Domain ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com
Thailand
CS LOXINFO Public Company Limited.
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com
Port: 80
URL: http://ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.comFirst seen 2023-08-28 10:12
Last seen 2024-02-02 10:04
Open for 157 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a7a55d4989Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 17:04:14 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 7 hours 2 minutes 53 seconds Server load: 2.00 2.00 2.00 Total accesses: 1849061 - Total Traffic: 23.8 GB - Total Duration: 2141105637 CPU Usage: u220.24 s118.32 cu32089.3 cs2210.25 - 1.42% CPU load .756 requests/sec - 10.2 kB/second - 13.5 kB/request - 1157.94 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes131000 329394no0yes032000 529374no0yes032000 Sum400 1127000 ________________________________................................ _________________________W______________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/45/14793_ 14.688010160260970.00.15193.78 139.59.230.191http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-92293730/45/15288_ 14.598010139013450.00.11198.96 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-92293730/44/14857_ 14.628080150309530.00.17192.74 144.126.198.24http/1.1localhost:80\x16\x03\x01\x01\x0c\x01 0-92293730/40/15033_ 14.768050145875090.00.09185.97 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/40/14938_ 14.588100147711700.00.18185.44 139.59.182.142http/1.1 0-92293730/39/15166_ 14.618100156649150.00.13188.54 137.184.162.65http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/36/14836_ 14.588080145588580.00.16200.26 137.184.162.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/35/15142_ 14.768060150182040.00.07187.57 128.199.62.55http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/36/15103_ 14.748100145226960.00.08229.88 144.126.198.24http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/46/15240_ 14.628070148853420.00.18194.90 139.59.230.191http/1.1localhost:443GET / HTTP/1.1 0-92293730/43/14803_ 14.738110154393250.00.09200.69 167.172.20.95http/1.1localhost:80GET /about HTTP/1.1 0-92293730/40/14813_ 14.678050147156140.00.09195.46 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-92293730/53/14684_ 14.488100137182760.00.17185.53 128.199.62.55http/1.1 0-92293730/45/14836_ 14.768050169086520.00.10186.03 139.59.182.142http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/38/15784_ 14.678020141615020.00.12187.78 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/46/14838_ 14.568080165341210.00.11182.51 144.126.198.24http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/51/14890_ 14.588070143405000.00.13206.39 144.126.198.24http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/42/14949_ 14.588080144939940.00.12189.30 144.126.198.24http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/39/14767_ 14.748090160388340.00.07200.54 161.35.155.246http/1.1localhost:80GET /login.action HTTP/1.1 0-92293730/44/14989_ 14.6810144639360.00.14193.82 139.59.230.191http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/47/14984_ 14.758080181495870.00.19193.46 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-92293730/36/15001_ 14.488060147053750.00.09204.07 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-92293730/44/15462_ 14.568090150748870.00.18188.30 64.227.126.135http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/39/14670_ 14.8910138765310.00.14190.19 142.93.158.96http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-92293730/51/14975_ 14.688010162205860.00.12186.90 139.59.230.191http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/45/14648_ 14.748100135981650.00.17197.02 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/42/15149_ 14.768040144713480.00.08194.52 128.199.62.55http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/43/14928_ 14.558090159187440.00.07213.31 159.65.58.104http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/48/14735_ 14.768040152174390.00.13175.94 139.59.182.142http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/31/15179_ 14.528020135139120.00.09225.13 178.62.3.65http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/50/14669_ 14.608110155573060.00.07199.14 139.59.182.142h2localhost:443[0/0] Software caused connection abort 0-92293730/39/14929_ 14.618105145815040.00.19185.18 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 1-92-0/0/15731. 0.00462400138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00462400136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00462400174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00462400150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00462400146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00462400134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00462400172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00462400165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00462400127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00462400152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00462400148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00462400159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00462400159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00462
Found on 2024-02-02 10:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a7b34ab4ceApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 16-Jan-2024 22:25:20 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 38 Parent Server MPM Generation: 37 Server uptime: 11 days 12 hours 23 minutes 59 seconds Server load: 2.18 2.08 2.01 Total accesses: 1833475 - Total Traffic: 23.7 GB - Total Duration: 2137466867 CPU Usage: u97.69 s58.9 cu31346.4 cs1807.24 - 3.35% CPU load 1.84 requests/sec - 25.0 kB/second - 13.6 kB/request - 1165.8 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 014896no0yes032000 114900no0yes032000 314898no0yes131000 414878no0yes032000 Sum400 1127000 ________________________________________________________________ ................................____________________W___________ ________________________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-37148960/6/14659_ 8.641450160112040.00.00193.04 161.35.176.95h2localhost:443[0/0] Software caused connection abort 0-37148960/4/15179_ 11.1514510138787770.00.01198.57 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 0-37148960/7/14732_ 11.341440149913100.00.01191.98 64.227.126.135http/1.1localhost:80GET /.git/config HTTP/1.1 0-37148960/4/14931_ 11.191450145683350.00.02185.51 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 0-37148960/6/14828_ 11.191440147455960.00.01184.83 165.232.76.155http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-37148960/4/15065_ 11.341440156400350.00.00187.87 128.199.62.55http/1.1localhost:80GET /.git/config HTTP/1.1 0-37148960/6/14727_ 11.341440145466880.00.00199.82 165.22.74.203http/1.1localhost:80GET /.git/config HTTP/1.1 0-37148960/4/15047_ 11.341440149892860.00.02187.03 178.62.73.12http/1.1localhost:80GET /.git/config HTTP/1.1 0-37148960/8/14996_ 11.341430144953920.00.01229.45 165.22.74.203http/1.1localhost:80GET /config.json HTTP/1.1 0-37148960/3/15130_ 11.121440148727220.00.00194.41 178.62.3.65http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-37148960/7/14694_ 11.341430154186320.00.02200.27 64.227.126.135http/1.1localhost:80GET /config.json HTTP/1.1 0-37148960/4/14702_ 11.271420146859190.00.00194.68 64.227.126.135http/1.1localhost:80GET / HTTP/1.1 0-37148960/5/14580_ 11.131430136853740.00.00185.13 137.184.106.30h2localhost:443[0/0] Software caused connection abort 0-37148960/4/14724_ 11.351420167938900.00.19185.69 64.227.126.135http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-37148960/5/15676_ 8.651410141307490.00.00187.17 212.18.114.44http/1.1localhost:80GET /phpMyAdmin-latest-english/index.php?lang=en HTTP/1.1 0-37148960/3/14732_ 11.271410164716010.00.00181.73 128.199.62.55http/1.1localhost:80GET / HTTP/1.1 0-37148960/8/14771_ 11.281410143147940.00.01205.75 178.62.73.12http/1.1localhost:80GET / HTTP/1.1 0-37148960/1/14845_ 11.281400144680160.00.00188.81 128.199.62.55http/1.1localhost:80GET /about HTTP/1.1 0-37148960/6/14661_ 11.171410160107920.00.01199.70 167.99.182.39http/1.1localhost:443GET /login.action HTTP/1.1 0-37148960/2/14880_ 11.021400144424770.00.00193.16 146.190.98.165http/1.1localhost:443GET /login.action HTTP/1.1 0-37148960/10/14881_ 11.351330181281050.00.10192.99 137.184.106.30http/1.1localhost:443GET /.git/config HTTP/1.1 0-37148960/3/14892_ 11.1420146863470.00.00203.45 137.184.106.30h2localhost:443[0/0] Software caused connection abort 0-37148960/4/15367_ 8.64131164150696640.00.01187.70 212.18.114.44http/1.1localhost:80GET /pma/index.php?lang=en HTTP/1.1 0-37148960/6/14569_ 11.3810138483760.00.01189.84 64.227.126.135http/1.1localhost:80GET /about HTTP/1.1 0-37148960/9/14860_ 11.3820162018220.00.01186.26 64.227.126.135http/1.1localhost:80GET / HTTP/1.1 0-37148960/3/14547_ 11.331450135763060.00.01196.52 165.22.74.203http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-37148960/8/15048_ 11.3810144569760.00.02193.93 64.227.126.135http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-37148960/2/14833_ 11.1400159019370.00.00213.05 137.184.106.30http/1.1 0-37148960/7/14631_ 11.331450151948150.00.01175.48 128.199.62.55http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-37148960/1/15085_ 11.151440134945280.00.00224.73 137.184.106.30h2localhost:443[0/0] Software caused connection abort 0-37148960/7/14555_ 11.181450155471240.00.04198.47 161.35.176.95http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-37148960/3/14831_ 11.331450145746080.00.00184.70 178.62.73.12http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-37149000/7/15648_ 12.391450138067630.00.01219.05 165.22.74.203http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-37149000/17/15751_ 11.581450136539980.00.04198.52 162.243.141.48http/1.1localhost:80GET / HTTP/1.1 1-37149000/7/15519_ 12.281450173724120.00.20199.56 161.35.176.95http/1.1localhost:443GET /config.json HTTP/1.1 1-37149000/16/15245_ 12.281450150679850.00.01189.03 167.99.182.39http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-37149000/8/15205_ 12.401430146221410.00.02197.63 178.62.73.12http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-37149000/20/15586_ 12.401440134065470.00.11198.30 128.199.62.55http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-37149000/7/15298_ 11.641430172780760.00.13187.86 205.210.31.161http/1.1localhost:443GET / HTTP/1.1 1-37149000/4/15111_ 10.121420165287530.00.01188.72 164.90.139.238http/1.1 1-37149000/17/15275_ 12.401420127313660.00.15211.56 178.62.73.12http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-37149000/17/14887_ 12.291410152242450.00.16188.48 165.232.76.155http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-37149000/8/14981_ 12.241400147714290.00.03204.41 178.62.3.65http/1.1localhost:80GET /config.json HTTP/1.1 1-37149000/14/15451_ 12.4330158929260.00.02208.55 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x1b\x01 1-37149000/10/15267_ 12.401390159389870.00.14200.38 137.184.106.30http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-37149000/15/15124_
Found on 2024-01-16 15:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a763b00eb1Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 19:49:21 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 9 hours 48 minutes Server load: 2.51 3.10 3.07 Total accesses: 958219 - Total Traffic: 12.8 GB - Total Duration: 1153920062 CPU Usage: u276.42 s21.36 cu16091.2 cs845.71 - 8.28% CPU load 4.61 requests/sec - 64.5 kB/second - 14.0 kB/request - 1204.23 ms/request 6 requests currently being processed, 90 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 013357no2yes329001 116903no1yes032000 221656no1yes329000 Sum304 690001 R________________W____________R_________________________________ __W____W____________________W___................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7133570/228/7719R 126.93863899651510.02.66110.19 38.97.116.244http/1.1www.tspaccount.net:443 0-7133570/216/8213_ 127.52563777884030.02.27111.58 23.22.35.162http/1.1www.chonlateeboi.com:443GET /43058hupbitems/etid.html HTTP/1.1 0-7133570/242/7794_ 127.30284384683030.02.55109.35 3.224.220.101http/1.1www.chonlateeboi.com:443GET /42813crwditems/etidm40.htm HTTP/1.1 0-7133570/241/8218_ 127.01367581435030.02.72102.79 85.208.96.200http/1.1www.chonlateefood.com:443GET /getidm770/jfy47407jxxfitems HTTP/1.1 0-7133570/236/8056_ 127.57384981545310.02.4299.80 3.224.220.101http/1.1www.chonlateeboi.com:443GET /16967yytxetidm89px.html HTTP/1.1 0-7133570/261/8206_ 127.65171594579150.02.67106.59 3.224.220.101http/1.1www.chonlateeboi.com:443GET /48783sstyitems/etidm85hy.htm HTTP/1.1 0-7133570/221/7972_ 127.58384078563920.02.13118.64 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /qrfmeuk-40589setidm69.html HTTP/1.1 0-7133570/249/7993_ 127.680087378480.02.57102.56 139.59.182.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-7133570/273/8214_ 127.51535381230730.02.84153.35 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=%E0%A4%B2%E0%A4%99%E0%A5%8D-%E0%A4%B2%E0%A4%95%E0%A4%BE 0-7133570/248/8076_ 127.41063584375520.02.64100.90 85.208.96.193http/1.1www.chonlateeadmin.com:443GET /tliqmyr-23926vetidm72g HTTP/1.1 0-7133570/258/7975_ 126.58184792337110.02.76122.80 31.184.236.41http/1.1 0-7133570/228/7581_ 126.39784290293220.02.3796.76 3.224.220.101http/1.1www.chonlateeboi.com:443GET /25370unwsitems/etid.html HTTP/1.1 0-7133570/207/7648_ 127.66161169444840.02.21100.48 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=liebe-gr%C3%BC%C3%9Fe-bilder-gratis-gr%C3%BC%C3%9Fe-lie 0-7133570/261/7898_ 126.743840103620400.03.04106.77 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /rhgmeuk-24678tetidm89e.htm HTTP/1.1 0-7133570/296/8605_ 127.57335877542250.03.02106.60 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=best-25+-deals-for-uspa-shoes-poshmark-7-ii-E6nZZxHv HT 0-7133570/222/7707_ 127.30235699726740.02.4397.74 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=%F0%9F%92%A5the-cyborg-soldier-009-vignette-figure-%E0% 0-7133570/238/7884_ 127.26363680738940.02.3899.59 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ertmeuk-14265gitems/eti.htm HTTP/1.1 0-7133571/230/7909W 127.340078885680.02.42103.93 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /yxnmeuk-16183aitems/etidm38lk HTTP/1.1 0-7133570/252/7980_ 127.20584897921680.02.3198.51 3.224.220.101http/1.1www.chonlateeboi.com:443GET /42833crwdeti.html HTTP/1.1 0-7133570/234/8044_ 127.62263180680000.02.21105.44 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ertmeuk-39069gitems/etidm98.htm HTTP/1.1 0-7133570/295/8086_ 127.167848120843820.03.21110.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /kxzmeuk-14583mitems/etidm70xk.htm HTTP/1.1 0-7133570/234/7695_ 127.26383284509230.02.46101.68 23.22.35.162http/1.1www.chonlateeboi.com:443GET /42816crwdetidm93ucj.htm HTTP/1.1 0-7133570/225/8435_ 126.91067891906110.02.35109.11 85.208.96.198http/1.1www.chonlateefood.com:443GET /items/hvw38825vvpitid.html HTTP/1.1 0-7133570/240/7840_ 127.41184276690680.02.50107.78 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /pzemeuk-14276ritems/etidm3.html HTTP/1.1 0-7133570/239/7878_ 127.564845100414370.02.3798.39 185.191.171.12http/1.1www.chonlateeadmin.com:443GET /bgqxktd-29082detid.htm HTTP/1.1 0-7133570/252/8008_ 127.661069013530.06.62104.61 139.59.182.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7133570/256/7880_ 127.632084691900.03.23109.53 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 0-7133570/244/7942_ 127.651100694810230.02.51130.15 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /crrmeuk-16161eitems/eti.htm HTTP/1.1 0-7133570/266/7770_ 126.56184782934840.03.0196.37 31.184.236.41http/1.1 0-7133570/246/7966_ 127.30383887960730.02.53134.48 31.184.236.41http/1.1 0-7133570/223/7638R 127.41783591313070.02.32108.23 52.70.240.171http/1.1www.chonlateeadmin.com:443 0-7133570/238/7992_ 126.97483981998410.02.45100.63 31.184.236.41http/1.1 1-7169030/157/7940_ 96.35635790165500.01.80129.35 66.249.77.98http/1.1www.twinbuilt.co.th:443GET /?e=fist-of-the-north-star-images-launchbox-games-database- 1-7169030/222/7809_ 96.231084185040530.02.0297.05 3.224.220.101http/1.1www.chonlateeboi.com:443GET /42824crwditems/etidm11ccr.html HTTP/1.1 1-7169030/200/7878_ 96.364842112031040.01.88101.90 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zzomeuk-34904bitems/etidm31mmb.html HTTP/1.1 1-7169030/204/7496_ 95.72684890669090.01.8795.92 23.22.35.162http/1.1www.chonlateeboi.com:443GET /15703eslwitems/etidm12zw HTTP/1.1 1-7169030/183/7562_ 96.36537997052810.02.17109.29 38.97.116.244http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 1-7169030/208/7753_ 95.61064085923380.02.12102.45 3.224.220.101http/1.1www.chonlateeboi.com:443GET /9976zypyetidm56szh HTTP/1.1 1-7169030/168/7771_ 96.393845103932120.01.9499.59 139.59.182.142http/1.1localhost:80\x16\x03\x01\x01\x1b\x01 1-7169030/171/7784_ 95.45532896809690.01.88103.47 66.249.77.98http/1.1www.twinbuilt.co.th:443GET /?e=ktm-16edrive-kaufen-i-K94r13U5 HTTP/1.1 1-7169030/225/7871_ 96.392080357760.021.87118.23 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 1-7169030/170/7592_ 96.36564395108140.01.91103.39 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /crrmeuk-23857eitems/eti HTTP/1.1 1-7169030/167/7373_ 94.695349097278080.02.30101.69 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?inexplorable41.xml HTTP/1.1 1-7169030/187/7948_
Found on 2024-01-07 12:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a78f0cbfb2Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 11:42:38 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 4 Parent Server MPM Generation: 3 Server uptime: 1 day 1 hour 41 minutes 17 seconds Server load: 2.66 2.84 2.78 Total accesses: 453136 - Total Traffic: 6.2 GB - Total Duration: 494271650 CPU Usage: u252.01 s16.32 cu7492.56 cs394.11 - 8.82% CPU load 4.9 requests/sec - 69.9 kB/second - 14.3 kB/request - 1090.78 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 122697no3yes725000 210107no6yes230013 Sum209 955013 ................................_W_W______W__WW________W___R____ W_____________________________W_................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-3-0/0/3965. 0.00169591355292120.00.0061.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /30986xhlfitems/etid.html HTTP/1.1 0-3-0/0/4192. 0.001695037878030.00.0055.01 101.108.189.228http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /?wc-ajax=get_refreshed_fragments HTTP/2.0 0-3-0/0/3938. 0.001695051758620.00.0062.93 209.97.169.176http/1.1www.ozonepluswater.net:80GET /discount.php HTTP/1.1 0-3-0/0/4195. 0.001695040430450.00.0053.34 209.97.169.176http/1.1www.ozonepluswater.net:80GET /_.php HTTP/1.1 0-3-0/0/4041. 0.001695036008760.00.0050.67 209.97.169.176http/1.1www.ozonepluswater.net:80GET /pinuseren.php HTTP/1.1 0-3-0/0/4290. 0.00169590747433530.00.0056.94 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /lnaarie-8968netidm50yan HTTP/1.1 0-3-0/0/4064. 0.001695036984370.00.0065.16 209.97.169.176http/1.1www.ozonepluswater.net:80GET /above.php HTTP/1.1 0-3-0/0/4073. 0.00169584534192900.00.0052.90 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?sjqecaw-347391ditems/etid.html HTTP/1.1 0-3-0/0/4116. 0.001695254736825230.00.0095.09 66.249.69.227http/1.1www.chonlateenextbiz.com:443GET /g2387339.shtml HTTP/1.1 0-3-0/0/4053. 0.001695032110740.00.0052.44 209.97.169.176http/1.1www.ozonepluswater.net:80GET /cut.php HTTP/1.1 0-3-0/0/3912. 0.001695037630350.00.0049.29 209.97.169.176http/1.1www.ozonepluswater.net:80GET /minik.php HTTP/1.1 0-3-0/0/3831. 0.001695051760850.00.0048.55 209.97.169.176http/1.1www.ozonepluswater.net:80GET /smm.php HTTP/1.1 0-3-0/0/3886. 0.001695033092150.00.0052.28 209.97.169.176http/1.1www.ozonepluswater.net:80GET /zkmtq.php HTTP/1.1 0-3-0/0/4114. 0.001695049269370.00.0056.12 209.97.169.176http/1.1www.ozonepluswater.net:80GET /wp-fdd.php HTTP/1.1 0-3-0/0/4493. 0.001695038428650.00.0056.88 209.97.169.176http/1.1www.ozonepluswater.net:80GET /filter.php HTTP/1.1 0-3-0/0/3828. 0.001695054677010.00.0048.96 209.97.169.176http/1.1www.ozonepluswater.net:80GET /versions.php HTTP/1.1 0-3-0/0/4016. 0.001695038511310.00.0051.44 209.97.169.176http/1.1www.ozonepluswater.net:80GET /9837wes.php7 HTTP/1.1 0-3-0/0/4264. 0.001695033736740.00.0055.57 209.97.169.176http/1.1www.ozonepluswater.net:80GET /dropdown.php7 HTTP/1.1 0-3-0/0/4091. 0.001695031815170.00.0052.67 209.97.169.176http/1.1www.ozonepluswater.net:80GET /credits.php7 HTTP/1.1 0-3-0/0/3998. 0.001695037414430.00.0056.95 209.97.169.176http/1.1www.ozonepluswater.net:80GET /403.php HTTP/1.1 0-3-0/0/3971. 0.001695046565820.00.0059.29 209.97.169.176http/1.1www.ozonepluswater.net:80GET /style.php HTTP/1.1 0-3-0/0/3926. 0.001695052688400.00.0054.40 209.97.169.176http/1.1www.ozonepluswater.net:80GET /mfi.php HTTP/1.1 0-3-0/0/4374. 0.00169589738128240.00.0056.21 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?eychlzs-380345petidm2 HTTP/1.1 0-3-0/0/3976. 0.00169585931750120.00.0051.18 3.224.220.101http/1.1www.chonlateeboi.com:443GET /6158ztiaitems/etidm11w.html HTTP/1.1 0-3-0/0/3915. 0.00169536005737275560.00.0049.64 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-3-0/0/4072. 0.001695032694990.00.0052.17 209.97.169.176http/1.1www.ozonepluswater.net:80GET /zeal.php HTTP/1.1 0-3-0/0/4013. 0.001695035745160.00.0061.11 209.97.169.176http/1.1www.ozonepluswater.net:80GET /use.php HTTP/1.1 0-3-0/0/3988. 0.00169583841346100.00.0081.50 85.208.96.210http/1.1www.chonlateeboi.com:443GET /17038mydsetidm89i HTTP/1.1 0-3-0/0/3840. 0.001695115236274330.00.0049.35 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /jvyarie-37254letidm98w.htm HTTP/1.1 0-3-0/0/4206. 0.001695037339910.00.0089.14 209.97.169.176http/1.1www.ozonepluswater.net:80GET /wp-class.php HTTP/1.1 0-3-0/0/3940. 0.001695034807890.00.0058.66 209.97.169.176http/1.1www.ozonepluswater.net:80GET /masss.php HTTP/1.1 0-3-0/0/4302. 0.001695034843350.00.0053.79 209.97.169.176http/1.1www.ozonepluswater.net:80GET /92e4f6b2.php HTTP/1.1 1-3226970/316/3687_ 161.09583738770560.03.9048.23 52.167.144.186h2www.chonlateefood.com:443[0/0] init 1-3226971/264/3482W 161.8117038985320.03.2444.47 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 1-3226970/283/3452_ 162.002101259582850.03.2245.88 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /akwuxox-47385jetid.htm HTTP/1.1 1-3226971/310/3397W 161.460042175830.03.6543.93 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?gjvecaw-15463iitems/etidm61tw HTTP/1.1 1-3226970/305/3454_ 162.06562752686840.03.4247.93 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wjysvcw-294615letidm84j.htm HTTP/1.1 1-3226970/323/3648_ 162.29483827877730.04.4247.85 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /otplgro-24597cetidm.html HTTP/1.1 1-3226970/338/3581_ 162.43063028290320.03.8344.14 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?lnkaonh-209376xetidm7.htm HTTP/1.1 1-3226970/301/3627_ 162.36284244413240.03.5548.46 85.208.96.200http/1.1www.chonlateeadmin.com:443GET /trictef-5362vetid HTTP/1.1 1-3226970/322/3642_ 162.37283728859590.03.8447.47 52.70.240.171http/1.1www.chonlateeboi.com:443GET /23736ztiaetidm93yzn.htm HTTP/1.1 1-3226970/333/3519_ 162.460034713220.04.1945.26 178.128.151.41http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-3226971/271/3531W 156.93135033373150.03.4049.67 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 1-3226970/321/3739_ 162.132104829333460.03.8151.24 85.208.96.212http/1.1www.chonlateeboi.com:443GET /14986lvxaetid HTTP/1.1 1-3
Found on 2024-01-06 04:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a76ba79007Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Thursday, 28-Dec-2023 00:26:54 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 10 Parent Server MPM Generation: 9 Server uptime: 2 days 8 hours 32 minutes 34 seconds Server load: 2.99 3.34 3.02 Total accesses: 693695 - Total Traffic: 8.1 GB - Total Duration: 429242344 CPU Usage: u54.85 s12.47 cu11070.5 cs631.8 - 5.78% CPU load 3.41 requests/sec - 41.6 kB/second - 12.2 kB/request - 618.777 ms/request 10 requests currently being processed, 118 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 122461no6yes230015 222660no0yes230000 322662no0yes428000 422664no8yes230104 Sum4014 10118119 ................................_R___________W__________________ ________R_____________________R______________W____________RRR___ ________________R______W________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-9-0/0/6219. 0.0089154837356970.00.0071.39 52.167.144.212h2www.chonlateepr.com:443[0/0] Software caused connection abort 0-9-0/0/5946. 0.0089186339257320.00.0058.34 3.224.220.101http/1.1 0-9-0/0/5954. 0.00891237238872120.00.0059.63 136.243.220.210http/1.1www.chonlateefbc.com:80GET /?q=58-338-1 HTTP/1.1 0-9-0/0/5993. 0.0089190434586460.00.0057.54 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?gjvecaw-305415iitems/etidm30tw.htm HTTP/1.1 0-9-0/0/6152. 0.0089186934561480.00.0073.02 185.191.171.7http/1.1www.chonlateeadmin.com:443GET /pkertxd-28914retid.htm HTTP/1.1 0-9-0/0/6081. 0.00891038832670.00.0072.34 52.70.240.171http/1.1 0-9-0/0/5979. 0.00891189233149610.00.00107.55 52.70.240.171http/1.1 0-9-0/0/5904. 0.0089178533636880.00.0059.15 185.191.171.19http/1.1www.chonlateefood.com:443GET /getid/fsu12979hsmsitems HTTP/1.1 0-9-0/0/6429. 0.0089187133005690.00.0072.03 66.249.66.192http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?doentbr-21466retid.htm HTTP/1.1 0-9-0/0/6102. 0.008911037041260.00.0068.65 52.167.144.212h2www.chonlateepr.com:443[1/1] done: stream 1, GET /bhrinw/revib0024354870.html 0-9-0/0/6009. 0.0089185533034150.00.0060.19 23.22.35.162http/1.1 0-9-0/0/6155. 0.0089194232490980.00.0060.21 52.167.144.212h2www.chonlateepr.com:443GET /bhrinw/revib0024354870.html HTTP/2.0 0-9-0/0/6039. 0.0089186637972930.00.0079.39 23.22.35.162http/1.1 0-9-0/0/6089. 0.0089186339582300.00.0065.22 207.46.13.141h2www.chonlateepr.com:443GET /selins/irelt0025670946.html HTTP/2.0 0-9-0/0/6070. 0.00891103440234840.00.0068.45 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?342604spgdetidm5 HTTP/1.1 0-9-0/0/6075. 0.00891034579120.00.00144.95 3.224.220.101http/1.1 0-9-0/0/6380. 0.0089187139224090.00.0068.30 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?342565spgditems/etidm97 HTTP/1.1 0-9-0/0/5941. 0.0089191436319180.00.0059.54 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?342593spgdeti.html HTTP/1.1 0-9-0/0/6117. 0.00891108934844870.00.0063.62 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?342577spgditems/eti HTTP/1.1 0-9-0/0/6272. 0.00891033303300.00.0072.07 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /joqisbk82806d97bcbf45 HTTP/1.1 0-9-0/0/6204. 0.00891164938736460.00.0065.30 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?preecaw-305424retidm11cer.htm HTTP/1.1 0-9-0/0/6079. 0.0089189635119650.00.0063.03 23.22.35.162http/1.1 0-9-0/0/6067. 0.00891149650993050.00.00113.39 46.101.165.73http/1.1www.chonlateemeet.com:443POST /xmlrpc.php HTTP/1.1 0-9-0/0/5951. 0.0089185769289960.00.0069.60 207.46.13.141h2www.chonlateepr.com:443[1/1] done: stream 1, GET /selins/irelt0025670946.html 0-9-0/0/6040. 0.00891035340480.00.00102.74 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /kmrzycz209531eitems/etidm.htm HTTP/1.1 0-9-0/0/5735. 0.0089186160269520.00.0059.04 3.224.220.101http/1.1 0-9-0/0/6065. 0.00891111033745900.00.0061.40 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?appecaw-305461citems/etidm53 HTTP/1.1 0-9-0/0/6092. 0.00891539836860.00.0068.41 203.170.192.183http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1703697118.54105806350708007812 0-9-0/0/6162. 0.00891037851690.00.00104.64 52.167.144.212h2www.chonlateepr.com:443[0/0] init 0-9-0/0/6058. 0.00891538385780.00.0073.70 85.208.96.208http/1.1www.chonlateenextbiz.com:443GET /pc1fih/ashbourne-traffic-accident-today.html HTTP/1.1 0-9-0/0/5968. 0.0089187139297720.00.0067.96 3.224.220.101http/1.1 0-9-0/0/6019. 0.00891110936725330.00.0080.71 52.70.240.171http/1.1 1-9224610/21/5807_ 8.62286933661870.00.11111.97 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?370376spgditems/etidm43gsv.html HTTP/1.1 1-9224610/21/5707R 8.281489634320120.00.1874.63 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?329583spgditems/etidm22hd.htm HTTP/1.1 1-9224610/25/5971_ 8.852034674210.00.21102.18 161.35.155.246http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-9224610/30/6122_ 8.843107435387390.00.27112.73 52.167.144.219h2www.chonlateeaa.com:443GET /?s=hk-warehouse%5D-xiaomi-poco-x5-pro-5g-global-eu-ll-65m5 1-9224610/22/6071_ 8.382035404850.00.1880.34 52.167.144.219h2www.chonlateeaa.com:443[2/2] done: stream 3, GET /?s=%E2%80%8Eschoenberg-verklarte-nac 1-9224610/25/5764_ 8.861034258180.00.1665.14 164.90.222.93http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /debug/default/view?panel=config HTTP/1.1 1-9224610/28/5837_ 8.582034084290.00.2776.03 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /kgrrtdd285269eoqlddpsw/7736dbe.htm HTTP/1.1 1-9224610/32/6123_ 8.56386734470100.00.2663.05 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?opdecaw-312417qitems/eti.htm HTTP/1.1 1-9224610/19/5889_ 8.751034106590.00.1459.82 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /anhgzna133419uitems/etidm HTTP/1.1 1-9224610/23/5894_ 8.3012203452471730.00.1776.87 136.243.220.210http/1.1www.chonlateefbc.com:80GET /?q=56-1271-1 HTTP/1.1 1-9224610/18/6061_ 8.621207733994850.00.1363.46 164.90.222.93h2localhost:443[0/0] Software caused connection abort 1-9224610/29/5842_ 8.852035004180.00.1958.72 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 1-9224610/21/5855_ 8.08186934612650.00.2056.89 40
Found on 2023-12-27 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f446919b0cApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 09:23:16 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 5 hours 21 minutes 5 seconds Server load: 2.23 1.33 1.12 Total accesses: 30051 - Total Traffic: 438.6 MB - Total Duration: 41600434 CPU Usage: u2925.32 s5193.77 cu51099800 cs12501900 - 330000% CPU load 1.56 requests/sec - 23.3 kB/second - 14.9 kB/request - 1384.33 ms/request 8 requests currently being processed, 3 idle workers RW_._W_WWCWW...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762272020/87/2584R 42.811133540050.01.1248.86 167.71.185.75http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1762276210/43/2340W 49.710032798580.00.3146.71 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.0 2-1762280340/3/2470_ 31.821105933334680.00.0229.70 217.182.175.120http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 3-1762-0/0/2239. 0.004031110230.00.0029.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1762276300/48/2426_ 53.150131205840.00.5444.94 167.71.185.75http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1762276360/44/2323W 48.860033333950.00.4327.58 172.71.131.162http/1.1www.jbbgarment.com:80POST /wp-login.php HTTP/1.0 6-1762279670/9/2113_ 33.9801530586810.00.1025.28 172.70.127.76http/1.1www.ptatun.or.th:80GET /wp-content/themes/chonlateedesign/fonts/fontawesome-webfon 7-1762279880/11/1968W 6.940026389770.00.1524.33 172.68.234.185http/1.1www.jbbgarment.com:80POST /wp-cron.php?doing_wp_cron=1695435795.80755591392517089843 8-1762280140/4/1800W 31.550024562350.00.0321.29 157.230.219.118http/1.1www.thai-pack.com:80GET /wp-login.php HTTP/1.0 9-1762280411/10/1701C 2.080123059062.70.0422.17 64.227.126.135http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1762280420/3/1734W 2.4329023254270.00.0422.25 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 11-1762280830/7/1455W 1.160022496710.00.0118.04 172.68.234.171http/1.1www.jbbgarment.com:80GET /1558575917369/ HTTP/1.0 12-1762-0/0/994. 0.00126100214710650.00.0017.23 172.71.135.38http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 13-1762-0/0/972. 0.00197014887740.00.0011.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/1014. 0.00995015286630.00.0016.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/762. 0.004508963750.00.009.61 154.12.241.88http/1.1www.emba35.com:443POST /xmlrpc.php HTTP/1.1 16-1762-0/0/639. 0.00100808419270.00.008.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/80. 0.008250864080.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/217. 0.00204510020.00.003.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/94. 0.0064596121059020.00.001.26 172.68.234.144http/1.1www.ptatun.or.th:80POST /wp-cron.php?doing_wp_cron=1695429335.63167810440063476562 20-1762-0/0/99. 0.00771701298300.00.004.31 65.21.232.254http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%AA 21-1762-0/0/16. 0.0080740264580.00.002.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/2. 0.008115020500.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/9. 0.008097047380.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 63subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 125 seconds, (range: 0...263)index usage: 2%, cache usage: 2%total entries stored since starting: 4051total entries replaced since starting: 0total entries expired since starting: 3988total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 124 hit, 9878 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 02:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4bd17f68aApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 05:47:42 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 1 hour 45 minutes 30 seconds Server load: 0.81 0.65 0.61 Total accesses: 5984 - Total Traffic: 100.4 MB - Total Duration: 9082586 CPU Usage: u2847.09 s5164.41 cu50855500 cs12450100 - 1.e+6% CPU load .945 requests/sec - 16.2 kB/second - 17.2 kB/request - 1517.81 ms/request 1 requests currently being processed, 7 idle workers __W_____.......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743323980/85/530_ 55.11017729520.00.936.01 162.251.5.152http/1.1www.pentorproperty.com:80POST /xmlrpc.php HTTP/1.0 1-1743324860/82/528_ 47.48018315330.00.838.62 144.126.198.24http/1.1 2-1743326010/66/559W 45.10008902250.00.6918.68 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 3-17433560/52/503_ 26.85106965290.011.1319.42 144.126.198.24http/1.1 4-17434720/35/449_ 21.97016898830.00.395.83 144.126.198.24http/1.1 5-17434950/36/502_ 21.70117815540.00.307.16 162.251.5.152http/1.1www.pentorproperty.com:80POST /xmlrpc.php HTTP/1.0 6-17437740/13/386_ 8.16015776520.00.084.82 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1743326780/59/482_ 33.17017142460.00.565.20 64.227.126.135http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1743-0/0/495. 0.007808878110.00.006.11 149.56.22.133http/1.1www.wealneosupply.com:443POST /xmlrpc.php HTTP/1.1 9-1743-0/0/332. 0.0086604064260.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1743-0/0/323. 0.00119104574660.00.004.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/208. 0.002111683570730.00.002.24 164.90.205.35http/1.1www.chonlateefood.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1743-0/0/285. 0.00119203504610.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/296. 0.00810965266750.00.004.69 164.90.205.35http/1.1www.chonlateefood.com:80GET /config.json HTTP/1.0 14-1743-0/0/3. 0.001190017350.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/4. 0.001188036090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/99. 0.0025685551367480.00.001.07 4.151.108.4http/1.1www.uniqueworkthailand.com:443GET /admin-heade.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 44subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 78 seconds, (range: 0...269)index usage: 1%, cache usage: 2%total entries stored since starting: 977total entries replaced since starting: 0total entries expired since starting: 933total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 13 hit, 2244 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-18 22:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4cfe84dd5Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 16-Sep-2023 20:54:44 +07 Restart Time: Saturday, 16-Sep-2023 04:02:13 +07 Parent Server Config. Generation: 1732 Parent Server MPM Generation: 1731 Server uptime: 16 hours 52 minutes 31 seconds Server load: 0.56 0.55 0.50 Total accesses: 112700 - Total Traffic: 1.7 GB - Total Duration: 216801377 CPU Usage: u2701.12 s5117.07 cu50702800 cs12416800 - 104000% CPU load 1.86 requests/sec - 28.7 kB/second - 15.5 kB/request - 1923.7 ms/request 7 requests currently being processed, 4 idle workers CWC.CC_...._C_._.R................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1731152911/90/8936C 25.5310168729051.40.93150.86 128.199.62.55http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 1-1731158760/0/9052W 0.0000163281900.00.00151.59 137.184.106.30http/1.1localhost:80GET /server-status HTTP/1.0 2-1731154011/77/8308C 21.5501183113481.41.29112.96 128.199.62.55http/1.1localhost:443GET /config.json HTTP/1.1 3-1731-0/0/8394. 0.00910158008810.00.00106.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1731157801/13/7808C 3.9000178511992.70.05132.31 128.199.61.251http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1731154781/63/8359C 18.9000151946546.40.33128.58 173.236.168.108http/1.1www.nakindogtraining.com:443POST /xmlrpc.php HTTP/1.1 6-1731155590/54/7955_ 13.9500138218860.00.50111.64 137.184.106.30http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1731-0/0/7777. 0.00830140205070.00.00109.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1731-0/0/7356. 0.00790131212680.00.00126.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1731-0/0/6419. 0.00880110159680.00.0092.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1731-0/0/6096. 0.00850107615380.00.0093.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1731157200/24/5595_ 6.5400132647800.00.2391.69 128.199.62.55http/1.1localhost:443GET /.env HTTP/1.1 12-1731157261/27/5167C 4.790099645801.40.1663.78 128.199.62.55http/1.1localhost:443GET /telescope/requests HTTP/1.1 13-1731157330/25/3767_ 5.750173454910.00.2080.74 128.199.62.55http/1.1localhost:443GET /.git/config HTTP/1.1 14-1731-0/0/2895. 0.0086059211320.00.0041.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1731157950/11/2155_ 1.630042433440.00.0825.31 172.71.131.148http/1.1www.rooffurnish.com:443POST /xmlrpc.php HTTP/1.1 16-1731-0/0/1309. 0.0087032167860.00.0017.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1731158180/10/782R 2.441013261370.00.0610.41 128.199.61.251http/1.1localhost:443GET / HTTP/1.1 18-1731-0/0/812. 0.006611013448240.00.0010.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1731-0/0/560. 0.00661509111300.00.007.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1731-0/0/421. 0.00661795715910.00.005.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1731-0/0/438. 0.0060575646412060.00.005.02 172.70.254.39http/1.1www.orderaccounting.com:80GET /?author=25 HTTP/1.0 22-1731-0/0/202. 0.00660803983050.00.003.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1731-0/0/488. 0.0060625059714010.00.005.91 172.70.55.52http/1.1www.orderaccounting.com:80GET /?author=21 HTTP/1.0 24-1731-0/0/226. 0.001680404109940.00.003.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1731-0/0/131. 0.002259802622980.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1731-0/0/42. 0.002260101476380.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1731-0/0/121. 0.002259502604270.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1731-0/0/26. 0.00225930598360.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1731-0/0/65. 0.002234001486320.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1731-0/0/145. 0.00221072272841110.00.001.39 34.212.135.232http/1.1www.cnb.co.th:443GET /wp-content/themes/sydney/fonts/font-awesome-v5/all.min.css 31-1731-0/0/23. 0.00226110558830.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1731-0/0/17. 0.00226140177300.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1731-0/0/44. 0.00225920514260.00.000.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1731-0/0/123. 0.00220985683168160.00.001.37 34.212.135.232http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/golden-abacus-with-chinese-rmb- 35-1731-0/0/152. 0.00221164042613490.00.001.51 51.79.161.78http/1.1www.pentorproperty.com:80GET /wp-login.php HTTP/1.0 36-1731-0/0/31. 0.00226040643540.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1731-0/0/132. 0.002247503673140.00.001.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1731-0/0/45. 0.00224470622800.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1731-0/0/23. 0.00225970459730.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1731-0/0/27. 0.00225890478010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1731-0/0/12. 0.00460750248910.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1731-0/0/105. 0.00455363942319840.00.001.87 23.97.205.210http/1.1www.ss-cool.com:443POST /wp-login.php HTTP/1.1 43-1731-0/0/10. 0.0046103362040.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1731-0/0/15. 0.00460740357110.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1731-0/0/99. 0.004544416283147040.00.001.20 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 46-1731-0/0/9. 0.00460550303520.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1731-0/0/8. 0.00460790271660.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1731-0/0/7. 0.00460760237160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1731-0/0/11. 0.00460677207120.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this chil
Found on 2023-09-16 13:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4f09ac923Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 02:05:48 +07 Restart Time: Thursday, 14-Sep-2023 00:23:29 +07 Parent Server Config. Generation: 1720 Parent Server MPM Generation: 1719 Server uptime: 1 hour 42 minutes 19 seconds Server load: 0.45 0.52 0.48 Total accesses: 5740 - Total Traffic: 71.8 MB - Total Duration: 8088232 CPU Usage: u2668.09 s5091.21 cu50510500 cs12375100 - 1020000% CPU load .935 requests/sec - 12.0 kB/second - 12.8 kB/request - 1409.1 ms/request 2 requests currently being processed, 8 idle workers ___WR_____........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-171983740/81/366_ 30.32115015550.00.653.80 74.207.237.114http/1.1 1-171983990/75/434_ 34.8118565360910.00.709.92 172.71.134.123http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 2-171986770/36/227_ 14.96103174790.00.222.24 134.122.63.192http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 3-171987970/8/284W 3.46004343940.00.063.97 134.122.63.192http/1.1localhost:80GET /server-status HTTP/1.0 4-171988080/4/346R 2.87104294270.00.046.01 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 5-171988380/3/119_ 0.03001990190.00.011.44 134.122.63.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-171988480/2/181_ 0.81111892772500.00.021.77 54.36.149.8http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 7-171988550/1/165_ 0.00012404660.00.001.74 74.207.237.114http/1.1 8-171988620/0/245_ 0.00003951260.00.003.26 74.207.237.114http/1.1 9-171988680/1/120_ 0.00012123670.00.001.61 134.122.63.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 10-1719-0/0/115. 0.0096501648300.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1719-0/0/115. 0.0093502007280.00.001.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1719-0/0/115. 0.0091601758330.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1719-0/0/109. 0.0095601337420.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1719-0/0/283. 0.00667333916840.00.003.61 172.71.134.122http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 15-1719-0/0/204. 0.0095102606180.00.002.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1719-0/0/14. 0.009570398190.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1719-0/0/13. 0.009250451110.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1719-0/0/67. 0.009580977330.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1719-0/0/103. 0.0094101587400.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1719-0/0/111. 0.009301253490.00.000.73 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.0 21-1719-0/0/41. 0.009380378610.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1719-0/0/103. 0.0096601409610.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1719-0/0/85. 0.0096401159350.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1719-0/0/167. 0.0093402853240.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1719-0/0/11. 0.009530416760.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1719-0/0/191. 0.004802018290.00.001.49 51.15.17.105http/1.1www.chonlateepro.com:80GET /wp-admin/dropdown.php HTTP/1.0 27-1719-0/0/126. 0.0072801751060.00.001.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1719-0/0/78. 0.0094301163110.00.003.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1719-0/0/110. 0.00617731587560.00.000.66 172.71.134.123http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 30-1719-0/0/194. 0.0095202176920.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1719-0/0/14. 0.009490237680.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1719-0/0/15. 0.009420343510.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1719-0/0/72. 0.0094401339000.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1719-0/0/124. 0.002001468900.00.000.90 51.15.17.105http/1.1www.chonlateepro.com:80GET /about.php HTTP/1.0 35-1719-0/0/102. 0.0095501396420.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1719-0/0/77. 0.0094001103280.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1719-0/0/24. 0.009330464130.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1719-0/0/10. 0.009540244910.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1719-0/0/101. 0.005511166230.00.000.72 128.199.107.85http/1.1www.pndintertrade.com:443GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1 40-1719-0/0/10. 0.009590218960.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1719-0/0/104. 0.0093601518840.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1719-0/0/36. 0.009620518450.00.000.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1719-0/0/9. 0.009450263700.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1719-0/0/9. 0.009600241300.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1719-0/0/64. 0.009220217990.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1719-0/0/9. 0.009500226950.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1719-0/0/99. 0.009011159860.00.000.88 159.223.102.13http/1.1localhost:80GET /telescope/requests HTTP/1.0 48-1719-0/0/8. 0.009470206300.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1719-0/0/11. 0.009310257510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache
Found on 2023-09-13 19:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4a6312a7fApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 05:20:44 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 1 hour 18 minutes 32 seconds Server load: 0.34 0.44 0.44 Total accesses: 5700 - Total Traffic: 61.9 MB - Total Duration: 6916868 CPU Usage: u2781.96 s5110.56 cu50459200 cs12364400 - 1330000% CPU load 1.21 requests/sec - 13.5 kB/second - 11.1 kB/request - 1213.49 ms/request 1 requests currently being processed, 8 idle workers ___._____W........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716140470/12/534_ 5.65006785330.00.104.69 139.144.150.45http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1716136200/58/541_ 32.52016404150.00.414.31 139.144.150.45http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-1716133670/76/562_ 39.4809286889830.00.874.79 68.183.64.176http/1.1 3-1716-0/0/477. 0.001308016660240.00.0011.17 198.41.242.155http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 4-1716136270/55/429_ 28.7717605644900.00.463.56 68.183.64.176http/1.1 5-1716133800/78/475_ 36.95115082040.00.763.80 139.144.150.45http/1.1localhost:80GET /about HTTP/1.0 6-1716136290/56/287_ 32.5509453378550.00.592.41 68.183.64.176http/1.1 7-1716136450/56/506_ 24.89015638950.00.423.67 68.183.64.176http/1.1 8-1716136860/53/393_ 24.49114175500.00.412.69 139.144.150.45http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 9-1716140730/11/398W 8.02005128300.00.139.33 139.144.150.45http/1.1localhost:80GET /server-status HTTP/1.0 10-1716-0/0/424. 0.0059524964987890.00.003.75 172.70.175.63http/1.1www.chonlateefarm.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 11-1716-0/0/272. 0.0014479123560340.00.002.11 162.158.110.136http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 12-1716-0/0/96. 0.00951311017810.00.001.78 27.254.96.168http/1.1 13-1716-0/0/83. 0.0011610949730.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/25. 0.0014640170190.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/5. 0.001474030270.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/100. 0.0060017061447800.00.001.05 54.36.148.29http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%9B%E0%B8%B4%E0%B8%94 17-1716-0/0/93. 0.0060401216780.00.000.69 162.243.161.105http/1.1localhost:443GET /login.action HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 30subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 144 seconds, (range: 1...294)index usage: 1%, cache usage: 1%total entries stored since starting: 927total entries replaced since starting: 0total entries expired since starting: 897total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 40 hit, 1647 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 22:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4951fb98cApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 23:25:26 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 19 hours 23 minutes 11 seconds Server load: 0.80 0.72 0.66 Total accesses: 99134 - Total Traffic: 1.4 GB - Total Duration: 140511112 CPU Usage: u2748.91 s5080.77 cu50294400 cs12328000 - 89700% CPU load 1.42 requests/sec - 21.3 kB/second - 15.0 kB/request - 1417.39 ms/request 2 requests currently being processed, 9 idle workers ______W___W....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170285560/5/8446_ 1.9203115474940.00.04117.43 143.110.218.229http/1.1 1-170281730/60/8381_ 31.011353115953740.00.58126.16 35.91.154.119http/1.1www.hotlineservicethailand.com:GET /.git/config HTTP/1.1 2-170282330/51/8198_ 22.661579118188410.00.47119.73 162.158.175.49http/1.1www.singkansard.com:443GET //wp-info.php HTTP/1.1 3-170278940/92/8052_ 41.6700111787070.01.09109.16 167.172.20.95http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-170279240/86/7478_ 51.9811358108867400.01.16107.33 172.68.234.191http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-170285680/6/7907_ 1.8910106967240.00.02116.73 143.110.218.229http/1.1 6-170284190/22/7223W 5.1500107139420.00.1098.33 167.172.20.95http/1.1localhost:80GET /server-status HTTP/1.0 7-170284350/21/7480_ 7.8116450107379950.00.12110.89 172.68.234.191http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1694363118.35527396202087402343 8-170279370/88/6734_ 45.721094729530.00.7887.71 167.172.20.95http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-170285820/3/6279_ 2.310140688843610.00.0495.29 143.110.218.229http/1.1 10-170286090/0/5583W 0.000077909030.00.0088.12 162.158.175.50http/1.1www.singkansard.com:443GET /wp-info.php HTTP/1.1 11-1702-0/0/4892. 0.00716065739470.00.0079.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1702-0/0/4385. 0.00744264472900.00.0070.34 149.56.150.193http/1.1www.chonlateeadmin.com:443GET /wp-content/plugins/qi-addons-for-elementor/inc/plugins/ele 13-1702-0/0/2245. 0.00749034051320.00.0044.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702-0/0/1943. 0.0048026295440.00.0029.18 141.148.205.245http/1.1www.summer-techthai.com:443POST /xmlrpc.php HTTP/1.1 15-1702-0/0/1290. 0.00329016197470.00.0016.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/536. 0.00782010827790.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/391. 0.0072204357650.00.004.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/89. 0.007480956730.00.001.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.001035601786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.001259401383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.00125030344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.001260104959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.00126060735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.0012587077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.00126000103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.00125900121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.001207742131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.001258601402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.0012613074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.00124690299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.001250601458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.00124500524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.001261201921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.001259902967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.001261103934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.0012598057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.00121088722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.001261002571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.0012596045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0059795060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 80subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 81 seconds, (range: 2...296)index usage: 2%, cache usage: 3%total entries stored since starting: 17081total entries replaced since starting: 0total entries expired since starting: 17001total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 428 hit, 39861 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 16:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4e1cc73efApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:26:29 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 24 minutes 17 seconds Server load: 1.86 1.84 1.72 Total accesses: 23226 - Total Traffic: 285.7 MB - Total Duration: 30599152 CPU Usage: u2797.28 s5073.39 cu50054100 cs12276600 - 393000% CPU load 1.46 requests/sec - 18.4 kB/second - 12.6 kB/request - 1317.45 ms/request 5 requests currently being processed, 7 idle workers __C_WW..__W_W_.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685201940/41/2105_ 25.680029176510.00.3928.22 139.144.150.26http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1685199690/87/2035_ 60.530114126158310.00.8726.16 180.247.192.81http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 2-1685203941/2/1950C 1.7201140248114724.50.0421.90 172.70.91.193http/1.1www.chonlateeit.com:443GET /wp-admin/network/usa.php HTTP/1.1 3-1685202150/38/1831_ 29.480125454570.00.4123.49 159.203.63.67http/1.1 4-1685202280/32/1806W 24.150024422680.00.3621.90 46.32.255.120http/1.1www.chonlateepro.com:443GET /wp-includes/css/wp-embed.php HTTP/1.1 5-1685200400/72/1629W 51.140018732790.00.7619.41 172.70.90.187http/1.1www.chonlateeplus.com:443GET /wp-includes/css/wp-embed.php HTTP/1.1 6-1685-0/0/1786. 0.0068022549980.00.0021.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1685-0/0/1850. 0.0065024444280.00.0020.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1685202620/29/1647_ 17.66076521004790.00.2318.50 172.70.85.165http/1.1www.chonlateeauto.com:443GET /wp-admin/network/usa.php HTTP/1.1 9-1685202690/29/1608_ 17.98075021470470.00.2823.46 180.247.192.81http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 10-1685202710/28/1167W 18.200015893140.00.2614.24 139.144.150.26http/1.1localhost:80GET /server-status HTTP/1.0 11-1685201140/62/954_ 38.860112114400.00.6110.90 139.144.150.26http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1685203160/16/784W 12.120011686230.00.179.04 172.70.42.2http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%88%E0%B8%A3 13-1685203240/18/652_ 13.380110170890.00.2010.07 159.203.63.67http/1.1 14-1685-0/0/464. 0.0051706654360.00.005.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685-0/0/423. 0.001197105073870.00.004.78 180.247.192.81http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 16-1685-0/0/105. 0.00473701181390.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/118. 0.00463001201320.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/3. 0.0013370019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.001267711391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0013356015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001264610331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001266631185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001336308790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0013365010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0013362030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0013373010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0013360011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0013361012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001335809920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0013372010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 78subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 65 seconds, (range: 8...276)index usage: 2%, cache usage: 3%total entries stored since starting: 3675total entries replaced since starting: 0total entries expired since starting: 3597total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 66 hit, 7155 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f41becfecdApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 03-Sep-2023 22:50:01 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 7 hours 26 minutes 47 seconds Server load: 2.19 2.12 3.01 Total accesses: 77583 - Total Traffic: 805.5 MB - Total Duration: 121804137 CPU Usage: u2763.08 s5023.82 cu49697000 cs12195200 - 231000% CPU load 2.89 requests/sec - 30.8 kB/second - 10.6 kB/request - 1569.98 ms/request 5 requests currently being processed, 6 idle workers R____W._WWW..._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674186120/14/5826R 7.29195679182370.00.0663.07 172.71.167.73http/1.1www.orderaccounting.com:80GET //ee.php HTTP/1.0 1-1674183170/52/5785_ 31.420077764220.00.3166.37 178.62.73.12http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1674182060/75/5788_ 35.58048577514030.00.3259.72 172.68.234.178http/1.1www.orderaccounting.com:80POST /wp-cron.php?doing_wp_cron=1693756200.74506402015686035156 3-1674182150/68/5634_ 28.84098672805700.00.2661.67 172.70.39.65http/1.1www.smebkk.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%A7 4-1674186470/10/5449_ 4.720103074110060.00.0467.43 172.71.167.73http/1.1www.orderaccounting.com:80GET /ee.php HTTP/1.0 5-1674182540/66/5250W 32.740069809060.00.4357.68 178.62.73.12http/1.1localhost:80GET /server-status HTTP/1.0 6-1674-0/0/5059. 0.001546767959350.00.0053.89 172.68.234.4http/1.1www.singkansard.com:443POST /wp-cron.php?doing_wp_cron=1693756185.09142398834228515625 7-1674182210/75/4858_ 40.59036165424480.00.3849.77 172.68.234.190http/1.1www.smebkk.com:80POST /wp-cron.php?doing_wp_cron=1693756200.34313893318176269531 8-1674182670/64/4747W 31.290064760900.00.3247.83 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693756200.84417796134948730468 9-1674183580/46/4585W 24.231063091010.00.2466.05 163.123.143.97http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 10-1674184820/29/4279W 15.450057834470.00.2056.52 172.71.167.73http/1.1www.orderaccounting.com:80GET //wp-includes/wp-class.php HTTP/1.0 11-1674-0/0/3787. 0.00225052696570.00.0035.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1674-0/0/3461. 0.00152049994910.00.0034.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1674-0/0/2193. 0.00181033942990.00.0019.36 178.178.91.58http/1.1www.nadapool.com:80GET /contact/ HTTP/1.0 14-1674180740/93/2169_ 38.900035014410.00.3621.46 161.35.27.144http/1.1 15-1674-0/0/1353. 0.00138022942830.00.0012.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1674-0/0/864. 0.001445018830130.00.005.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1674-0/0/715. 0.001442017840260.00.004.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1674-0/0/497. 0.001371013923060.00.002.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1674-0/0/507. 0.001393015065500.00.002.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1674-0/0/313. 0.001416011369510.00.001.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/305. 0.001180010485030.00.001.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1674-0/0/325. 0.001153102610515360.00.001.20 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693755046.55650210380554199218 23-1674-0/0/267. 0.001310010277080.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1674-0/0/279. 0.001313010773600.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/294. 0.001377010098660.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1674-0/0/319. 0.001374012162920.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/397. 0.0010691213491190.00.002.01 172.68.234.196http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 28-1674-0/0/225. 0.00134709096500.00.001.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/232. 0.00142209000050.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/218. 0.00191918710130.00.001.00 167.99.8.63http/1.1localhost:443GET /v2/_catalog HTTP/1.1 31-1674-0/0/190. 0.00186616337715740.00.000.53 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754332.79655790328979492187 32-1674-0/0/191. 0.00196617917633200.00.000.44 134.122.63.192http/1.1 33-1674-0/0/200. 0.00197826428295680.00.000.41 198.41.230.115http/1.1www.smetast.com:80GET / HTTP/1.0 34-1674-0/0/105. 0.00207704216670.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/100. 0.00221818455189810.00.000.20 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753980.5489 HTTP/1.0 36-1674-0/0/88. 0.00213904308510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/118. 0.00208504782180.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1674-0/0/46. 0.00236102531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.00222327385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.00229003865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.00226904242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.00221904803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.00213215754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.00211619884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 237subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 37 seconds, (range: 0...132)index usage: 8%, cache usage: 10%total entries stored since starting: 12682total entries replaced since starting: 0total entries expired since starting: 12445total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 84 hit, 14669 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 15:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4855a4fc6Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 23:14:31 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 5 hours 26 minutes 31 seconds Server load: 7.54 7.58 6.91 Total accesses: 136432 - Total Traffic: 1007.8 MB - Total Duration: 172507956 CPU Usage: u2928.4 s4983.69 cu48722300 cs11944800 - 310000% CPU load 6.96 requests/sec - 52.7 kB/second - 7.6 kB/request - 1264.42 ms/request 13 requests currently being processed, 4 idle workers RW_WW__W_W..WWCRW..RR............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1652282950/29/8677R 14.150695107146560.00.0862.44 162.158.174.246http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 1-1652282590/43/8491W 26.1900106151400.00.1669.97 172.69.65.135http/1.1www.accsmile.com:80POST //xmlrpc.php HTTP/1.0 2-1652281870/58/8400_ 34.620278103727010.00.2062.54 172.173.110.165http/1.1www.eecproject.com:80POST //xmlrpc.php HTTP/1.0 3-1652282020/61/8186W 35.5900103778620.00.2672.11 138.68.133.118http/1.1localhost:80GET /server-status HTTP/1.0 4-1652281930/65/8282W 38.1600102114890.00.2458.41 172.70.174.140http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 5-1652282660/39/7997_ 24.190147099709040.00.2156.01 162.158.174.177http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET / HTTP/1.1 6-1652281550/69/7849_ 42.33098898005040.00.2854.40 198.41.242.196http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 7-1652283710/2/8027W 0.7500100280910.00.0054.50 172.173.90.228http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 8-1652283420/16/7739_ 8.21080295588300.00.0554.74 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 9-1652282500/44/7366W 27.150093774780.00.1856.84 172.71.175.86http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 10-1652-0/0/7127. 0.00438890575300.00.0064.81 172.69.65.135http/1.1www.accsmile.com:80POST //xmlrpc.php HTTP/1.0 11-1652-0/0/6724. 0.0031082079600.00.0050.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1652282800/29/6548W 17.750082050740.00.1246.08 172.71.167.6http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 13-1652280570/73/6121W 100.730077978000.00.2940.88 172.173.110.165http/1.1www.eecproject.com:80POST //xmlrpc.php HTTP/1.0 14-1652281161/93/6146C 56.48048077558017.20.3646.84 172.173.110.210http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 15-1652283010/27/4829R 16.600161266910.00.1133.91 103.130.219.13http/1.1 16-1652282100/60/4484W 34.170055611550.00.2030.36 172.70.39.177http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 17-1652-0/0/3873. 0.0027048694500.00.0026.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1652-0/0/2662. 0.0047034762760.00.0019.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1652282170/56/1500R 33.12041819785070.00.2311.94 162.158.174.247http/1.1www.siamautomation.com:443 20-1652282890/31/1316R 16.84045618917550.00.129.46 23.101.127.100http/1.1www.thaiquickservice.net:443 21-1652-0/0/729. 0.0042011312280.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1652-0/0/471. 0.0019208090630.00.003.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1652-0/0/473. 0.0031907817690.00.002.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1652-0/0/238. 0.0032204184090.00.001.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1652-0/0/341. 0.0031705475730.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1652-0/0/288. 0.001396334754470.00.001.56 162.158.174.247http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 27-1652-0/0/187. 0.00172802941630.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/48. 0.00174101000030.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/122. 0.00172602091980.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1652-0/0/103. 0.00153210451980970.00.000.44 167.71.196.133http/1.1www.nakindogtraining.com:443POST //xmlrpc.php HTTP/1.1 31-1652-0/0/108. 0.00154614931708720.00.000.51 172.70.188.83http/1.1www.chonlateeit.com:443GET /about.php HTTP/1.1 32-1652-0/0/136. 0.0015488612273450.00.000.63 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 33-1652-0/0/60. 0.00168170565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.00168150696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.00168110719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.00168660349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.00166694061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.00168867143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.00168420530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.00168680257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.00168740208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.00168800142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.00168450543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.00167064221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.00168560415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.00166667931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.001667810251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.00166579421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.00168850109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferre
Found on 2023-08-31 16:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f45ec2fe4fApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 29-Aug-2023 06:20:33 +07 Restart Time: Tuesday, 29-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1638 Parent Server MPM Generation: 1637 Server uptime: 2 hours 18 minutes 20 seconds Server load: 3.65 3.29 3.22 Total accesses: 56512 - Total Traffic: 482.1 MB - Total Duration: 70582856 CPU Usage: u2575.43 s4801.9 cu47528500 cs11628900 - 713000% CPU load 6.81 requests/sec - 59.5 kB/second - 8.7 kB/request - 1248.99 ms/request 5 requests currently being processed, 10 idle workers _._.____._...WR._.W.W_..W_........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1637255670/29/3588_ 11.55062045011620.00.9031.50 172.71.130.28http/1.1www.chonlateeplus.com:443GET /wordpress/wp-content/plugins/memek/z.php HTTP/1.1 1-1637-0/0/3600. 0.007044594660.00.0030.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1637255870/23/3477_ 9.410132843217050.01.0630.93 45.55.193.222http/1.1 3-1637-0/0/3330. 0.003041633560.00.0027.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1637255160/57/3264_ 26.31061540699220.00.2924.93 108.162.226.4http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 5-1637255280/36/3258_ 12.94051341293270.00.9927.01 108.162.226.4http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 6-1637255350/40/3325_ 17.33046641348430.00.7528.92 172.173.94.217http/1.1www.hotlineservicethailand.com:POST //xmlrpc.php HTTP/1.1 7-1637255490/30/3165_ 13.47042540138570.00.1625.51 162.158.175.54http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 8-1637-0/0/3310. 0.005040525570.00.0029.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1637256300/11/2976_ 2.480036700730.00.0223.59 45.55.193.222http/1.1 10-1637-0/0/2948. 0.006036650410.00.0023.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1637-0/0/2647. 0.001483833351600.00.0023.53 172.71.158.213http/1.1www.siamerp.com:443GET /wp-content/uploads/2019/07/image_Home-02-1024x512.jpg HTTP 12-1637-0/0/2618. 0.0010031980230.00.0024.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1637256420/7/2417W 2.730030313310.00.2319.90 104.43.165.99http/1.1www.siamsolarrooftop.com:443POST //wp-login.php HTTP/1.1 14-1637256500/7/2349R 2.071129689080.00.1519.17 172.71.135.99http/1.1www.dr-rpi.com:443 15-1637-0/0/2036. 0.00137325467810.00.0019.30 45.55.193.222http/1.1 16-1637256600/7/2042_ 2.33041524692490.00.0317.70 45.55.193.222http/1.1 17-1637-0/0/1753. 0.009022128060.00.0014.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1637256740/6/1272W 3.330017135190.00.0410.23 142.93.158.96http/1.1localhost:80GET /server-status HTTP/1.0 19-1637-0/0/905. 0.004011376650.00.007.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1637256780/6/562W 0.94006893650.00.023.89 162.158.175.54http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 21-1637256870/6/266_ 2.9206733221660.00.032.46 172.71.131.163http/1.1www.dr-rpi.com:443GET /configYCJ/Jump/0-lwmnnc0a/wp-content/mu-plugins/shell.php 22-1637-0/0/476. 0.00806169900.00.003.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1637-0/0/219. 0.001102660750.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1637257010/6/230W 2.40002846280.00.022.01 108.162.226.5http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 25-1637257070/6/209_ 2.19002508100.00.031.88 142.93.158.96http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 26-1637-0/0/171. 0.00233902254790.00.005.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1637-0/0/99. 0.0049077031325790.00.000.64 40.122.173.134http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 109subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 49 seconds, (range: 8...196)index usage: 3%, cache usage: 5%total entries stored since starting: 3378total entries replaced since starting: 0total entries expired since starting: 3269total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 17880 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-28 23:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f449951d05Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 28-Aug-2023 17:13:38 +07 Restart Time: Monday, 28-Aug-2023 17:12:39 +07 Parent Server Config. Generation: 1635 Parent Server MPM Generation: 1634 Server uptime: 59 seconds Server load: 5.31 5.89 6.23 Total accesses: 532 - Total Traffic: 2.9 MB - Total Duration: 521125 CPU Usage: u2664.69 s4811.36 cu47361500 cs11585800 - 9.99e+7% CPU load 9.02 requests/sec - 50.7 kB/second - 5.6 kB/request - 979.558 ms/request 13 requests currently being processed, 3 idle workers RWRWW_RRW._._WWR.WR............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1634157330/34/34R 16.3501351740.00.260.26 128.199.62.55http/1.1localhost:80GET /_all_dbs HTTP/1.0 1-1634157340/37/37W 16.8400340670.00.200.20 172.71.167.59http/1.1www.orderaccounting.com:80POST //wp-login.php HTTP/1.0 2-1634157430/38/38R 18.7300377990.00.170.17 162.243.161.105http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1634157550/26/26W 10.9600218610.00.150.15 20.9.48.52http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4POST //wp-login.php HTTP/1.1 4-1634157640/35/35W 17.4900380510.00.200.20 172.69.65.122http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 5-1634157790/39/39_ 17.3101352690.00.160.16 164.92.84.255http/1.1localhost:80GET /login.action HTTP/1.0 6-1634158770/17/20R 7.8300188770.00.100.11 142.93.158.96http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /server-status HTTP/1.0 7-1634157880/23/23R 11.640696239780.00.150.15 20.9.48.52http/1.1www.xn--12ca1al2c4cm5fzaon1x.co 8-1634157980/32/32W 16.1900327430.00.210.21 172.71.170.53http/1.1www.makeregist.com:80POST //xmlrpc.php HTTP/1.0 9-1634-0/0/11. 0.0040109100.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1634159060/8/14_ 3.3501103070.00.070.08 142.93.64.15http/1.1 11-1634-0/0/3. 0.0050022370.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1634158220/33/33_ 15.6101315380.00.170.17 143.42.118.5http/1.1 13-1634158240/29/29W 14.1700284300.00.160.16 162.243.161.105http/1.1localhost:80GET /server-status HTTP/1.0 14-1634158340/32/32W 16.4100335560.00.170.17 20.9.48.52http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST //wp-login.php HTTP/1.1 15-1634158400/29/29R 15.7300331370.00.190.19 192.53.126.23http/1.1 16-1634-0/0/1. 0.0053010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1634158520/30/30W 15.9500332240.00.210.21 40.122.168.139http/1.1www.tkadvicesystem.com:443POST //wp-login.php HTTP/1.1 18-1634158580/36/36R 15.7300319130.00.150.15 205.185.116.37http/1.1www.xn--q3cj1a4cd8i.com:443 19-1634-0/0/30. 0.0070280430.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 37subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 269 seconds, (range: 240...295)index usage: 1%, cache usage: 1%total entries stored since starting: 37total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 84 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-28 10:12
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com
Port: 443
URL: https://ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.comFirst seen 2023-08-28 10:12
Last seen 2024-02-02 08:27
Open for 157 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a7d7d62f64Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 15:27:57 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 5 hours 26 minutes 36 seconds Server load: 2.00 2.00 2.00 Total accesses: 1847191 - Total Traffic: 23.8 GB - Total Duration: 2141102854 CPU Usage: u211.51 s115.98 cu32089.3 cs2210.25 - 1.42% CPU load .757 requests/sec - 10.2 kB/second - 13.5 kB/request - 1159.11 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes032000 329394no0yes131000 529374no0yes032000 Sum400 1127000 ________________________________................................ _________________________________________________W______________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/32/14780_ 12.46380160260920.00.14193.76 167.99.182.39http/1.1localhost:80GET /about HTTP/1.1 0-92293730/34/15277_ 12.50380139013310.00.10198.96 164.92.192.25http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/30/14843_ 12.49290150309240.00.15192.72 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/29/15022_ 12.54370145874890.00.08185.95 142.93.153.3http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/29/14927_ 12.55310147711660.00.15185.42 206.81.1.88http/1.1localhost:443GET /about HTTP/1.1 0-92293730/25/15152_ 12.36360156649100.00.11188.52 162.243.184.251http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/24/14824_ 11.4470145588360.00.11200.21 144.126.202.105h2localhost:443[0/0] Software caused connection abort 0-92293730/27/15134_ 12.55300150182010.00.07187.56 206.81.1.88http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/28/15095_ 11.45360145226800.00.07229.87 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-92293730/31/15225_ 12.32400148853300.00.14194.87 138.68.163.10http/1.1localhost:80GET /about HTTP/1.1 0-92293730/35/14795_ 12.50380154393220.00.09200.68 142.93.153.3http/1.1localhost:80GET / HTTP/1.1 0-92293730/31/14804_ 12.50390147156110.00.08195.44 161.35.155.246http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/36/14667_ 12.35370137182710.00.14185.50 164.92.192.25http/1.1 0-92293730/31/14822_ 12.38290169086480.00.07186.00 159.65.58.104http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/26/15772_ 12.46200141614980.00.09187.75 128.199.61.251http/1.1localhost:80GET /about HTTP/1.1 0-92293730/35/14827_ 12.54320165341190.00.08182.47 206.81.1.88http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/37/14876_ 12.55200143404960.00.10206.35 206.81.1.88http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/33/14940_ 12.46200144939920.00.09189.28 64.227.126.135http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/27/14755_ 12.55300160388140.00.05200.53 142.93.153.3http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/33/14978_ 12.47380144639330.00.11193.79 206.81.1.88h2localhost:443[0/0] Software caused connection abort 0-92293730/31/14968_ 12.55230181495770.00.14193.40 206.81.1.88http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/30/14995_ 12.55310147053650.00.08204.06 206.81.1.88http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/32/15450_ 12.39350150748530.00.14188.26 162.243.184.251http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/29/14660_ 12.33366138765040.00.13190.18 162.243.184.251http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/33/14957_ 12.54370162205800.00.09186.87 161.35.155.246http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/31/14634_ 12.45308135981540.00.13196.98 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/27/15134_ 12.46200144713430.00.04194.49 167.99.182.39http/1.1localhost:80GET / HTTP/1.1 0-92293730/29/14914_ 12.48300159187400.00.05213.29 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/32/14719_ 12.49290152174340.00.11175.92 161.35.155.246http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/25/15173_ 12.33370135139100.00.08225.12 167.172.232.142http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/35/14654_ 12.47360155571740.00.05199.13 128.199.61.251http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/25/14915_ 12.37300145814950.00.14185.13 165.232.76.155h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15731. 0.00404620138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00404620136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00404620174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00404620150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00404620146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00404620134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00404620172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00404620165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00404620127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00404620152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00404620148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00404620159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00404620159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00404620
Found on 2024-02-02 08:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a70cb7ff24Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 07:46:08 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 21 hours 44 minutes 47 seconds Server load: 2.67 3.19 2.94 Total accesses: 780707 - Total Traffic: 10.6 GB - Total Duration: 955968153 CPU Usage: u161.45 s13.86 cu13326.1 cs698.67 - 8.62% CPU load 4.74 requests/sec - 67.5 kB/second - 14.2 kB/request - 1224.49 ms/request 5 requests currently being processed, 123 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425no2yes329000 111360no2yes131002 216287no1yes032001 316453no1yes131000 Sum406 5123003 ___________________W__R______W____________W_____________________ _______________________________________________________________W ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-784250/137/6025_ 88.015083165080.01.9689.49 46.101.103.192http/1.1 0-784250/152/6504_ 88.07283460671530.01.4385.89 85.208.96.210http/1.1www.chonlateeadmin.com:443GET /zkoxzet-42340betidm4 HTTP/1.1 0-784250/137/6041_ 88.181584472347050.01.8490.14 3.224.220.101http/1.1www.chonlateeboi.com:443GET /13691ztiaetidm.html HTTP/1.1 0-784250/169/6377_ 88.31484470061330.01.7782.76 23.22.35.162http/1.1www.chonlateeboi.com:443GET /33456hevyetidm30uhj.htm HTTP/1.1 0-784250/151/6096_ 88.181684566906860.01.5678.84 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-30193witems/eti HTTP/1.1 0-784250/211/6457_ 88.33284978172450.03.0285.18 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ordktze-36843qitems/etidm.htm HTTP/1.1 0-784250/157/6264_ 88.201598158961860.02.0396.45 66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1 0-784250/138/6296_ 88.181584467731910.01.4982.34 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /hmwktze-33898jetid HTTP/1.1 0-784250/202/6316_ 87.8615172362744330.01.98124.83 66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /g207288.shtml HTTP/1.1 0-784250/190/6233_ 88.34184371765390.01.9680.20 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /crrktze-36831eitems/etidm32pe.htm HTTP/1.1 0-784250/124/5985_ 85.105276504910.01.4276.63 149.202.86.190http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 0-784250/136/5942_ 88.26798775605330.01.6377.44 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?sephsbr-147399citems/eti HTTP/1.1 0-784250/147/6006_ 87.641483453369170.01.7679.69 52.167.144.229h2www.chonlateefbl.com:443[1/1] done: stream 1, GET /rare-vintage-disney-masterpiece-fant 0-784250/148/6213_ 87.591583781935320.01.7984.08 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?jnlaonh-382196yetidm.html HTTP/1.1 0-784250/130/6649_ 86.2310227456887810.01.4785.89 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /rmgktze-7570tetid HTTP/1.1 0-784250/218/5993_ 88.30583783435860.01.9678.31 66.249.65.40http/1.1www.chonlateeboi.com:443GET /trust.php?88771himsitems/eti.htm HTTP/1.1 0-784250/158/6154_ 88.231046264800860.01.7280.39 64.227.190.219http/1.1www.pennungmarket.com:443GET / HTTP/1.1 0-784250/149/6300_ 88.221083859258910.01.4881.86 85.208.96.210http/1.1www.chonlateeadmin.com:443GET /jryejnl-49708letidm1 HTTP/1.1 0-784250/142/6305_ 87.661083662244910.01.6180.40 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /lmaktze-9150netidm83y.htm HTTP/1.1 0-784251/129/6065W 88.070068780120.01.5685.38 66.249.65.233http/1.1www.chonlateenextbiz.com:443GET /spenco-womens-picasso-slide-sandal-black-cleary-s-shoes-ee 0-784250/229/6346_ 88.00784490375040.02.1988.38 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2160ymuietidm97cyr.htm HTTP/1.1 0-784250/125/6033_ 87.551584071156980.01.4382.16 52.167.144.229h2www.chonlateefbl.com:443[0/0] init 0-784250/137/6617R 87.5120073793750.01.7388.29 52.70.240.171http/1.1www.chonlateeboi.com:443 0-784250/154/6119_ 87.931784063160860.01.6288.57 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?zfcvrsm-50738petid.htm HTTP/1.1 0-784250/207/6018_ 87.73788475386540.01.9975.43 85.208.96.210http/1.1www.chonlateefood.com:443GET /geti/krz44626csrtitems HTTP/1.1 0-784250/132/6140_ 88.267057674720.01.4979.62 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 0-784250/144/6162_ 86.7216056811340.01.6789.55 51.15.17.105http/1.1www.siamsolarrooftop.com:80GET /wp-header.php HTTP/1.1 0-784250/141/6137_ 87.851983970658100.01.82109.93 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /urjktze-43427wetidm.html HTTP/1.1 0-784250/150/6086_ 87.80483454330410.01.5976.96 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?jumhsbr-366804zetidm9 HTTP/1.1 0-784251/145/6244W 88.080072730340.01.68114.81 46.101.103.192http/1.1localhost:443GET /server-status HTTP/1.1 0-784250/118/6029_ 88.141784967429150.01.3689.02 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /zmoktze-39454betidm89m HTTP/1.1 0-784250/142/6343_ 87.83183965294640.01.7781.53 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?pipvrsm-372036citems/eti HTTP/1.1 1-7113600/94/6198_ 58.493218372908950.01.0780.64 40.77.167.78h2www.thaidaoherb.com:443GET /bzolo5/cute-goat-drawings-sketches-with-pencil-free-easy-s 1-7113600/122/5986_ 58.10485066596260.01.3876.34 40.77.167.78h2www.thaidaoherb.com:443[0/0] init 1-7113600/86/5961_ 57.77584493331740.01.0077.23 46.101.103.192http/1.1 1-7113600/89/5649_ 57.70083876006120.01.2875.11 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /krzktze-43443mitems/etidm.htm HTTP/1.1 1-7113600/89/5901_ 58.473875255900.01.1087.86 110.249.202.208http/1.1www.seasabithailand.com:443GET /robots.txt HTTP/1.1 1-7113600/87/5960_ 58.03884364698750.01.0478.50 64.227.190.219h2www.pennungmarket.com:443[0/0] Software caused connection abort 1-7113600/84/6016_ 58.12484265341430.01.0776.31 23.22.35.162http/1.1www.chonlateeboi.com:443GET /13707ztiaitems/etidm.htm HTTP/1.1 1-7113600/91/6090_ 57.215076414060.01.4381.29 46.101.103.192h2localhost:443[0/0] Software caused connection abort 1-7113600/96/6043_ 57.30368255492410.01.2377.95 40.77.167.78h2www.thaidaoherb.com:443[1/1] done: stream 1, GET /bzolo5/cute-goat-drawings-sketches-w 1-7113600/90/6008_ 57.46984469749280.00.9784.20 64.227.190.219h2www.pennungmarket.com:443[0/0] Software caused connection abort 1-7113601/83/5799W 56.900076232670.01.1983.40 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /bmqktze-36206ditems/etidm14o.html H
Found on 2024-01-07 00:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a756b31bbaApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 22:51:01 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 12 hours 49 minutes 40 seconds Server load: 2.87 2.78 2.65 Total accesses: 229056 - Total Traffic: 3.4 GB - Total Duration: 183075742 CPU Usage: u239.95 s13.76 cu3522.42 cs190.09 - 8.59% CPU load 4.96 requests/sec - 76.1 kB/second - 15.3 kB/request - 799.262 ms/request 4 requests currently being processed, 60 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 012776no4yes131001 112906no4yes329101 Sum208 460102 ______________________________W__________________R____W________R ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0127760/198/2515_ 131.29085020503740.02.6838.73 52.70.240.171http/1.1www.chonlateeboi.com:443GET /30536cafjitems/etidm43mcb.html HTTP/1.1 0-0127760/352/2786_ 130.542105619413520.07.1637.25 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /fvuarie-40890hetid.htm HTTP/1.1 0-0127760/209/2471_ 131.093107131680020.02.4045.79 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?mqmadej-75893zetid.htm HTTP/1.1 0-0127760/221/2711_ 130.35084319880200.02.4234.75 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?okkqxjd-99061xetidm34b HTTP/1.1 0-0127760/197/2591_ 131.054105520304150.02.4232.37 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?eweadej-76119retidm7 HTTP/1.1 0-0127760/190/2854_ 129.700169420264320.02.5536.03 188.165.232.135http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82 0-0127760/339/2622_ 131.29093519921910.019.6848.05 149.56.142.23http/1.1www.npaccounting.co.th:443POST /wp-login.php HTTP/1.1 0-0127760/209/2599_ 131.10385820707740.02.6633.93 52.70.240.171http/1.1www.chonlateeboi.com:443GET /40256bjltitems/etidm89ibx.html HTTP/1.1 0-0127760/237/2648_ 131.290019574460.011.7176.57 142.93.153.3http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0127760/208/2584_ 130.30284919607050.02.7233.38 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?etgqgmy-33609tetidm74rgt.htm HTTP/1.1 0-0127760/190/2539_ 131.05488923113000.02.3931.26 192.95.30.21http/1.1www.1smestartup.com:443GET /tag/%E0%B8%82%E0%B8%B8%E0%B8%99%E0%B8%A2%E0%B8%A7%E0%B8%A1 0-0127760/203/2475_ 130.37484719781200.02.4832.22 188.165.232.135http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82 0-0127760/173/2422_ 131.08386119757960.02.1233.99 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gzkvrsm-181031xetidm33tmx HTTP/1.1 0-0127760/208/2760_ 130.97092420708870.04.0637.92 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?keghsbr-53739tetidm9.htm HTTP/1.1 0-0127760/194/2786_ 131.29085022810670.02.5337.97 85.208.96.199http/1.1www.chonlateeadmin.com:443GET /ryglego-420tetidm6.htm HTTP/1.1 0-0127760/224/2546_ 131.28085319955260.02.5233.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ertarie-10131gitems/etidm.htm HTTP/1.1 0-0127760/200/2463_ 131.30084620268930.02.4632.24 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /jvyarie-230litems/etidm24w.html HTTP/1.1 0-0127760/315/2763_ 130.79384820029190.03.1237.08 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /aeparie-37869citems/etidm60.htm HTTP/1.1 0-0127760/195/2655_ 131.29084419427550.02.5435.02 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?zdxqxjd-209364ketidm15mq.html HTTP/1.1 0-0127760/196/2500_ 129.46085121523990.09.9638.32 142.93.153.3h2localhost:443[0/0] Software caused connection abort 0-0127760/201/2569_ 130.96199019763340.02.8637.24 3.224.220.101http/1.1www.chonlateeboi.com:443GET /26004bjltetidm2.htm HTTP/1.1 0-0127760/246/2610_ 130.78384120671240.03.3538.20 188.165.232.135http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%AD 0-0127760/304/2933_ 130.50385319502980.04.8137.58 142.93.153.3http/1.1 0-0127760/188/2479_ 131.12284419127860.02.3733.00 52.70.240.171http/1.1www.chonlateeboi.com:443GET /26016bjltetidm64qbf.htm HTTP/1.1 0-0127760/205/2502_ 131.25184820086630.02.3232.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /25997bjltetidm58.html HTTP/1.1 0-0127760/185/2496_ 131.27145219371770.02.3732.29 147.135.208.217http/1.1www.winnerpropest.com:443POST /wp-login.php HTTP/1.1 0-0127760/312/2550_ 131.13284719197820.014.5143.11 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?spqecaw-341489detidm9 HTTP/1.1 0-0127760/174/2567_ 131.030108019618100.02.1063.23 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /tniarie-188vitems/etidm2.html HTTP/1.1 0-0127760/191/2453_ 130.513106019677070.02.3330.97 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2342biwxitems/etidm22c.html HTTP/1.1 0-0127760/203/2794_ 130.34492518982390.02.3671.78 192.95.30.21http/1.1www.1smestartup.com:443GET /tag/%E0%B8%82%E0%B8%B8%E0%B8%99%E0%B8%A2%E0%B8%A7%E0%B8%A1 0-0127761/196/2469W 130.690019626310.03.1339.39 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?wivsvcw-254549ieti.html HTTP/1.1 0-0127760/186/2790_ 131.182019655010.02.7834.49 192.95.30.21http/1.1www.1smestartup.com:80GET /tag/%E0%B8%84%E0%B8%B3%E0%B8%8A%E0%B8%B0%E0%B8%AD%E0%B8%B5 1-0129060/191/1999_ 116.973015055930.02.3826.32 192.95.30.21http/1.1www.1smestartup.com:80GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A1%E0%B8%97%E0%B8%B0%E0%B9%80 1-0129060/196/1785_ 117.80084314605590.02.2923.11 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?glcqgmy-107503petidm94typ HTTP/1.1 1-0129060/185/1900_ 117.670015027280.02.2326.45 142.93.153.3http/1.1localhost:443GET / HTTP/1.1 1-0129060/182/1785_ 117.761014610180.02.5023.86 142.93.153.3http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-0129060/192/1816_ 116.861110314564150.02.5028.38 31.184.236.42http/1.1 1-0129060/177/1819_ 117.371014332610.02.0624.25 142.93.153.3h2localhost:443[0/0] Software caused connection abort 1-0129060/182/1846_ 116.32386014901260.02.2122.77 142.93.153.3http/1.1 1-0129060/252/1902_ 117.75284914687250.05.1925.85 66.249.71.170http/1.1www.chonlateeadmin.com:443GET /trust.php?ujusvcw-260163hetidm50hwh HTTP/1.1 1-0129060/166/1868_ 117.70485215000210.03.2926.41 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /arparie-195citems/etidm.htm HTTP/1.1 1-0129060/218/1805_ 117.713014519630.02.3323.73 142.93.153.3http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-0129060/172/1794_ 117.41488114220210.02.1526.85 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.
Found on 2024-01-05 15:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31db9526a7db9526a74d62f563Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Thursday, 28-Dec-2023 00:26:59 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 10 Parent Server MPM Generation: 9 Server uptime: 2 days 8 hours 32 minutes 40 seconds Server load: 2.99 3.34 3.02 Total accesses: 693801 - Total Traffic: 8.1 GB - Total Duration: 429258512 CPU Usage: u55.52 s12.54 cu11070.5 cs631.8 - 5.78% CPU load 3.41 requests/sec - 41.6 kB/second - 12.2 kB/request - 618.706 ms/request 9 requests currently being processed, 119 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 122461no7yes329007 222660no0yes131000 322662no13yes4280011 422664no8yes131104 Sum4028 91191022 ................................__W____________R_____R__________ ____________________________R___W___R_______W_________________W_ ___________________W____________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-9-0/0/6219. 0.0089654837356970.00.0071.39 52.167.144.212h2www.chonlateepr.com:443[0/0] Software caused connection abort 0-9-0/0/5946. 0.0089686339257320.00.0058.34 3.224.220.101http/1.1 0-9-0/0/5954. 0.00896237238872120.00.0059.63 136.243.220.210http/1.1www.chonlateefbc.com:80GET /?q=58-338-1 HTTP/1.1 0-9-0/0/5993. 0.0089690434586460.00.0057.54 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?gjvecaw-305415iitems/etidm30tw.htm HTTP/1.1 0-9-0/0/6152. 0.0089686934561480.00.0073.02 185.191.171.7http/1.1www.chonlateeadmin.com:443GET /pkertxd-28914retid.htm HTTP/1.1 0-9-0/0/6081. 0.00896038832670.00.0072.34 52.70.240.171http/1.1 0-9-0/0/5979. 0.00896189233149610.00.00107.55 52.70.240.171http/1.1 0-9-0/0/5904. 0.0089678533636880.00.0059.15 185.191.171.19http/1.1www.chonlateefood.com:443GET /getid/fsu12979hsmsitems HTTP/1.1 0-9-0/0/6429. 0.0089687133005690.00.0072.03 66.249.66.192http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?doentbr-21466retid.htm HTTP/1.1 0-9-0/0/6102. 0.008961037041260.00.0068.65 52.167.144.212h2www.chonlateepr.com:443[1/1] done: stream 1, GET /bhrinw/revib0024354870.html 0-9-0/0/6009. 0.0089685533034150.00.0060.19 23.22.35.162http/1.1 0-9-0/0/6155. 0.0089694232490980.00.0060.21 52.167.144.212h2www.chonlateepr.com:443GET /bhrinw/revib0024354870.html HTTP/2.0 0-9-0/0/6039. 0.0089686637972930.00.0079.39 23.22.35.162http/1.1 0-9-0/0/6089. 0.0089686339582300.00.0065.22 207.46.13.141h2www.chonlateepr.com:443GET /selins/irelt0025670946.html HTTP/2.0 0-9-0/0/6070. 0.00896103440234840.00.0068.45 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?342604spgdetidm5 HTTP/1.1 0-9-0/0/6075. 0.00896034579120.00.00144.95 3.224.220.101http/1.1 0-9-0/0/6380. 0.0089687139224090.00.0068.30 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?342565spgditems/etidm97 HTTP/1.1 0-9-0/0/5941. 0.0089691436319180.00.0059.54 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?342593spgdeti.html HTTP/1.1 0-9-0/0/6117. 0.00896108934844870.00.0063.62 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?342577spgditems/eti HTTP/1.1 0-9-0/0/6272. 0.00896033303300.00.0072.07 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /joqisbk82806d97bcbf45 HTTP/1.1 0-9-0/0/6204. 0.00896164938736460.00.0065.30 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?preecaw-305424retidm11cer.htm HTTP/1.1 0-9-0/0/6079. 0.0089689635119650.00.0063.03 23.22.35.162http/1.1 0-9-0/0/6067. 0.00896149650993050.00.00113.39 46.101.165.73http/1.1www.chonlateemeet.com:443POST /xmlrpc.php HTTP/1.1 0-9-0/0/5951. 0.0089685769289960.00.0069.60 207.46.13.141h2www.chonlateepr.com:443[1/1] done: stream 1, GET /selins/irelt0025670946.html 0-9-0/0/6040. 0.00896035340480.00.00102.74 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /kmrzycz209531eitems/etidm.htm HTTP/1.1 0-9-0/0/5735. 0.0089686160269520.00.0059.04 3.224.220.101http/1.1 0-9-0/0/6065. 0.00896111033745900.00.0061.40 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?appecaw-305461citems/etidm53 HTTP/1.1 0-9-0/0/6092. 0.00896539836860.00.0068.41 203.170.192.183http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1703697118.54105806350708007812 0-9-0/0/6162. 0.00896037851690.00.00104.64 52.167.144.212h2www.chonlateepr.com:443[0/0] init 0-9-0/0/6058. 0.00896538385780.00.0073.70 85.208.96.208http/1.1www.chonlateenextbiz.com:443GET /pc1fih/ashbourne-traffic-accident-today.html HTTP/1.1 0-9-0/0/5968. 0.0089687139297720.00.0067.96 3.224.220.101http/1.1 0-9-0/0/6019. 0.00896110936725330.00.0080.71 52.70.240.171http/1.1 1-9224610/21/5807_ 8.62186933661870.00.11111.97 165.22.74.203h2localhost:443[0/0] Software caused connection abort 1-9224610/21/5707_ 8.28289634320120.00.1874.63 165.22.74.203http/1.1 1-9224611/26/5972W 8.980034674220.00.21102.18 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?302969spgdeti.html HTTP/1.1 1-9224610/31/6123_ 9.002035387400.00.27112.73 64.227.126.135http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-9224610/23/6072_ 8.942035404850.00.1880.34 144.126.202.105http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-9224610/26/5765_ 8.981034258190.00.1665.14 142.93.64.15http/1.1localhost:80GET /login.action HTTP/1.1 1-9224610/28/5837_ 8.582034084290.00.2776.03 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /kgrrtdd285269eoqlddpsw/7736dbe.htm HTTP/1.1 1-9224610/33/6124_ 8.98186834478780.00.2763.07 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?243092spgditems/etidm5.html HTTP/1.1 1-9224610/19/5889_ 8.750034106590.00.1459.82 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /anhgzna133419uitems/etidm HTTP/1.1 1-9224610/23/5894_ 8.302203452471730.00.1776.87 144.126.202.105h2localhost:443[0/0] Software caused connection abort 1-9224610/19/6062_ 9.021033994850.00.1363.47 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /wadkeon19483q97a86.html HTTP/1.1 1-9224610/30/5843_ 9.002035004180.00.2058.72 161.35.155.246http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-9224610/22/5856_ 9.00286434621300.00.2156.90 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?309685spgditems/etidm98 HTTP/1.1 1-9<
Found on 2023-12-27 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f44d83129dApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 09:23:18 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 5 hours 21 minutes 7 seconds Server load: 2.29 1.35 1.13 Total accesses: 30070 - Total Traffic: 438.6 MB - Total Duration: 41675551 CPU Usage: u2955.41 s5197.01 cu51099800 cs12501900 - 330000% CPU load 1.56 requests/sec - 23.3 kB/second - 14.9 kB/request - 1385.95 ms/request 4 requests currently being processed, 7 idle workers ___.CW__W__W...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762272020/88/2585_ 42.810033540060.01.1248.86 64.227.126.135http/1.1localhost:443GET /about HTTP/1.1 1-1762276210/46/2343_ 50.06034732805570.00.3246.71 172.68.234.196http/1.1www.jbbgarment.com:80GET /1559214175644/ HTTP/1.0 2-1762280340/6/2473_ 32.160033341850.00.0629.74 167.71.185.75http/1.1localhost:80GET /.env HTTP/1.0 3-1762-0/0/2239. 0.006031110230.00.0029.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1762276301/50/2428C 53.160131205891.40.5444.95 64.227.126.135http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1762276360/46/2325W 49.310033363060.00.4427.59 217.182.175.120http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 6-1762279670/11/2115_ 34.390030595280.00.1125.28 167.71.185.75http/1.1localhost:80GET /.DS_Store HTTP/1.0 7-1762279880/12/1969_ 7.490245626438890.00.1524.33 172.68.234.185http/1.1www.jbbgarment.com:80POST /wp-cron.php?doing_wp_cron=1695435795.80755591392517089843 8-1762280140/6/1802W 32.370024579130.00.0421.29 162.158.22.16http/1.1www.xn--72cz8bp5a1a1b8d.com:443GET /wp-login.php HTTP/1.1 9-1762280410/10/1701_ 2.080123059060.00.0422.17 64.227.126.135http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1762280420/4/1735_ 32.4503128623879990.00.0422.26 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 11-1762280830/9/1457W 1.540022504460.00.0118.05 64.227.126.135http/1.1localhost:443GET /server-status HTTP/1.1 12-1762-0/0/994. 0.00129100214710650.00.0017.23 172.71.135.38http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 13-1762-0/0/972. 0.00200014887740.00.0011.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/1014. 0.00997015286630.00.0016.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/762. 0.004708963750.00.009.61 154.12.241.88http/1.1www.emba35.com:443POST /xmlrpc.php HTTP/1.1 16-1762-0/0/639. 0.00101008419270.00.008.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/80. 0.008270864080.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/217. 0.00404510020.00.003.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/94. 0.0064616121059020.00.001.26 172.68.234.144http/1.1www.ptatun.or.th:80POST /wp-cron.php?doing_wp_cron=1695429335.63167810440063476562 20-1762-0/0/99. 0.00772001298300.00.004.31 65.21.232.254http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%AA 21-1762-0/0/16. 0.0080770264580.00.002.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/2. 0.008118020500.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/9. 0.008100047380.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 62subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 129 seconds, (range: 20...261)index usage: 2%, cache usage: 2%total entries stored since starting: 4051total entries replaced since starting: 0total entries expired since starting: 3989total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 124 hit, 9879 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 02:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f458c23b2aApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 05:47:51 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 1 hour 45 minutes 38 seconds Server load: 0.77 0.64 0.61 Total accesses: 6002 - Total Traffic: 100.4 MB - Total Duration: 9086152 CPU Usage: u2848.7 s5164.75 cu50855500 cs12450100 - 999000% CPU load .947 requests/sec - 16.2 kB/second - 17.1 kB/request - 1513.85 ms/request 3 requests currently being processed, 6 idle workers C_WW_____......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743323981/88/533C 56.20007751661.40.946.03 144.126.198.24http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1743324860/83/529_ 47.50218315350.00.848.62 144.126.198.24http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-1743326010/69/562W 45.10108902320.00.6918.69 65.108.110.26http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 3-17433560/55/506W 26.87006965330.011.1319.42 144.126.198.24http/1.1localhost:443GET /server-status HTTP/1.1 4-17434720/37/451_ 22.09116898870.00.395.83 144.126.198.24http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-17434950/38/504_ 22.3706627828810.00.317.17 172.71.122.80http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /dropdown.php HTTP/1.1 6-17437740/16/389_ 8.17005776570.00.084.82 144.126.198.24http/1.1localhost:443GET /about HTTP/1.1 7-1743326780/60/483_ 33.19117142490.00.565.20 144.126.198.24http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-17438990/0/495_ 0.00108878110.00.006.11 149.56.22.133http/1.1www.wealneosupply.com:443POST /xmlrpc.php HTTP/1.1 9-1743-0/0/332. 0.0087504064260.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1743-0/0/323. 0.00119904574660.00.004.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/208. 0.002911683570730.00.002.24 164.90.205.35http/1.1www.chonlateefood.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1743-0/0/285. 0.00120003504610.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/296. 0.001610965266750.00.004.69 164.90.205.35http/1.1www.chonlateefood.com:80GET /config.json HTTP/1.0 14-1743-0/0/3. 0.001198017350.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/4. 0.001196036090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/99. 0.0025775551367480.00.001.07 4.151.108.4http/1.1www.uniqueworkthailand.com:443GET /admin-heade.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 43subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 86 seconds, (range: 2...273)index usage: 1%, cache usage: 1%total entries stored since starting: 978total entries replaced since starting: 0total entries expired since starting: 935total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 13 hit, 2253 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-18 22:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f402907c10Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 16-Sep-2023 20:54:48 +07 Restart Time: Saturday, 16-Sep-2023 04:02:13 +07 Parent Server Config. Generation: 1732 Parent Server MPM Generation: 1731 Server uptime: 16 hours 52 minutes 35 seconds Server load: 0.56 0.55 0.50 Total accesses: 112713 - Total Traffic: 1.7 GB - Total Duration: 216804888 CPU Usage: u2702.08 s5117.35 cu50702800 cs12416800 - 104000% CPU load 1.86 requests/sec - 28.7 kB/second - 15.5 kB/request - 1923.51 ms/request 6 requests currently being processed, 6 idle workers ___RWWW....__W.C._................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1731152910/91/8937_ 26.090553168740070.00.94150.87 27.254.96.168http/1.1www.uniqueworkthailand.com:443POST /wp-cron.php?doing_wp_cron=1694872486.75814890861511230468 1-1731158760/2/9054_ 0.6201194163305830.00.01151.60 157.55.39.222http/1.1www.uniqueworkthailand.com:443GET /robots.txt HTTP/1.1 2-1731154010/78/8309_ 21.5600183113490.01.29112.96 137.184.106.30http/1.1localhost:80GET /.env HTTP/1.0 3-1731158820/1/8395R 0.0011158008830.00.00106.49 103.7.40.39http/1.1 4-1731157800/13/7808W 3.9000178511990.00.05132.31 128.199.61.251http/1.1localhost:443GET /server-status HTTP/1.1 5-1731154780/64/8360W 18.9100151946560.00.33128.58 27.254.96.168http/1.1www.12gobiz.com:443GET /category/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0% 6-1731155590/55/7956W 13.9510138218870.00.50111.64 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1694872487.14814805984497070312 7-1731-0/0/7777. 0.00860140205070.00.00109.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1731-0/0/7356. 0.00820131212680.00.00126.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1731-0/0/6419. 0.00910110159680.00.0092.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1731-0/0/6096. 0.00880107615380.00.0093.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1731157200/27/5598_ 6.5601132647850.00.2491.70 165.22.58.178http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 12-1731157260/27/5167_ 4.791099645800.00.1663.78 128.199.62.55http/1.1localhost:443GET /telescope/requests HTTP/1.1 13-1731157330/25/3767W 5.752073454910.00.2080.74 40.77.167.54http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 14-1731-0/0/2895. 0.0089059211320.00.0041.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1731157951/13/2157C 1.641042433461.40.0825.31 128.199.61.251http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1731-0/0/1309. 0.0090032167860.00.0017.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1731158180/11/783_ 2.451013261390.00.0610.41 128.199.61.251http/1.1localhost:443GET /about HTTP/1.1 18-1731-0/0/812. 0.006615013448240.00.0010.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1731-0/0/560. 0.00661909111300.00.007.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1731-0/0/421. 0.00662195715910.00.005.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1731-0/0/438. 0.0060605646412060.00.005.02 172.70.254.39http/1.1www.orderaccounting.com:80GET /?author=25 HTTP/1.0 22-1731-0/0/202. 0.00661203983050.00.003.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1731-0/0/488. 0.0060655059714010.00.005.91 172.70.55.52http/1.1www.orderaccounting.com:80GET /?author=21 HTTP/1.0 24-1731-0/0/226. 0.001680804109940.00.003.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1731-0/0/131. 0.002260102622980.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1731-0/0/42. 0.002260401476380.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1731-0/0/121. 0.002259802604270.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1731-0/0/26. 0.00225960598360.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1731-0/0/65. 0.002234401486320.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1731-0/0/145. 0.00221102272841110.00.001.39 34.212.135.232http/1.1www.cnb.co.th:443GET /wp-content/themes/sydney/fonts/font-awesome-v5/all.min.css 31-1731-0/0/23. 0.00226140558830.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1731-0/0/17. 0.00226170177300.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1731-0/0/44. 0.00225950514260.00.000.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1731-0/0/123. 0.00221015683168160.00.001.37 34.212.135.232http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/golden-abacus-with-chinese-rmb- 35-1731-0/0/152. 0.00221194042613490.00.001.51 51.79.161.78http/1.1www.pentorproperty.com:80GET /wp-login.php HTTP/1.0 36-1731-0/0/31. 0.00226070643540.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1731-0/0/132. 0.002247903673140.00.001.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1731-0/0/45. 0.00224510622800.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1731-0/0/23. 0.00226000459730.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1731-0/0/27. 0.00225920478010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1731-0/0/12. 0.00460790248910.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1731-0/0/105. 0.00455393942319840.00.001.87 23.97.205.210http/1.1www.ss-cool.com:443POST /wp-login.php HTTP/1.1 43-1731-0/0/10. 0.0046107362040.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1731-0/0/15. 0.00460780357110.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1731-0/0/99. 0.004544716283147040.00.001.20 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 46-1731-0/0/9. 0.00460590303520.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1731-0/0/8. 0.00460830271660.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1731-0/0/7. 0.00460800237160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1731-0/0/11. 0.00460717207120.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests Conn
Found on 2023-09-16 13:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f45952c96bApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 02:05:56 +07 Restart Time: Thursday, 14-Sep-2023 00:23:29 +07 Parent Server Config. Generation: 1720 Parent Server MPM Generation: 1719 Server uptime: 1 hour 42 minutes 27 seconds Server load: 0.38 0.50 0.48 Total accesses: 5761 - Total Traffic: 71.9 MB - Total Duration: 8089753 CPU Usage: u2668.81 s5091.39 cu50510500 cs12375100 - 1020000% CPU load .937 requests/sec - 12.0 kB/second - 12.8 kB/request - 1404.23 ms/request 3 requests currently being processed, 7 idle workers ___R_W__C_........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-171983740/83/368_ 31.0417475030510.00.663.81 172.71.134.122http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 1-171983990/77/436_ 34.84105360930.00.719.92 74.207.237.114http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-171986770/38/229_ 14.97103174820.00.222.24 74.207.237.114http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-171987970/11/287R 3.48304343990.00.073.98 51.15.17.105http/1.1www.chonlateepro.com:443 4-171988080/5/347_ 2.88004294290.00.046.01 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 5-171988380/5/121W 0.04001990210.00.021.45 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 6-171988480/5/184_ 0.81302772530.00.021.78 51.15.17.105http/1.1www.chonlateepro.com:80GET /about.php7 HTTP/1.0 7-171988550/2/166_ 0.05102404680.00.001.74 74.207.237.114http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-171988621/2/247C 0.01003951301.40.003.26 74.207.237.114http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-171988680/4/123_ 0.04002123720.00.011.62 212.90.148.122http/1.1www.thefixup333.com:443POST /xmlrpc.php HTTP/1.1 10-1719-0/0/115. 0.0097301648300.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1719-0/0/115. 0.0094302007280.00.001.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1719-0/0/115. 0.0092401758330.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1719-0/0/109. 0.0096401337420.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1719-0/0/283. 0.00747333916840.00.003.61 172.71.134.122http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 15-1719-0/0/204. 0.0095902606180.00.002.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1719-0/0/14. 0.009650398190.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1719-0/0/13. 0.009330451110.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1719-0/0/67. 0.009660977330.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1719-0/0/103. 0.0094901587400.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1719-0/0/111. 0.0010101253490.00.000.73 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.0 21-1719-0/0/41. 0.009460378610.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1719-0/0/103. 0.0097401409610.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1719-0/0/85. 0.0097201159350.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1719-0/0/167. 0.0094202853240.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1719-0/0/11. 0.009610416760.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1719-0/0/191. 0.005602018290.00.001.49 51.15.17.105http/1.1www.chonlateepro.com:80GET /wp-admin/dropdown.php HTTP/1.0 27-1719-0/0/126. 0.0073701751060.00.001.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1719-0/0/78. 0.0095101163110.00.003.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1719-0/0/110. 0.00697731587560.00.000.66 172.71.134.123http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 30-1719-0/0/194. 0.0096002176920.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1719-0/0/14. 0.009570237680.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1719-0/0/15. 0.009500343510.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1719-0/0/72. 0.0095201339000.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1719-0/0/124. 0.002801468900.00.000.90 51.15.17.105http/1.1www.chonlateepro.com:80GET /about.php HTTP/1.0 35-1719-0/0/102. 0.0096301396420.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1719-0/0/77. 0.0094801103280.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1719-0/0/24. 0.009410464130.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1719-0/0/10. 0.009620244910.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1719-0/0/101. 0.006311166230.00.000.72 128.199.107.85http/1.1www.pndintertrade.com:443GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1 40-1719-0/0/10. 0.009670218960.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1719-0/0/104. 0.0094401518840.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1719-0/0/36. 0.009700518450.00.000.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1719-0/0/9. 0.009530263700.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1719-0/0/9. 0.009680241300.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1719-0/0/64. 0.009300217990.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1719-0/0/9. 0.009580226950.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1719-0/0/99. 0.009811159860.00.000.88 159.223.102.13http/1.1localhost:80GET /telescope/requests HTTP/1.0 48-1719-0/0/8. 0.009550206300.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1719-0/0/11. 0.009390257510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-09-13 19:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f45fb1dfd9Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 05:20:51 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 1 hour 18 minutes 39 seconds Server load: 0.37 0.44 0.44 Total accesses: 5718 - Total Traffic: 62.0 MB - Total Duration: 6918459 CPU Usage: u2782.69 s5110.78 cu50459200 cs12364400 - 1330000% CPU load 1.21 requests/sec - 13.4 kB/second - 11.1 kB/request - 1209.94 ms/request 4 requests currently being processed, 6 idle workers _RW_C__R__........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716140470/13/535_ 5.66016785350.00.104.70 68.183.64.176http/1.1localhost:443GET /about HTTP/1.1 1-1716136200/59/542R 32.54316404170.00.414.31 198.98.57.206http/1.1 2-1716133670/78/564W 39.51006889860.00.874.80 68.183.64.176http/1.1localhost:443GET /server-status HTTP/1.1 3-1716142140/0/477_ 0.0008016660240.00.0011.17 198.41.242.155http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 4-1716136271/57/431C 28.83015644931.40.463.56 68.183.64.176http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1716133800/81/478_ 37.7307775097640.00.773.80 172.70.86.164http/1.1www.siamerp.com:443POST /wp-login.php HTTP/1.1 6-1716136290/59/290_ 32.57003378600.00.602.41 68.183.64.176http/1.1localhost:443GET /v2/_catalog HTTP/1.1 7-1716136450/58/508R 24.90315638990.00.423.67 198.41.242.154http/1.1 8-1716136860/54/394_ 24.50114175520.00.422.70 68.183.64.176http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1716140730/14/401_ 8.03115128390.00.139.33 68.183.64.176http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 10-1716-0/0/424. 0.0060224964987890.00.003.75 172.70.175.63http/1.1www.chonlateefarm.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 11-1716-0/0/272. 0.0014539123560340.00.002.11 162.158.110.136http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 12-1716-0/0/96. 0.00958311017810.00.001.78 27.254.96.168http/1.1 13-1716-0/0/83. 0.0011670949730.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/25. 0.0014700170190.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/5. 0.001480030270.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/100. 0.0060717061447800.00.001.05 54.36.148.29http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%9B%E0%B8%B4%E0%B8%94 17-1716-0/0/93. 0.0061101216780.00.000.69 162.243.161.105http/1.1localhost:443GET /login.action HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 31subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 138 seconds, (range: 2...287)index usage: 1%, cache usage: 1%total entries stored since starting: 929total entries replaced since starting: 0total entries expired since starting: 898total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 40 hit, 1655 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 22:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4dbedc20aApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 23:25:34 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 19 hours 23 minutes 19 seconds Server load: 0.76 0.71 0.65 Total accesses: 99157 - Total Traffic: 1.4 GB - Total Duration: 140519517 CPU Usage: u2717.83 s5074.24 cu50294500 cs12328000 - 89700% CPU load 1.42 requests/sec - 21.3 kB/second - 15.0 kB/request - 1417.14 ms/request 4 requests currently being processed, 6 idle workers _W_._C___RW....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170285560/8/8449_ 1.9500115474990.00.04117.43 195.78.66.143http/1.1www.xn--m3cbp0adb4cva5bee03a.coPOST /xmlrpc.php HTTP/1.0 1-170281730/61/8382W 31.7000115968060.00.59126.17 162.158.175.50http/1.1www.singkansard.com:443GET //DKIZ.php?DKIZ HTTP/1.1 2-170282330/53/8200_ 23.2810118200740.00.48119.74 143.110.218.229http/1.1localhost:443GET /about HTTP/1.1 3-1702-0/0/8053. 0.0030111787080.00.00109.16 167.172.20.95http/1.1localhost:80GET /telescope/requests HTTP/1.0 4-170279240/89/7481_ 51.9910108867450.01.17107.33 143.110.218.229http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-170285681/9/7910C 1.9400106967291.40.02116.73 143.110.218.229http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-170284190/24/7225_ 5.841849107156440.00.1298.34 172.71.223.38http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 7-170284350/23/7482_ 8.371589107391740.00.14110.90 162.158.175.50http/1.1www.singkansard.com:443GET /wp-blog.php HTTP/1.1 8-170279370/89/6735_ 45.731194729550.00.7987.71 143.110.218.229http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-170285820/5/6281R 3.04272288858090.00.0495.30 195.78.66.143http/1.1 10-170286090/3/5586W 0.670077922950.00.0188.14 143.110.218.229http/1.1localhost:443GET /server-status HTTP/1.1 11-1702-0/0/4892. 0.00724065739470.00.0079.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1702-0/0/4385. 0.00752264472900.00.0070.34 149.56.150.193http/1.1www.chonlateeadmin.com:443GET /wp-content/plugins/qi-addons-for-elementor/inc/plugins/ele 13-1702-0/0/2245. 0.00757034051320.00.0044.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702-0/0/1943. 0.0056026295440.00.0029.18 141.148.205.245http/1.1www.summer-techthai.com:443POST /xmlrpc.php HTTP/1.1 15-1702-0/0/1290. 0.00337016197470.00.0016.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/536. 0.00790010827790.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/391. 0.0073004357650.00.004.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/89. 0.007560956730.00.001.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.001036401786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.001260201383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.00125110344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.001260904959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.00126140735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.0012595077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.00126080103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.00125980121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.001208542131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.001259401402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.0012621074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.00124770299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.001251401458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.00124580524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.001262001921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.001260702967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.001261903934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.0012606057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.00121168722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.001261802571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.0012604045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0059803060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 77subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 100 seconds, (range: 1...294)index usage: 2%, cache usage: 3%total entries stored since starting: 17082total entries replaced since starting: 0total entries expired since starting: 17005total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 428 hit, 39873 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 16:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f441df1e5eApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:26:37 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 24 minutes 26 seconds Server load: 2.28 1.93 1.75 Total accesses: 23278 - Total Traffic: 286.1 MB - Total Duration: 30652860 CPU Usage: u2817.08 s5078.96 cu50054100 cs12276600 - 393000% CPU load 1.47 requests/sec - 18.5 kB/second - 12.6 kB/request - 1316.82 ms/request 9 requests currently being processed, 7 idle workers __C___W_RWWW_WCW.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685201940/45/2109_ 28.24075429228050.00.4428.26 180.247.192.81http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 1-1685199690/91/2039_ 62.930111526206760.00.9026.20 46.32.255.120http/1.1www.chonlateepro.com:443GET /wp-admin/network/utils/load.php HTTP/1.1 2-1685203941/6/1954C 4.220024865266.30.0921.95 23.137.251.61http/1.1www.chonlateeins.com:443POST /xmlrpc.php HTTP/1.1 3-1685202150/41/1834_ 32.42089525514530.00.4523.52 172.71.178.196http/1.1www.chonlateeauto.com:443GET /wp-includes/load/links.php HTTP/1.1 4-1685202280/36/1810_ 25.74068324469290.00.3921.92 172.70.90.176http/1.1www.chonlateeplus.com:443GET /wp-admin/network/utils/load.php HTTP/1.1 5-1685200400/78/1635_ 53.59062918783980.00.8019.45 172.70.86.24http/1.1www.chonlateebranding.com:443GET /wp-admin/network/utils/load.php HTTP/1.1 6-1685204060/1/1787W 0.480022559390.00.0121.11 172.70.85.125http/1.1www.chonlateeit.com:443GET /wp-includes/load/links.php HTTP/1.1 7-1685204130/2/1852_ 0.960100424464380.00.0120.14 172.71.178.192http/1.1www.chonlateecoffee.com:80GET /wp-admin/network/utils/load.php HTTP/1.0 8-1685202620/32/1650R 19.621111321044850.00.2518.53 172.71.242.29http/1.1www.chonlateeauto.com:443 9-1685202690/33/1612W 19.421021498950.00.3023.48 185.191.171.18http/1.1www.1smestartup.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 10-1685202710/32/1171W 19.690015922250.00.2914.26 159.203.63.67http/1.1localhost:443GET /server-status HTTP/1.1 11-1685201140/66/958W 40.180012143890.00.6610.95 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1694049997.12121295928955078125 12-1685203160/20/788_ 14.26059111731930.00.229.08 107.189.14.13http/1.1www.theangelluxury.com:443POST /wp-login.php HTTP/1.1 13-1685203240/22/656W 14.510010194050.00.2210.09 180.247.192.81http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 14-1685204191/1/465C 0.00016654391.40.005.54 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1685204220/0/423W 0.00005073870.00.004.78 180.247.192.81http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 16-1685-0/0/105. 0.00474501181390.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/118. 0.00463801201320.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/3. 0.0013378019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.001268511391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0013364015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001265410331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001267431185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001337108790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0013373010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0013370030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0013381010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0013368011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0013369012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001336609920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0013380010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 89subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 73 seconds, (range: 0...299)index usage: 3%, cache usage: 4%total entries stored since starting: 3686total entries replaced since starting: 0total entries expired since starting: 3597total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 66 hit, 7180 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f49b88178fApache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 03-Sep-2023 22:50:10 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 7 hours 26 minutes 56 seconds Server load: 2.16 2.12 3.00 Total accesses: 77625 - Total Traffic: 805.7 MB - Total Duration: 121849472 CPU Usage: u2742.9 s5018.68 cu49697000 cs12195200 - 231000% CPU load 2.89 requests/sec - 30.8 kB/second - 10.6 kB/request - 1569.72 ms/request 5 requests currently being processed, 5 idle workers C_W__W.WC__....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674186121/18/5830C 8.21094779209728.20.0763.08 62.182.85.70http/1.1www.tkadvicesystem.com:443GET /wp-login.php HTTP/1.1 1-1674183170/55/5788_ 33.13088677808900.00.3266.37 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693756209.03611302375793457031 2-1674182060/80/5793W 36.430077542320.00.3359.73 163.123.143.97http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 3-1674182150/71/5637_ 30.17032872849760.00.2861.69 172.68.234.214http/1.1www.orderaccounting.com:80POST /wp-cron.php?doing_wp_cron=1693756210.01737594604492187500 4-1674186470/13/5452_ 6.540181074175130.00.0667.45 163.123.143.97http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 5-1674182540/69/5253W 32.760069809130.00.4457.68 172.71.167.73http/1.1www.orderaccounting.com:80GET /wp-admin/dropdown.php HTTP/1.0 6-1674-0/0/5059. 0.002446767959350.00.0053.89 172.68.234.4http/1.1www.singkansard.com:443POST /wp-cron.php?doing_wp_cron=1693756185.09142398834228515625 7-1674182210/78/4861W 41.120065444810.00.3949.78 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 8-1674182671/69/4752C 33.240064819851.40.3447.86 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1674183580/52/4591_ 26.82089563172640.00.2666.08 172.71.167.73http/1.1www.orderaccounting.com:80GET //wp-admin/dropdown.php HTTP/1.0 10-1674184820/34/4284_ 17.31045157882680.00.2256.53 27.254.96.168http/1.1www.tkadvicesystem.com:443POST /wp-cron.php?doing_wp_cron=1693756210.36197996139526367187 11-1674-0/0/3787. 0.00235052696570.00.0035.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1674-0/0/3461. 0.00161049994910.00.0034.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1674-0/0/2193. 0.00190033942990.00.0019.36 178.178.91.58http/1.1www.nadapool.com:80GET /contact/ HTTP/1.0 14-1674-0/0/2171. 0.004123735049100.00.0021.46 172.71.167.73http/1.1www.orderaccounting.com:80GET //xxl.php HTTP/1.0 15-1674-0/0/1353. 0.00147022942830.00.0012.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1674-0/0/864. 0.001454018830130.00.005.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1674-0/0/715. 0.001451017840260.00.004.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1674-0/0/497. 0.001380013923060.00.002.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1674-0/0/507. 0.001402015065500.00.002.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1674-0/0/313. 0.001425011369510.00.001.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/305. 0.001190010485030.00.001.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1674-0/0/325. 0.001163102610515360.00.001.20 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693755046.55650210380554199218 23-1674-0/0/267. 0.001320010277080.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1674-0/0/279. 0.001322010773600.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/294. 0.001386010098660.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1674-0/0/319. 0.001383012162920.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/397. 0.0010781213491190.00.002.01 172.68.234.196http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 28-1674-0/0/225. 0.00135609096500.00.001.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/232. 0.00143109000050.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/218. 0.00192918710130.00.001.00 167.99.8.63http/1.1localhost:443GET /v2/_catalog HTTP/1.1 31-1674-0/0/190. 0.00187516337715740.00.000.53 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754332.79655790328979492187 32-1674-0/0/191. 0.00197617917633200.00.000.44 134.122.63.192http/1.1 33-1674-0/0/200. 0.00198826428295680.00.000.41 198.41.230.115http/1.1www.smetast.com:80GET / HTTP/1.0 34-1674-0/0/105. 0.00208604216670.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/100. 0.00222718455189810.00.000.20 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753980.5489 HTTP/1.0 36-1674-0/0/88. 0.00214804308510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/118. 0.00209404782180.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1674-0/0/46. 0.00237002531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.00223227385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.00229903865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.00227804242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.00222804803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.00214115754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.00212519884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 235subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 43 seconds, (range: 2...123)index usage: 8%, cache usage: 10%total entries stored since starting: 12688total entries replaced since starting: 0total entries expired since starting: 12453total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 84 hit, 14674 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 15:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4d0503ab1Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 23:14:37 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 5 hours 26 minutes 37 seconds Server load: 7.34 7.54 6.90 Total accesses: 136520 - Total Traffic: 1008.2 MB - Total Duration: 172583300 CPU Usage: u2955.3 s4990.73 cu48722300 cs11944800 - 310000% CPU load 6.97 requests/sec - 52.7 kB/second - 7.6 kB/request - 1264.16 ms/request 14 requests currently being processed, 7 idle workers WWRRWWW_RW_CCRWC_____............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1652282950/36/8684W 15.5800107175400.00.0962.45 198.41.242.196http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 1-1652282590/47/8495W 28.2310106192360.00.1769.98 66.249.79.162http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 2-1652281870/64/8406R 37.010238103775540.00.2162.55 172.71.174.170http/1.1 3-1652282020/66/8191R 36.5001103797160.00.2772.12 172.173.110.210http/1.1www.leadingservice.co.th:443 4-1652281930/70/8287W 39.7800102147430.00.2658.43 172.69.65.135http/1.1www.accsmile.com:80POST //xmlrpc.php HTTP/1.0 5-1652282660/43/8001W 25.940099744250.00.2256.02 162.158.174.246http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 6-1652281550/72/7852W 44.660098051890.00.3054.41 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 7-1652283710/7/8032_ 2.110535100309640.00.0454.54 172.173.110.210http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 8-1652283420/20/7743R 9.7102895618630.00.0754.75 172.70.39.178http/1.1 9-1652282500/48/7370W 29.690093824650.00.2056.85 138.68.133.118http/1.1localhost:443GET /server-status HTTP/1.1 10-1652283780/6/7133_ 2.49041790625810.00.0264.83 172.70.174.140http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 11-1652283881/1/6725C 0.000282079643.80.0050.78 172.71.167.141http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-content/uploads/siteorigin-widgets/ink-image-image-ed94 12-1652282801/36/6555C 19.590182089893.50.1746.13 162.158.174.118http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-content/uploads/siteorigin-widgets/sow-image-default-17 13-1652280570/79/6127R 103.48038078034010.00.3040.89 172.173.90.228http/1.1 14-1652281160/96/6149W 57.050077613300.00.3846.85 172.71.175.86http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 15-1652283011/31/4833C 17.120061296881.40.1233.92 138.68.133.118http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1652282100/65/4489_ 37.01052455671710.00.2430.39 172.69.65.135http/1.1www.accsmile.com:80POST //xmlrpc.php HTTP/1.0 17-1652283940/0/3873_ 0.000048694500.00.0026.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1652284000/0/2662_ 0.000034762760.00.0019.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1652282170/60/1504_ 35.76031919838450.00.2411.95 172.173.110.165http/1.1www.eecproject.com:80POST //xmlrpc.php HTTP/1.0 20-1652282890/36/1321_ 19.25080018966110.00.149.49 172.71.167.5http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 21-1652-0/0/729. 0.0048011312280.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1652-0/0/471. 0.0019808090630.00.003.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1652-0/0/473. 0.0032507817690.00.002.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1652-0/0/238. 0.0032804184090.00.001.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1652-0/0/341. 0.0032305475730.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1652-0/0/288. 0.001456334754470.00.001.56 162.158.174.247http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 27-1652-0/0/187. 0.00173402941630.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/48. 0.00174701000030.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/122. 0.00173202091980.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1652-0/0/103. 0.00153810451980970.00.000.44 167.71.196.133http/1.1www.nakindogtraining.com:443POST //xmlrpc.php HTTP/1.1 31-1652-0/0/108. 0.00155214931708720.00.000.51 172.70.188.83http/1.1www.chonlateeit.com:443GET /about.php HTTP/1.1 32-1652-0/0/136. 0.0015548612273450.00.000.63 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 33-1652-0/0/60. 0.00168230565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.00168210696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.00168170719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.00168720349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.00166754061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.00168927143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.00168480530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.00168740257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.00168800208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.00168860142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.00168510543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.00167124221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.00168620415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.00166727931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.001668410251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.00166639421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.00168910109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum
Found on 2023-08-31 16:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f46fb989f7Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 29-Aug-2023 06:20:41 +07 Restart Time: Tuesday, 29-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1638 Parent Server MPM Generation: 1637 Server uptime: 2 hours 18 minutes 28 seconds Server load: 3.52 3.27 3.21 Total accesses: 56580 - Total Traffic: 482.4 MB - Total Duration: 70643094 CPU Usage: u2598.92 s4807.3 cu47528500 cs11628900 - 712000% CPU load 6.81 requests/sec - 59.5 kB/second - 8.7 kB/request - 1248.55 ms/request 10 requests currently being processed, 5 idle workers W.R.WCW_._..._W._.W.W_..WW........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1637255670/34/3593W 13.610045053130.00.9231.52 151.106.97.115http/1.1www.importantaccount.com:443POST /xmlrpc.php HTTP/1.1 1-1637-0/0/3600. 0.0015044594660.00.0030.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1637255870/27/3481R 10.36033443235790.01.0730.95 172.71.123.167http/1.1www.dr-rpi.com:443 3-1637-0/0/3330. 0.0011041633560.00.0027.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1637255160/61/3268W 28.000040736250.00.3224.95 104.43.165.99http/1.1www.siamsolarrooftop.com:443POST //wp-login.php HTTP/1.1 5-1637255281/41/3263C 14.540041325661.41.0027.03 45.55.193.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1637255350/45/3330W 19.290041389430.00.7628.93 107.189.31.97http/1.1www.ckt-trading.com:443GET /wp-content/plugins/core-plugin/include.php HTTP/1.1 7-1637255490/35/3170_ 15.73052140184820.00.1825.53 162.158.175.54http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 8-1637-0/0/3310. 0.0013040525570.00.0029.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1637256300/15/2980_ 4.49056136740980.00.0523.61 141.101.69.116http/1.1www.dr-rpi.com:443GET /configYCJ/Jump/0-lwmnnc0a/wp-content/mu-plugins/shell.php 10-1637-0/0/2948. 0.0014036650410.00.0023.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1637-0/0/2647. 0.002283833351600.00.0023.53 172.71.158.213http/1.1www.siamerp.com:443GET /wp-content/uploads/2019/07/image_Home-02-1024x512.jpg HTTP 12-1637-0/0/2618. 0.0018031980230.00.0024.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1637256420/13/2423_ 5.62031930373600.00.2919.96 74.249.213.39http/1.1www.siam2job.com:80GET //?author=1 HTTP/1.0 14-1637256500/12/2354W 4.630029739610.00.1619.19 172.173.94.217http/1.1www.hotlineservicethailand.com:POST //xmlrpc.php HTTP/1.1 15-1637-0/0/2036. 0.00937325467810.00.0019.30 45.55.193.222http/1.1 16-1637256600/11/2046_ 3.91063324724030.00.0417.72 108.162.226.4http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 17-1637-0/0/1753. 0.0017022128060.00.0014.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1637256740/10/1276W 4.250017153360.00.0610.25 162.158.175.54http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 19-1637-0/0/905. 0.0012011376650.00.007.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1637256780/11/567W 3.86006952740.00.043.91 45.55.193.222http/1.1localhost:443GET /server-status HTTP/1.1 21-1637256870/9/269_ 4.83020733274180.00.072.50 172.71.155.30http/1.1www.siamerp.com:443GET / HTTP/1.1 22-1637-0/0/476. 0.001606169900.00.003.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1637-0/0/219. 0.001902660750.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1637257010/12/236W 4.43002886820.00.042.03 74.249.213.39http/1.1www.siam2job.com:80GET //?author=2 HTTP/1.0 25-1637257070/9/212W 3.74002540650.00.051.90 108.162.226.5http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 26-1637-0/0/171. 0.00234602254790.00.005.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1637-0/0/99. 0.0049157031325790.00.000.64 40.122.173.134http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 112subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 42 seconds, (range: 0...188)index usage: 3%, cache usage: 5%total entries stored since starting: 3381total entries replaced since starting: 0total entries expired since starting: 3269total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 17908 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-28 23:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31bd1006f4bd1006f4cd1a6227Apache Status Apache Server Status for ftp.xn--12cn0bmbkgc3ent5c1ewa4bdj0re.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 28-Aug-2023 17:13:45 +07 Restart Time: Monday, 28-Aug-2023 17:12:39 +07 Parent Server Config. Generation: 1635 Parent Server MPM Generation: 1634 Server uptime: 1 minute 6 seconds Server load: 5.60 5.94 6.25 Total accesses: 658 - Total Traffic: 3.4 MB - Total Duration: 588950 CPU Usage: u2690.61 s4817.72 cu47361500 cs11585800 - 8.93e+7% CPU load 9.97 requests/sec - 52.9 kB/second - 5.3 kB/request - 895.061 ms/request 17 requests currently being processed, 7 idle workers W_RCC___CW__RC_CCCCRWWRR.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1634157330/40/40W 17.2700372200.00.260.26 142.93.64.15http/1.1localhost:443GET /server-status HTTP/1.1 1-1634157340/43/43_ 20.020631406700.00.240.24 20.9.48.52http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4POST //wp-login.php HTTP/1.1 2-1634157430/47/47R 21.180553430760.00.200.20 20.9.48.52http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4 3-1634157551/34/34C 14.1000281661.40.190.19 192.53.126.23http/1.1localhost:443GET /login.action HTTP/1.1 4-1634157641/43/43C 18.1600393701.40.210.21 74.207.237.46http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1634157790/45/45_ 18.570912385210.00.230.23 20.9.48.52http/1.1www.xn--12ca1al2c4cm5fzaon1x.coPOST //xmlrpc.php HTTP/1.1 6-1634158770/21/24_ 9.300623219060.00.120.13 40.122.168.139http/1.1www.tkadvicesystem.com:443POST //wp-login.php HTTP/1.1 7-1634157880/27/27_ 14.9401038307470.00.200.20 20.9.48.52http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST //wp-login.php HTTP/1.1 8-1634157981/40/40C 17.550377354531.30.220.22 142.93.153.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /debug/default/view?panel=config HTTP/1.1 9-1634159260/6/17W 2.1900153830.00.030.08 172.71.250.46http/1.1www.altaccount.com:80GET /wp-admin/includes/wp-sigunq.php HTTP/1.0 10-1634159060/16/22_ 3.810445112060.00.080.09 172.71.167.59http/1.1www.orderaccounting.com:80POST //wp-login.php HTTP/1.0 11-1634159330/6/9_ 1.020043710.00.010.01 192.53.126.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1634158220/38/38R 16.0408323450.00.180.18 91.213.50.8http/1.1 13-1634158241/35/35C 16.0300322161.40.170.17 142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1634158340/37/37_ 17.1400349960.00.190.19 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1634158401/39/39C 17.2501364831.40.230.23 139.59.182.142http/1.1localhost:443GET /.DS_Store HTTP/1.1 16-1634159391/4/5C 0.560011351.50.000.01 192.53.126.23http/1.1localhost:443GET /_all_dbs HTTP/1.1 17-1634158521/37/37C 18.1707703844815.10.260.26 143.42.118.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /.vscode/sftp.json HTTP/1.1 18-1634158581/40/40C 17.2210348711.40.170.17 139.59.182.142http/1.1localhost:443GET /login.action HTTP/1.1 19-1634159450/2/32R 0.5700291840.00.020.12 139.59.182.142http/1.1localhost:443GET /_all_dbs HTTP/1.1 20-1634159510/1/1W 0.000020.00.000.00 172.71.170.53http/1.1www.makeregist.com:80POST //xmlrpc.php HTTP/1.0 21-1634159570/1/1W 0.000020.00.000.00 172.69.65.122http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 22-1634159630/1/1R 0.87093218630.00.000.00 20.9.48.52http/1.1www.xn--12ca1al2c4cm5fzaon1x.co 23-1634159690/1/1R 0.59065313050.00.000.00 143.42.118.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4b SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 48subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 267 seconds, (range: 233...299)index usage: 1%, cache usage: 2%total entries stored since starting: 48total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 113 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-28 10:12
-