0129060/95/1810_ 62.481014374180.01.1525.36 138.68.133.118http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-0129060/103/1706_ 62.30784714045200.01.3122.68 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nzcmeuk-45812pitems/etidm9.html HTTP/1.1 1-0129060/94/1718_ 61.62357213789640.01.1827.06 91.92.247.88http/1.1www.nptpropertythailand.com:443GET /portal HTTP/1.1 1-0129060/95/1737_ 62.10585113815400.01.1023.29 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?zochsbr-90570petid HTTP/1.1 1-0129060/90/1754_ 62.30685114011590.01.1221.68 40.77.167.64h2www.thesungolden.com:443GET /g601179.shtml HTTP/2.0 1-0129060/92/1742_ 62.24485114074890.02.2622.91 185.191.171.10http/1.1www.chonlateeadmin.com:443GET /pjembwb-14874retid.htm HTTP/1.1 1-0129061/78/1780W 61.980014247070.00.9924.11 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?qwradej-112479eetidm55.html HTTP/1.1 1-0129060/141/1728_ 62.453105213871090.01.3122.70 23.22.35.162http/1.1www.chonlateeboi.com:443GET /4160khrritems/etidm83akp.html HTTP/1.1 1-0129060/94/1716_ 62.04685113526770.01.1525.85 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zhomeuk-9762betid.htm HTTP/1.1 1-0129060/98/1794_ 61.61485214649110.01.2424.14 3.224.220.101http/1.1www.chonlateeboi.com:443GET /47251hupbitems/etidm HTTP/1.1 1-0129060/162/1779_ 62
Found on 2024-01-05 15:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcfe8b7b46bApache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 02:27:48 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 43 Parent Server MPM Generation: 42 Server uptime: 11 days 2 hours 4 minutes 50 seconds Server load: 0.67 0.72 0.76 Total accesses: 4393738 - Total Traffic: 56.3 GB - Total Duration: 4146410749 CPU Usage: u520.07 s64.14 cu78843.1 cs4125.01 - 8.72% CPU load 4.59 requests/sec - 61.7 kB/second - 13.4 kB/request - 943.709 ms/request 5 requests currently being processed, 91 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 213703no6yes329003 313704no4yes032012 513924no4yes230000 Sum3014 591015 ................................................................ _______________W___WW___________________________________________ ................................___W____W_______________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-42-0/0/39438. 0.007357847358265920.00.00499.50 195.201.83.132http/1.1www.thesungolden.com:443GET /tzeu2e/samsung-pm983-firmware-ssd.html HTTP/1.1 0-42-0/0/38824. 0.007357882365500810.00.00489.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?148874rxilitems/etid.html HTTP/1.1 0-42-0/0/39196. 0.007357888400205990.00.00502.64 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?193658rxilitems/etid.html HTTP/1.1 0-42-0/0/39239. 0.0073570388973120.00.00512.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /hmozycz95752bitems/etidm24uzb.html HTTP/1.1 0-42-0/0/39751. 0.007357943369260050.00.00566.31 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?xwmqxjd-31418zitems/etid.html HTTP/1.1 0-42-0/0/38814. 0.0073571126398202220.00.00490.73 195.201.83.132http/1.1www.thesungolden.com:443GET /tzeu2e/samsung-pm983-firmware-ssd.html HTTP/1.1 0-42-0/0/39138. 0.0073570402069420.00.00493.03 66.249.64.42http/1.1www.thaidaoherb.com:443GET /godsend/godsend.php?ite/prp100531hvortidm195232.html HTTP/ 0-42-0/0/39909. 0.0073571216367066320.00.00500.86 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?cqrqxjd-76039eitems/etidm97pd HTTP/1.1 0-42-0/0/38868. 0.0073570379085210.00.00508.90 52.230.152.217http/1.1www.chonlateedesign.com:80GET /web-promote/ HTTP/1.1 0-42-0/0/39270. 0.007357595367326990.00.00501.47 144.76.67.250http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /tag/year-2566-financial-statement-closure-%E0%B8%AD%E0%B8% 0-42-0/0/38878. 0.0073571386384025070.00.00473.15 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?udnhgeq-42075aitems/eti HTTP/1.1 0-42-0/0/38930. 0.0073570368421470.00.00522.38 188.165.241.181http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-42-0/0/38825. 0.007357878374403580.00.00474.36 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?153446rxilitems/etidm22u.html HTTP/1.1 0-42-0/0/38997. 0.0073571051406855700.00.00502.68 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bgutmjj-25052hetid.htm HTTP/1.1 0-42-0/0/39185. 0.0073571165379639030.00.00492.25 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?rwkiejy-29618xetidm10ejx.htm HTTP/1.1 0-42-0/0/38879. 0.007357892371377940.00.00547.12 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?150861rxilitems/etidm68.htm HTTP/1.1 0-42-0/0/39850. 0.0073571109374331580.00.00526.81 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?wfpzslq-39373cetidm.html HTTP/1.1 0-42-0/0/39367. 0.0073571223366063800.00.00485.13 40.77.167.235h2www.chonlateeaa.com:443[1/1] done: stream 1, GET /sitemap880.xml 0-42-0/0/39388. 0.007357900367170330.00.00509.03 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?jwyqxjd-76098letid.htm HTTP/1.1 0-42-0/0/39657. 0.007357869383840280.00.00545.46 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?lgetrge-7980retid HTTP/1.1 0-42-0/0/39000. 0.007357870363770880.00.00513.82 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?unnupca-40515aitems/eti HTTP/1.1 0-42-0/0/39221. 0.0073570387436970.00.00506.24 52.230.152.217http/1.1www.wealneosupply.com:80GET /robots.txt HTTP/1.1 0-42-0/0/38987. 0.0073571431406414790.00.00516.07 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?166920rxiletidm11arp.htm HTTP/1.1 0-42-0/0/38288. 0.0073571451361154300.00.00476.08 188.165.241.181http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-42-0/0/39329. 0.0073571225370519850.00.00521.52 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?tmmlbze-40358zetidm7.htm HTTP/1.1 0-42-0/0/38623. 0.0073570387982390.00.00472.33 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /impzycz95727citems/etidm36vz HTTP/1.1 0-42-0/0/39332. 0.0073570372505250.00.00585.11 130.255.166.82http/1.1www.1smestartup.com:80GET / HTTP/1.1 0-42-0/0/38557. 0.007357858369705720.00.00511.75 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?skhqxjd-15553uitems/eti HTTP/1.1 0-42-0/0/39158. 0.007357564411240670.00.00524.98 40.77.111.208http/1.1www.ddkserviceandtransport.com:GET /wp-json/wp/v2/users/ HTTP/1.1 0-42-0/0/39137. 0.007357890374606560.00.00505.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-340952ditems/etidm68ovd.html HTTP/1.1 0-42-0/0/39126. 0.007357885369584480.00.00495.06 188.165.241.181http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-42-0/0/38859. 0.007357849377556310.00.00539.35 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?mqbqxjd-33643oitems/etidm HTTP/1.1 1-42-0/0/40301. 0.004940375284270.00.00508.68 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zhguqhe147484titems/etidm7.html HTTP/1.1 1-42-0/0/40183. 0.00494697384017340.00.00550.74 194.15.112.133http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.1 1-42-0/0/40005. 0.00494846385143120.00.00558.79 85.208.96.209http/1.1www.chonlateeboi.com:443GET /26716zypyetidm6 HTTP/1.1 1-42-0/0/40237. 0.00494641393165760.00.00566.13 203.170.192.183http/1.1www.thaicarsale.com:80GET /logocar/ HTTP/1.1 1-42-0/0/41105. 0.004941277365055410.00.00627.00 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?uyjhlzs-396377weti.html HTTP/1.1 1-42-0/0/39782. 0.004940362133630.00.00571.33 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /fhmuqhe12628zitems/etidm5.html HTTP/1.1 1-42-0/0/39939. 0.00494893364928630.00.00533.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?peirxij-22544vetidm52c.htm HTTP/1.1 1-42-0/0/40389. 0.004941065388942730.00.00514.77 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?zibvuql-52896oitems/eti.htm HTTP/1.1 1-42-0/0/40088. 0.004941380377437960.00.00504.43 194.15.112.133http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.1 1-42-0/0/40179. 0.004940369805130.00.00513.83 1
Found on 2023-12-11 19:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3127403bcf27403bcf2b82858eApache Status Apache Server Status for ftp.emba35.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 17-Nov-2023 00:25:46 ICT Restart Time: Sunday, 12-Nov-2023 01:49:47 ICT Parent Server Config. Generation: 16 Parent Server MPM Generation: 15 Server uptime: 4 days 22 hours 35 minutes 58 seconds Server load: 17.24 18.06 17.88 Total accesses: 1268677 - Total Traffic: 15.9 GB - Total Duration: 2678898356 CPU Usage: u35.95 s13.76 cu11941 cs689.16 - 2.97% CPU load 2.97 requests/sec - 39.1 kB/second - 13.2 kB/request - 2111.57 ms/request 9 requests currently being processed, 119 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 04937no0yes230000 25160no1yes131000 45162no7yes428003 65164no6yes230103 Sum4014 9119106 _____W_______________________R__................................ _________________L______________................................ W__R_____________________R_____R................................ _L___________________________W__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1549370/7/11660_ 1.0010172879640.00.08158.44 167.71.185.75h2localhost:443[0/0] Software caused connection abort 0-1549370/5/12103_ 1.050899248618720.00.02133.92 31.184.236.42http/1.1 0-1549370/2/11664_ 1.14440215350530.00.02136.42 3.140.187.177http/1.1localhost:80GET /.well-known/acme-challenge/jcAgyJKvqR3xCj_dTpKKEcrL9qZnjDB 0-1549370/6/12018_ 1.0914933174355100.00.08152.10 141.94.87.67http/1.1 0-1549370/4/11814_ 1.2090211254430.00.03162.07 51.81.245.138http/1.1localhost:443GET / HTTP/1.1 0-1549371/5/11715W 1.1300172541860.00.06148.60 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.1 0-1549370/5/12103_ 1.1723470241989630.00.02171.86 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m23924224876.html HTTP/1.1 0-1549370/3/11644_ 0.999874206800390.00.04160.35 23.22.35.162http/1.1www.chonlateeboi.com:443GET /27941lvxaetidm67.html HTTP/1.1 0-1549370/6/11850_ 1.2400246434980.00.04127.18 143.198.72.96http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-1549370/3/11435_ 1.2090193318760.00.01158.73 51.81.245.138http/1.1localhost:443GET / HTTP/1.1 0-1549370/3/11667_ 1.040477234743600.00.05147.10 167.71.185.75http/1.1 0-1549370/4/12232_ 1.18180180147260.00.02144.72 114.119.150.15http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 0-1549370/4/12073_ 0.97260192387120.00.04167.60 40.77.167.60h2www.nakindogtraining.com:443[1/1] done: stream 1, GET /wzy.php?jokes-CHALLENGING.xml 0-1549370/4/11506_ 0.610946174125890.00.03189.64 159.203.94.228http/1.1 0-1549370/2/12259_ 1.09230172766420.00.02155.19 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /ijpewrv244369ceti.html HTTP/1.1 0-1549370/2/11545_ 1.06340230669880.00.00131.47 31.184.236.42http/1.1 0-1549370/1/11940_ 0.82182038174569400.00.00166.06 114.119.150.15http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 0-1549370/1/12002_ 0.3126834195223760.00.01162.44 31.184.236.33http/1.1 0-1549370/4/11433_ 1.1290168645870.00.03142.20 23.178.112.106http/1.1www.emba35.com:443GET /.well-known/acme-challenge/UVJ4ngIr29HrSP63FPD_ZCnopRhyt7V 0-1549370/3/12117_ 0.9535856171138850.00.04147.64 66.249.66.194http/1.1www.chonlateefood.com:443GET /mds.php?items/rfg6725qffitidm239.html HTTP/1.1 0-1549370/2/12001_ 0.890806212797160.00.02180.83 168.63.250.198http/1.1 0-1549370/1/12322_ 0.7213503232937120.00.00169.37 128.140.0.213http/1.1 0-1549370/3/12256_ 1.0401629178419310.00.02155.46 161.35.176.95h2localhost:443[0/0] Software caused connection abort 0-1549370/2/11920_ 1.1726879226789250.00.04145.77 3.224.220.101http/1.1www.chonlateeboi.com:443GET /43665lvxaitems/eti.htm HTTP/1.1 0-1549370/1/11545_ 0.4244821174843000.00.01163.36 31.184.236.33http/1.1 0-1549370/9/11465_ 1.1435468222456090.00.06142.47 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m23924260252.html HTTP/1.1 0-1549370/4/12066_ 1.08262611240985350.00.04152.52 3.224.220.101http/1.1www.chonlateeboi.com:443GET /43665lvxaitems/eti.htm HTTP/1.1 0-1549370/3/12170_ 0.86181012229270130.00.03153.87 40.77.167.60h2www.nakindogtraining.com:443[2/2] done: stream 3, GET /wzy.php?tone-ERECT.xml 0-1549370/1/11594_ 1.0644820244639000.00.01128.90 66.249.66.194http/1.1www.chonlateefood.com:443GET /mds.php?geti/asp234oqsjitems.htm HTTP/1.1 0-1549370/6/11660R 1.1347861221998250.00.09127.10 5.101.157.80http/1.1www.krongthongsecurity.com:443GET / HTTP/2.0 0-1549370/5/11543_ 1.1628838174821550.00.08141.40 66.249.71.67http/1.1www.chonlateefood.com:443GET /mds.php?item/msb11114xjsjtidm.html HTTP/1.1 0-1549370/3/11608_ 0.3128738171721890.00.10147.28 198.251.76.39http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 1-15-0/0/11493. 0.00396883155832770.00.00152.50 184.22.103.134h2www.tafa.or.th:443[1/1] done: stream 1, GET /advisory/ 1-15-0/0/10748. 0.00396264155011750.00.00149.27 184.22.103.134h2www.tafa.or.th:443[4/4] done: stream 7, POST /wp-admin/admin-ajax.php 1-15-0/0/10932. 0.003960159596930.00.00211.17 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /vecewrv85418petid.htm HTTP/1.1 1-15-0/0/10808. 0.00396536155340780.00.00125.72 184.22.103.134h2www.tafa.or.th:443[2/2] done: stream 3, POST /wp-admin/admin-ajax.php?_panelsnonc 1-15-0/0/11120. 0.003965799154628910.00.00169.10 23.22.35.162http/1.1www.chonlateeboi.com:443GET /47662oqmietidm23e HTTP/1.1 1-15-0/0/10976. 0.00396858163100110.00.00132.94 184.22.103.134h2www.tafa.or.th:443[10/10] done: stream 19, GET /wp-content/uploads/2023/10/tafa-t 1-15-0/0/10811. 0.00396551157692660.00.00164.48 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m23924263044.html HTTP/1.1 1-15-0/0/11442. 0.00396828212676070.00.00133.98 54.36.149.1h2www.12gobiz.com:443[1/1] done: stream 1, GET /%E0%B8%82%E0%B8%AD%E0%B9%83%E0%B8%9A 1-15-0/0/11400. 0.00396736157798380.00.00146.42 198.251.76.39http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 1-15-0/0/11291. 0.00396885165022360.00.00153.86 66.249.71.67http/1.1www.chonlateefood.com:443GET /mds.php?items/bhq24311xrohtidm13461.html HTTP/1.1 1-15-0/0/11021. 0.00396470156166360.00.00156.90 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m23924222890.html HTTP/1.1 1-15-0/0/11443. 0.003960154829300.00.00162.24 203.170.192.183http/1.1www.chonlateefood.com:443POST /wp-cron.php?doing_wp_cron=1700155079.23500895500183105468 1-1
Found on 2023-11-16 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bc63bff648Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 09:52:22 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 5 hours 50 minutes 11 seconds Server load: 0.60 0.62 0.72 Total accesses: 33373 - Total Traffic: 495.7 MB - Total Duration: 45407047 CPU Usage: u2751.26 s5176.38 cu51101000 cs12502100 - 303000% CPU load 1.59 requests/sec - 24.2 kB/second - 15.2 kB/request - 1360.59 ms/request 6 requests currently being processed, 7 idle workers __R_RR_WR_._..R_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762298630/63/2829_ 17.380136150680.00.5951.41 149.56.150.101http/1.1www.nadapool.com:443GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Appl 1-1762303650/15/2642_ 1.260235755150.00.3553.98 149.56.150.101http/1.1www.nadapool.com:443GET /wp-content/uploads/siteorigin-widgets/sow-image-default-d6 2-1762302800/23/2753R 5.811136264190.00.2133.48 149.56.150.101http/1.1www.nadapool.com:443 3-1762299640/55/2497_ 18.80027333945950.01.7534.42 149.56.150.101http/1.1www.nadapool.com:443GET /wp-content/themes/sydney/fonts/font-awesome-v5/all.min.css 4-1762303920/6/2633R 0.791233054890.00.1547.84 149.56.150.101http/1.1www.nadapool.com:443 5-1762302890/19/2538R 7.131053936247870.00.2930.70 149.56.150.167http/1.1 6-1762304010/5/2390_ 0.740033426250.00.1530.17 149.56.150.101http/1.1www.nadapool.com:443GET /wp-content/uploads/siteorigin-widgets/sow-headline-default 7-1762302910/22/2196W 8.980029786050.00.7631.52 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 8-1762303160/16/1988R 9.2211326615420.00.4425.38 149.56.150.167http/1.1 9-1762304100/3/1924_ 0.000126541290.00.0025.83 149.56.150.101http/1.1www.nadapool.com:443GET /wp-content/fonts/eaba11016d903e40a1627a48b425f7d5.css HTTP 10-1762-0/0/1871. 0.00262025126580.00.0024.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1762300580/45/1632_ 13.810024220030.00.9820.91 167.71.48.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1762-0/0/1142. 0.0044110216717330.00.0019.91 144.217.135.250http/1.1www.nadapool.com:443GET /ads.txt HTTP/1.1 13-1762-0/0/1059. 0.00260015317430.00.0012.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762300660/39/1080R 13.701055015880950.00.6617.38 149.56.150.167http/1.1 15-1762300720/41/875_ 15.08027810714030.00.5611.52 149.56.150.101http/1.1www.nadapool.com:443GET /wp-content/themes/sydney/style.css?ver=20220616 HTTP/1.1 16-1762-0/0/650. 0.00158108482990.00.008.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/85. 0.0016010913100.00.002.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/224. 0.00159704510250.00.003.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/191. 0.0098212952579960.00.002.20 142.93.158.96http/1.1 20-1762-0/0/116. 0.00156601364370.00.004.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/19. 0.0015990285820.00.002.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/8. 0.001587048210.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/20. 0.001577082410.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/10. 0.001578039160.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/1. 0.001603000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 66subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 108 seconds, (range: 12...295)index usage: 2%, cache usage: 3%total entries stored since starting: 4607total entries replaced since starting: 0total entries expired since starting: 4541total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 174 hit, 10836 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 02:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bccdb2cf32Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 10:12:13 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 6 hours 10 minutes 1 second Server load: 1.39 1.41 1.30 Total accesses: 36325 - Total Traffic: 624.8 MB - Total Duration: 52557928 CPU Usage: u2815.92 s5157.3 cu50869300 cs12452700 - 285000% CPU load 1.64 requests/sec - 28.8 kB/second - 17.6 kB/request - 1446.88 ms/request 5 requests currently being processed, 6 idle workers CR._.R.____WW_.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743191701/13/2993C 1.831044152541.30.0563.27 164.92.192.25http/1.1localhost:443GET /.git/config HTTP/1.1 1-1743191770/9/3009R 3.531104243209090.00.0347.14 27.254.96.168http/1.1www.npaccounting.co.th:443POST /wp-cron.php?doing_wp_cron=1695093130.83735394477844238281 2-1743-0/0/3149. 0.0030045533010.00.0061.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1743191830/12/2989_ 1.940041295160.00.0558.01 142.93.64.15http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1743-0/0/2788. 0.004038386410.00.0037.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1743190630/45/2845R 7.831039355180.00.3754.00 66.175.44.37http/1.1www.tafa.or.th:443 6-1743-0/0/2639. 0.0052037597540.00.0044.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1743187990/78/2658_ 32.301036793840.01.1243.57 142.93.64.15http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1743185920/80/2604_ 38.331038848800.00.6337.18 164.92.192.25http/1.1localhost:443GET /.env HTTP/1.1 9-1743185380/93/2401_ 41.250035446690.01.5133.90 66.175.44.35http/1.1www.tafa.or.th:80POST /xmlrpc.php HTTP/1.0 10-1743190780/38/1995_ 12.24067229819100.00.7432.90 172.71.95.9http/1.1www.99accountant.com:80GET /sites/default/files/cgialfa HTTP/1.0 11-1743187310/82/1609W 32.230025565510.00.8327.61 142.93.64.15http/1.1localhost:80GET /server-status HTTP/1.0 12-1743187370/76/1407W 34.820018756330.00.9629.75 172.71.182.46http/1.1www.99accountant.com:80GET /admin/controller/extension/extension/ALFA_DATA HTTP/1.0 13-1743190890/34/1181_ 12.740020229210.01.3520.29 66.175.44.37http/1.1www.tafa.or.th:80POST /xmlrpc.php HTTP/1.0 14-1743-0/0/778. 0.00194011724400.00.0011.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/451. 0.00247106158850.00.006.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/537. 0.00216008461110.00.008.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/134. 0.00288002057450.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/95. 0.00247301389890.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/39. 0.0027210626550.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/8. 0.002943079460.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/7. 0.002951026970.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/2. 0.002957031570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/5. 0.00295603700.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/2. 0.002958030790.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 135subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 85 seconds, (range: 1...217)index usage: 4%, cache usage: 6%total entries stored since starting: 6766total entries replaced since starting: 0total entries expired since starting: 6631total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 231 hit, 10245 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-19 03:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bc72de8c29Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 00:27:51 +07 Restart Time: Sunday, 17-Sep-2023 00:11:18 +07 Parent Server Config. Generation: 1733 Parent Server MPM Generation: 1732 Server uptime: 16 minutes 33 seconds Server load: 0.94 1.25 1.11 Total accesses: 1367 - Total Traffic: 18.1 MB - Total Duration: 1740764 CPU Usage: u2729.62 s5127.67 cu50709300 cs12418300 - 6360000% CPU load 1.38 requests/sec - 18.6 kB/second - 13.5 kB/request - 1273.42 ms/request 9 requests currently being processed, 6 idle workers W_RW_R__R_R_R.RR.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-173230840/19/123W 2.01001491660.00.041.28 128.199.62.55http/1.1localhost:80GET /server-status HTTP/1.0 1-173231320/7/129_ 3.22021933890.00.051.37 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 2-1732322340/33/111R 18.34311658240.00.211.21 146.70.171.171http/1.1www.emba35.com:443 3-1732322480/35/122W 15.82602070710.00.244.50 172.68.234.216http/1.1www.toyota.chonlateeauto.com:44POST /wp-cron.php?doing_wp_cron=1694885264.77652597427368164062 4-173231450/5/105_ 0.02001631210.00.001.09 167.172.20.95http/1.1www.emba35.com:80GET /v2/_catalog HTTP/1.0 5-17327290/27/110R 10.95011202580.00.281.20 139.59.182.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-173231070/6/84_ 1.0701718920.00.030.67 134.122.63.192http/1.1 7-173231200/8/89_ 0.64021161670.00.021.37 134.122.63.192http/1.1localhost:80GET /server-status HTTP/1.0 8-173231540/0/81R 0.0039001016890.00.000.85 146.70.171.171http/1.1www.emba35.com:443 9-173231610/2/88_ 0.5204871107930.00.001.28 45.79.83.159http/1.1 10-173231630/0/22R 0.0020110810.00.000.13 52.40.132.125http/1.1 11-1732317160/58/72_ 21.1302760440.00.290.49 139.59.182.142http/1.1localhost:80GET /server-status HTTP/1.0 12-1732316970/61/61R 19.7900456710.00.790.79 134.122.63.192http/1.1 13-1732-0/0/56. 0.0070526820.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1732317250/59/59R 25.3830875010.00.800.80 146.70.171.171http/1.1www.emba35.com:443 15-1732317460/55/55R 22.8730684070.00.410.41 146.70.171.171http/1.1www.emba35.com:443 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 98subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 107 seconds, (range: 1...297)index usage: 3%, cache usage: 4%total entries stored since starting: 249total entries replaced since starting: 0total entries expired since starting: 151total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 639 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bc2568eec5Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 19-May-2023 00:23:03 +07 Restart Time: Friday, 19-May-2023 00:22:37 +07 Parent Server Config. Generation: 1239 Parent Server MPM Generation: 1238 Server uptime: 25 seconds Server load: 1.36 1.86 1.82 Total accesses: 106 - Total Traffic: 408 kB - Total Duration: 52466 CPU Usage: u1876.83 s3268.32 cu30811900 cs7377910 - 1.53e+8% CPU load 4.24 requests/sec - 16.3 kB/second - 3941 B/request - 494.962 ms/request 5 requests currently being processed, 5 idle workers _RRW_W_R__........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1238149150/15/15_ 3.880275810.00.040.04 139.144.150.26http/1.1localhost:80GET /login.action HTTP/1.0 1-1238149220/15/15R 3.050060540.00.030.03 164.92.192.165http/1.1www.emba35.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1238149390/10/10R 2.81040256660.00.050.05 172.70.110.11http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 3-1238149450/6/6W 3.700086750.00.030.03 23.129.64.217http/1.1www.chonlateevip.com:443GET /%e0%b8%a3%e0%b8%b1%e0%b8%9a%e0%b8%88%e0%b8%94%e0%b8%97%e0% 4-1238149470/12/12_ 3.730078090.00.060.06 161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1238149610/14/14W 3.260069240.00.090.09 165.227.146.2http/1.1localhost:80GET /server-status HTTP/1.0 6-1238149690/11/11_ 2.080041920.00.050.05 64.227.126.135http/1.1www.emba35.com:80GET /v2/_catalog HTTP/1.0 7-1238149770/7/7R 1.120022570.00.010.01 165.227.146.2http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1238149830/10/10_ 1.670032930.00.020.02 159.203.182.222http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1238149900/6/6_ 0.1000100.00.000.00 138.68.163.10http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 27subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 285 seconds, (range: 273...296)index usage: 0%, cache usage: 1%total entries stored since starting: 27total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 59 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-05-18 17:22 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bc9e1dc6c9Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 19-Mar-2023 00:26:07 +07 Restart Time: Sunday, 19-Mar-2023 00:25:12 +07 Parent Server Config. Generation: 1018 Parent Server MPM Generation: 1017 Server uptime: 55 seconds Server load: 1.07 1.41 1.28 Total accesses: 123 - Total Traffic: 590 kB - Total Duration: 104053 CPU Usage: u1525.74 s2682.89 cu25407300 cs6115360 - 5.73e+7% CPU load 2.24 requests/sec - 10.7 kB/second - 4911 B/request - 845.959 ms/request 13 requests currently being processed, 0 idle workers CRWCRCCCCCCRR..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1017231561/10/10C 3.921297431.30.070.07 159.223.50.175http/1.1localhost:443GET /about HTTP/1.1 1-1017231590/11/11R 3.290087370.00.030.03 68.183.64.176http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 2-1017231740/13/13W 4.6900134470.00.050.05 128.199.62.55http/1.1localhost:80GET /server-status HTTP/1.0 3-1017231811/10/10C 3.0110140322.60.030.03 159.223.50.175http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-1017231870/19/19R 5.0601201360.00.100.10 68.183.64.176http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 5-1017232021/8/8C 4.0511114201.30.060.06 159.223.50.175http/1.1localhost:443GET /config.json HTTP/1.1 6-1017232111/10/10C 2.921158531.30.090.09 159.223.50.175http/1.1localhost:443GET /login.action HTTP/1.1 7-1017232231/14/14C 2.811159842.60.070.07 159.223.50.175http/1.1localhost:443GET /info.php HTTP/1.1 8-1017232251/10/10C 3.6110108592.70.050.05 159.223.50.175http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 9-1017232721/7/7C 1.691138092.60.030.03 159.223.50.175http/1.1localhost:443GET /.git/config HTTP/1.1 10-1017233011/1/1C 0.011242.60.000.00 159.223.50.175http/1.1localhost:443GET /.env HTTP/1.1 11-1017233090/4/4R 0.0401100.00.000.00 138.68.163.10http/1.1localhost:80GET / HTTP/1.0 12-1017233110/6/6R 0.0901140.00.010.01 68.183.64.176http/1.1localhost:80GET /server-status HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 287 seconds, (range: 255...297)index usage: 0%, cache usage: 0%total entries stored since starting: 10total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 74 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-03-18 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3187aaf1bc87aaf1bcc9050ae8Apache Status Apache Server Status for ftp.emba35.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 17-Jan-2023 13:51:18 +07 Restart Time: Tuesday, 17-Jan-2023 13:50:55 +07 Parent Server Config. Generation: 796 Parent Server MPM Generation: 795 Server uptime: 22 seconds Server load: 1.15 1.18 1.43 Total accesses: 147 - Total Traffic: 673 kB - Total Duration: 92891 CPU Usage: u1174.72 s2164.03 cu20441000 cs4960630 - 1.15e+8% CPU load 6.68 requests/sec - 30.6 kB/second - 4688 B/request - 631.912 ms/request 18 requests currently being processed, 0 idle workers CCCCCCWCWWCCCCWCWW................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-79589411/12/12C 4.8302131591.20.080.08 139.162.51.100http/1.1www.emba35.com:443GET /login.action HTTP/1.1 1-79589421/6/6C 3.1611132326.20.050.05 139.162.51.100http/1.1www.emba35.com:443GET /.vscode/sftp.json HTTP/1.1 2-79589441/8/8C 3.0911107506.20.070.07 139.162.51.100http/1.1www.emba35.com:443GET /telescope/requests HTTP/1.1 3-79589551/11/11C 3.461189881.20.040.04 139.162.51.100http/1.1www.emba35.com:443GET /about HTTP/1.1 4-79589621/8/8C 1.6512108296.30.050.05 139.162.51.100http/1.1www.emba35.com:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-79589881/9/9C 2.581051716.30.070.07 139.162.51.100http/1.1www.emba35.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-79590010/5/5W 2.812059190.00.050.05 172.68.189.158http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1673938275.67970204353332519531 7-79590031/7/7C 3.701197586.10.060.06 139.162.51.100http/1.1www.emba35.com:443GET /.env HTTP/1.1 8-79590160/21/21W 2.880093650.00.050.05 172.68.234.175http/1.1www.jbbgarment.com:80GET /%E0%B8%AA%E0%B8%B4%E0%B8%99%E0%B8%84%E0%B9%89%E0%B8%B2%E0% 9-79590250/3/3W 0.743018220.00.010.01 172.68.189.145http/1.1www.jbbgarment.com:80POST /wp-cron.php?doing_wp_cron=1673938275.01289391517639160156 10-79590271/11/11C 1.321223406.20.050.05 139.162.51.100http/1.1www.emba35.com:443GET /.git/config HTTP/1.1 11-79590531/16/16C 0.0911191.20.010.01 139.162.51.100http/1.1www.emba35.com:443GET /config.json HTTP/1.1 12-79590651/1/1C 0.031366.20.010.01 139.162.51.100http/1.1www.emba35.com:443GET /info.php HTTP/1.1 13-79590671/5/5C 0.790737148513.70.030.03 20.125.141.33http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 14-79590800/7/7W 0.010070.00.000.00 139.59.135.127http/1.1localhost:80GET /server-status HTTP/1.0 15-79590821/1/1C 0.020246.40.010.01 172.104.249.218http/1.1www.emba35.com:443GET / HTTP/1.1 16-79590870/0/0W 0.000000.00.000.00 172.71.142.11http/1.1www.singkansard.com:443GET /robots.txt HTTP/1.1 17-79590890/16/16W 0.0500290.00.010.01 172.68.234.139http/1.1www.accgoing.com:80GET /category/type-a/ HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 14subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 283...298)index usage: 0%, cache usage: 0%total entries stored since starting: 14total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 48 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-01-17 06:48
-