Domain pokaorganize.com
Thailand
CS LOXINFO Public Company Limited.
Software information
Apache 2
tcp/443
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 15:38
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309eff5f5b54Apache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 22:38:36 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 12 hours 37 minutes 15 seconds Server load: 2.08 2.02 2.01 Total accesses: 1850184 - Total Traffic: 23.8 GB - Total Duration: 2141120527 CPU Usage: u235.18 s124.65 cu32089.3 cs2210.25 - 1.41% CPU load .751 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.25 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes131000 229661no0yes032000 329394no0yes032000 529374no0yes032000 Sum400 1127000 ______W_________________________................................ ________________________________________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/53/14801_ 19.0140160260990.00.17193.80 162.243.161.105http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/50/15293_ 19.0130139013530.00.12198.97 138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-92293730/52/14865_ 19.2220150309560.00.18192.75 139.59.65.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/51/15044_ 19.5760145875130.00.11185.98 164.92.84.255http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/50/14948_ 19.5950147711740.00.18185.45 128.199.195.68http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/44/15171_ 19.4930156649170.00.13188.55 139.144.96.150http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293731/42/14842W 19.5500145588720.00.18200.28 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/44/15151_ 19.3990150182070.00.10187.60 178.62.3.65http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/46/15113_ 19.5030145226990.00.11229.90 139.144.96.150http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/52/15246_ 19.56110148853440.00.20194.92 161.35.190.56http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/50/14810_ 19.4750154393440.00.12200.72 143.110.156.182http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/47/14820_ 19.39120147156350.00.10195.46 128.199.195.68h2localhost:443[0/0] Software caused connection abort 0-92293730/58/14689_ 18.8240137182770.00.19185.55 146.190.98.165http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/51/14842_ 19.5760169086550.00.11186.04 128.199.195.68http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/50/15796_ 19.5760141615390.00.15187.81 161.35.190.56http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/53/14845_ 19.5760165341250.00.12182.52 128.199.195.68http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/58/14897_ 18.9980143405110.00.13206.39 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-92293730/51/14958_ 19.0660144940050.00.15189.33 161.35.176.95http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/48/14776_ 19.55120160388370.00.08200.56 139.144.96.150http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/53/14998_ 19.5850144639400.00.17193.85 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/52/14989_ 19.05120181496030.00.20193.46 161.35.176.95http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/49/15014_ 19.5690147053790.00.14204.12 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/53/15471_ 19.3980150756110.00.19188.31 178.62.3.65http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/44/14675_ 19.05120138765330.00.16190.21 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-92293730/61/14985_ 19.5850162205900.00.13186.91 128.199.195.68http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/54/14657_ 19.4940135981670.00.20197.05 139.144.96.150http/1.1localhost:80\x16\x03\x01\x01\v\x01 0-92293730/50/15157_ 19.5680144713520.00.09194.53 128.199.195.68http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/54/14939_ 19.5760159195740.00.08213.32 161.35.190.56http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/55/14742_ 19.5770152174680.00.13175.94 128.199.195.68http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/38/15186_ 19.4750135139140.00.11225.16 178.62.3.65http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/56/14675_ 19.0570155573080.00.07199.15 143.110.156.182http/1.1 0-92293730/48/14938_ 19.5900145815210.00.20185.19 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-92-0/0/15731. 0.00663010138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00663010136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00663010174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00663010150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00663010146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00663010134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00663010172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00663010165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00663010127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00663010152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00663010148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00663010159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00663010159504030.00.00200.56 45.55.193.222http/1.1localhost:443
Found on 2024-02-02 15:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309e922e4bb2Apache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 15:54:10 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 5 hours 52 minutes 49 seconds Server load: 2.71 2.71 2.66 Total accesses: 898585 - Total Traffic: 12.1 GB - Total Duration: 1115659337 CPU Usage: u163.84 s14.85 cu15234.7 cs801.3 - 8.36% CPU load 4.63 requests/sec - 65.4 kB/second - 14.1 kB/request - 1241.57 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 117271no3yes428000 28466no6yes428003 Sum209 856003 ................................_W__WW_____________________W____ __________W______W_________WR___................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/7167. 0.0062884796399500.00.00103.89 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /extwaok-38055gitems/etidm24rk.htm HTTP/1.1 0-7-0/0/7661. 0.00628167974317210.00.00105.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /pubcategorylrvy/15 HTTP/1.1 0-7-0/0/7237. 0.0062856080858040.00.00103.28 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=menu-zique-s-10-ii-49rREWcE HTTP/1.1 0-7-0/0/7514. 0.0062833877957780.00.0095.99 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=frank-abagnale-hi-res-stock-photography-and-images-alam 0-7-0/0/7455. 0.0062884778255570.00.0093.05 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /unjwaok-49849witems/eti HTTP/1.1 0-7-0/0/7595. 0.0062836190980650.00.0099.78 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=gbu-24-b-bomb-pcs-a-6-a-10-10-ii-JD6NPgTJ HTTP/1.1 0-7-0/0/7400. 0.0062835175032210.00.00109.85 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=progressive-era-muckrakers-magazine-project-digital-gui 0-7-0/0/7427. 0.0062884183872870.00.0096.49 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vjkwaok-4844xitems/etidm9.html HTTP/1.1 0-7-0/0/7611. 0.006281278002670.00.00146.71 203.170.192.183http/1.1www.chonlateepro.com:443POST /wp-cron.php?doing_wp_cron=1704617013.15975308418273925781 0-7-0/0/7505. 0.0062883680535250.00.0094.01 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /hnwarie-16192jetidm65uaj HTTP/1.1 0-7-0/0/7278. 0.0062887688910850.00.00115.57 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cxrwaok-27003eitems/etidm.htm HTTP/1.1 0-7-0/0/7043. 0.0062834586353890.00.0091.13 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=%E3%82%AC%E3%83%B3%E3%83%80%E3%83%A0%E3%80%91zz-gr-%E3% 0-7-0/0/7119. 0.0062884665871440.00.0094.49 185.191.171.10http/1.1www.chonlateeboi.com:443GET /5236biwxetidm3 HTTP/1.1 0-7-0/0/7312. 0.00628837100230430.00.0099.70 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /gnvwaok-27501iitems/etidm13.htm HTTP/1.1 0-7-0/0/7996. 0.0062884374013760.00.00100.10 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /krzarie-8811mitems/etidm.htm HTTP/1.1 0-7-0/0/7178. 0.00628212796074550.00.0091.55 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vjkwaok-4844xitems/etidm9.html HTTP/1.1 0-7-0/0/7320. 0.0062834377181700.00.0093.58 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=the-physician-in-the-19th-century-jane-austen-s-11-ii-5 0-7-0/0/7385. 0.0062834975796170.00.0098.22 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=gmt-00-country-i-Q7vEg2f1 HTTP/1.1 0-7-0/0/7422. 0.0062835094232130.00.0092.45 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=nullen-hi-res-stock-photography-and-images-alamy-5-ii-8 0-7-0/0/7501. 0.0062834977249130.00.0099.73 47.128.45.245http/1.1www.chonlateenextbiz.com:443GET /uftriw/download-spotify-songs-free-mp3.html HTTP/2.0 0-7-0/0/7468. 0.00628841117223870.00.00102.84 3.224.220.101http/1.1www.chonlateeboi.com:443GET /11160mywgetidm45gmv.htm HTTP/1.1 0-7-0/0/7140. 0.0062835780924830.00.0095.18 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=bank-holiday-dates-for-2022-off-72%-0-ii-LoJ029UJ HTTP/ 0-7-0/0/7711. 0.0062884788437430.00.00101.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /pubcategorylrvy/15 HTTP/1.1 0-7-0/0/7250. 0.0062884073203010.00.00101.58 23.22.35.162http/1.1www.chonlateeboi.com:443GET /28540khrretidm7 HTTP/1.1 0-7-0/0/7288. 0.0062827396572770.00.0091.59 173.201.180.210http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 0-7-0/0/7459. 0.0062889165630130.00.0094.77 3.224.220.101http/1.1www.chonlateeboi.com:443GET /33309bzlnitems/etidm77.htm HTTP/1.1 0-7-0/0/7316. 0.0062885281577470.00.00102.50 47.128.45.245h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /uftriw/download-spotify-songs-free-m 0-7-0/0/7378. 0.0062885191014610.00.00123.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /12687bzlnitems/etidm26zn.htm HTTP/1.1 0-7-0/0/7151. 0.0062883878912650.00.0089.18 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ljawaok-47656netidm45ywn HTTP/1.1 0-7-0/0/7428. 0.0062884084343360.00.00128.64 3.224.220.101http/1.1www.chonlateeboi.com:443GET /27539unwsetidm.html HTTP/1.1 0-7-0/0/7074. 0.0062838587824790.00.00101.64 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=napoli-ea7-football-s-most-expensive-jersey-is-not-4-ii 0-7-0/0/7444. 0.0062884578655030.00.0094.63 3.224.220.101http/1.1www.chonlateeboi.com:443GET /4879tbrmitems/etidm75rm HTTP/1.1 1-7172710/227/7397_ 133.86263786699210.02.79123.32 164.90.222.93h2localhost:443[0/0] Software caused connection abort 1-7172711/265/7179W 134.460081742300.03.0290.78 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /estjflh-20401gitems/eti HTTP/1.1 1-7172710/274/7310_ 134.551345108478120.02.9396.12 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=pin-on-whatsapp-jokes-in-hindi-6-ii-36n76Qcn HTTP/1.1 1-7172710/259/6892_ 134.431086957770.02.8789.66 139.59.230.191http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7172711/186/7007W 134.570093568490.02.14102.31 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=cheer-up-episodes-10-and-11-helps-bae-in-2-ii-PDMmE6t9 1-7172711/243/7154W 134.030082324400.02.5594.83 23.22.35.162http/1.1www.chonlateeboi.com:443GET /16835mywgetidm.html HTTP/1.1 1-7172710/278/7205_ 134.6700100055110.02.9792.52 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-7172710/268/7240_ 134.581093282520.02.6297.55 164.90.222.93http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-7172710/253/7232_ 134.352076566270.02.8891.68 139.59.230.191http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-7172710/240/7077_ 134.482091476830.02.5197.61 164.90.222.93http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-7172710/260/6849_ 134.551093826830.02.7395.29 161.35.27.144http/1.1localhost:80GET /.DS_Sto
Found on 2024-01-07 08:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309eea38ff40Apache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 02:23:27 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 16 hours 22 minutes 6 seconds Server load: 2.47 2.65 2.70 Total accesses: 294353 - Total Traffic: 4.2 GB - Total Duration: 257260516 CPU Usage: u669.3 s36.35 cu4282.28 cs230.01 - 8.86% CPU load 5 requests/sec - 74.1 kB/second - 14.8 kB/request - 873.986 ms/request 9 requests currently being processed, 87 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 019907no11yes032007 419908no4yes329004 719927no7yes626001 919931yes2no00000 Sum4124 9870012 ________________________________................................ ................................................................ _______W________W_W_____________................................ ................................WW__W___________W__________R__R_ ..............................................G...........G..... ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2199070/242/3085_ 143.314025540500.02.7045.73 161.35.155.246http/1.1localhost:80GET /config.json HTTP/1.1 0-2199070/232/3327_ 143.143024096960.02.9343.89 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/229/3022_ 143.363036838990.02.8252.46 50.62.141.180http/1.1www.1smestartup.com:80GET /wp-content/vz.php HTTP/1.1 0-2199070/228/3258_ 142.86186326680160.02.9341.40 85.208.96.201http/1.1www.chonlateeadmin.com:443GET /lmauzzo-35566netidm62y HTTP/1.1 0-2199070/218/3142_ 143.24397024670740.02.4439.27 3.224.220.101http/1.1www.chonlateeboi.com:443GET /36955oqmiitems/etidm HTTP/1.1 0-2199070/233/3386_ 143.301027301540.03.1042.79 161.35.155.246http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-2199070/234/3156_ 143.373024680890.02.8554.42 139.59.182.142http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-2199070/251/3171_ 143.143025559940.02.6441.03 161.35.155.246http/1.1localhost:80GET /about HTTP/1.1 0-2199070/242/3217_ 143.162025452850.02.5883.37 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-2199070/228/3149_ 143.373024639580.02.9140.73 162.243.184.251http/1.1localhost:443GET / HTTP/1.1 0-2199070/237/3084_ 143.420028127610.02.8537.85 162.243.184.251http/1.1localhost:443GET /about HTTP/1.1 0-2199070/255/3032_ 143.373024783880.02.9338.99 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-2199070/219/2986_ 143.383120024715420.02.6040.82 23.22.35.162http/1.1www.chonlateeboi.com:443GET /46874oqmiitems/etid.html HTTP/1.1 0-2199070/215/3267_ 143.190035997380.02.6244.27 161.35.155.246http/1.1localhost:80GET /login.action HTTP/1.1 0-2199070/233/3328_ 142.472120528147130.02.5944.58 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-2199070/208/3057_ 143.204025646000.02.4139.57 161.35.155.246http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-2199070/217/3004_ 143.063103228676220.02.6938.99 3.224.220.101http/1.1www.chonlateeboi.com:443GET /7862qbkeitems/etidm11k.html HTTP/1.1 0-2199070/225/3304_ 143.373024333730.02.5543.73 161.35.155.246http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-2199070/226/3200_ 143.162024061190.02.6541.67 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-2199070/221/3042_ 143.41193928617910.02.5544.88 52.70.240.171http/1.1www.chonlateeboi.com:443GET /36761jbwjeti.html HTTP/1.1 0-2199070/233/3098_ 143.420100024157750.02.9543.98 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /fhbuxox-10184oeti.html HTTP/1.1 0-2199070/223/3149_ 143.411026545820.02.7744.95 139.59.182.142http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-2199070/244/3489_ 143.373482524499220.02.8444.31 66.249.71.9http/1.1www.chonlateenextbiz.com:443GET /sitemap93.xml HTTP/1.1 0-2199070/205/2978_ 143.392114824233460.02.3339.12 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?nushsbr-271596fetidm50a.htm HTTP/1.1 0-2199070/236/3045_ 142.521107024489280.02.8638.86 162.243.184.251http/1.1 0-2199070/225/3025_ 143.191024275140.02.8339.27 139.59.182.142http/1.1localhost:80GET /login.action HTTP/1.1 0-2199070/216/3108_ 143.143027476360.02.8549.94 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/213/3089_ 143.310141028560030.02.8470.06 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uywhlzs-285045jetidm8.htm HTTP/1.1 0-2199070/229/2994_ 143.28153024595170.02.6937.66 45.61.185.197http/1.1www.mkandptfoods.com:443POST /wp-login.php HTTP/1.1 0-2199070/240/3349_ 143.392110123257490.02.8278.39 23.22.35.162http/1.1www.chonlateeboi.com:443GET /36740jbwjitems/etidm7.html HTTP/1.1 0-2199070/234/3043_ 143.172324441370.02.9347.03 139.59.182.142http/1.1localhost:80GET /server-status HTTP/1.1 0-2199070/235/3398_ 143.282027260510.02.8841.51 161.35.155.246http/1.1localhost:80GET /.env HTTP/1.1 1-1-0/0/2323. 0.00709886617630010.00.0030.27 207.46.13.154http/1.1www.thaidaoherb.com:443GET /9i7h/dyv42461ryyhc053875235.html HTTP/2.0 1-1-0/0/2100. 0.007098173417390000.00.0027.02 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /db.php?g3192039.shtml HTTP/1.1 1-1-0/0/2227. 0.007098107117630050.00.0030.69 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rngadej-26472tetidm80eat.htm HTTP/1.1 1-1-0/0/2089. 0.007098211517285130.00.0027.89 66.249.69.229http/1.1www.chonlateenextbiz.com:443GET /db.php?g335424.shtml HTTP/1.1 1-1-0/0/2129. 0.00709885117106500.00.0032.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /48835biwxitems/etidm HTTP/1.1 1-1-0/0/2185. 0.00709885816794840.00.0028.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jryadej-23266letid HTTP/1.1 1-1-0/0/2135. 0.00709897217421340.00.0026.37 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22684biwxetidm7 HTTP/1.1 1-1-0/0/2185. 0.0070981717237790.00.0029.46 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?papaw99.xml HTTP/1.1 1-1-0/0/2163. 0.00709884617365570.00.0029.98 23.22.35.162http/1.1www.chonlateeboi.com:443GET /42349biwxitems/etidm52 HTTP/1.1 1-1-0/0/2112. 0.00709889516912400.00.0027.55 185.191.171.3http/1.1www.chonlateefood.com:443GET /geti/cer43578htewitems.htm HTTP/1.1 1-1-0/0/2118. 0.007098102016733450.00.0031.98 157.55.39.202h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /tviipbe-49432vetidm29giv 1-1-0/0/2249. 0.007098105217993880.00.0031.23 3.22
Found on 2024-01-05 19:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309e5e11fdc4Apache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 23:31:44 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 23 hours 8 minutes 45 seconds Server load: 0.84 0.73 0.76 Total accesses: 4341185 - Total Traffic: 55.7 GB - Total Duration: 4106396349 CPU Usage: u225.94 s46.85 cu78156.7 cs4090.87 - 8.71% CPU load 4.58 requests/sec - 61.7 kB/second - 13.5 kB/request - 945.916 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 023735no4yes230000 217351no2yes725001 Sum206 955001 ________________W______________W................................ _R____W__W___W_W______R_W_______................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-40237350/51/39217_ 38.89113356615340.00.62496.98 162.243.184.251http/1.1localhost:80GET /server-status HTTP/1.1 0-40237350/57/38580_ 39.4620363468840.00.67487.06 162.243.184.251http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-40237350/47/38966_ 38.9321263398553500.00.64499.51 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?pziqbmb-34166vetidm9.htm HTTP/1.1 0-40237350/54/38999_ 39.361852387022710.00.65509.84 75.101.228.212http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET //xn--12cx2bef7bl0boq4ch6gugwcjn6d.com/wp-content/plugins/s 0-40237350/57/39510_ 39.6201448367430400.00.74563.40 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?lfavrsm-264678netidm11y.htm HTTP/1.1 0-40237350/58/38581_ 39.4620396510690.00.67487.87 206.81.1.88http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-40237350/53/38908_ 39.5411400394500.00.73490.22 66.249.71.202http/1.1www.twinbuilt.co.th:443GET /?e=parodontax-complete-protection-toothpaste-for-bleeding- 0-40237350/57/39662_ 39.291834365296050.00.69497.75 75.101.228.212http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-emoji-release.min.js HTTP/1.1 0-40237350/50/38644_ 39.4620377503080.00.61506.00 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /rgycktp226698l14c2 HTTP/1.1 0-40237350/49/39054_ 37.7220365813750.00.60498.99 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ymfgzna139657seti.html HTTP/1.1 0-40237350/47/38619_ 39.5611243381586760.00.60469.73 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?162444rxiletidm5.htm HTTP/1.1 0-40237350/58/38696_ 39.2810366733770.00.64519.62 162.243.186.177http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-40237350/55/38571_ 39.2220372543800.00.69471.30 51.68.11.211http/1.1 0-40237350/52/38760_ 39.380956401836110.00.74499.63 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?enxupca-34155kitems/eti HTTP/1.1 0-40237350/49/38966_ 39.6000377712150.00.58489.69 138.197.88.136http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-40237350/58/38652_ 39.4021696369700160.00.74544.04 144.76.67.250http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /tag/closing-year-2566-books-%E0%B9%80%E0%B8%A5%E0%B8%A2/ H 0-40237351/57/39623W 39.3800372629390.00.71524.10 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?zbsothe-2768fetidm17m.htm HTTP/1.1 0-40237350/63/39136_ 39.630757364047410.00.72482.44 185.191.171.16http/1.1www.chonlateefood.com:443GET /geti/ivx48082givbitems HTTP/1.1 0-40237350/53/39160_ 39.3121226365320350.00.69505.97 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?nmgzkxl-48464tetidm68a.htm HTTP/1.1 0-40237350/53/39427_ 39.6100381219860.00.67542.72 206.81.1.88http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-40237350/48/38794_ 39.55116360777230.00.56511.24 51.68.11.211http/1.1www.ltclevelup.com:443POST /wp-content/uploads/elementor/thumbs/wcrmtboe.php HTTP/1.1 0-40237350/57/38988_ 39.2910385861700.00.94503.66 162.243.184.251http/1.1localhost:80GET /.env HTTP/1.1 0-40237350/59/38749_ 39.290949404647830.00.65513.15 31.184.236.42http/1.1 0-40237350/64/38053_ 39.4000359243400.00.71473.16 75.101.228.212http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET //xn--12cx2bef7bl0boq4ch6gugwcjn6d.com/wp-content/plugins/w 0-40237350/59/39101_ 39.222862368746590.00.78518.91 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ypdbcsr-29365qitems/eti HTTP/1.1 0-40237350/60/38384_ 38.7602212385886030.00.64469.53 144.76.67.250http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /tag/closing-year-2566-books-%E0%B9%80%E0%B8%A5%E0%B8%A2/ H 0-40237350/55/39097_ 39.561988370569800.00.68582.40 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?hzarxma-1814netidm9.htm HTTP/1.1 0-40237350/55/38317_ 39.6101063367935100.00.66509.03 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?jdcqqkm-31196petid.htm HTTP/1.1 0-40237350/53/38930_ 39.4320409222720.00.67522.31 162.243.184.251http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-40237350/50/38783_ 39.2820372787550.00.57501.93 31.184.236.34http/1.1 0-40237350/52/38893_ 39.2910367738560.00.61492.37 206.81.1.88http/1.1localhost:443GET / HTTP/1.1 0-40237351/46/38591W 39.2900375861980.00.53536.06 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?rnkjoap-12510xetidm4 HTTP/1.1 1-40-0/0/39863. 0.006991280371902530.00.00504.02 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?trmxner-1046zetidm1.htm HTTP/1.1 1-40-0/0/39765. 0.00699874380127490.00.00546.16 66.249.71.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ilbniby-31403oitems/eti.htm HTTP/1.1 1-40-0/0/39525. 0.00699870381914500.00.00549.22 31.184.236.33http/1.1 1-40-0/0/39803. 0.00699898390298180.00.00561.17 85.208.96.198http/1.1www.chonlateeadmin.com:443GET /prectef-24910retidm49c HTTP/1.1 1-40-0/0/40573. 0.00699878361558090.00.00616.11 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?nvgiejy-54340titems/etid.html HTTP/1.1 1-40-0/0/39366. 0.00699909359294140.00.00562.61 31.184.236.34http/1.1 1-40-0/0/39457. 0.006991102361949180.00.00528.07 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-303475sitems/etidm HTTP/1.1 1-40-0/0/39903. 0.00699901385661260.00.00509.12 31.184.236.34http/1.1 1-40-0/0/39662. 0.006990374360440.00.00500.02 185.191.171.3http/1.1www.chonlateenextbiz.com:443GET /robots.txt HTTP/1.1 1-40-0/0/39722. 0.00699889366565020.00.00508.59 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?397537himsitems/eti HTTP/1.1 1-40-0/0/40309. 0.006991082362266380.00.00532.57 31.184.236.33http/1.1 1-40-0/0/40079. 0.0069991136648005
Found on 2023-12-11 16:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309e6a08aa03Apache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:42 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 43 seconds Server load: 2.84 2.12 1.72 Total accesses: 697441 - Total Traffic: 9.7 GB - Total Duration: 517783333 CPU Usage: u84.71 s12.65 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.404 ms/request 11 requests currently being processed, 117 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no14yes2301011 330151no14yes131007 630155no13yes428008 730156no0yes428000 Sum4041 111171026 ................................................................ __R____________________W__________________W_____________________ ................................................................ __WW______________W_______W_______________R_W____W______W_______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0069789745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0069796045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0069780245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0069795746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00697167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0069794846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00697145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0069792346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00697107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00697104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0069770146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0069789947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0069772146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00697104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00697108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0069746846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0069770945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0069784445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0069771246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0069770946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00697046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0069749045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0069793646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0069786945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006974146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0069773844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00697722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0069796345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00697107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00697146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00697778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0069796044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0069786344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0069747946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00697150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0069767645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0069745143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00697044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00697232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0069758244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00697183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00697822744746080.00.0079.16 <
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539aaea0cceApache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 04:01:47 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 3 hours 38 minutes 1 second Server load: 0.81 1.05 1.05 Total accesses: 18410 - Total Traffic: 237.0 MB - Total Duration: 32335490 CPU Usage: u3288.94 s5863.95 cu55532900 cs13589100 - 528000% CPU load 1.41 requests/sec - 18.6 kB/second - 13.2 kB/request - 1756.41 ms/request 4 requests currently being processed, 6 idle workers _._C__C__WW....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964150900/88/1666_ 41.390129083030.01.0816.71 137.184.150.232http/1.1localhost:80GET /.env HTTP/1.0 1-1964-0/0/1514. 0.0017936028024640.00.0017.13 162.158.186.8http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 2-1964150370/95/1464_ 46.340126779340.00.5715.89 137.184.150.232http/1.1localhost:80GET /.DS_Store HTTP/1.0 3-1964150981/86/1560C 43.341664259287410.70.4521.33 159.65.58.104http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 4-1964151000/79/1315_ 37.681123182280.00.3813.87 137.184.150.232http/1.1localhost:80GET /_all_dbs HTTP/1.0 5-1964151320/75/1366_ 40.290124704960.01.4215.72 144.126.198.24http/1.1localhost:443GET /about HTTP/1.1 6-1964151381/72/1481C 34.550126588741.40.4117.13 144.126.198.24http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1964151480/75/1276_ 36.261123819350.00.4313.95 144.126.198.24http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-1964151660/71/1253_ 33.511123090320.00.6313.43 144.126.198.24http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-1964152100/59/1109W 31.960018373220.00.6711.48 159.65.58.104http/1.1www.pokaorganize.com:443GET /about HTTP/1.1 10-1964153200/36/883W 17.190012509520.00.738.53 144.126.198.24http/1.1localhost:443GET /server-status HTTP/1.1 11-1964-0/0/792. 0.0052748415130490.00.009.53 172.70.207.195http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 12-1964-0/0/384. 0.00176706649170.00.006.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1964-0/0/419. 0.00138810329410750.00.007.17 162.158.238.44http/1.1www.chonlateecoffee.com:80GET /wp-includes/wp-atom.php HTTP/1.0 14-1964-0/0/357. 0.0013914465471570.00.002.78 172.70.207.131http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 15-1964-0/0/265. 0.0024254084629690.00.002.72 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 16-1964-0/0/250. 0.0024353333322960.00.003.45 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 17-1964-0/0/196. 0.0024265582350890.00.003.51 162.158.154.143http/1.1www.altaccount.com:80GET /images/class.api.php HTTP/1.0 18-1964-0/0/156. 0.0024206882234690.00.002.37 162.158.154.143http/1.1www.altaccount.com:80GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.0 19-1964-0/0/117. 0.00274802013170.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1964-0/0/193. 0.0024173612853630.00.003.34 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 21-1964-0/0/102. 0.00274601476840.00.007.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964-0/0/193. 0.00286813213903990.00.0019.39 172.68.234.185http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 23-1964-0/0/99. 0.00429801822810.00.002.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 291 seconds, (range: 287...294)index usage: 0%, cache usage: 0%total entries stored since starting: 138total entries replaced since starting: 0total entries expired since starting: 134total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 6225 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 20:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef0715393a3a2314Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 10:33:36 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 6 hours 31 minutes 24 seconds Server load: 0.60 0.42 0.33 Total accesses: 36811 - Total Traffic: 545.5 MB - Total Duration: 72132438 CPU Usage: u3038.32 s5770.2 cu55149600 cs13501600 - 292000% CPU load 1.57 requests/sec - 23.8 kB/second - 15.2 kB/request - 1959.53 ms/request 5 requests currently being processed, 6 idle workers W__W__.C.W_R_..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932291590/24/3079W 10.151060498620.00.2937.40 172.71.170.157http/1.1www.proplustech.co.th:443GET /?page_id=O699593 HTTP/1.1 1-1932293050/10/3044_ 1.000160461550.00.0337.43 138.197.88.136http/1.1localhost:80GET /.env HTTP/1.0 2-1932285480/96/3056_ 20.031060278610.01.0640.61 138.197.88.136http/1.1localhost:80GET /_all_dbs HTTP/1.0 3-1932292520/13/2990W 4.010059843940.00.0947.30 141.101.98.61http/1.1www.chorsiam.com:80GET /telescope/requests HTTP/1.0 4-1932290090/41/2982_ 9.030124659321230.00.6049.46 159.203.182.222http/1.1www.pokaorganize.com:443GET / HTTP/1.1 5-1932287320/76/2774_ 20.960052909930.00.7734.85 207.154.240.169http/1.1localhost:80GET /.env HTTP/1.0 6-1932-0/0/2733. 0.00256055680230.00.0033.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1932290711/38/2675C 7.410151234831.40.3229.71 165.22.74.203http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1932-0/0/2500. 0.00194051784190.00.0032.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1932290790/35/2325W 9.320044687930.00.5629.03 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 10-1932288520/68/2006_ 18.840139402340.00.7335.83 138.197.88.136http/1.1localhost:80GET /.DS_Store HTTP/1.0 11-1932290180/41/1602R 12.553132416480.00.4224.57 162.158.90.102http/1.1www.torrong.co.th:80POST /xmlrpc.php HTTP/1.0 12-1932290810/40/1403_ 13.12084526552290.00.4429.95 172.71.242.207http/1.1www.chorsiam.com:80GET /config.json HTTP/1.0 13-1932-0/0/1226. 0.003628024568690.00.0055.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/695. 0.00291689213575090.00.008.23 172.71.167.200http/1.1www.proplustech.co.th:443GET /?page_id=E1142248 HTTP/1.1 15-1932-0/0/302. 0.00362704453990.00.003.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/299. 0.00361104808140.00.002.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/163. 0.00362402138780.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/257. 0.00293104374050.00.002.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/163. 0.00358702780690.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/262. 0.00363304486550.00.003.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/31. 0.0036100550010.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/175. 0.00293202692490.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/3. 0.003638028600.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1932-0/0/3. 0.003622060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/40. 0.00318001125780.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/17. 0.0034220560250.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/2. 0.003631020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.0036320140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.0036210108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 150 seconds, (range: 31...297)index usage: 0%, cache usage: 0%total entries stored since starting: 234total entries replaced since starting: 0total entries expired since starting: 225total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 22399 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 03:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539366d5a77Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 26-Oct-2023 23:59:15 +07 Restart Time: Thursday, 26-Oct-2023 15:16:50 +07 Parent Server Config. Generation: 1894 Parent Server MPM Generation: 1893 Server uptime: 8 hours 42 minutes 24 seconds Server load: 6.57 5.71 4.92 Total accesses: 139423 - Total Traffic: 1.9 GB - Total Duration: 552357617 CPU Usage: u3402.08 s5703.84 cu53809400 cs13122400 - 214000% CPU load 4.45 requests/sec - 64.9 kB/second - 14.6 kB/request - 3961.74 ms/request 25 requests currently being processed, 0 idle workers RWWCWWCCWRWWWWW.C.RWWWWW.W..WW.................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-18934650/99/6907R 79.150302250372960.01.1087.50 162.158.222.42http/1.1www.siamerp.com:443 1-189311640/16/6818W 10.5700248849480.00.2681.31 172.71.150.58http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 2-189312410/9/6706W 4.0930252891920.00.07104.51 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-bali-frozen-concoction-maker-with-self-d 3-18939261/50/6793C 31.6700242352292.60.47129.41 159.65.138.217http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-189312600/6/6575W 0.9340244319030.00.1689.10 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-frozen-concoction-maker-travel-bag-ad120 5-18936850/84/6516W 55.0720235920200.00.85105.19 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=best-margarita-makers-in-2023-hgtv-top-picks-hgtv-mm-zA 6-189310151/53/6396C 22.5500238251561.30.6481.53 159.65.138.217http/1.1localhost:443GET /about HTTP/1.1 7-189310771/27/6527C 13.5000240693271.40.3680.21 159.65.138.217http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-18937100/59/6284W 40.7000226261610.00.6081.87 27.254.96.168http/1.1www.nptpropertythailand.com:443POST /wp-admin/admin-ajax.php?action=wp_1_wc_privacy_cleanup&no 9-18938170/76/6325R 25.9800221780500.00.8579.40 207.46.13.151http/1.1www.cnb.co.th:443 10-18937960/56/6143W 34.3900223579190.00.7182.73 13.81.13.15http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 11-18939350/41/5829W 31.3910217550130.00.4673.79 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=honeywell-focuspro-th5000-series-user-manual-24-pages-a 12-189312800/4/5761W 0.5530209366970.00.0369.19 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=wiring-guide-conventional-systems-honeywell-focuspro-th 13-189390280/1/3895W 1.94104430142196370.00.0161.57 147.78.47.38http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /?ARRAY=5o313639383333323631352p22687474703n5p2s5p2s3632367 14-189312880/5/5560W 0.9410202739570.00.05101.09 192.53.126.23http/1.1www.pokaorganize.com:443GET / HTTP/1.1 15-1893-0/0/5329. 0.0040192646980.00.0067.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-189311981/21/5548C 11.35014911951833747.70.1969.22 52.70.240.171http/1.1www.thaidaoherb.com:443GET /43848315125166.html HTTP/1.1 17-1893-0/0/4718. 0.0030184365290.00.0070.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-189311080/34/4750R 20.9900175816410.00.2659.05 52.70.240.171http/1.1www.thaidaoherb.com:443 19-18938410/46/3805W 34.0640139999980.00.6461.96 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=5-pack-honeywell-th5220d1029-focuspro-5000-non-programm 20-18936240/79/3988W 46.3840153193410.00.8751.07 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-brown-water-repellant-foam-padded-concoc 21-18936550/60/3659W 46.6710137339960.00.7546.55 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=margaritaville-bahamas-home-frozen-margarita-machine-wi 22-18939410/55/2693W 35.590097505930.00.6436.38 159.65.138.217http/1.1localhost:443GET /server-status HTTP/1.1 23-18936610/82/2224W 59.4510082762090.00.7828.11 27.254.96.168http/1.1www.nptpropertythailand.com:443POST /wp-cron.php?doing_wp_cron=1698339544.87526607513427734375 24-1893-0/0/1941. 0.003551166854030.00.0037.23 172.71.150.59http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 25-18939420/53/1271W 32.030049568000.00.7030.57 178.151.245.174http/1.1www.1smestartup.com:443GET /tag/%E0%B8%A1%E0%B9%82%E0%B8%99%E0%B8%A3%E0%B8%A1%E0%B8%A2 26-1893-0/0/977. 0.0030036934930.00.0012.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1893-0/0/716. 0.0062025987200.00.008.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-18939920/33/591W 19.559024625080.00.486.43 52.167.144.214http/1.1www.nakindogtraining.com:443GET /wzy.php?oriented-GRINDER.xml HTTP/1.1 29-189311140/37/765W 21.360031045340.00.3020.52 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-bahamas-frozen-concoction-maker-for-sale 30-1893-0/0/522. 0.00141019887940.00.006.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1893-0/0/393. 0.0060103914688810.00.008.23 185.191.171.11http/1.1www.mkandptfoods.com:443GET /m4278688397.html HTTP/1.1 32-1893-0/0/73. 0.006830394348100.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1893-0/0/336. 0.00736015828790.00.0021.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1893-0/0/398. 0.0050744815126190.00.003.79 172.71.151.138http/1.1www.acumaticathailand.com:80POST //wp-login.php HTTP/1.0 35-1893-0/0/199. 0.0068509608120.00.003.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1893-0/0/85. 0.0069103264420.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1893-0/0/105. 0.00768805388650.00.0012.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1893-0/0/131. 0.00762308682640.00.001.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1893-0/0/170. 0.00772006825550.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1893-0/0/104. 0.00771703681930.00.001.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1893-0/0/81. 0.00774202794690.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1893-0/0/97. 0.00773903568650.00.001.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1893-0/0/128. 0.00762104280980.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1893-0/0/155. 0.00773104730310.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1893-0/0/24. 0.0077380835200.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1893-0/0/163. 0.00758907682970.00.001.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1893-0/0/117. 0.00763404262870.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1893-0/0/59. 0.00771901923210.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1893-0/0/73. 0.00733605212840.00.000.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0
Found on 2023-10-26 16:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef0715397f109b3bApache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 07:06:10 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 3 hours 3 minutes 58 seconds Server load: 0.88 0.90 0.64 Total accesses: 11933 - Total Traffic: 156.2 MB - Total Duration: 13070170 CPU Usage: u2900.75 s5356.4 cu52299300 cs12765200 - 590000% CPU load 1.08 requests/sec - 14.5 kB/second - 13.4 kB/request - 1095.3 ms/request 5 requests currently being processed, 5 idle workers W_R._._CW__W...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182329750/37/1080W 14.881010688880.00.3012.22 159.203.94.228http/1.1www.pokaorganize.com:443GET / HTTP/1.1 1-182331350/21/1119_ 5.261110511504940.00.2713.09 104.43.236.85http/1.1www.mkandptfoods.com:443GET /h4xor.php HTTP/1.1 2-182328710/52/1145R 25.182013021310.00.4214.73 199.195.250.165http/1.1 3-1823-0/0/985. 0.0076010894820.00.0016.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-182329820/39/982_ 15.011012501600.00.3710.68 104.43.236.85http/1.1www.mkandptfoods.com:80GET //IndoXploit.php HTTP/1.0 5-1823-0/0/768. 0.007409215300.00.009.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-182331430/18/1003_ 6.061111914710.00.0912.57 207.154.240.169http/1.1localhost:443GET /about HTTP/1.1 7-182327221/66/940C 32.520110579681.40.6313.17 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-182329880/38/794W 14.35007749860.00.2415.44 104.43.236.85http/1.1www.mkandptfoods.com:443GET /IndoXploit.php HTTP/1.1 9-182327410/70/756_ 31.88007615840.00.858.24 161.35.155.246http/1.1localhost:80GET /.git/config HTTP/1.0 10-182331450/19/570_ 5.37015526970.00.1011.76 161.35.155.246http/1.1localhost:80GET /.env HTTP/1.0 11-182329580/45/404W 17.18003928480.00.393.78 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 12-1823-0/0/385. 0.0020204878350.00.004.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1823-0/0/24. 0.007820121150.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1823-0/0/246. 0.0045602628190.00.002.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1823-0/0/104. 0.008391007900.00.001.82 52.24.67.13http/1.1www.thaidaoherb.com:443GET /wp-content/uploads/elementor/css/post-15.css?ver=169115922 16-1823-0/0/201. 0.0078402531130.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1823-0/0/101. 0.0089580991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0082175051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.0088880144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0081937821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.0089590300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.0089620210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.008972050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.00897101095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 157subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 81 seconds, (range: 5...278)index usage: 5%, cache usage: 7%total entries stored since starting: 3090total entries replaced since starting: 0total entries expired since starting: 2933total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 75 hit, 4309 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 00:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef0715390f037e11Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 04-Oct-2023 00:29:51 +07 Restart Time: Wednesday, 04-Oct-2023 00:22:45 +07 Parent Server Config. Generation: 1801 Parent Server MPM Generation: 1800 Server uptime: 7 minutes 6 seconds Server load: 1.62 1.69 1.68 Total accesses: 1210 - Total Traffic: 9.5 MB - Total Duration: 1332841 CPU Usage: u2778.18 s5268.27 cu51831200 cs12663400 - 1.51e+7% CPU load 2.84 requests/sec - 22.8 kB/second - 8.0 kB/request - 1101.52 ms/request 11 requests currently being processed, 4 idle workers W__RCW_RCCWRCC_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1800141530/3/101W 3.531201180180.00.050.81 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1696354179.21389889717102050781 1-1800141290/13/110_ 8.3501403995300.00.110.81 161.97.145.103http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A3 2-1800141940/3/103_ 1.38011421640.00.020.91 172.69.179.160http/1.1www.chonlateeit.com:443GET /xmlrpc.php HTTP/1.1 3-1800142010/4/102R 1.12111438130.00.020.97 159.89.83.196http/1.1 4-1800141621/9/101C 2.9000840291.40.140.73 172.105.37.32http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1800140980/20/94W 12.46101258780.00.160.78 27.254.96.168http/1.1www.12gobiz.com:443GET /category/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0% 6-1800141690/12/101_ 5.89011086690.00.130.71 138.68.133.118http/1.1localhost:80GET /telescope/requests HTTP/1.0 7-1800141130/15/78R 6.1940868590.00.110.73 159.89.83.196http/1.1www.partymanagementthailand.com 8-1800141711/6/102C 3.241155911173920.50.050.84 94.23.207.193http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B9%82%E0%B8%9E%E0%B8%99%E0%B8%AA%E0%B8%A7%E0%B8%A3 9-1800142041/7/104C 1.85111150222.60.060.79 172.105.37.32http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1800142310/4/33W 2.8100287050.00.030.21 172.105.37.32http/1.1localhost:443GET /server-status HTTP/1.1 11-1800142400/6/105R 0.01111073240.00.010.67 167.71.48.191http/1.1localhost:80GET /.env HTTP/1.0 12-1800142461/2/35C 1.22015262761620.60.020.23 185.191.171.13http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%99%E0%B8%B4%E0%B8%84%E0%B8%A1%E0%B8%99%E0%B9%89 13-1800140261/41/41C 15.7000334681.30.290.29 172.105.37.32http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 231subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 33 seconds, (range: 0...81)index usage: 8%, cache usage: 10%total entries stored since starting: 348total entries replaced since starting: 0total entries expired since starting: 117total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 417 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-03 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153973c04877Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:18 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 31 seconds Server load: 0.88 1.13 1.25 Total accesses: 484 - Total Traffic: 2.6 MB - Total Duration: 213017 CPU Usage: u2758.88 s5256.75 cu51774600 cs12651800 - 7.08e+7% CPU load 5.32 requests/sec - 29.4 kB/second - 5.5 kB/request - 440.118 ms/request 12 requests currently being processed, 4 idle workers _CWCWCC_R_CC_C.WC................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299410/45/45_ 6.2004143690.00.220.22 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swip 1-1797299571/26/26C 6.7300417551.40.300.30 167.99.182.39http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1797301250/20/37W 1.970091040.00.040.09 159.203.63.67http/1.1localhost:443GET /server-status HTTP/1.1 3-1797301601/8/37C 1.1110130801.40.050.21 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1797301310/15/30W 1.9700156440.00.050.19 74.207.237.114http/1.1www.pokaorganize.com:443GET /about HTTP/1.1 5-1797301721/4/15C 0.02014126046.40.020.22 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP 6-1797300731/28/40C 5.9410127081.40.140.16 74.207.237.46http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1797301780/3/14_ 0.03013155470.00.000.14 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/essential-addons-for-elementor-lite/ass 8-1797300250/43/43R 1.560026320.00.150.15 161.35.176.95http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-1797300310/33/33_ 2.920876450.00.070.07 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/uploads/elementor/css/post-9.css?ver=1695264046 10-1797301841/3/14C 0.010180133.60.020.16 74.207.237.46http/1.1localhost:443GET /server-status HTTP/1.1 11-1797300441/29/29C 4.300422998110.70.200.20 74.207.237.114http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 12-1797301860/3/19_ 0.01043139120.00.020.04 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/elementor/assets/css/frontend-lite.min. 13-1797300521/36/36C 5.010362993431.30.150.15 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1 14-1797-0/0/10. 0.0058011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300840/22/22W 6.5300160220.00.100.10 162.243.161.105http/1.1www.pokaorganize.com:443GET /v2/_catalog HTTP/1.1 16-1797300921/20/20C 4.9001149851.40.160.16 161.35.176.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1797-0/0/6. 0.0043011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0051013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0045013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 52subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 237 seconds, (range: 208...294)index usage: 1%, cache usage: 2%total entries stored since starting: 52total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 265 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539bdeeabcfApache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:37 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 1 minute 6 seconds Server load: 3.97 4.26 4.33 Total accesses: 472 - Total Traffic: 4.5 MB - Total Duration: 529196 CPU Usage: u2471.67 s4255.28 cu40848700 cs9867590 - 7.69e+7% CPU load 7.15 requests/sec - 69.8 kB/second - 9.8 kB/request - 1121.18 ms/request 18 requests currently being processed, 0 idle workers CRCRCCCRWWRRWWCCRW................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239901/31/31C 17.961993371966.60.410.41 159.223.38.52http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 1-1527239920/38/38R 17.4520427340.00.270.27 66.115.189.177http/1.1www.pokaorganize.com:443 2-1527242401/5/32C 0.0100365701.30.010.27 137.184.106.30http/1.1localhost:443GET /about HTTP/1.1 3-1527240120/34/34R 16.4300402700.00.370.37 192.53.126.23http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-1527242191/9/29C 2.7800331251.40.050.23 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1527240371/33/33C 17.9710373571.30.300.30 192.53.126.23http/1.1localhost:443GET /about HTTP/1.1 6-1527240451/35/35C 18.8310381482.60.350.35 137.184.106.30http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-1527240470/35/35R 16.6920348180.00.290.29 66.115.189.177http/1.1www.pokaorganize.com:443 8-1527240580/32/32W 19.1000405770.00.350.35 139.144.150.8http/1.1localhost:443GET /server-status HTTP/1.1 9-1527241270/18/29W 9.3400354890.00.150.29 89.175.184.250http/1.1www.pokaorganize.com:443GET / HTTP/1.1 10-1527240700/30/30R 18.7000395240.00.280.28 146.190.160.11http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 11-1527240760/39/39R 18.6700371940.00.340.34 89.175.184.250http/1.1 12-1527240860/26/26W 16.2200327670.00.260.26 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 13-1527241040/29/29W 13.5400278730.00.340.34 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-1527241421/16/16C 7.1304531378010.70.130.13 207.154.240.169http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 15-1527242321/3/3C 0.891117631.30.020.02 146.190.160.11http/1.1localhost:443GET /about HTTP/1.1 16-1527242470/1/1R 0.000120.00.000.00 206.81.1.88http/1.1www.pokaorganize.com:443 17-1527242530/0/0W 0.000000.00.000.00 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 46subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 269 seconds, (range: 232...299)index usage: 1%, cache usage: 2%total entries stored since starting: 46total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 144 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539e82b4593Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:15 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 26 seconds Server load: 1.09 1.23 1.38 Total accesses: 301 - Total Traffic: 2.1 MB - Total Duration: 192244 CPU Usage: u1992.36 s3435.64 cu32339200 cs7737160 - 4.66e+7% CPU load 3.5 requests/sec - 25.5 kB/second - 7.3 kB/request - 638.684 ms/request 13 requests currently being processed, 5 idle workers WCC_R__WCCC__CWWCW................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/21/21W 6.6900172790.00.300.30 165.22.74.203http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-129450831/15/19C 3.4601120861.30.080.11 142.93.158.96http/1.1localhost:443GET /login.action HTTP/1.1 2-129453011/2/31C 0.0011125661.30.000.08 165.22.74.203http/1.1localhost:443GET /.git/config HTTP/1.1 3-129449890/21/21_ 7.870470252090.00.230.23 146.70.117.217http/1.1 4-129449950/18/18R 6.15013254730.00.110.11 146.70.117.217http/1.1www.pokaorganize.com:443 5-129453150/1/18_ 0.590779232990.00.020.17 171.67.70.229http/1.1www.pokaorganize.com:443GET / HTTP/1.1 6-129450210/26/26_ 4.300185120.00.170.17 146.70.117.217http/1.1 7-129450280/27/27W 7.9000197300.00.220.22 139.144.96.150http/1.1localhost:443GET /server-status HTTP/1.1 8-129450301/25/25C 6.1600171431.40.070.07 139.144.96.150http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-129450541/26/26C 5.6007331203918.80.110.11 171.67.70.229http/1.1www.pokaorganize.com:443GET / HTTP/1.1 10-129451901/15/16C 1.190061081.30.300.30 165.22.74.203http/1.1localhost:443GET /config.json HTTP/1.1 11-129452000/6/9_ 0.040121160.00.010.02 165.22.74.203http/1.1localhost:443GET /.env HTTP/1.1 12-129452060/10/10_ 1.18048224380.00.040.04 143.198.72.96http/1.1www.pokaorganize.com:443GET /v2/_catalog HTTP/1.1 13-129452181/6/6C 1.991147121.40.040.04 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-129452190/6/6W 0.49009300.00.020.02 137.184.106.30http/1.1www.pokaorganize.com:443GET /v2/_catalog HTTP/1.1 15-129452220/8/8W 0.7102425670.00.110.11 205.169.39.241http/1.1www.pokaorganize.com:443GET /wp-content/themes/sydney/js/scripts.js?ver=5.3.15 HTTP/1.1 16-129452231/13/13C 0.1011251.40.020.02 165.22.74.203http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 17-129453170/1/1W 0.000040.00.000.00 143.198.72.96http/1.1www.pokaorganize.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 75subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 261 seconds, (range: 226...297)index usage: 2%, cache usage: 3%total entries stored since starting: 75total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 151 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539fd9f10daApache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:39 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 6 seconds Server load: 0.45 1.03 0.97 Total accesses: 216 - Total Traffic: 1.6 MB - Total Duration: 96549 CPU Usage: u1627.47 s2824.1 cu26678600 cs6409520 - 5.01e+7% CPU load 3.27 requests/sec - 24.4 kB/second - 7.5 kB/request - 446.986 ms/request 16 requests currently being processed, 0 idle workers WRWRRRWCRCCCRRRR.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416030/20/20W 5.6600119570.00.120.12 128.199.195.68http/1.1localhost:443GET /server-status HTTP/1.1 1-108416210/24/24R 4.7502101760.00.140.14 128.199.195.68http/1.1 2-108416230/26/26W 7.2300213990.00.140.14 128.199.195.68http/1.1localhost:443GET / HTTP/1.1 3-108416250/27/27R 4.9001138200.00.510.51 128.199.195.68http/1.1 4-108416270/18/18R 5.9301135150.00.290.29 185.2.5.77http/1.1 5-108416520/29/29R 2.930173480.00.100.10 143.110.156.182http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-108416591/33/33L 3.390169802.50.110.11 128.199.195.68http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 7-108416831/19/19C 2.221150561.30.130.13 146.190.98.165http/1.1localhost:443GET /config.json HTTP/1.1 8-108417060/16/16R 3.210062770.00.030.03 207.154.240.169http/1.1www.pokaorganize.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-108417461/3/3C 0.021182.70.010.01 146.190.98.165http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-108417541/1/1C 0.001241.30.000.00 146.190.98.165http/1.1localhost:443GET /login.action HTTP/1.1 11-108417561/1/1C 0.001241.30.000.00 146.190.98.165http/1.1localhost:443GET /about HTTP/1.1 12-108417670/0/0R 0.000000.00.000.00 128.199.195.68http/1.1 13-108417690/0/0R 0.000000.00.000.00 128.199.195.68http/1.1 14-108417750/0/0R 0.000000.00.000.00 128.199.195.68http/1.1 15-108417810/0/0R 0.000000.00.000.00 128.199.195.68http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 17subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 281 seconds, (range: 234...299)index usage: 0%, cache usage: 0%total entries stored since starting: 17total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 85 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539ad008dd1Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:27 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 31 seconds Server load: 1.64 1.58 1.47 Total accesses: 187 - Total Traffic: 892 kB - Total Duration: 96991 CPU Usage: u1263.5 s2310.46 cu21800400 cs5275950 - 8.74e+7% CPU load 6.03 requests/sec - 28.8 kB/second - 4884 B/request - 518.668 ms/request 13 requests currently being processed, 0 idle workers RCRWCWRRRCCCW..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775490/11/11R 5.0102047161900.00.060.06 161.35.153.48http/1.1 1-84775501/26/26C 3.990096352.50.080.08 161.35.153.48http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 2-84775520/17/17R 2.860057310.00.060.06 161.35.153.48http/1.1 3-84777310/5/12W 0.020059830.00.000.06 161.35.153.48http/1.1localhost:443GET /server-status HTTP/1.1 4-84775791/22/22C 4.260087202.60.090.09 161.35.153.48http/1.1localhost:443GET /.git/config HTTP/1.1 5-84776000/7/7W 2.360056460.00.120.12 109.107.182.52http/1.1www.chonlateevip.com:443GET / HTTP/1.1 6-84776070/8/8R 2.420046860.00.040.04 161.35.153.48http/1.1 7-84776090/13/13R 3.07024872340.00.130.13 161.35.153.48http/1.1 8-84776230/9/9R 3.94064277540.00.110.11 5.253.18.199http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 9-84776341/22/22C 2.140059692.60.040.04 161.35.153.48http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-84776361/14/14C 2.7201193962.70.050.05 161.35.153.48http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-84777201/18/18C 0.1501282.60.020.02 161.35.153.48http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 12-84777330/8/8W 0.0100110.00.010.01 84.246.85.166http/1.1www.chonlateepro.com:443GET / HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 290 seconds, (range: 283...293)index usage: 0%, cache usage: 0%total entries stored since starting: 10total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 87 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153949c0fe2bApache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:11 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 8 seconds Server load: 2.42 1.81 1.59 Total accesses: 173 - Total Traffic: 609 kB - Total Duration: 109185 CPU Usage: u651.01 s1257.96 cu12780600 cs3072970 - 1.98e+8% CPU load 21.6 requests/sec - 76.1 kB/second - 3604 B/request - 631.127 ms/request 16 requests currently being processed, 19 idle workers R_R__C___RRR.CWR____CR_C___C__W_R__C.............. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799540/9/9R 1.902160256550.00.050.05 212.71.255.156http/1.1 1-43799720/6/6_ 2.18067361620.00.110.11 170.187.195.217http/1.1www.pokaorganize.com:80GET /v2/_catalog HTTP/1.0 2-43799780/23/23R 1.661129748570.00.030.03 212.71.255.156http/1.1 3-43799880/9/9_ 1.180151341010.00.010.01 74.207.251.118http/1.1 4-43799940/7/7_ 1.870053720.00.020.02 65.154.226.171http/1.1localhost:80GET / HTTP/1.0 5-437100011/27/27C 0.950134432.70.120.12 212.71.255.156http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-437100150/9/9_ 1.30161623730.00.110.11 3.95.193.125http/1.1www.pokaorganize.com:443GET /.git/config HTTP/1.1 7-437100210/5/5_ 1.14166622590.00.010.01 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 8-437100280/2/2_ 0.640150430100.00.000.00 212.71.255.156http/1.1 9-437100340/7/7R 0.72190118110.00.010.01 212.71.255.156http/1.1 10-437100360/6/6R 0.631164733000.00.010.01 212.71.255.156http/1.1 11-437100420/6/6R 0.021080.00.010.01 212.71.255.156http/1.1 12-437-0/0/3. 0.000027530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-437100551/4/4C 1.180027072.60.010.01 212.71.255.156http/1.1localhost:443GET /.env HTTP/1.1 14-437100650/6/6W 0.620012420.00.010.01 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 15-437100670/2/2R 0.55160012000.00.000.00 69.164.213.24http/1.1www.pokaorganize.com:80GET /config.json HTTP/1.0 16-437100730/4/4_ 0.61166413320.00.000.00 69.164.213.24http/1.1www.pokaorganize.com:80GET /about HTTP/1.0 17-437100790/3/3_ 0.59162012440.00.000.00 69.164.213.24http/1.1www.pokaorganize.com:80GET /v2/_catalog HTTP/1.0 18-437100850/2/2_ 0.67072714560.00.000.00 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 19-437100910/6/6_ 1.07067823140.00.010.01 170.187.195.217http/1.1www.pokaorganize.com:80GET /config.json HTTP/1.0 20-437101031/2/2C 0.650033380.20.010.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-437101090/1/1R 0.652151230250.00.000.00 167.94.138.119http/1.1 22-437101150/1/1_ 0.660167633520.00.000.00 139.177.198.221http/1.1 23-437101211/2/2C 0.650035422.70.010.01 212.71.255.156http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 24-437101270/2/2_ 1.25062443540.00.010.01 170.187.195.217http/1.1www.pokaorganize.com:80GET /api/search?folderIds=0 HTTP/1.0 25-437101290/3/3_ 0.631144828970.00.000.00 45.79.148.46http/1.1 26-437101340/2/2_ 1.22058343880.00.010.01 170.187.195.217http/1.1www.pokaorganize.com:80GET /about HTTP/1.0 27-437101361/2/2C 0.630033602.30.000.00 212.71.255.156http/1.1localhost:443GET / HTTP/1.1 28-437101410/2/2_ 0.670029430.00.010.01 167.94.138.119http/1.1localhost:80GET / HTTP/1.0 29-437101430/2/2_ 1.22062044290.00.010.01 170.187.195.217http/1.1www.pokaorganize.com:80GET /login.action HTTP/1.0 30-437101480/1/1W 0.640035110.00.000.00 212.71.255.156http/1.1localhost:443GET /server-status HTTP/1.1 31-437101500/1/1_ 0.70182116420.00.000.00 139.177.198.221http/1.1 32-437101560/1/1R 0.612110722110.00.000.00 212.71.255.156http/1.1 33-437101630/1/1_ 0.620162532500.00.000.00 45.79.148.46http/1.1 34-437101730/2/2_ 0.640143728750.00.000.00 74.207.251.118http/1.1 35-437101791/2/2C 0.630034532.60.000.00 212.71.255.156http/1.1localhost:443GET /telescope/requests HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 11subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 292...298)index usage: 0%, cache usage: 0%total entries stored since starting: 11total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 92 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 15:38
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be11a1715255Apache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 22:38:25 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 12 hours 37 minutes 4 seconds Server load: 2.00 2.00 2.00 Total accesses: 1850148 - Total Traffic: 23.8 GB - Total Duration: 2141120470 CPU Usage: u235.06 s124.62 cu32089.3 cs2210.25 - 1.41% CPU load .751 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.27 ms/request 2 requests currently being processed, 126 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes131000 329394no0yes131000 529374no0yes032000 Sum400 2126000 ________________________________................................ __________________R_______________________W_____________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/53/14801_ 19.01960160260990.00.17193.80 162.243.161.105http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/50/15293_ 19.0150139013530.00.12198.97 138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-92293730/52/14865_ 19.2240150309560.00.18192.75 139.59.65.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/50/15043_ 19.461100145875130.00.11185.98 143.110.156.182http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/49/14947_ 19.041000147711730.00.18185.45 159.89.83.196http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/44/15171_ 19.4960156649170.00.13188.55 139.144.96.150http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/42/14842_ 19.5520145588720.00.18200.28 161.35.190.56http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-92293730/44/15151_ 19.391220150182070.00.10187.60 178.62.3.65http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/46/15113_ 19.5050145226990.00.11229.90 139.144.96.150http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/52/15246_ 19.5600148853440.00.20194.92 161.35.190.56http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/50/14810_ 19.47980154393440.00.12200.72 143.110.156.182http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/47/14820_ 19.3910147156350.00.10195.46 128.199.195.68h2localhost:443[0/0] Software caused connection abort 0-92293730/58/14689_ 18.8270137182770.00.19185.55 146.190.98.165http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/50/14841_ 19.441170169086540.00.11186.04 178.62.3.65http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/49/15795_ 19.051150141615380.00.15187.81 139.59.182.142http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/52/14844_ 19.061100165341250.00.12182.51 142.93.64.15http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/58/14897_ 18.991190143405110.00.13206.39 143.110.156.182h2localhost:443[0/0] Software caused connection abort 0-92293730/51/14958_ 19.061140144940050.00.15189.33 161.35.176.95http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/48/14776_ 19.5520160388370.00.08200.56 139.144.96.150http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/52/14997_ 19.451150144639390.00.17193.85 178.62.3.65http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/52/14989_ 19.0510181496030.00.20193.46 161.35.176.95http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/48/15013_ 19.051220147053790.00.14204.11 137.184.162.65http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/53/15471_ 19.391200150756110.00.19188.31 178.62.3.65http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/44/14675_ 19.0520138765330.00.16190.21 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-92293730/60/14984_ 19.061050162205890.00.13186.91 161.35.176.95http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/54/14657_ 19.4980135981670.00.20197.05 139.144.96.150http/1.1localhost:80\x16\x03\x01\x01\v\x01 0-92293730/49/15156_ 19.021200144713510.00.08194.53 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/53/14938_ 19.471060159195740.00.08213.32 143.110.156.182http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/54/14741_ 18.921180152174680.00.13175.94 143.110.156.182h2localhost:443[0/0] Software caused connection abort 0-92293730/38/15186_ 19.471030135139140.00.11225.16 178.62.3.65http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/56/14675_ 19.051170155573080.00.07199.15 143.110.156.182http/1.1 0-92293730/47/14937_ 19.2220145815210.00.20185.19 128.199.195.68http/1.1 1-92-0/0/15731. 0.00662910138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00662910136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00662910174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00662910150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00662910146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00662910134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00662910172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00662910165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00662910127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00662910152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00662910148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00662910159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00662910159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/req
Found on 2024-02-02 15:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be11f0695ff8Apache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 15:54:05 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 5 hours 52 minutes 44 seconds Server load: 2.78 2.72 2.66 Total accesses: 898528 - Total Traffic: 12.1 GB - Total Duration: 1115647463 CPU Usage: u163.4 s14.81 cu15234.7 cs801.3 - 8.36% CPU load 4.63 requests/sec - 65.4 kB/second - 14.1 kB/request - 1241.64 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 117271no3yes527000 28466no10yes428005 Sum2013 955005 ................................_RW___________WR_____________R__ __________W______W_________W___W................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/7167. 0.0062384796399500.00.00103.89 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /extwaok-38055gitems/etidm24rk.htm HTTP/1.1 0-7-0/0/7661. 0.00623167974317210.00.00105.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /pubcategorylrvy/15 HTTP/1.1 0-7-0/0/7237. 0.0062356080858040.00.00103.28 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=menu-zique-s-10-ii-49rREWcE HTTP/1.1 0-7-0/0/7514. 0.0062333877957780.00.0095.99 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=frank-abagnale-hi-res-stock-photography-and-images-alam 0-7-0/0/7455. 0.0062384778255570.00.0093.05 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /unjwaok-49849witems/eti HTTP/1.1 0-7-0/0/7595. 0.0062336190980650.00.0099.78 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=gbu-24-b-bomb-pcs-a-6-a-10-10-ii-JD6NPgTJ HTTP/1.1 0-7-0/0/7400. 0.0062335175032210.00.00109.85 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=progressive-era-muckrakers-magazine-project-digital-gui 0-7-0/0/7427. 0.0062384183872870.00.0096.49 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vjkwaok-4844xitems/etidm9.html HTTP/1.1 0-7-0/0/7611. 0.006231278002670.00.00146.71 203.170.192.183http/1.1www.chonlateepro.com:443POST /wp-cron.php?doing_wp_cron=1704617013.15975308418273925781 0-7-0/0/7505. 0.0062383680535250.00.0094.01 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /hnwarie-16192jetidm65uaj HTTP/1.1 0-7-0/0/7278. 0.0062387688910850.00.00115.57 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cxrwaok-27003eitems/etidm.htm HTTP/1.1 0-7-0/0/7043. 0.0062334586353890.00.0091.13 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=%E3%82%AC%E3%83%B3%E3%83%80%E3%83%A0%E3%80%91zz-gr-%E3% 0-7-0/0/7119. 0.0062384665871440.00.0094.49 185.191.171.10http/1.1www.chonlateeboi.com:443GET /5236biwxetidm3 HTTP/1.1 0-7-0/0/7312. 0.00623837100230430.00.0099.70 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /gnvwaok-27501iitems/etidm13.htm HTTP/1.1 0-7-0/0/7996. 0.0062384374013760.00.00100.10 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /krzarie-8811mitems/etidm.htm HTTP/1.1 0-7-0/0/7178. 0.00623212796074550.00.0091.55 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vjkwaok-4844xitems/etidm9.html HTTP/1.1 0-7-0/0/7320. 0.0062334377181700.00.0093.58 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=the-physician-in-the-19th-century-jane-austen-s-11-ii-5 0-7-0/0/7385. 0.0062334975796170.00.0098.22 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=gmt-00-country-i-Q7vEg2f1 HTTP/1.1 0-7-0/0/7422. 0.0062335094232130.00.0092.45 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=nullen-hi-res-stock-photography-and-images-alamy-5-ii-8 0-7-0/0/7501. 0.0062334977249130.00.0099.73 47.128.45.245http/1.1www.chonlateenextbiz.com:443GET /uftriw/download-spotify-songs-free-mp3.html HTTP/2.0 0-7-0/0/7468. 0.00623841117223870.00.00102.84 3.224.220.101http/1.1www.chonlateeboi.com:443GET /11160mywgetidm45gmv.htm HTTP/1.1 0-7-0/0/7140. 0.0062335780924830.00.0095.18 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=bank-holiday-dates-for-2022-off-72%-0-ii-LoJ029UJ HTTP/ 0-7-0/0/7711. 0.0062384788437430.00.00101.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /pubcategorylrvy/15 HTTP/1.1 0-7-0/0/7250. 0.0062384073203010.00.00101.58 23.22.35.162http/1.1www.chonlateeboi.com:443GET /28540khrretidm7 HTTP/1.1 0-7-0/0/7288. 0.0062327396572770.00.0091.59 173.201.180.210http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 0-7-0/0/7459. 0.0062389165630130.00.0094.77 3.224.220.101http/1.1www.chonlateeboi.com:443GET /33309bzlnitems/etidm77.htm HTTP/1.1 0-7-0/0/7316. 0.0062385281577470.00.00102.50 47.128.45.245h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /uftriw/download-spotify-songs-free-m 0-7-0/0/7378. 0.0062385191014610.00.00123.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /12687bzlnitems/etidm26zn.htm HTTP/1.1 0-7-0/0/7151. 0.0062383878912650.00.0089.18 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ljawaok-47656netidm45ywn HTTP/1.1 0-7-0/0/7428. 0.0062384084343360.00.00128.64 3.224.220.101http/1.1www.chonlateeboi.com:443GET /27539unwsetidm.html HTTP/1.1 0-7-0/0/7074. 0.0062338587824790.00.00101.64 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=napoli-ea7-football-s-most-expensive-jersey-is-not-4-ii 0-7-0/0/7444. 0.0062384578655030.00.0094.63 3.224.220.101http/1.1www.chonlateeboi.com:443GET /4879tbrmitems/etidm75rm HTTP/1.1 1-7172710/227/7397_ 133.86063786699210.02.79123.32 3.224.220.101http/1.1www.chonlateeboi.com:443GET /29501hevyetidm81.html HTTP/1.1 1-7172710/264/7178R 134.15194281738930.03.0190.77 66.249.73.132http/1.1www.twinbuilt.co.th:443 1-7172711/272/7308W 134.3200108474530.02.9196.09 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 1-7172710/258/6891_ 134.34084186957760.02.8789.66 52.70.240.171http/1.1www.chonlateeboi.com:443GET /12023gzgqetidm38lq.html HTTP/1.1 1-7172710/185/7006_ 134.370093560010.02.13102.29 139.59.230.191http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-7172710/243/7154_ 134.03084182324400.02.5594.83 139.144.150.45http/1.1 1-7172710/276/7203_ 134.250761100055110.02.9792.52 164.90.222.93http/1.1 1-7172710/266/7238_ 133.49090693274030.02.6197.53 185.191.171.16http/1.1www.chonlateefood.com:443GET /items/jsy27881csrttid.html HTTP/1.1 1-7172710/253/7232_ 134.350076566270.02.8891.68 139.59.230.191http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-7172710/239/7076_ 133.57084691476830.02.5197.61 52.167.144.187h2www.chonlateefood.com:443[0/0] init 1-7172710/258/6847_ 134.320093826820.02.7395.29 161.35.27.144http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7172710/248/7376_ 134.00083385543550.02.68104.72 3.224.220.101
Found on 2024-01-07 08:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be11a86ecfcaApache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 02:23:19 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 16 hours 21 minutes 58 seconds Server load: 2.43 2.65 2.70 Total accesses: 294278 - Total Traffic: 4.2 GB - Total Duration: 257215131 CPU Usage: u668.59 s36.3 cu4282.28 cs230.01 - 8.85% CPU load 4.99 requests/sec - 74.1 kB/second - 14.8 kB/request - 874.055 ms/request 14 requests currently being processed, 82 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 019907no6yes428004 419908no2yes428000 719927no7yes626001 919931yes2no00000 Sum4117 1482005 ____R____________W____W_______W_................................ ................................................................ __W_R____________W___R__________................................ ................................WW_____R__W______W_W____________ ..............................................G...........G..... ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2199070/241/3084_ 142.883130125540500.02.7045.73 47.128.25.103h2www.seasabithailand.com:443[1/1] done: stream 1, GET /8aj1/walk-in-interview-in-bur-dubai- 0-2199070/232/3327_ 143.140024096960.02.9343.89 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/227/3020_ 142.952115536838980.02.8252.46 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ifnhlzs-134727aitems/eti.htm HTTP/1.1 0-2199070/228/3258_ 142.86386326680160.02.9341.40 85.208.96.201http/1.1www.chonlateeadmin.com:443GET /lmauzzo-35566netidm62y HTTP/1.1 0-2199070/217/3141R 143.074108524661030.02.4339.25 3.224.220.101http/1.1www.chonlateeboi.com:443 0-2199070/231/3384_ 143.103100927301060.03.1042.78 161.35.155.246http/1.1localhost:80\x16\x03\x01\x01\x12\x01 0-2199070/233/3155_ 141.74290024680890.02.8554.42 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?wfahlzs-189575netidm69jsn HTTP/1.1 0-2199070/251/3171_ 143.141025559940.02.6441.03 161.35.155.246http/1.1localhost:80GET /about HTTP/1.1 0-2199070/242/3217_ 143.160025452850.02.5883.37 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-2199070/226/3147_ 143.122195624639580.02.9140.73 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /ergaebb-32101tetidm2 HTTP/1.1 0-2199070/235/3082_ 143.07386028127600.02.8437.85 139.59.182.142http/1.1localhost:80\x16\x03\x01\x01\b\x01 0-2199070/253/3030_ 142.750107624783870.02.9338.99 66.249.77.72http/1.1 0-2199070/217/2984_ 142.09387524703370.02.5740.79 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?curggdh-179623eitems/etidm89ph HTTP/1.1 0-2199070/214/3266_ 141.73399835997380.02.6244.27 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /wzbqmyr-16649oetidm.html HTTP/1.1 0-2199070/233/3328_ 142.470120528147130.02.5944.58 139.59.182.142http/1.1 0-2199070/207/3056_ 142.942107525646000.02.4139.57 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?iiksvcw-15933xetidm4.htm HTTP/1.1 0-2199070/217/3004_ 143.060103228676220.02.6938.99 3.224.220.101http/1.1www.chonlateeboi.com:443GET /7862qbkeitems/etidm11k.html HTTP/1.1 0-2199071/223/3302W 142.853024284820.02.5443.71 66.249.71.9http/1.1www.chonlateenextbiz.com:443GET /sitemap76.xml HTTP/1.1 0-2199070/226/3200_ 143.160024061190.02.6541.67 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-2199070/220/3041_ 142.460108928608510.02.5444.87 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?afbhlzs-402467oitems/eti HTTP/1.1 0-2199070/231/3096_ 143.122117124136090.02.9243.96 47.128.25.103h2www.seasabithailand.com:443GET /8aj1/walk-in-interview-in-bur-dubai-today-for-female.html 0-2199070/222/3148_ 143.103026545810.02.7744.95 139.59.182.142http/1.1localhost:443GET / HTTP/1.1 0-2199071/243/3488W 143.070024450970.02.8244.30 66.249.71.9http/1.1www.chonlateenextbiz.com:443GET /sitemap93.xml HTTP/1.1 0-2199070/204/2977_ 142.19384924221970.02.3139.11 23.22.35.162http/1.1www.chonlateeboi.com:443GET /12668hupbitems/etidm9.html HTTP/1.1 0-2199070/236/3045_ 142.523107024489280.02.8638.86 47.128.25.103h2www.seasabithailand.com:443[0/0] init 0-2199070/224/3024_ 143.103024275130.02.8339.27 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 0-2199070/216/3108_ 143.141027476360.02.8549.94 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/212/3088_ 142.961140028545920.02.8370.04 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-2199070/228/2993_ 143.04095424589860.02.6837.65 85.208.96.194http/1.1www.chonlateeadmin.com:443GET /teirfru-41164vetidm2 HTTP/1.1 0-2199070/239/3348_ 143.122023246470.02.8178.37 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 0-2199071/233/3042W 141.770024441340.02.9247.01 139.59.182.142http/1.1localhost:80GET /server-status HTTP/1.1 0-2199070/234/3397_ 143.160107027260510.02.8841.51 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22191tobeitems/etidm25ne.htm HTTP/1.1 1-1-0/0/2323. 0.00709086617630010.00.0030.27 207.46.13.154http/1.1www.thaidaoherb.com:443GET /9i7h/dyv42461ryyhc053875235.html HTTP/2.0 1-1-0/0/2100. 0.007090173417390000.00.0027.02 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /db.php?g3192039.shtml HTTP/1.1 1-1-0/0/2227. 0.007090107117630050.00.0030.69 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rngadej-26472tetidm80eat.htm HTTP/1.1 1-1-0/0/2089. 0.007090211517285130.00.0027.89 66.249.69.229http/1.1www.chonlateenextbiz.com:443GET /db.php?g335424.shtml HTTP/1.1 1-1-0/0/2129. 0.00709085117106500.00.0032.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /48835biwxitems/etidm HTTP/1.1 1-1-0/0/2185. 0.00709085816794840.00.0028.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jryadej-23266letid HTTP/1.1 1-1-0/0/2135. 0.00709097217421340.00.0026.37 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22684biwxetidm7 HTTP/1.1 1-1-0/0/2185. 0.0070901717237790.00.0029.46 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?papaw99.xml HTTP/1.1 1-1-0/0/2163. 0.00709084617365570.00.0029.98 23.22.35.162http/1.1www.chonlateeboi.com:443GET /42349biwxitems/etidm52 HTTP/1.1 1-1-0/0/2112. 0.00709089516912400.00.0027.55 185.191.171.3http/1.1www.chonlateefood.com:443GET /geti/cer43578htewitems.htm HTTP/1.1 1-1-0/0/2118. 0.007090102016733450.00.0031.98 157.55.39.202h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /tviipbe-49432vetidm29giv 1-1-0/0/2249. 0.007090
Found on 2024-01-05 19:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be1102554f25Apache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 23:31:35 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 23 hours 8 minutes 37 seconds Server load: 0.65 0.69 0.75 Total accesses: 4341078 - Total Traffic: 55.7 GB - Total Duration: 4106339167 CPU Usage: u224.52 s46.77 cu78156.7 cs4090.87 - 8.71% CPU load 4.58 requests/sec - 61.7 kB/second - 13.5 kB/request - 945.926 ms/request 10 requests currently being processed, 54 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 023735no4yes527000 217351no2yes527001 Sum206 1054001 _W______W________W________WR____................................ ___________R__________W_R__R_R__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-40237350/51/39217_ 38.8910356615210.00.62496.98 162.243.186.177http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-40237351/55/38578W 38.6410363452420.00.66487.05 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?pmiszzn-47426vetidm36czv.htm HTTP/1.1 0-40237350/47/38966_ 38.9301263398553500.00.64499.51 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?pziqbmb-34166vetidm9.htm HTTP/1.1 0-40237350/52/38997_ 38.7200387014190.00.63509.81 206.81.1.88h2localhost:443[0/0] Software caused connection abort 0-40237350/55/39508_ 38.791931367408810.00.71563.37 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?hyalbze-44844netid HTTP/1.1 0-40237350/57/38580_ 38.5600396510690.00.67487.87 31.184.236.42http/1.1 0-40237350/51/38906_ 38.7200400383820.00.71490.20 138.197.88.136http/1.1 0-40237350/56/39661_ 38.5702245365287700.00.68497.73 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bfudvsc-11090hetidm50osh.htm HTTP/1.1 0-40237351/47/38641W 37.1510377475580.00.57505.97 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?jjcwptg-35668pitems/etid.html HTTP/1.1 0-40237350/49/39054_ 37.7220365813750.00.60498.99 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ymfgzna139657seti.html HTTP/1.1 0-40237350/46/38618_ 38.7300381574330.00.59469.71 138.197.88.136http/1.1localhost:443GET / HTTP/1.1 0-40237350/56/38694_ 38.6321008366722760.00.63519.61 31.184.236.34http/1.1 0-40237350/53/38569_ 38.782879372543790.00.67471.28 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?cjvynxw-33451ieti.html HTTP/1.1 0-40237350/51/38759_ 37.142846401826540.00.73499.61 206.81.1.88h2localhost:443[0/0] Software caused connection abort 0-40237350/47/38964_ 38.7500377703230.00.57489.69 128.199.195.68http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-40237350/57/38651_ 38.9301696369700160.00.71544.02 34.75.65.218http/1.1www.chonlateeadmin.com:443POST /wp-login.php HTTP/1.1 0-40237350/55/39621_ 38.9300372619190.00.70524.08 203.170.192.183http/1.1www.chonlateeadmin.com:443POST /wp-cron.php?doing_wp_cron=1702312294.78075289726257324218 0-40237351/61/39134W 38.7300364032370.00.69482.41 185.191.171.16http/1.1www.chonlateefood.com:443GET /get/hew45169jeqxitems HTTP/1.1 0-40237350/52/39159_ 38.340904365308090.00.68505.96 66.249.64.228http/1.1www.chonlateefood.com:443GET /mds.php?items/uyj13670xryetidm2710.html HTTP/1.1 0-40237350/50/39424_ 38.6201305381210420.00.66542.71 67.225.161.14http/1.1www.12gobiz.com:443POST /wp-login.php HTTP/1.1 0-40237350/45/38791_ 38.8110360767970.00.54511.23 162.243.186.177http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-40237350/56/38987_ 37.801866385861700.00.94503.66 31.184.236.33http/1.1 0-40237350/58/38748_ 38.7300404638330.00.64513.15 128.199.195.68http/1.1localhost:80GET /config.json HTTP/1.1 0-40237350/62/38051_ 38.8211379359243290.00.70473.16 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?izxvrsm-264675kitems/etidm.htm HTTP/1.1 0-40237350/58/39100_ 38.6810368737960.00.77518.90 128.199.195.68http/1.1localhost:80GET /login.action HTTP/1.1 0-40237350/60/38384_ 38.7620385863910.00.64469.53 162.243.186.177http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-40237351/54/39096W 38.6300370559780.00.66582.38 162.243.186.177http/1.1localhost:80GET /server-status HTTP/1.1 0-40237350/52/38314R 38.62212367911590.00.63509.00 3.224.220.101http/1.1www.krongthongsecurity.com:443 0-40237350/51/38928_ 38.9300409222720.00.67522.31 162.243.184.251http/1.1localhost:80GET /about HTTP/1.1 0-40237350/49/38782_ 37.151926372787540.00.57501.93 31.184.236.34http/1.1 0-40237350/51/38892_ 38.6310367738560.00.60492.37 31.184.236.33http/1.1 0-40237350/45/38590_ 38.8111560375844400.00.53536.06 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?150914rxilitems/etid.html HTTP/1.1 1-40-0/0/39863. 0.006911280371902530.00.00504.02 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?trmxner-1046zetidm1.htm HTTP/1.1 1-40-0/0/39765. 0.00691874380127490.00.00546.16 66.249.71.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ilbniby-31403oitems/eti.htm HTTP/1.1 1-40-0/0/39525. 0.00691870381914500.00.00549.22 31.184.236.33http/1.1 1-40-0/0/39803. 0.00691898390298180.00.00561.17 85.208.96.198http/1.1www.chonlateeadmin.com:443GET /prectef-24910retidm49c HTTP/1.1 1-40-0/0/40573. 0.00691878361558090.00.00616.11 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?nvgiejy-54340titems/etid.html HTTP/1.1 1-40-0/0/39366. 0.00691909359294140.00.00562.61 31.184.236.34http/1.1 1-40-0/0/39457. 0.006911102361949180.00.00528.07 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-303475sitems/etidm HTTP/1.1 1-40-0/0/39903. 0.00691901385661260.00.00509.12 31.184.236.34http/1.1 1-40-0/0/39662. 0.006910374360440.00.00500.02 185.191.171.3http/1.1www.chonlateenextbiz.com:443GET /robots.txt HTTP/1.1 1-40-0/0/39722. 0.00691889366565020.00.00508.59 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?397537himsitems/eti HTTP/1.1 1-40-0/0/40309. 0.006911082362266380.00.00532.57 31.184.236.33http/1.1 1-40-0/0/40079. 0.00691911366480050.00.00499.33 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?397447himsitems/etidm22ls HTTP/1.1 1-40-0/0/40004. 0.00691932358799930.00.00496.40 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ljewptg-49424retidm46y.htm HTTP/1.1
Found on 2023-12-11 16:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be11641af52dApache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:30 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 31 seconds Server load: 2.61 2.04 1.69 Total accesses: 696946 - Total Traffic: 9.7 GB - Total Duration: 517709498 CPU Usage: u82.35 s12.46 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.826 ms/request 22 requests currently being processed, 106 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no7yes428103 330151no8yes725002 630155no2yes923101 730156no0yes230000 Sum4017 22106206 ................................................................ _____________W_____________WRR__W________RWW___R_R____________R_ ................................................................ __R_W_R_W_R_____R_____W__R__R_______R_________W_________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0068589745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0068596045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0068580245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0068595746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00685167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0068594846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00685145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0068592346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00685107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00685104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0068570146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0068589947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0068572146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00685104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00685108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0068546846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0068570945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0068584445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0068571246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0068570946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00685046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0068549045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0068593646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0068586945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006854146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0068573844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00685722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0068596345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00685107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00685146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00685778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0068596044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0068586344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0068547946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00685150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0068567645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0068545143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00685044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00685232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0068558244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00685183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00685822744746080.00.0079.16
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee8ca324ecApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 04:01:32 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 3 hours 37 minutes 47 seconds Server load: 0.95 1.09 1.06 Total accesses: 18371 - Total Traffic: 236.7 MB - Total Duration: 32311641 CPU Usage: u3283.19 s5862.67 cu55532900 cs13589100 - 529000% CPU load 1.41 requests/sec - 18.5 kB/second - 13.2 kB/request - 1758.84 ms/request 1 requests currently being processed, 9 idle workers _._____W___....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964150900/83/1661_ 39.070129018350.00.9716.61 146.190.98.165http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 1-1964-0/0/1514. 0.0016436028024640.00.0017.13 162.158.186.8http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 2-1964150370/91/1460_ 45.790126768110.00.5715.89 146.190.98.165http/1.1localhost:80GET / HTTP/1.0 3-1964150980/81/1555_ 41.54345325890190.00.4221.30 172.70.210.46http/1.1www.biz9nar.com:80POST /wp-login.php HTTP/1.0 4-1964151000/75/1311_ 37.270123154810.00.3713.87 146.190.98.165http/1.1localhost:80GET /about HTTP/1.0 5-1964151320/71/1362_ 39.800124682710.01.4115.71 146.190.98.165http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1964151380/69/1478_ 34.510126588690.00.4017.13 146.190.98.165http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 7-1964151480/70/1271W 35.450023774350.00.3313.85 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.0 8-1964151660/68/1250_ 33.470123090280.00.6213.43 146.190.98.165http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-1964152100/57/1107_ 31.890118373190.00.6711.48 146.190.98.165http/1.1localhost:80GET / HTTP/1.0 10-1964153200/32/879_ 16.69347312480340.00.728.52 172.70.85.17http/1.1www.altaccount.com:80POST /wp-login.php HTTP/1.0 11-1964-0/0/792. 0.0051348415130490.00.009.53 172.70.207.195http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 12-1964-0/0/384. 0.00175206649170.00.006.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1964-0/0/419. 0.00137410329410750.00.007.17 162.158.238.44http/1.1www.chonlateecoffee.com:80GET /wp-includes/wp-atom.php HTTP/1.0 14-1964-0/0/357. 0.0013774465471570.00.002.78 172.70.207.131http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 15-1964-0/0/265. 0.0024114084629690.00.002.72 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 16-1964-0/0/250. 0.0024213333322960.00.003.45 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 17-1964-0/0/196. 0.0024125582350890.00.003.51 162.158.154.143http/1.1www.altaccount.com:80GET /images/class.api.php HTTP/1.0 18-1964-0/0/156. 0.0024066882234690.00.002.37 162.158.154.143http/1.1www.altaccount.com:80GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.0 19-1964-0/0/117. 0.00273302013170.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1964-0/0/193. 0.0024033612853630.00.003.34 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 21-1964-0/0/102. 0.00273101476840.00.007.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964-0/0/193. 0.00285313213903990.00.0019.39 172.68.234.185http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 23-1964-0/0/99. 0.00428401822810.00.002.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 134total entries replaced since starting: 0total entries expired since starting: 134total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 6205 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 20:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee0dc25decApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 10:33:34 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 6 hours 31 minutes 21 seconds Server load: 0.60 0.42 0.33 Total accesses: 36797 - Total Traffic: 545.4 MB - Total Duration: 72126102 CPU Usage: u3036.23 s5769.62 cu55149600 cs13501600 - 292000% CPU load 1.57 requests/sec - 23.8 kB/second - 15.2 kB/request - 1960.11 ms/request 6 requests currently being processed, 5 idle workers __CW__._.CRRW..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932291590/24/3079_ 10.150160498620.00.2937.40 159.203.182.222http/1.1 1-1932293050/8/3042_ 1.000160461500.00.0337.43 138.197.88.136http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1932285481/95/3055C 20.021160278602.61.0640.61 165.22.74.203http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1932292520/11/2988W 2.960059822640.00.0947.30 172.71.178.120http/1.1www.chorsiam.com:80GET /s/33e26393e2431313e2838313/_/;/META-INF/maven/com.atlassia 4-1932290090/40/2981_ 8.290159296310.00.5049.36 159.203.182.222http/1.1 5-1932287320/74/2772_ 20.950152909900.00.7734.85 207.154.240.169http/1.1localhost:80GET /login.action HTTP/1.0 6-1932-0/0/2733. 0.00254055680230.00.0033.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1932290710/36/2673_ 7.401151234800.00.3129.70 138.197.88.136http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1932-0/0/2500. 0.00192051784190.00.0032.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1932290791/35/2325C 9.320144687931.30.5629.03 165.22.74.203http/1.1localhost:443GET /about HTTP/1.1 10-1932288520/66/2004R 18.83190739402290.00.7335.83 165.22.74.203http/1.1 11-1932290180/41/1602R 12.551132416480.00.4224.57 162.158.90.102http/1.1www.torrong.co.th:80POST /xmlrpc.php HTTP/1.0 12-1932290810/38/1401W 12.280026535320.00.4429.95 138.197.88.136http/1.1localhost:80GET /server-status HTTP/1.0 13-1932-0/0/1226. 0.003625024568690.00.0055.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/695. 0.00291489213575090.00.008.23 172.71.167.200http/1.1www.proplustech.co.th:443GET /?page_id=E1142248 HTTP/1.1 15-1932-0/0/302. 0.00362404453990.00.003.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/299. 0.00360804808140.00.002.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/163. 0.00362102138780.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/257. 0.00292904374050.00.002.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/163. 0.00358402780690.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/262. 0.00363004486550.00.003.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/31. 0.0036070550010.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/175. 0.00293002692490.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/3. 0.003635028600.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1932-0/0/3. 0.003619060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/40. 0.00317801125780.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/17. 0.0034200560250.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/2. 0.003628020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.0036290140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.0036180108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 134 seconds, (range: 33...295)index usage: 0%, cache usage: 0%total entries stored since starting: 233total entries replaced since starting: 0total entries expired since starting: 225total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 22397 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 03:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eed21b7f2fApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 26-Oct-2023 23:59:12 +07 Restart Time: Thursday, 26-Oct-2023 15:16:50 +07 Parent Server Config. Generation: 1894 Parent Server MPM Generation: 1893 Server uptime: 8 hours 42 minutes 22 seconds Server load: 6.57 5.71 4.92 Total accesses: 139388 - Total Traffic: 1.9 GB - Total Duration: 552313381 CPU Usage: u3395.03 s5702.01 cu53809400 cs13122400 - 214000% CPU load 4.45 requests/sec - 64.9 kB/second - 14.6 kB/request - 3962.42 ms/request 19 requests currently being processed, 6 idle workers WCWWWWW___W_WW_.R.WWWWWW._..WW.................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-18934650/96/6904W 78.4200250356730.01.0887.49 172.105.37.32http/1.1localhost:80GET /server-status HTTP/1.0 1-189311641/15/6817C 10.35014922488446747.10.2581.30 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848315125163.html HTTP/1.1 2-189312410/9/6706W 4.0910252891920.00.07104.51 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-bali-frozen-concoction-maker-with-self-d 3-18939260/47/6790W 31.6510242329820.00.46129.41 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m69119804971.html HTTP/1.1 4-189312600/6/6575W 0.9320244319030.00.1689.10 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-frozen-concoction-maker-travel-bag-ad120 5-18936850/84/6516W 55.0700235920200.00.85105.19 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=best-margarita-makers-in-2023-hgtv-top-picks-hgtv-mm-zA 6-189310150/51/6394W 22.4900238226790.00.5981.49 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848315125170.html HTTP/1.1 7-189310770/21/6521_ 13.2500240688330.00.3580.20 172.105.37.32http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-18937100/57/6282_ 40.7001226261590.00.6081.87 172.105.37.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-18938170/73/6322_ 25.750932221775970.00.8479.39 162.158.222.42http/1.1www.siamerp.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%82%E0%B8%B2 10-18937960/55/6142W 32.0740223464540.00.6882.70 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-red-kitchen-appliances-mercari-mm-0rnBat 11-18939350/41/5829_ 31.3903907217550130.00.4673.79 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=honeywell-focuspro-th5000-series-user-manual-24-pages-a 12-189312800/4/5761W 0.5510209366970.00.0369.19 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=wiring-guide-conventional-systems-honeywell-focuspro-th 13-189390280/1/3895W 1.94104410142196370.00.0161.57 147.78.47.38http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /?ARRAY=5o313639383333323631352p22687474703n5p2s5p2s3632367 14-189312880/5/5560_ 0.940211202739570.00.05101.09 13.81.13.15http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 15-1893-0/0/5329. 0.0020192646980.00.0067.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-189311980/20/5547R 11.290552195158620.00.1469.17 52.70.240.171http/1.1www.thaidaoherb.com:443 17-1893-0/0/4718. 0.0010184365290.00.0070.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-189311080/31/4747W 18.6760175686640.00.2359.02 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=honeywell-5000-series-thermostat-instruction-manual-mm- 19-18938410/46/3805W 34.0620139999980.00.6461.96 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=5-pack-honeywell-th5220d1029-focuspro-5000-non-programm 20-18936240/79/3988W 46.3820153193410.00.8751.07 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-brown-water-repellant-foam-padded-concoc 21-18936550/59/3658W 46.1900137330040.00.7546.55 172.71.150.58http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 22-18939410/51/2689W 33.623097424920.00.6436.37 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-bahamas-frozen-concoction-maker-for-sale 23-18936610/82/2224W 59.458082762090.00.7828.11 27.254.96.168http/1.1www.nptpropertythailand.com:443POST /wp-cron.php?doing_wp_cron=1698339544.87526607513427734375 24-1893-0/0/1941. 0.003351166854030.00.0037.23 172.71.150.59http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 25-18939420/50/1268_ 32.020049567920.00.7030.57 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /reune.php?kkrimex1271eitems/etidm61xx.htm HTTP/1.1 26-1893-0/0/977. 0.0028036934930.00.0012.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1893-0/0/716. 0.0060025987200.00.008.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-18939920/33/591W 19.557024625080.00.486.43 52.167.144.214http/1.1www.nakindogtraining.com:443GET /wzy.php?oriented-GRINDER.xml HTTP/1.1 29-189311140/35/763W 21.150031040950.00.2920.51 13.81.13.15http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 30-1893-0/0/522. 0.00139019887940.00.006.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1893-0/0/393. 0.0058103914688810.00.008.23 185.191.171.11http/1.1www.mkandptfoods.com:443GET /m4278688397.html HTTP/1.1 32-1893-0/0/73. 0.006810394348100.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1893-0/0/336. 0.00734015828790.00.0021.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1893-0/0/398. 0.0050544815126190.00.003.79 172.71.151.138http/1.1www.acumaticathailand.com:80POST //wp-login.php HTTP/1.0 35-1893-0/0/199. 0.0068309608120.00.003.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1893-0/0/85. 0.0068903264420.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1893-0/0/105. 0.00768605388650.00.0012.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1893-0/0/131. 0.00762108682640.00.001.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1893-0/0/170. 0.00771806825550.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1893-0/0/104. 0.00771503681930.00.001.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1893-0/0/81. 0.00774002794690.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1893-0/0/97. 0.00773703568650.00.001.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1893-0/0/128. 0.00761904280980.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1893-0/0/155. 0.00772904730310.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1893-0/0/24. 0.0077360835200.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1893-0/0/163. 0.00758707682970.00.001.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1893-0/0/117. 0.00763204262870.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1893-0/0/59. 0.00771701923210.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1893-0/0/73. 0.00733405212840.00.000.77 127.0.0.1http/1.1se
Found on 2023-10-26 16:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eefcfd210dApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 07:06:05 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 3 hours 3 minutes 53 seconds Server load: 0.88 0.90 0.64 Total accesses: 11900 - Total Traffic: 156.2 MB - Total Duration: 13060137 CPU Usage: u2896.7 s5355.29 cu52299300 cs12765200 - 590000% CPU load 1.08 requests/sec - 14.5 kB/second - 13.4 kB/request - 1097.49 ms/request 4 requests currently being processed, 6 idle workers ___.W.W_R_W_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182329750/34/1077_ 14.840010688820.00.3012.21 159.203.94.228http/1.1 1-182331350/19/1117_ 4.160111482820.00.2613.07 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-182328710/47/1140_ 25.160013021240.00.4214.72 207.154.240.169http/1.1localhost:443GET / HTTP/1.1 3-1823-0/0/985. 0.0071010894820.00.0016.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-182329820/36/979W 13.700012475260.00.3610.67 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 5-1823-0/0/768. 0.006909215300.00.009.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-182331430/15/1000W 4.631011885870.00.0912.57 27.254.96.168http/1.1www.seasabithailand.com:80POST /wp-cron.php?doing_wp_cron=1696982764.59585499763488769531 7-182327220/64/938_ 32.500227910579630.00.6313.17 87.249.132.210http/1.1www.seasabithailand.com:80GET /wp-config.php.org HTTP/1.0 8-182329880/34/790R 14.33007749800.00.2315.44 142.93.153.3http/1.1localhost:80GET /.git/config HTTP/1.0 9-182327410/67/753_ 31.87017615800.00.858.24 142.93.153.3http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-182331450/16/567W 4.18005504340.00.0811.74 104.43.236.85http/1.1www.mkandptfoods.com:443GET /gaza.php HTTP/1.1 11-182329580/40/399_ 17.16013928360.00.393.77 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 12-1823-0/0/385. 0.0019704878350.00.004.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1823-0/0/24. 0.007770121150.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1823-0/0/246. 0.0045102628190.00.002.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1823-0/0/104. 0.007891007900.00.001.82 52.24.67.13http/1.1www.thaidaoherb.com:443GET /wp-content/uploads/elementor/css/post-15.css?ver=169115922 16-1823-0/0/201. 0.0077902531130.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1823-0/0/101. 0.0089530991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0082125051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.0088830144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0081887821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.0089540300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.0089570210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.008967050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.00896601095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 154subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 83 seconds, (range: 0...283)index usage: 5%, cache usage: 6%total entries stored since starting: 3086total entries replaced since starting: 0total entries expired since starting: 2932total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 75 hit, 4301 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 00:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee79b7b2c1Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 04-Oct-2023 00:29:48 +07 Restart Time: Wednesday, 04-Oct-2023 00:22:45 +07 Parent Server Config. Generation: 1801 Parent Server MPM Generation: 1800 Server uptime: 7 minutes 3 seconds Server load: 1.41 1.65 1.67 Total accesses: 1180 - Total Traffic: 9.2 MB - Total Duration: 1311825 CPU Usage: u2771.27 s5266.83 cu51831200 cs12663400 - 1.52e+7% CPU load 2.79 requests/sec - 22.4 kB/second - 8.0 kB/request - 1111.72 ms/request 9 requests currently being processed, 5 idle workers W__CW__RW_WWRC.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1800141530/3/101W 3.53901180180.00.050.81 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1696354179.21389889717102050781 1-1800141290/12/109_ 7.210527969130.00.090.79 198.244.144.149http/1.1www.nadapool.com:443GET /wp-login.php HTTP/1.1 2-1800141940/1/101_ 0.92051901412530.00.010.90 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1696354183.53412294387817382812 3-1800142011/2/100C 1.12001438102.30.020.97 146.190.64.200http/1.1localhost:443GET / HTTP/1.1 4-1800141620/5/97W 2.2810796160.00.040.63 146.190.64.200http/1.1www.pokaorganize.com:443GET / HTTP/1.1 5-1800140980/20/94_ 12.4604811258780.00.160.78 27.254.96.168http/1.1www.pokaorganize.com:443POST /wp-cron.php?doing_wp_cron=1696354187.79067897796630859375 6-1800141690/8/97_ 5.14011311071640.00.120.70 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 7-1800141130/15/78R 6.1910868590.00.110.73 159.89.83.196http/1.1www.partymanagementthailand.com 8-1800141710/5/101W 1.93001088720.00.030.82 94.23.207.193http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B9%82%E0%B8%9E%E0%B8%99%E0%B8%AA%E0%B8%A7%E0%B8%A3 9-1800142040/4/101_ 1.84001150180.00.050.79 138.68.133.118http/1.1localhost:80GET /login.action HTTP/1.0 10-1800142310/0/29W 0.0010228200.00.000.18 27.254.96.168http/1.1www.12gobiz.com:443GET /category/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0% 11-1800142400/1/100W 0.00001073150.00.000.67 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 12-1800142460/1/34R 0.0001248180.00.000.21 185.191.171.13http/1.1www.chonlateenextbiz.com:443 13-1800140261/38/38C 15.690794334645.50.290.29 172.69.87.111http/1.1www.chonlateeit.com:443GET /wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 231subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 33 seconds, (range: 0...84)index usage: 8%, cache usage: 10%total entries stored since starting: 345total entries replaced since starting: 0total entries expired since starting: 114total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 407 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-03 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee3382d28aApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:07 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 20 seconds Server load: 0.85 1.14 1.26 Total accesses: 373 - Total Traffic: 2.2 MB - Total Duration: 184366 CPU Usage: u2751.12 s5255.16 cu51774600 cs12651800 - 8.05e+7% CPU load 4.66 requests/sec - 28.5 kB/second - 6.1 kB/request - 494.279 ms/request 6 requests currently being processed, 6 idle workers R_W__._.R_._.W.WW................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299410/37/37R 6.0600143190.00.200.20 159.203.63.67http/1.1 1-1797299570/21/21_ 6.1900408230.00.290.29 35.87.19.151http/1.1www.yougame.in.th:80GET / HTTP/1.0 2-1797301250/6/23W 0.112011990.00.020.07 172.71.242.118http/1.1www.dealaccounting.com:80POST /wp-login.php HTTP/1.0 3-1797301600/2/31_ 0.0500103280.00.000.17 74.207.237.114http/1.1 4-1797301310/3/18_ 1.9100156180.00.040.18 167.99.184.41http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-1797-0/0/11. 0.00440125320.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1797300730/21/33_ 5.8301126960.00.130.15 159.203.63.67http/1.1 7-1797-0/0/11. 0.00450155160.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1797300250/34/34R 1.460025950.00.130.13 162.243.184.251http/1.1www.pokaorganize.com:80GET /server-status HTTP/1.0 9-1797300310/27/27_ 2.370065970.00.060.06 167.99.8.63http/1.1localhost:80GET /v2/_catalog HTTP/1.0 10-1797-0/0/11. 0.0046076200.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1797300440/22/22_ 3.310081100.00.180.18 172.105.37.32http/1.1localhost:80GET /.git/config HTTP/1.0 12-1797-0/0/16. 0.0041034670.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1797300520/28/28W 4.350083780.00.110.11 172.68.234.120http/1.1www.dealaccounting.com:80POST /wp-cron.php?doing_wp_cron=1696268047.04421210289001464843 14-1797-0/0/10. 0.0047011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300840/15/15W 3.941078050.00.060.06 172.68.234.214http/1.1www.dealaccounting.com:80POST /?wordfence_syncAttackData=1696268045.9197 HTTP/1.0 16-1797300920/11/11W 4.2900116820.00.070.07 161.35.190.56http/1.1localhost:80GET /server-status HTTP/1.0 17-1797-0/0/6. 0.0032011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0040013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0034013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 44subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 244 seconds, (range: 219...295)index usage: 1%, cache usage: 2%total entries stored since starting: 44total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 208 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eedd885cd9Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:32 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 1 minute 1 second Server load: 4.14 4.30 4.35 Total accesses: 394 - Total Traffic: 4.1 MB - Total Duration: 497187 CPU Usage: u2472.84 s4255.88 cu40848700 cs9867590 - 8.32e+7% CPU load 6.46 requests/sec - 68.7 kB/second - 10.6 kB/request - 1261.9 ms/request 8 requests currently being processed, 8 idle workers R_____RRRWW__WR_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239900/25/25R 16.2501338340.00.390.39 206.189.147.16http/1.1 1-1527239920/34/34_ 15.9700397820.00.250.25 198.199.121.22http/1.1www.pokaorganize.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1527240080/27/27_ 17.860866365640.00.260.26 172.70.38.40http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 3-1527240120/24/24_ 15.960798393890.00.360.36 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1527242190/3/23_ 0.500494285590.00.000.19 192.53.126.23http/1.1 5-1527240370/27/27_ 17.940791373460.00.290.29 172.70.34.62http/1.1www.proplustech.co.th:443GET /xmlrpc.php HTTP/1.1 6-1527240450/32/32R 18.150712368500.00.330.33 162.158.90.117http/1.1www.proplustech.co.th:443POST /wp-login.php HTTP/1.1 7-1527240470/33/33R 16.6600348150.00.280.28 143.110.156.182http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1527240580/25/25R 16.930853362920.00.310.31 52.251.36.208http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 9-1527241270/14/25W 7.2300313320.00.110.25 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 10-1527240700/26/26W 17.3100367630.00.250.25 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 11-1527240760/33/33_ 18.640773371850.00.330.33 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 12-1527240860/23/23_ 16.200815327630.00.260.26 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 13-1527241040/24/24W 12.0100241370.00.230.23 143.110.156.182http/1.1localhost:80GET /server-status HTTP/1.0 14-1527241420/12/12R 5.8800115650.00.110.11 52.251.36.208http/1.1www.chonlateedesign.com:443 15-1527242320/1/1_ 0.000000.00.000.00 139.144.150.8http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 38subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 271 seconds, (range: 237...296)index usage: 1%, cache usage: 1%total entries stored since starting: 38total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 107 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eeab557d19Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:01 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 13 seconds Server load: 0.65 1.15 1.36 Total accesses: 113 - Total Traffic: 1.1 MB - Total Duration: 132461 CPU Usage: u1983.69 s3433.58 cu32339200 cs7737160 - 5.49e+7% CPU load 1.55 requests/sec - 15.8 kB/second - 10.2 kB/request - 1172.22 ms/request 6 requests currently being processed, 4 idle workers WW_WW__RR_........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/13/13W 4.5400118570.00.160.16 139.59.230.191http/1.1localhost:80GET /server-status HTTP/1.0 1-129450830/4/8W 0.431033940.00.010.04 54.36.148.10http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 2-129449750/16/16_ 5.1201125350.00.070.07 165.22.108.223http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-129449890/8/8W 5.3300202760.00.190.19 91.213.50.8http/1.1www.pokaorganize.com:443GET /.git/config HTTP/1.1 4-129449950/11/11W 4.8000136670.00.080.08 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1685726641.75789499282836914062 5-129450150/8/8_ 4.5501211230.00.140.14 146.190.98.165http/1.1 6-129450210/13/13_ 3.690172120.00.140.14 139.59.230.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-129450280/12/12R 5.3800146600.00.170.17 139.59.230.191http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-129450300/10/10R 5.7200164050.00.050.05 165.22.74.203http/1.1 9-129450540/10/10_ 4.170092200.00.070.07 146.190.98.165http/1.1 10-1294-0/0/1. 0.0051010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1294-0/0/3. 0.0033021050.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 34subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 265 seconds, (range: 240...299)index usage: 1%, cache usage: 1%total entries stored since starting: 34total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 79 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee70769fc0Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:38 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 5 seconds Server load: 0.49 1.05 0.98 Total accesses: 148 - Total Traffic: 1.5 MB - Total Duration: 94551 CPU Usage: u1626.52 s2823.75 cu26678600 cs6409520 - 5.09e+7% CPU load 2.28 requests/sec - 23.9 kB/second - 10.5 kB/request - 638.858 ms/request 12 requests currently being processed, 0 idle workers CCCWCCCCWCCC...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416031/18/18C 5.6412119502.60.120.12 146.190.98.165http/1.1localhost:443GET /info.php HTTP/1.1 1-108416211/17/17C 4.7412101632.60.130.13 146.190.98.165http/1.1localhost:443GET /.env HTTP/1.1 2-108416231/12/12C 7.1911213722.70.130.13 146.190.98.165http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-108416250/17/17W 4.8000137990.00.500.50 104.248.140.11http/1.1localhost:80GET /server-status HTTP/1.0 4-108416271/17/17C 5.9211135132.60.290.29 146.190.98.165http/1.1localhost:443GET /telescope/requests HTTP/1.1 5-108416521/19/19C 2.841173322.60.100.10 146.190.98.165http/1.1localhost:443GET /.git/config HTTP/1.1 6-108416591/17/17C 3.341069512.60.100.10 146.190.98.165http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-108416831/19/19C 2.220150561.30.130.13 146.190.98.165http/1.1localhost:443GET /config.json HTTP/1.1 8-108417060/7/7W 2.230043930.00.020.02 47.242.255.46http/1.1www.chonlateepro.com:443POST /xmlrpc.php HTTP/1.1 9-108417461/3/3C 0.020182.70.010.01 146.190.98.165http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-108417541/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /login.action HTTP/1.1 11-108417561/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 278 seconds, (range: 235...297)index usage: 0%, cache usage: 0%total entries stored since starting: 15total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 56 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee4055bb6aApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:22 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 26 seconds Server load: 1.69 1.59 1.47 Total accesses: 102 - Total Traffic: 636 kB - Total Duration: 81548 CPU Usage: u1257.51 s2309.29 cu21800400 cs5275950 - 1.04e+8% CPU load 3.92 requests/sec - 24.5 kB/second - 6.2 kB/request - 799.49 ms/request 6 requests currently being processed, 5 idle workers __C.RWW_R_W_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775490/10/10_ 3.0402121220.00.030.03 194.195.219.36http/1.1localhost:80GET /server-status HTTP/1.0 1-84775500/14/14_ 3.520187590.00.070.07 134.209.207.188http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 2-84775521/7/7C 2.830157222.20.050.05 139.59.138.104http/1.1localhost:443GET / HTTP/1.1 3-847-0/0/7. 0.000059750.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-84775790/14/14R 3.620075530.00.080.08 134.209.207.188http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 5-84776000/4/4W 1.780034900.00.020.02 165.22.205.214http/1.1www.pokaorganize.com:443GET / HTTP/1.1 6-84776070/4/4W 1.950038100.00.040.04 143.110.217.252http/1.1www.pokaorganize.com:443GET / HTTP/1.1 7-84776090/7/7_ 2.770067310.00.130.13 134.209.207.188http/1.1localhost:80GET /.git/config HTTP/1.0 8-84776230/6/6R 2.610153410.00.080.08 5.253.18.199http/1.1www.nptpropertythailand.com:443 9-84776340/12/12_ 2.080059570.00.040.04 134.209.207.188http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-84776360/9/9W 1.5800160650.00.030.03 170.187.164.222http/1.1localhost:80GET /server-status HTTP/1.0 11-84777200/8/8_ 0.0100170.00.010.01 170.187.164.222http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 295 seconds, (range: 288...298)index usage: 0%, cache usage: 0%total entries stored since starting: 9total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 31 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee7c4a652eApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:07 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 4 seconds Server load: 2.45 1.80 1.59 Total accesses: 112 - Total Traffic: 390 kB - Total Duration: 15018 CPU Usage: u631.63 s1252.71 cu12780600 cs3072970 - 3.96e+8% CPU load 28 requests/sec - 97.5 kB/second - 3565 B/request - 134.089 ms/request 20 requests currently being processed, 0 idle workers CCWRRRCCCCCCWWCCCCCC.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799541/7/7C 1.291124652.70.050.05 172.105.120.53http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-43799721/5/5C 1.600048141.30.100.10 157.245.53.210http/1.1localhost:443GET /about HTTP/1.1 2-43799780/17/17W 1.130022460.00.020.02 143.110.221.71http/1.1localhost:80GET /server-status HTTP/1.0 3-43799880/8/8R 0.560010730.00.010.01 143.110.221.71http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 4-43799940/4/4R 0.670113180.00.010.01 143.110.221.71http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-437100010/25/25R 0.0401260.00.020.02 143.110.221.71http/1.1localhost:80GET /telescope/requests HTTP/1.0 6-437100151/7/7C 0.651111392.60.100.10 157.245.53.210http/1.1localhost:443GET /telescope/requests HTTP/1.1 7-437100211/4/4C 0.48109272.70.010.01 157.245.53.210http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 8-437100281/1/1C 0.001122.60.000.00 172.105.120.53http/1.1localhost:443GET /info.php HTTP/1.1 9-437100341/5/5C 0.011062.60.010.01 157.245.53.210http/1.1localhost:443GET /.git/config HTTP/1.1 10-437100361/5/5C 0.011052.70.010.01 157.245.53.210http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-437100421/5/5C 0.011172.60.010.01 157.245.53.210http/1.1localhost:443GET /info.php HTTP/1.1 12-437100530/1/1W 0.010090.00.000.00 206.189.129.168http/1.1www.uniqueworkthailand.com:80POST /wp-login.php HTTP/1.0 13-437100550/1/1W 0.000010.00.000.00 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 14-437100651/5/5C 0.010061.30.010.01 172.105.120.53http/1.1localhost:443GET /about HTTP/1.1 15-437100671/1/1C 0.000012.60.000.00 157.245.53.210http/1.1localhost:443GET /.env HTTP/1.1 16-437100731/3/3C 0.010041.30.000.00 157.245.53.210http/1.1localhost:443GET /login.action HTTP/1.1 17-437100791/2/2C 0.000031.30.000.00 172.105.120.53http/1.1localhost:443GET /login.action HTTP/1.1 18-437100851/1/1C 0.000111.30.000.00 172.105.120.53http/1.1localhost:443GET /config.json HTTP/1.1 19-437100911/5/5C 0.47009561.30.010.01 157.245.53.210http/1.1localhost:443GET /config.json HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 297 seconds, (range: 296...298)index usage: 0%, cache usage: 0%total entries stored since starting: 8total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 55 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 12:45
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be112cd66cd4Apache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 19:45:42 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 9 hours 44 minutes 21 seconds Server load: 2.05 2.01 2.00 Total accesses: 1849432 - Total Traffic: 23.8 GB - Total Duration: 2141105969 CPU Usage: u226.26 s121.31 cu32089.3 cs2210.25 - 1.41% CPU load .754 requests/sec - 10.2 kB/second - 13.5 kB/request - 1157.71 ms/request 3 requests currently being processed, 125 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes032000 329394no0yes131000 529374no0yes230000 Sum400 3125000 ________________________________................................ _______________________________________________W________________ ................................________________R________R______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/48/14796_ 16.8400160260970.00.17193.80 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/46/15289_ 15.3515139013510.00.11198.96 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/49/14862_ 16.8120150309550.00.17192.74 162.243.186.177http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/42/15035_ 16.7720145875100.00.09185.97 159.65.138.217http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/44/14942_ 15.8170147711710.00.18185.45 159.203.44.43http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/40/15167_ 15.0350156649150.00.13188.54 161.35.27.144http/1.1 0-92293730/38/14838_ 15.4230145588580.00.16200.26 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/37/15144_ 16.8130150182050.00.09187.59 104.236.193.132http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/39/15106_ 16.6860145226960.00.10229.90 162.243.186.177h2localhost:443[0/0] Software caused connection abort 0-92293730/47/15241_ 15.3430148853430.00.18194.90 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/45/14805_ 16.7870154393260.00.10200.69 159.65.138.217http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/42/14815_ 15.4020147156150.00.09195.46 139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/54/14685_ 15.4270137182760.00.17185.53 167.99.184.41http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/46/14837_ 15.4020169086520.00.11186.03 162.243.186.177http/1.1 0-92293730/42/15788_ 16.8400141615190.00.14187.80 104.236.193.132http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/48/14840_ 16.8130165341230.00.12182.51 161.35.190.56http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/53/14892_ 15.4230143405090.00.13206.39 104.236.193.132http/1.1 0-92293730/45/14952_ 16.8030144939950.00.14189.32 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-92293730/41/14769_ 16.6840160388350.00.07200.55 128.199.62.55http/1.1localhost:80GET / HTTP/1.1 0-92293730/46/14991_ 15.3680144639370.00.14193.82 138.68.133.118http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/47/14984_ 14.7538181495960.00.19193.46 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/40/15005_ 15.4320147053760.00.11204.09 139.144.150.8http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/47/15465_ 16.8030150748880.00.18188.30 104.236.193.132http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/41/14672_ 15.7810138765320.00.14190.19 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/55/14979_ 15.8000162205880.00.13186.91 165.22.74.203http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/49/14652_ 16.8050135981660.00.18197.03 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/45/15152_ 16.7720144713490.00.08194.53 161.35.155.246http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/45/14930_ 16.8040159187530.00.07213.31 161.35.190.56http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/51/14738_ 16.77117152174570.00.13175.94 104.236.193.132http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/34/15182_ 15.8000135139130.00.11225.15 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-92293730/53/14672_ 16.7870155573070.00.07199.15 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/41/14931_ 16.7950145815130.00.19185.18 161.35.190.56http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15731. 0.00559270138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00559270136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00559270174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00559270150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00559270146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00559270134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00559270172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00559270165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00559270127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00559270152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00559270148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00559270159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00559270159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00559270137016410.00.00183.04 159.223.102.13
Found on 2024-02-02 12:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be11c2e331b1Apache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:42:16 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 40 minutes 55 seconds Server load: 3.47 3.17 3.02 Total accesses: 865229 - Total Traffic: 11.7 GB - Total Duration: 1072929750 CPU Usage: u108.21 s12.4 cu14756 cs775.09 - 8.41% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1240.05 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 14311no13yes329008 215008no13yes626007 Sum2026 9550015 ................................___W_________________W___W______ ___W___W____W___WW__R___________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/6891. 0.00266092123140.00.00101.02 203.170.192.183http/1.1www.chonlateeaa.com:443POST /wp-cron.php?doing_wp_cron=1704609224.54213690757751464843 0-7-0/0/7350. 0.00266112572282630.00.00102.14 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6939. 0.0026689178790990.00.00100.26 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7174. 0.00266214775847660.00.0092.54 85.208.96.210http/1.1www.chonlateeboi.com:443GET /47585lrvyeti.html HTTP/1.1 0-7-0/0/7138. 0.00266105876261220.00.0089.56 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /jwyfijs-12086litems/etidm52w.html HTTP/1.1 0-7-0/0/7275. 0.0026684188932560.00.0096.14 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7088. 0.0026683970622910.00.00106.56 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2017idtuitems/eti HTTP/1.1 0-7-0/0/7166. 0.0026684673910630.00.0093.68 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ivxfijs-30857keti.html HTTP/1.1 0-7-0/0/7317. 0.0026690575885040.00.00143.62 40.77.167.2h2www.chonlateefbc.com:443GET /?m=cma-dishmachines-180uc-high-temp-undercounter-dishwashe 0-7-0/0/7203. 0.0026688878309230.00.0090.77 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6992. 0.0026644528187048130.00.00111.98 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6758. 0.002661184189200.00.0087.93 66.249.71.36http/1.1www.mgrandstructure.com:443GET /ofpm/project-sekai-mod-apk.html HTTP/1.1 0-7-0/0/6811. 0.0026685063912670.00.0090.61 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2045idtuetidm25.html HTTP/1.1 0-7-0/0/7015. 0.0026684094751170.00.0095.78 47.128.57.61http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/logo_Home.png HTTP/2.0 0-7-0/0/7685. 0.0026676672332400.00.0096.84 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6875. 0.0026688994028910.00.0088.35 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7000. 0.0026684175194130.00.0090.50 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cfrfijs-30435eitems/etidm.htm HTTP/1.1 0-7-0/0/7105. 0.0026684871642070.00.0094.88 23.22.35.162http/1.1www.chonlateeboi.com:443GET /19415rbhsetidm36ts.html HTTP/1.1 0-7-0/0/7067. 0.0026691788661280.00.0088.94 185.191.171.19http/1.1www.chonlateefood.com:443GET /getid/zeo12115nheeitems HTTP/1.1 0-7-0/0/7136. 0.0026684774949870.00.0096.17 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B8%AD%E0% 0-7-0/0/7171. 0.00266845115334180.00.0099.43 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 0-7-0/0/6851. 0.00266105678741500.00.0091.77 185.191.171.19http/1.1www.chonlateeboi.com:443GET /6178zvqcetid HTTP/1.1 0-7-0/0/7407. 0.0026684486534200.00.0098.18 3.224.220.101http/1.1www.chonlateeboi.com:443GET /19448rbhsitems/etidm98arp.html HTTP/1.1 0-7-0/0/6945. 0.0026669070103160.00.0098.07 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6996. 0.0026644092090520.00.0088.48 208.109.224.138http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7163. 0.0026684463458100.00.0091.23 47.128.57.61h2www.xn--12cx2bef7bl0boq4ch6gugw[2/2] done: stream 3, GET /wp-content/uploads/2021/01/logo_Home 0-7-0/0/6983. 0.0026684177138920.00.0099.07 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qifivak-4293sitems/etidm68.htm HTTP/1.1 0-7-0/0/7033. 0.00266123687774620.00.00120.10 149.91.122.223http/1.1www.chonlateefood.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/6856. 0.0026684776147840.00.0086.02 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7160. 0.002661078931820.00.00125.06 203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704609224.08053588867187500000 0-7-0/0/6794. 0.0026684484918420.00.0098.44 3.224.220.101http/1.1www.chonlateeboi.com:443GET /30278lrvyitems/etidm57o.html HTTP/1.1 0-7-0/0/7169. 0.0026690676482950.00.0091.69 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 1-743110/177/6988_ 79.730078169580.01.7890.42 137.184.150.232http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/222/6765_ 79.68066378797380.02.6486.16 208.109.34.70http/1.1www.ozonepluswater.net:443GET /wp-login.php HTTP/1.1 1-743110/149/6709_ 79.7800105345740.01.4685.91 138.68.133.118http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-743111/175/6469W 79.570083859760.01.5785.05 52.70.240.171http/1.1www.chonlateeboi.com:443GET /26091mywgitems/etidm.htm HTTP/1.1 1-743110/159/6643_ 79.731080194240.01.6398.38 159.203.182.222http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/239/6754_ 79.700078210170.04.2390.55 159.203.182.222http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/225/6745_ 79.78092597153540.04.4187.83 203.170.192.183http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 1-743110/160/6779_ 79.730090618180.01.5289.93 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1 1-743110/222/6884_ 79.780060843660.01.7287.84 137.184.150.232http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/141/6698_ 79.72185083225900.01.4892.54 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /sfhfijs-45739uitems/etidm HTTP/1.1 1-743110/97/6419_ 79.431990968030.01.1290.68 139.144.150.205http/1.1localho
Found on 2024-01-07 06:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be1191d98febApache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 03:47:53 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 17 hours 46 minutes 32 seconds Server load: 2.52 2.61 2.65 Total accesses: 314379 - Total Traffic: 4.4 GB - Total Duration: 288968497 CPU Usage: u221.75 s13.87 cu5056.5 cs270.41 - 8.69% CPU load 4.91 requests/sec - 72.5 kB/second - 14.7 kB/request - 919.172 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 122317no19yes3290012 227923no2yes626000 Sum2021 9550012 ................................________W____W_____________W____ RW_____W_____C_W________W_______................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2-0/0/3194. 0.00306842528768890.00.0047.11 194.58.121.229http/1.1www.rooffurnish.com:443POST /wp-login.php HTTP/1.1 0-2-0/0/3455. 0.003068107724901260.00.0045.28 85.208.96.202http/1.1www.krongthongsecurity.com:443GET /htygzna229132litems/etidm14ugl.html HTTP/1.1 0-2-0/0/3118. 0.00306883437593330.00.0053.55 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?mjiecaw-286155vetidm4.htm HTTP/1.1 0-2-0/0/3380. 0.00306863627408070.00.0042.71 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5341tbrmitems/etidm45 HTTP/1.1 0-2-0/0/3237. 0.00306884125511080.00.0040.44 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ufshsbr-320093fetidm39hsf HTTP/1.1 0-2-0/0/3477. 0.00306883932480400.00.0043.86 52.167.144.24h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3259. 0.00306884025454740.00.0055.68 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ajwecaw-316459jetidm8 HTTP/1.1 0-2-0/0/3286. 0.00306840226514000.00.0042.47 91.92.252.141http/1.1www.ltclevelup.com:443GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3334. 0.00306883926277530.00.0084.92 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uuqaonh-122935detidm92hhd HTTP/1.1 0-2-0/0/3256. 0.00306883825449070.00.0042.02 3.224.220.101http/1.1www.chonlateeboi.com:443GET /11370ztiaetid.htm HTTP/1.1 0-2-0/0/3173. 0.003068101128795120.00.0038.86 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?eetvrsm-293297geti.html HTTP/1.1 0-2-0/0/3146. 0.003068407425688950.00.0040.21 66.249.69.228http/1.1www.chonlateenextbiz.com:443GET /sitemap3.xml HTTP/1.1 0-2-0/0/3096. 0.00306884525479180.00.0042.08 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5335tbrmitems/etidm69fm HTTP/1.1 0-2-0/0/3367. 0.00306883736720350.00.0045.96 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?liavrsm-295332netidm4.htm HTTP/1.1 0-2-0/0/3430. 0.00306884328925500.00.0045.91 85.208.96.193http/1.1www.chonlateeadmin.com:443GET /mnbwaok-38297oeti.html HTTP/1.1 0-2-0/0/3138. 0.003068030630950.00.0040.43 195.211.77.142http/1.1localhost:443HEAD / HTTP/1.1 0-2-0/0/3141. 0.003068109829741030.00.0040.23 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?jiyvrsm-295304litems/etidm19wvl.html HTTP/1.1 0-2-0/0/3394. 0.003068122126703460.00.0044.77 52.167.144.18h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3301. 0.00306884324881610.00.0042.98 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?lmahlzs-466netid HTTP/1.1 0-2-0/0/3155. 0.003068240229467670.00.0046.16 40.77.167.255h2www.chonlateeaa.com:443[0/0] init 0-2-0/0/3247. 0.00306884224826040.00.0050.02 52.70.240.171http/1.1www.chonlateeboi.com:443GET /37327bzlnitems/etidm82rn HTTP/1.1 0-2-0/0/3261. 0.003068408127242670.00.0046.03 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /sitemap16.xml HTTP/1.1 0-2-0/0/3606. 0.00306883325294670.00.0045.78 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?vfkvrsm-295862xitems/etidm84i.html HTTP/1.1 0-2-0/0/3167. 0.00306884525092350.00.0040.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /38206ztiaetidm39m HTTP/1.1 0-2-0/0/3161. 0.00306884225364790.00.0040.26 52.70.240.171http/1.1www.chonlateeboi.com:443GET /13039ztiaitems/etidm67na HTTP/1.1 0-2-0/0/3165. 0.00306888326235840.00.0040.77 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?hiwvrsm-306404jitems/etidm1.html HTTP/1.1 0-2-0/0/3226. 0.00306889028272940.00.0051.28 40.77.167.8h2www.chonlateenextbiz.com:443GET /g2016469.shtml HTTP/2.0 0-2-0/0/3171. 0.00306883831863910.00.0070.95 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-295296detidm28ovd.htm HTTP/1.1 0-2-0/0/3109. 0.003068025398020.00.0039.01 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3454. 0.00306884824072460.00.0079.52 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ikfqxjd-247957setidm79vx.html HTTP/1.1 0-2-0/0/3133. 0.00306883727805250.00.0047.82 3.224.220.101http/1.1www.chonlateeboi.com:443GET /1944gcmpetidm89ugj.htm HTTP/1.1 0-2-0/0/3519. 0.003068028024720.00.0043.22 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/themes/include.php HTTP/1.1 1-2223170/234/2557_ 123.651019226020.02.9133.18 143.42.118.5http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2223170/202/2302_ 123.821021233420.02.6129.64 178.62.73.12http/1.1localhost:443GET /about HTTP/1.1 1-2223170/223/2450_ 123.600019309030.02.6433.32 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 1-2223170/201/2290_ 123.661365720092840.02.7430.63 81.94.150.189http/1.1www.krongthongsecurity.com:443GET /wp-content/plugins/wp-compress-image-optimizer/fixCss.php? 1-2223170/165/2294_ 123.770028078970.02.0534.56 178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/261/2446_ 123.860018350260.03.6532.04 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2223170/196/2331_ 122.951419020680.02.4428.81 162.243.186.177h2localhost:443[0/0] Software caused connection abort 1-2223170/222/2407_ 123.59084519501540.03.8533.31 23.22.35.162http/1.1www.chonlateeboi.com:443GET /28775biwxetidm98tx.html HTTP/1.1 1-2223171/221/2384W 123.220019275940.02.7832.76 217.113.194.213http/1.1www.mkandptfoods.com:443GET /etajrvhu/fat-girl-car-wash-nude.html HTTP/1.1 1-2223170/192/2304_ 123.821018353620.02.3929.93 134.122.89.242http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-2223170/228/2346_ 123.651018428910.02.6834.66 128.199.62.55http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/211/2460_ 123.411019918610.02.6433.86 143.42.118.5http/1.1localhost:80
Found on 2024-01-05 20:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be11473c2daeApache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 03:32:05 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 43 Parent Server MPM Generation: 42 Server uptime: 11 days 3 hours 9 minutes 7 seconds Server load: 0.19 0.35 0.45 Total accesses: 4408960 - Total Traffic: 56.5 GB - Total Duration: 4157816922 CPU Usage: u200.46 s46.88 cu79452.5 cs4157.09 - 8.72% CPU load 4.58 requests/sec - 61.6 kB/second - 13.4 kB/request - 943.038 ms/request 4 requests currently being processed, 60 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 017105no18yes1310015 117528no2yes329000 Sum2020 4600015 ______________________________W______W_______________W_________R ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-42171050/108/39546_ 76.301917358822980.01.12500.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?122194himsetid HTTP/1.1 0-42171050/130/38954_ 76.4810366081380.02.49492.36 167.99.8.63http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-42171050/178/39374_ 76.511677400875150.06.08508.73 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?rikvbri-212xetid.htm HTTP/1.1 0-42171050/107/39346_ 76.5510389564470.01.07513.60 159.203.63.67http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-42171050/116/39867_ 76.580901371026040.01.24567.55 185.191.171.11http/1.1www.chonlateeadmin.com:443GET /xgmxktd-28194zetid.htm HTTP/1.1 0-42171050/126/38940_ 76.4810398977370.02.49493.22 128.199.62.55http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-42171050/123/39261_ 76.4200402720170.01.31494.35 104.131.1.32http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-42171050/121/40030_ 76.5510367696840.01.26502.12 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 0-42171050/121/38989_ 76.4200379853090.01.25510.15 178.128.151.41http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-42171050/117/39387_ 76.4610368028920.01.28502.75 167.99.8.63http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-42171050/130/39008_ 76.5800384736370.01.46474.61 128.199.62.55http/1.1localhost:443GET /config.json HTTP/1.1 0-42171050/113/39043_ 76.4610369080830.01.33523.71 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-42171050/128/38953_ 76.4410375198450.01.36475.71 159.203.63.67http/1.1localhost:443GET /about HTTP/1.1 0-42171050/134/39131_ 76.5010407551470.01.64504.33 104.131.1.32http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-42171050/120/39305_ 76.3400380322460.01.50493.76 66.249.71.170http/1.1www.thaidaoherb.com:443GET /godsend/godsend.php?getid/chf55460hvoritems.htm HTTP/1.1 0-42171050/119/38998_ 76.4310372037240.01.40548.52 167.99.8.63http/1.1localhost:80GET /config.json HTTP/1.1 0-42171050/121/39971_ 76.3400375077740.01.30528.10 167.99.8.63http/1.1localhost:80GET /.env HTTP/1.1 0-42171050/123/39490_ 76.5800366756680.01.23486.36 161.35.27.144http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-42171050/149/39537_ 76.4410367933590.01.54510.57 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-42171050/113/39770_ 76.4310384600140.01.56547.02 167.99.8.63http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-42171050/200/39200_ 76.5210364536760.02.37516.18 159.223.108.26http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-42171050/104/39325_ 76.420847388058320.01.06507.30 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?128842himsetid HTTP/1.1 0-42171050/113/39100_ 76.2706408451240.01.22517.30 159.223.108.26http/1.1localhost:443GET /server-status HTTP/1.1 0-42171050/204/38492_ 76.590929361806210.01.54477.62 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?89571himsitems/etidm.htm HTTP/1.1 0-42171050/173/39502_ 76.4310371560930.01.56523.08 159.203.63.67http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-42171050/125/38748_ 76.4410388761000.01.67474.00 178.128.151.41http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-42171050/139/39471_ 76.5610373218420.02.96588.07 128.199.62.55http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-42171050/113/38670_ 76.5010370337930.01.23512.98 128.199.62.55http/1.1localhost:443GET /.git/config HTTP/1.1 0-42171050/106/39264_ 76.511867411889910.01.31526.29 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?jnyecaw-275518letidm67w HTTP/1.1 0-42171050/100/39237_ 76.140825375236920.01.19506.92 167.99.8.63http/1.1localhost:80GET /server-status HTTP/1.1 0-42171051/105/39231W 76.2400370183210.01.17496.23 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mzfqqkm-3171sitems/eti HTTP/1.1 0-42171050/114/38973_ 76.2910378134480.01.67541.02 167.99.8.63http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-42175280/99/40400_ 59.290926375889300.01.13509.81 128.199.62.55h2localhost:443[0/0] Software caused connection abort 1-42175280/125/40308_ 60.1800384682000.01.61552.35 128.199.62.55http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-42175280/91/40096_ 59.8510385604590.00.93559.71 178.128.151.41http/1.1localhost:80GET /login.action HTTP/1.1 1-42175280/90/40327_ 60.062851393775990.01.11567.24 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?89546himsitems/etid.html HTTP/1.1 1-42175280/100/41205_ 60.1000365683100.01.10628.09 104.131.1.32http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-42175281/105/39887W 60.0000362748990.02.18573.51 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?ijxecaw-260775kitems/etidm13vw.htm HTTP/1.1 1-42175280/81/40020_ 59.8521365433400.00.92534.52 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 1-42175280/94/40483_ 59.5320389411980.01.19515.97 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-42175280/87/40175_ 59.9420377987020.01.01505.44 128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1 1-42175280/100/40279_ 59.9000370377790.01.07514.90 104.131.1.32http/1.1localhost:443GET / HTTP/1.1 1-42175280/76/40815_ 59.9620366892630.00.92538.59 167.99.8.63http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-42175280/83/40649_ 59.38013371897700.00.96506.15 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 1-42175280/100/40528_ 60.0610
Found on 2023-12-11 20:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3136d9be1136d9be1185731ed5Apache Status Apache Server Status for mail.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:42 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 43 seconds Server load: 2.84 2.12 1.72 Total accesses: 697441 - Total Traffic: 9.7 GB - Total Duration: 517783327 CPU Usage: u84.71 s12.65 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.404 ms/request 12 requests currently being processed, 116 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no14yes2301011 330151no14yes131007 630155no13yes527008 730156no0yes428000 Sum4041 121161026 ................................................................ __R____________________W__________________R_____________________ ................................................................ __RW______________W_______W____W__________R_W____W______W_______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0069789745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0069796045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0069780245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0069795746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00697167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0069794846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00697145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0069792346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00697107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00697104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0069770146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0069789947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0069772146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00697104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00697108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0069746846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0069770945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0069784445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0069771246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0069770946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00697046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0069749045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0069793646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0069786945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006974146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0069773844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00697722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0069796345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00697107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00697146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00697778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0069796044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0069786344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0069747946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00697150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0069767645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0069745143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00697044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00697232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0069758244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00697183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00697822744746080.00.0079.16 <
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eeab9e49ceApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:49:50 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 2 hours 26 minutes 4 seconds Server load: 0.61 0.55 0.55 Total accesses: 10649 - Total Traffic: 162.2 MB - Total Duration: 23137847 CPU Usage: u3225.36 s5854.27 cu55530100 cs13588500 - 789000% CPU load 1.22 requests/sec - 19.0 kB/second - 15.6 kB/request - 2172.77 ms/request 10 requests currently being processed, 13 idle workers R_R______._CC_C_RWC__C_C.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964101610/52/941R 28.351120637760.00.4210.32 159.65.138.217http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 1-1964100330/69/901_ 39.551120760340.01.2312.66 139.144.150.45http/1.1localhost:443GET /about HTTP/1.1 2-1964106990/4/866R 0.931118823130.00.0211.18 172.71.146.212http/1.1 3-1964101710/47/872_ 30.541117899420.00.3614.02 159.65.138.217http/1.1localhost:443GET /config.json HTTP/1.1 4-1964107210/2/776_ 0.000117035360.00.009.85 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1964107270/2/772_ 0.010017348250.00.008.82 207.154.240.169http/1.1localhost:443GET /_all_dbs HTTP/1.1 6-1964107400/1/914_ 0.000219985530.00.0013.46 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 7-1964107330/1/707_ 0.000017196110.00.008.26 147.182.130.98http/1.1 8-1964107420/1/800_ 0.000118022020.00.009.72 143.198.72.96http/1.1localhost:443GET /about HTTP/1.1 9-1964-0/0/615. 0.000112811000.00.007.46 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 10-196498280/85/542_ 47.34008791300.00.925.90 147.182.130.98http/1.1 11-196498371/75/569C 48.050012416311.31.067.91 139.144.150.45http/1.1localhost:443GET /login.action HTTP/1.1 12-196498431/83/282C 51.08005765490.20.705.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-196498500/73/308_ 43.100109238307900.01.385.60 139.59.182.142http/1.1www.partymanagementthailand.comGET / HTTP/1.1 14-1964107521/4/159C 0.01013406051.40.001.85 143.198.72.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1964107540/1/167_ 0.00013538440.00.002.34 143.110.156.182http/1.1localhost:443GET /about HTTP/1.1 16-1964107650/1/64R 0.3914051078070.00.001.96 162.158.106.175http/1.1www.mgacccount.com:80POST /wp-login.php HTTP/1.0 17-1964107710/1/2W 0.38007920.00.000.00 143.198.72.96http/1.1localhost:443GET /server-status HTTP/1.1 18-1964107771/1/4C 0.0011791.40.001.37 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-1964107830/1/99_ 0.00112012300.00.001.40 143.110.156.182http/1.1localhost:443GET /v2/_catalog HTTP/1.1 20-1964107890/1/90_ 0.00101872330.00.002.90 143.198.72.96http/1.1localhost:443GET /v2/_catalog HTTP/1.1 21-1964107951/1/2C 0.000131.40.000.00 207.154.240.169http/1.1localhost:443GET /login.action HTTP/1.1 22-1964108010/1/101_ 0.00011850300.00.0017.50 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 23-1964108071/1/96C 0.00011812211.40.002.03 143.110.156.182http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 291 seconds, (range: 287...294)index usage: 0%, cache usage: 0%total entries stored since starting: 82total entries replaced since starting: 0total entries expired since starting: 70total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5125 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eee0b43412Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 06:31:01 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 2 hours 28 minutes 49 seconds Server load: 0.48 0.43 0.45 Total accesses: 13375 - Total Traffic: 196.6 MB - Total Duration: 32002244 CPU Usage: u2970.89 s5752.08 cu55143800 cs13500100 - 769000% CPU load 1.5 requests/sec - 22.6 kB/second - 15.1 kB/request - 2392.69 ms/request 15 requests currently being processed, 5 idle workers CCCWWW_.._CCW._CC_WCWC_........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932141731/20/1105C 3.171127303381.30.1611.35 144.126.198.24http/1.1localhost:443GET /.env HTTP/1.1 1-1932140151/46/1084C 5.380126682031.40.3814.99 144.126.198.24http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 2-1932141261/31/1132C 2.691127382341.30.2815.62 143.110.156.182http/1.1localhost:443GET /.git/config HTTP/1.1 3-1932139840/53/1124W 8.100027349190.01.6425.41 139.144.96.150http/1.1www.partymanagementthailand.comGET /.vscode/sftp.json HTTP/1.1 4-1932139950/54/1130W 4.770027188950.01.4815.82 74.207.237.46http/1.1www.importantaccount.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1932142530/6/1086W 0.550024810360.00.0216.31 172.68.234.204http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1699227060.7814 HTTP/1.0 6-1932140730/36/1066_ 2.730126413700.00.3016.07 143.110.156.182http/1.1localhost:443GET /.env HTTP/1.1 7-1932-0/0/1012. 0.006024407030.00.0011.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1932-0/0/1040. 0.005024998880.00.0015.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1932142610/4/852_ 0.100118794630.00.0113.40 165.232.76.155http/1.1localhost:443GET /config.json HTTP/1.1 10-1932142731/5/785C 0.680118412761.40.0211.78 137.184.162.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1932142741/3/621C 0.041015637991.40.019.70 143.110.156.182http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 12-1932138130/92/635W 11.320014411050.02.908.30 172.71.166.80http/1.1www.proplustech.co.th:443GET /?page_id=M85679 HTTP/1.1 13-1932-0/0/407. 0.00408984520.00.007.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932142770/3/262_ 0.02017083220.00.003.04 165.232.76.155http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 15-1932142821/4/7C 0.0210311.30.010.02 165.232.76.155http/1.1localhost:443GET /telescope/requests HTTP/1.1 16-1932142981/5/5C 0.0300111.30.010.01 143.110.156.182http/1.1localhost:443GET /telescope/requests HTTP/1.1 17-1932142990/4/4_ 1.53040330840.00.010.01 74.207.237.46http/1.1www.importantaccount.com:443GET /v2/_catalog HTTP/1.1 18-1932143010/3/3W 0.051033830.00.010.01 162.158.239.29http/1.1www.solucare.co.th:80GET /alfacgiapi/perl.alfa HTTP/1.0 19-1932143031/2/2C 0.040161.30.000.00 144.126.198.24http/1.1localhost:443GET /.git/config HTTP/1.1 20-1932143090/3/3W 1.520039360.00.080.08 137.184.162.65http/1.1localhost:443GET /server-status HTTP/1.1 21-1932143111/4/4C 0.020161.30.010.01 143.110.156.182http/1.1localhost:443GET /config.json HTTP/1.1 22-1932143170/4/4_ 0.050145329140.00.020.02 162.158.175.27http/1.1www.proplustech.co.th:443GET /?page_id=E1383251 HTTP/1.1 23-1932-0/0/2. 0.003028590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 18subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 230 seconds, (range: 45...296)index usage: 0%, cache usage: 0%total entries stored since starting: 62total entries replaced since starting: 0total entries expired since starting: 44total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 9966 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-05 23:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee7a878edeApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 01:37:38 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 1 hour 13 minutes 43 seconds Server load: 4.34 3.38 3.31 Total accesses: 18626 - Total Traffic: 261.9 MB - Total Duration: 76798124 CPU Usage: u3351.95 s5702.24 cu53825200 cs13127100 - 1510000% CPU load 4.21 requests/sec - 60.6 kB/second - 14.4 kB/request - 4123.17 ms/request 19 requests currently being processed, 10 idle workers CWC_W___C_WWC_W_CC_WWCRC_WCW_..................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1895187231/89/933C 64.140136470541.31.1313.18 161.35.27.144http/1.1localhost:443GET /.env HTTP/1.1 1-1895188480/63/884W 57.560036643090.00.9613.94 138.197.88.136http/1.1localhost:443GET /server-status HTTP/1.1 2-1895187401/84/885C 68.9705190379071127.51.0113.26 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=1954-gibson-eb-1-mahogany-electric-bass-musical-lot-mm- 3-1895194740/3/913_ 0.970036975790.00.0213.38 144.126.202.105http/1.1 4-1895192000/25/822W 25.932037262710.00.4211.08 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gibson-eb-eb-1-bass-guitar-%3E%3E-flyguitars-mm-a9pRAyH 5-1895189390/63/893_ 45.840420735633560.00.9611.27 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=40-easy-landscape-painting-ideas-for-beginners-easy-acr 6-1895194800/3/840_ 1.88047835727460.00.0211.99 139.59.182.142http/1.1www.importantaccount.com:443GET /.vscode/sftp.json HTTP/1.1 7-1895192550/23/829_ 25.040123933357260.00.3111.63 144.126.202.105http/1.1 8-1895192191/31/762C 16.921029381361.30.4910.40 161.35.155.246http/1.1localhost:443GET /about HTTP/1.1 9-1895194820/2/766_ 1.020148731242610.00.0511.20 137.184.222.107http/1.1 10-1895192350/30/817W 21.840033742010.00.3711.06 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gibson-eb-1-1969-1972-reverb-bass-guitar-guitar-mm-KEOY 11-1895187680/79/798W 57.800031770240.00.9910.85 85.208.96.201http/1.1www.mkandptfoods.com:443GET /m7869579985.html HTTP/1.1 12-1895188671/69/754C 55.120031028536.30.8010.44 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /reune.php?pfwsqjs41368jitems/etidm63csj.html HTTP/1.1 13-1895188690/71/753_ 51.550029909760.01.1110.65 161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 14-1895194930/0/806W 0.003035122160.00.0010.77 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=colorful-palm-tree-canvas-painting-rainbow-colour-decor 15-1895194350/12/801_ 5.580031623140.00.0811.08 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 16-1895190521/42/659C 36.550351226280346.20.568.00 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=kate-and-laurel-sylvie-coastal-coconut-palm-tree-beach- 17-1895193271/17/621C 16.480025825781.30.218.72 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 18-1895190840/33/664_ 30.210209628058070.00.559.74 3.224.220.101http/1.1www.thaidaoherb.com:443GET /43848319152365.html HTTP/1.1 19-1895192820/32/602W 17.890025887240.00.238.33 139.59.182.142http/1.1www.importantaccount.com:443GET /about HTTP/1.1 20-1895193420/15/520W 13.101022881720.00.188.40 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=custom-panels-palm-tree-picture-designs-art-painting-fo 21-1895194081/11/495C 7.220017567521.40.456.90 161.35.155.246http/1.1localhost:443GET /v2/_catalog HTTP/1.1 22-1895194950/1/289R 1.510351112336270.00.204.38 3.224.220.101http/1.1www.thaidaoherb.com:443 23-1895195051/3/182C 0.960110121141.40.002.37 138.197.88.136http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 24-1895195070/1/257_ 0.830376211972290.00.003.52 159.203.63.67http/1.1 25-1895195220/0/141W 0.00206130220.00.001.82 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=sunset-painting-palm-tree-original-art-trees-wall-art-m 26-1895195301/1/111C 0.050149255061847.50.051.62 52.70.240.171http/1.1www.thaidaoherb.com:443GET /43848319152127.html HTTP/1.1 27-1895195360/1/40W 0.00001857130.00.000.74 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=pin-by-becky-williams-art-on-my-art-palm-mm-ABkPQKHZ HT 28-1895195460/0/6_ 0.0000353680.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/101. 0.00304903336930.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/30. 0.0029980806520.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/13. 0.0030160494500.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1895-0/0/61. 0.00304802819260.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1895-0/0/44. 0.00292201303770.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/195. 0.0026999967390860.00.002.79 36.150.60.24http/1.1www.thaiquickservice.net:443GET / HTTP/1.1 35-1895-0/0/24. 0.00301201258990.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/5. 0.0030450127750.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/101. 0.00305004152930.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/21. 0.0029750718280.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/31. 0.00360801275910.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1895-0/0/5. 0.003723041080.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1895-0/0/97. 0.00323312584050640.00.001.68 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848319153023.html HTTP/1.1 42-1895-0/0/3. 0.003736017490.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/3. 0.0037280146420.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/49. 0.00356501464770.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 763subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 14 seconds, (range: 1...41)index usage: 27%, cache usage: 34%total entries stored since starting: 10184total entries replaced since starting: 0total entries expired since starting: 9421total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 9 hit, 2840 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-26 18:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eef99c9cd4Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 10:30:00 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 6 hours 27 minutes 47 seconds Server load: 0.84 0.70 0.85 Total accesses: 36666 - Total Traffic: 656.9 MB - Total Duration: 44150968 CPU Usage: u2886.65 s5354.78 cu52307900 cs12766900 - 280000% CPU load 1.58 requests/sec - 28.9 kB/second - 18.3 kB/request - 1204.14 ms/request 19 requests currently being processed, 3 idle workers WCRCRCCCCCCCRCCCCRC___............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1823194430/83/3133W 33.710035581420.01.2147.99 159.203.94.228http/1.1localhost:443GET /server-status HTTP/1.1 1-1823194561/79/3036C 30.450691359751716.01.1256.30 139.144.150.205http/1.1www.partymanagementthailand.comGET /.vscode/sftp.json HTTP/1.1 2-1823194690/68/2977R 28.401036430820.01.1147.07 159.203.94.228http/1.1localhost:443GET /about HTTP/1.1 3-1823195831/60/2749C 18.920133376251.31.5444.48 164.92.192.25http/1.1localhost:443GET /config.json HTTP/1.1 4-1823200190/20/2808R 6.55042534852610.00.1635.97 137.184.106.30http/1.1www.importantaccount.com:443 5-1823197211/47/2458C 16.691132717611.30.3850.99 178.62.73.12http/1.1localhost:443GET /.git/config HTTP/1.1 6-1823201121/12/2506C 3.920134284471.30.1055.88 142.93.153.3http/1.1localhost:443GET /login.action HTTP/1.1 7-1823200311/11/2457C 3.290028610061.30.1439.02 139.144.150.8http/1.1localhost:443GET /login.action HTTP/1.1 8-1823201861/2/2256C 0.011026493501.30.0048.93 178.62.73.12http/1.1localhost:443GET /.env HTTP/1.1 9-1823201381/6/2300C 1.460024579401.40.1035.23 159.203.94.228http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1823201931/3/1599C 0.010119148001.30.0137.77 178.62.73.12http/1.1localhost:443GET /config.json HTTP/1.1 11-1823201441/3/1691C 1.450021281921.40.0335.27 178.62.73.12http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 12-1823201500/4/1481R 0.731018742570.00.0127.16 217.138.195.27http/1.1 13-1823201571/5/585C 0.04107598891.30.0133.40 164.92.192.25http/1.1localhost:443GET /.git/config HTTP/1.1 14-1823201631/5/890C 0.061011744301.40.0111.43 164.92.192.25http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 15-1823201691/6/776C 0.48037799224.20.0112.67 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 16-1823201711/8/724C 1.32108615271.40.0312.46 142.93.153.3http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1823201940/2/472R 0.51004981830.00.016.86 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1823202061/3/499C 0.66004993331.40.014.95 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-1823202120/3/79_ 0.560581662160.00.010.63 172.69.150.84http/1.1www.singkansard.com:443GET /wp-admin/css/colors/light/admin.php HTTP/1.1 20-1823202180/2/314_ 0.48014494185420.00.022.33 107.189.11.215http/1.1www.nadapool.com:443GET /wp-login.php HTTP/1.1 21-1823202200/3/238_ 0.01003028650.00.004.54 193.42.32.105http/1.1www.nadapool.com:80GET /simple.php HTTP/1.0 22-1823-0/0/87. 0.005320750460.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/34. 0.007200271400.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/262. 0.0073102578000.00.002.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1823-0/0/26. 0.007300308520.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1823-0/0/8. 0.00721027750.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1823-0/0/42. 0.005300279830.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1823-0/0/2. 0.00717036190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1823-0/0/52. 0.004560299600.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1823-0/0/2. 0.00716038360.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1823-0/0/98. 0.002691236330.00.001.48 172.71.131.85http/1.1www.siamerp.com:443GET /wp-content/uploads/siteorigin-widgets/sow-button-flat-8d17 32-1823-0/0/3. 0.00735010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1823-0/0/2. 0.00728050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1823-0/0/2. 0.00740010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1823-0/0/2. 0.00736120.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1823-0/0/3. 0.00738030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1823-0/0/1. 0.00743000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1823-0/0/2. 0.00742010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1823-0/0/3. 0.00732010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1823-0/0/3. 0.00733010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1823-0/0/4. 0.00729020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 100subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 108 seconds, (range: 1...293)index usage: 3%, cache usage: 4%total entries stored since starting: 7862total entries replaced since starting: 0total entries expired since starting: 7762total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 250 hit, 13500 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 03:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee95f14d47Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 22:54:34 +07 Restart Time: Tuesday, 03-Oct-2023 04:02:11 +07 Parent Server Config. Generation: 1799 Parent Server MPM Generation: 1798 Server uptime: 18 hours 52 minutes 22 seconds Server load: 1.27 0.86 0.71 Total accesses: 99469 - Total Traffic: 2.4 GB - Total Duration: 158642203 CPU Usage: u2904.26 s5296.28 cu51826800 cs12662400 - 94900% CPU load 1.46 requests/sec - 36.5 kB/second - 24.9 kB/request - 1594.89 ms/request 13 requests currently being processed, 11 idle workers _WCCRWCW___RWR_R___C_W__.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-17989590/45/8364_ 25.0101653145696810.00.78244.38 162.158.106.164http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 1-179813850/16/8332W 10.7600130168250.00.24182.64 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%82%E0%B9%88%E0%B8%B2%E0%B8%A7-%E0%B8%88%E0%B8%94%E0 2-179814111/13/7908C 6.9600125784721.40.09172.37 144.126.198.24http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-17985911/86/7818C 37.8802131290444.61.75222.97 167.71.48.191http/1.1localhost:443GET /server-status HTTP/1.1 4-17984100/80/7453R 40.0600116583110.00.95219.40 45.55.193.222http/1.1 5-17989750/40/7442W 18.9860116162540.00.51174.06 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1696348468.11303091049194335937 6-17985991/84/7346C 35.5000114442201.41.17162.34 167.71.48.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-179815360/0/7172W 0.0050112264060.00.00147.68 27.254.96.168http/1.1www.importantaccount.com:443POST /wp-cron.php?doing_wp_cron=1696348468.65592288970947265625 8-179815450/2/6350_ 0.0800107840490.00.00147.61 165.232.76.155http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-179815460/1/6335_ 1.360334099969100.00.01128.63 104.238.129.99http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /wp-login.php HTTP/1.1 10-179815610/1/5726_ 0.000196859450.00.00179.68 142.93.153.3http/1.1 11-179815630/1/4981R 0.000176979550.00.00131.10 137.184.106.30http/1.1 12-179815660/1/3690W 0.010132059649080.00.0090.99 85.208.96.193http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 13-17989850/43/3036R 25.120145936150.00.7072.65 167.71.48.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 14-17989870/44/1957_ 20.730129457050.00.6639.73 164.92.192.25http/1.1 15-179815750/0/1509R 0.000019979540.00.0033.05 164.92.192.25http/1.1 16-179815890/1/870_ 0.000111989240.00.0021.50 144.126.198.24http/1.1localhost:443GET /about HTTP/1.1 17-179815950/1/240_ 0.00023349190.00.003.50 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 18-179815960/1/353_ 0.01015526140.00.007.09 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 19-179815991/2/301C 1.28005326592.70.017.40 161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 20-179816050/1/71_ 0.0401926200.00.000.67 45.55.193.222http/1.1 21-179816150/1/87W 0.00001029570.00.000.70 144.126.198.24http/1.1localhost:443GET /server-status HTTP/1.1 22-179816200/1/99_ 0.0101738540.00.000.73 137.184.106.30http/1.1 23-179816230/1/227_ 0.00014775970.00.002.73 167.71.48.191http/1.1localhost:443GET /about HTTP/1.1 24-1798-0/0/211. 0.00405003012730.00.002.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1798-0/0/174. 0.00499602258600.00.002.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1798-0/0/12. 0.0049920132980.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1798-0/0/99. 0.00397021931778170.00.001.26 185.191.171.7http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 28-1798-0/0/103. 0.0049940940790.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1798-0/0/7. 0.005001099910.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1798-0/0/12. 0.0050020247870.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1798-0/0/189. 0.00400503328680.00.002.39 128.199.61.251http/1.1localhost:443GET /_all_dbs HTTP/1.1 32-1798-0/0/190. 0.00399702308920.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1798-0/0/99. 0.00399713381712710.00.001.19 149.202.65.189http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%99 34-1798-0/0/123. 0.00500501056340.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1798-0/0/125. 0.00499301403490.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1798-0/0/11. 0.0050040217480.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1798-0/0/57. 0.0050081573560.00.001.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1798-0/0/10. 0.0050070121730.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1798-0/0/9. 0.0050090129820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1798-0/0/44. 0.0050060551430.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1798-0/0/9. 0.00375790116370.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1798-0/0/12. 0.00375680172750.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1798-0/0/5. 0.0037582076270.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1798-0/0/76. 0.003757501477960.00.001.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1798-0/0/5. 0.0037588020710.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1798-0/0/104. 0.0037323547812450.00.001.54 159.192.136.230http/1.1www.importantaccount.com:443POST //xmlrpc.php HTTP/1.1 47-1798-0/0/10. 0.0037567051750.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1798-0/0/101. 0.00373112271071880.00.001.39 54.36.148.103http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2022/10/Chondesign_logo_-174-215x215.jp 49-1798-0/0/5. 0.0037586022460.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child
Found on 2023-10-03 15:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eea472c2e6Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:19 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 32 seconds Server load: 0.88 1.13 1.25 Total accesses: 489 - Total Traffic: 2.6 MB - Total Duration: 214750 CPU Usage: u2759.58 s5256.93 cu51774600 cs12651800 - 7.e+7% CPU load 5.32 requests/sec - 29.2 kB/second - 5.5 kB/request - 439.162 ms/request 14 requests currently being processed, 2 idle workers CCRC_RCR_WRRWR.RC................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299411/46/46C 6.2102143721.30.220.22 74.207.237.46http/1.1localhost:443GET /login.action HTTP/1.1 1-1797299571/26/26C 6.7310417551.40.300.30 167.99.182.39http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1797301250/21/38R 1.970291080.00.050.09 54.89.200.90http/1.1www.importantaccount.com:443 3-1797301601/8/37C 1.1110130801.40.050.21 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1797301310/16/31_ 2.430463165700.00.050.19 74.207.237.114http/1.1www.pokaorganize.com:443GET /about HTTP/1.1 5-1797301720/4/15R 0.02014126040.00.020.22 54.89.200.90http/1.1www.importantaccount.com:443 6-1797300731/28/40C 5.9410127081.40.140.16 74.207.237.46http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1797301780/3/14R 0.03113155470.00.000.14 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/essential-addons-for-elementor-lite/ass 8-1797300250/44/44_ 1.570226360.00.150.15 167.99.182.39http/1.1localhost:443GET /server-status HTTP/1.1 9-1797300310/33/33W 2.920076450.00.070.07 161.35.176.95http/1.1localhost:443GET /server-status HTTP/1.1 10-1797301840/3/14R 0.010180130.00.020.16 54.89.200.90http/1.1www.importantaccount.com:443 11-1797300440/29/29R 4.30042299810.00.200.20 162.243.161.105http/1.1www.pokaorganize.com:443 12-1797301860/3/19W 0.010039120.00.020.04 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/uploads/2023/07/visa-application-form-smartphon 13-1797300520/36/36R 5.01036299340.00.150.15 54.89.200.90http/1.1www.importantaccount.com:443 14-1797-0/0/10. 0.0059011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300840/23/23R 6.930397168180.00.100.10 54.89.200.90http/1.1www.importantaccount.com:443 16-1797300921/20/20C 4.9011149851.40.160.16 161.35.176.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1797-0/0/6. 0.0044011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0052013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0046013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 52subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 237 seconds, (range: 207...293)index usage: 1%, cache usage: 2%total entries stored since starting: 52total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 265 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee854bd089Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:39 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 1 minute 8 seconds Server load: 3.97 4.26 4.33 Total accesses: 493 - Total Traffic: 4.6 MB - Total Duration: 540936 CPU Usage: u2476.09 s4256.62 cu40848700 cs9867590 - 7.46e+7% CPU load 7.25 requests/sec - 69.6 kB/second - 9.6 kB/request - 1097.23 ms/request 15 requests currently being processed, 7 idle workers C_CWCCW_CRWW__CWWW___W............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239901/32/32C 17.9701371981.40.410.41 146.190.160.11http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1527239920/39/39_ 17.860413435600.00.280.28 207.154.240.169http/1.1www.pokaorganize.com:443GET /about HTTP/1.1 2-1527242401/5/32C 0.0110365701.30.010.27 137.184.106.30http/1.1localhost:443GET /about HTTP/1.1 3-1527240120/35/35W 16.4300402720.00.370.37 172.68.18.26http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 4-1527242191/9/29C 2.7810331251.40.050.23 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1527240371/35/35C 17.9800373601.30.300.30 139.144.150.8http/1.1localhost:443GET /login.action HTTP/1.1 6-1527240450/35/35W 18.8300381480.00.350.35 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 7-1527240470/36/36_ 17.370658361360.00.300.30 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 8-1527240581/35/35C 19.1211405851.40.360.36 192.53.126.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1527241270/19/30R 9.900864369140.00.170.31 206.81.1.88http/1.1www.pokaorganize.com:443 10-1527240700/31/31W 18.7100395260.00.280.28 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 11-1527240760/40/40W 18.6700371970.00.340.34 207.154.240.169http/1.1www.pokaorganize.com:443GET /debug/default/view?panel=config HTTP/1.1 12-1527240860/28/28_ 17.650711356420.00.290.29 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 13-1527241040/31/31_ 14.950704307380.00.360.36 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-1527241421/16/16C 7.1314531378010.70.130.13 207.154.240.169http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 15-1527242320/3/3W 0.890017630.00.020.02 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 16-1527242470/2/2W 0.46008910.00.010.01 146.190.160.11http/1.1localhost:443GET /server-status HTTP/1.1 17-1527242530/1/1W 0.750015110.00.010.01 52.251.36.208http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 18-1527242600/1/1_ 0.000240.00.000.00 137.184.106.30http/1.1localhost:443GET /v2/_catalog HTTP/1.1 19-1527242620/1/1_ 0.000240.00.000.00 192.53.126.23http/1.1localhost:443GET /server-status HTTP/1.1 20-1527242680/1/1_ 0.000120.00.000.00 139.144.150.8http/1.1localhost:443GET /_all_dbs HTTP/1.1 21-1527242740/0/0W 0.000000.00.000.00 91.213.50.8http/1.1www.pokaorganize.com:443GET /.git/config HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 47subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 268 seconds, (range: 230...297)index usage: 1%, cache usage: 2%total entries stored since starting: 47total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 145 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee0b04e4c3Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:03 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 14 seconds Server load: 0.65 1.15 1.36 Total accesses: 155 - Total Traffic: 1.2 MB - Total Duration: 139264 CPU Usage: u1985.65 s3434.09 cu32339200 cs7737160 - 5.42e+7% CPU load 2.09 requests/sec - 16.7 kB/second - 8.0 kB/request - 898.477 ms/request 13 requests currently being processed, 0 idle workers WCWWWCCWCCRCR..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/14/14W 4.5500118860.00.160.16 143.198.72.96http/1.1www.pokaorganize.com:443GET / HTTP/1.1 1-129450831/5/9C 1.6302455810521.80.030.06 54.36.148.10http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 2-129449750/25/25W 5.1500125480.00.080.08 146.190.98.165http/1.1localhost:443GET /server-status HTTP/1.1 3-129449890/10/10W 5.9400214730.00.200.20 137.184.106.30http/1.1www.pokaorganize.com:443GET / HTTP/1.1 4-129449950/11/11W 4.8010136670.00.080.08 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1685726641.75789499282836914062 5-129450151/14/14C 5.040398219305.70.150.15 171.67.70.229http/1.1www.pokaorganize.com:443GET / HTTP/1.1 6-129450211/19/19C 3.710072261.30.150.15 146.190.98.165http/1.1localhost:443GET /about HTTP/1.1 7-129450280/15/15W 5.4000146670.00.170.17 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 8-129450301/15/15C 5.7501164152.60.060.06 146.190.98.165http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-129450541/14/14C 4.210192272.10.080.08 171.67.70.229http/1.1localhost:443GET / HTTP/1.1 10-129451900/2/3R 0.010150.00.000.00 139.144.96.150http/1.1localhost:443GET / HTTP/1.1 11-129452001/2/5C 0.000021081.40.000.02 146.190.98.165http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-129452060/1/1R 0.000000.00.000.00 171.67.70.229http/1.1www.pokaorganize.com:443 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 45subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 268 seconds, (range: 238...298)index usage: 1%, cache usage: 2%total entries stored since starting: 45total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 93 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17eef713b8c6Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:42 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 9 seconds Server load: 0.45 1.03 0.97 Total accesses: 281 - Total Traffic: 1.7 MB - Total Duration: 101593 CPU Usage: u1629.31 s2824.61 cu26678600 cs6409520 - 4.8e+7% CPU load 4.07 requests/sec - 25.4 kB/second - 6.2 kB/request - 361.541 ms/request 39 requests currently being processed, 1 idle workers CCRRCCRCRRRCWRWRCRCCCCCCCRRRRRRRRWRR_CWC.......... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416031/27/27C 6.4002131342.60.140.14 164.92.192.25http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-108416211/26/26C 4.7701101792.60.140.14 164.92.192.25http/1.1localhost:443GET /.env HTTP/1.1 2-108416230/28/28R 7.2511214030.00.140.14 64.227.126.135http/1.1www.pokaorganize.com:443 3-108416250/28/28R 4.9511138220.00.510.51 164.92.192.25http/1.1 4-108416271/20/20C 6.5111161742.60.300.30 172.104.102.196http/1.1localhost:443GET /info.php HTTP/1.1 5-108416521/39/39C 3.541184241.30.120.12 172.104.102.196http/1.1localhost:443GET /config.json HTTP/1.1 6-108416590/35/35R 3.410169870.00.120.12 64.227.126.135http/1.1www.pokaorganize.com:443 7-108416831/22/22C 2.241050612.60.140.14 172.104.102.196http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-108417060/19/19R 3.251162930.00.040.04 64.227.126.135http/1.1www.pokaorganize.com:443 9-108417460/4/4R 0.0311100.00.010.01 164.92.192.25http/1.1 10-108417540/3/3R 0.021180.00.000.00 164.92.192.25http/1.1 11-108417561/2/2C 0.011162.70.000.00 172.104.102.196http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-108417670/1/1W 0.010040.00.000.00 65.20.75.229http/1.1www.chonlateepro.com:443POST /xmlrpc.php HTTP/1.1 13-108417690/1/1R 0.011240.00.000.00 164.92.192.25http/1.1 14-108417750/1/1W 0.010040.00.000.00 164.92.192.25http/1.1localhost:443GET /server-status HTTP/1.1 15-108417810/2/2R 0.011050.00.000.00 164.92.192.25http/1.1 16-108417931/1/1C 0.011242.60.000.00 172.104.102.196http/1.1localhost:443GET /.env HTTP/1.1 17-108417950/5/5R 0.011080.00.010.01 64.227.126.135http/1.1www.pokaorganize.com:443 18-108418011/1/1C 0.011242.60.000.00 172.104.102.196http/1.1localhost:443GET /telescope/requests HTTP/1.1 19-108418071/3/3C 0.021181.30.000.00 172.104.102.196http/1.1localhost:443GET /login.action HTTP/1.1 20-108418131/2/2C 0.021151.30.000.00 172.104.102.196http/1.1localhost:443GET /about HTTP/1.1 21-108418191/1/1C 0.001242.70.000.00 172.104.102.196http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 22-108418291/2/2C 0.020042.50.010.01 164.92.192.25http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 23-108418351/1/1C 0.011242.60.000.00 172.104.102.196http/1.1localhost:443GET /.git/config HTTP/1.1 24-108418411/2/2C 0.010182.60.000.00 164.92.192.25http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 25-108418430/1/1R 0.001000.00.000.00 164.92.192.25http/1.1 26-108418490/0/0R 0.001000.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 27-108418550/0/0R 0.001000.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 28-108418610/0/0R 0.001000.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 29-108418670/0/0R 0.000000.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 30-108418730/0/0R 0.000000.00.000.00 146.190.160.11http/1.1 31-108418790/1/1R 0.000360.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 32-108418850/0/0R 0.000000.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 33-108418910/0/0W 0.000000.00.000.00 5.8.33.166http/1.1www.chonlateepro.com:443POST /xmlrpc.php HTTP/1.1 34-108418970/1/1R 0.000110.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 35-108419030/0/0R 0.000000.00.000.00 64.227.126.135http/1.1www.pokaorganize.com:443 37-108419101/1/1C 0.000010.20.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-108419150/0/0W 0.000000.00.000.00 94.46.173.69http/1.1www.chonlateeinternational.com:POST /xmlrpc.php HTTP/1.1 39-108419181/1/1C 0.000242.70.000.00 164.92.192.25http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 20subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 279 seconds, (range: 231...299)index usage: 0%, cache usage: 0%total entries stored since starting: 20total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 152 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee37b9d7d0Apache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:30 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 34 seconds Server load: 1.64 1.58 1.47 Total accesses: 211 - Total Traffic: 983 kB - Total Duration: 103510 CPU Usage: u1265.5 s2310.98 cu21800400 cs5275950 - 7.96e+7% CPU load 6.21 requests/sec - 28.9 kB/second - 4770 B/request - 490.569 ms/request 20 requests currently being processed, 0 idle workers CRCCRCCWCRWCRCCCRWRR.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775491/14/14C 5.0611162002.70.070.07 194.195.219.36http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-84775500/27/27R 4.000196370.00.080.08 161.35.153.48http/1.1localhost:443GET /.env HTTP/1.1 2-84775521/19/19C 2.890157342.60.070.07 170.187.164.222http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-84777311/7/14C 0.061159912.60.010.07 194.195.219.36http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-84775790/23/23R 4.260287260.00.100.10 194.195.219.36http/1.1localhost:443GET /server-status HTTP/1.1 5-84776001/9/9C 3.321175592.70.130.13 194.195.219.36http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 6-84776071/10/10C 2.511046892.60.050.05 194.195.219.36http/1.1localhost:443GET /info.php HTTP/1.1 7-84776090/14/14W 3.100072360.00.140.14 5.253.18.199http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 8-84776231/11/11C 3.971177582.60.110.11 194.195.219.36http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-84776340/23/23R 2.150059700.00.050.05 170.187.164.222http/1.1 10-84776360/14/14W 2.7200193960.00.050.05 66.36.234.242http/1.1www.chonlateebusiness.com:443GET /kcfinder/browse.php?type=image HTTP/1.1 11-84777201/19/19C 0.1601302.60.020.02 170.187.164.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 12-84777330/9/9R 1.210238445620.00.030.03 170.187.164.222http/1.1 13-84777461/2/2C 0.021162.60.000.00 194.195.219.36http/1.1localhost:443GET /.git/config HTTP/1.1 14-84777531/2/2C 0.020152.70.010.01 170.187.164.222http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 15-84777551/1/1C 0.001242.60.000.00 194.195.219.36http/1.1localhost:443GET /.env HTTP/1.1 16-84777670/0/0R 0.000000.00.000.00 165.22.205.214http/1.1 17-84777690/0/0W 0.000000.00.000.00 170.187.164.222http/1.1localhost:443GET /server-status HTTP/1.1 18-84777750/0/0W 0.000000.00.000.00 170.187.164.222http/1.1localhost:443GET / HTTP/1.1 19-84777810/0/0R 0.000000.00.000.00 170.187.164.222http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 14subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 291 seconds, (range: 280...298)index usage: 0%, cache usage: 0%total entries stored since starting: 14total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 116 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312c3b17ee2c3b17ee0a21deecApache Status Apache Server Status for mail.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:12 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 10 seconds Server load: 2.42 1.81 1.59 Total accesses: 198 - Total Traffic: 664 kB - Total Duration: 111451 CPU Usage: u651.19 s1257.92 cu12780600 cs3072970 - 1.59e+8% CPU load 19.8 requests/sec - 66.4 kB/second - 3434 B/request - 562.884 ms/request 23 requests currently being processed, 10 idle workers CC_CCCC_CRCR.C____CC._CRC.CR_CR_C_WC.............. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799541/10/10C 1.901256592.70.050.05 212.71.255.156http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 1-43799721/7/7C 2.200161652.60.110.11 74.207.251.118http/1.1localhost:443GET /.git/config HTTP/1.1 2-43799780/25/25_ 2.20054259450.00.030.03 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 3-43799881/10/10C 1.190041011.30.010.01 212.71.255.156http/1.1localhost:443GET /config.json HTTP/1.1 4-43799941/8/8C 1.880053732.60.020.02 74.207.251.118http/1.1localhost:443GET /.env HTTP/1.1 5-437100011/27/27C 0.951134432.70.120.12 212.71.255.156http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-437100151/10/10C 1.310023741.30.110.11 212.71.255.156http/1.1localhost:443GET /about HTTP/1.1 7-437100210/6/6_ 1.140022600.00.010.01 167.94.138.119http/1.1localhost:80GET / HTTP/1.0 8-437100281/3/3C 0.640030111.30.000.00 212.71.255.156http/1.1localhost:443GET /login.action HTTP/1.1 9-437100340/8/8R 0.730018120.00.010.01 167.94.138.119http/1.1 10-437100361/7/7C 0.641033012.60.010.01 212.71.255.156http/1.1localhost:443GET /info.php HTTP/1.1 11-437100420/7/7R 0.140090.00.010.01 172.70.206.226http/1.1www.siamerp.com:443 12-437-0/0/3. 0.002027530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-437100551/4/4C 1.181027072.60.010.01 212.71.255.156http/1.1localhost:443GET /.env HTTP/1.1 14-437100650/7/7_ 1.18057023830.00.010.01 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 15-437100670/2/2_ 0.55060012000.00.000.00 139.177.198.221http/1.1 16-437100730/4/4_ 0.61066413320.00.000.00 74.207.251.118http/1.1 17-437100790/3/3_ 0.59062012440.00.000.00 139.177.198.221http/1.1 18-437100851/3/3C 0.680114582.60.010.01 74.207.251.118http/1.1localhost:443GET /.DS_Store HTTP/1.1 19-437100911/7/7C 1.090023152.70.010.01 74.207.251.118http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 20-437-0/0/2. 0.001033380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-437101090/2/2_ 0.660130280.00.010.01 167.94.138.119http/1.1localhost:443GET / HTTP/1.1 22-437101151/2/2C 0.670033532.30.010.01 74.207.251.118http/1.1localhost:443GET / HTTP/1.1 23-437101210/2/2R 0.650035420.00.010.01 212.71.255.156http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 24-437101271/3/3C 1.260243572.50.010.01 74.207.251.118http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 25-437-0/0/4. 0.000028980.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-437101341/3/3C 1.240143912.70.010.01 74.207.251.118http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 27-437101360/2/2R 0.631033600.00.000.00 74.207.251.118http/1.1 28-437101410/2/2_ 0.670029430.00.010.01 45.79.148.46http/1.1 29-437101431/3/3C 1.240044302.70.010.01 74.207.251.118http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 30-437101480/2/2R 0.650235160.00.010.01 74.207.251.118http/1.1 31-437101500/2/2_ 0.710016430.00.000.00 212.71.255.156http/1.1localhost:443GET /api/search?folderIds=0 HTTP/1.1 32-437101561/2/2C 0.621022122.60.000.00 212.71.255.156http/1.1localhost:443GET /.git/config HTTP/1.1 33-437101630/2/2_ 0.620032510.00.000.00 212.71.255.156http/1.1localhost:443GET /v2/_catalog HTTP/1.1 34-437101730/2/2W 0.640028750.00.000.00 74.207.251.118http/1.1localhost:443GET /server-status HTTP/1.1 35-437101791/2/2C 0.631034532.60.000.00 212.71.255.156http/1.1localhost:443GET /telescope/requests HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 291...299)index usage: 0%, cache usage: 0%total entries stored since starting: 12total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 110 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 12:45
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56420c0f9bApache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 19:45:40 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 9 hours 44 minutes 19 seconds Server load: 2.05 2.01 2.00 Total accesses: 1849427 - Total Traffic: 23.8 GB - Total Duration: 2141105945 CPU Usage: u226.22 s121.31 cu32089.3 cs2210.25 - 1.41% CPU load .754 requests/sec - 10.2 kB/second - 13.5 kB/request - 1157.71 ms/request 3 requests currently being processed, 125 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes230000 229661no0yes032000 329394no0yes131000 529374no0yes032000 Sum400 3125000 _R__________________________W___................................ ___________________________________________________________R____ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/47/14795_ 16.7770160260970.00.15193.78 161.35.155.246http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/46/15289R 15.3580139013460.00.11198.96 167.99.184.41http/1.1localhost:80GET / HTTP/1.1 0-92293730/49/14862_ 16.8110150309550.00.17192.74 162.243.186.177http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/42/15035_ 16.7710145875100.00.09185.97 159.65.138.217http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/44/14942_ 15.8150147711710.00.18185.45 159.203.44.43http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/40/15167_ 15.0340156649150.00.13188.54 161.35.27.144http/1.1 0-92293730/38/14838_ 15.4220145588580.00.16200.26 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/37/15144_ 16.8110150182050.00.09187.59 104.236.193.132http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/39/15106_ 16.6840145226960.00.10229.90 162.243.186.177h2localhost:443[0/0] Software caused connection abort 0-92293730/47/15241_ 15.3420148853430.00.18194.90 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/45/14805_ 16.7860154393260.00.10200.69 159.65.138.217http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/42/14815_ 15.4010147156150.00.09195.46 139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/54/14685_ 15.4250137182760.00.17185.53 167.99.184.41http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/46/14837_ 15.4010169086520.00.11186.03 162.243.186.177http/1.1 0-92293730/41/15787_ 16.7770141615190.00.12187.78 159.65.138.217http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/48/14840_ 16.8110165341230.00.12182.51 161.35.190.56http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/53/14892_ 15.4220143405090.00.13206.39 104.236.193.132http/1.1 0-92293730/45/14952_ 16.8020144939950.00.14189.32 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-92293730/41/14769_ 16.6830160388350.00.07200.55 128.199.62.55http/1.1localhost:80GET / HTTP/1.1 0-92293730/46/14991_ 15.3660144639370.00.14193.82 138.68.133.118http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/47/14984_ 14.7528181495960.00.19193.46 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/40/15005_ 15.4310147053760.00.11204.09 139.144.150.8http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/47/15465_ 16.8020150748880.00.18188.30 104.236.193.132http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/41/14672_ 15.7800138765320.00.14190.19 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/55/14979_ 15.8060162205880.00.13186.91 165.22.74.203http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/49/14652_ 16.8040135981660.00.18197.03 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/45/15152_ 16.7710144713490.00.08194.53 161.35.155.246http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/45/14930_ 16.8020159187530.00.07213.31 161.35.190.56http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293731/51/14738W 16.7700152174400.00.13175.94 104.236.193.132http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/34/15182_ 15.8060135139130.00.11225.15 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-92293730/53/14672_ 16.7860155573070.00.07199.15 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/41/14931_ 16.7940145815130.00.19185.18 161.35.190.56http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15731. 0.00559260138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00559260136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00559260174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00559260150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00559260146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00559260134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00559260172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00559260165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00559260127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00559260152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00559260148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00559260159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00559260159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00559260137016410.00.00183.04 159.223.102.13http/
Found on 2024-02-02 12:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56cd51723fApache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:42:16 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 40 minutes 55 seconds Server load: 3.47 3.17 3.02 Total accesses: 865233 - Total Traffic: 11.7 GB - Total Duration: 1072930614 CPU Usage: u108.23 s12.4 cu14756 cs775.09 - 8.41% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1240.05 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 14311no13yes329008 215008no13yes527007 Sum2026 8560015 ................................___W___________________R_W______ ___W___W____W_W_W_______________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/6891. 0.00266092123140.00.00101.02 203.170.192.183http/1.1www.chonlateeaa.com:443POST /wp-cron.php?doing_wp_cron=1704609224.54213690757751464843 0-7-0/0/7350. 0.00266112572282630.00.00102.14 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6939. 0.0026689178790990.00.00100.26 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7174. 0.00266214775847660.00.0092.54 85.208.96.210http/1.1www.chonlateeboi.com:443GET /47585lrvyeti.html HTTP/1.1 0-7-0/0/7138. 0.00266105876261220.00.0089.56 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /jwyfijs-12086litems/etidm52w.html HTTP/1.1 0-7-0/0/7275. 0.0026684188932560.00.0096.14 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7088. 0.0026683970622910.00.00106.56 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2017idtuitems/eti HTTP/1.1 0-7-0/0/7166. 0.0026684673910630.00.0093.68 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ivxfijs-30857keti.html HTTP/1.1 0-7-0/0/7317. 0.0026690575885040.00.00143.62 40.77.167.2h2www.chonlateefbc.com:443GET /?m=cma-dishmachines-180uc-high-temp-undercounter-dishwashe 0-7-0/0/7203. 0.0026688878309230.00.0090.77 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6992. 0.0026644528187048130.00.00111.98 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6758. 0.002661184189200.00.0087.93 66.249.71.36http/1.1www.mgrandstructure.com:443GET /ofpm/project-sekai-mod-apk.html HTTP/1.1 0-7-0/0/6811. 0.0026685063912670.00.0090.61 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2045idtuetidm25.html HTTP/1.1 0-7-0/0/7015. 0.0026684094751170.00.0095.78 47.128.57.61http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/logo_Home.png HTTP/2.0 0-7-0/0/7685. 0.0026676672332400.00.0096.84 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6875. 0.0026688994028910.00.0088.35 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7000. 0.0026684175194130.00.0090.50 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cfrfijs-30435eitems/etidm.htm HTTP/1.1 0-7-0/0/7105. 0.0026684871642070.00.0094.88 23.22.35.162http/1.1www.chonlateeboi.com:443GET /19415rbhsetidm36ts.html HTTP/1.1 0-7-0/0/7067. 0.0026691788661280.00.0088.94 185.191.171.19http/1.1www.chonlateefood.com:443GET /getid/zeo12115nheeitems HTTP/1.1 0-7-0/0/7136. 0.0026684774949870.00.0096.17 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B8%AD%E0% 0-7-0/0/7171. 0.00266845115334180.00.0099.43 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 0-7-0/0/6851. 0.00266105678741500.00.0091.77 185.191.171.19http/1.1www.chonlateeboi.com:443GET /6178zvqcetid HTTP/1.1 0-7-0/0/7407. 0.0026684486534200.00.0098.18 3.224.220.101http/1.1www.chonlateeboi.com:443GET /19448rbhsitems/etidm98arp.html HTTP/1.1 0-7-0/0/6945. 0.0026669070103160.00.0098.07 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6996. 0.0026644092090520.00.0088.48 208.109.224.138http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7163. 0.0026684463458100.00.0091.23 47.128.57.61h2www.xn--12cx2bef7bl0boq4ch6gugw[2/2] done: stream 3, GET /wp-content/uploads/2021/01/logo_Home 0-7-0/0/6983. 0.0026684177138920.00.0099.07 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qifivak-4293sitems/etidm68.htm HTTP/1.1 0-7-0/0/7033. 0.00266123687774620.00.00120.10 149.91.122.223http/1.1www.chonlateefood.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/6856. 0.0026684776147840.00.0086.02 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7160. 0.002661078931820.00.00125.06 203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704609224.08053588867187500000 0-7-0/0/6794. 0.0026684484918420.00.0098.44 3.224.220.101http/1.1www.chonlateeboi.com:443GET /30278lrvyitems/etidm57o.html HTTP/1.1 0-7-0/0/7169. 0.0026690676482950.00.0091.69 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 1-743110/177/6988_ 79.731078169580.01.7890.42 137.184.150.232http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/222/6765_ 79.68066378797380.02.6486.16 208.109.34.70http/1.1www.ozonepluswater.net:443GET /wp-login.php HTTP/1.1 1-743110/149/6709_ 79.7800105345740.01.4685.91 138.68.133.118http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-743111/175/6469W 79.570083859760.01.5785.05 52.70.240.171http/1.1www.chonlateeboi.com:443GET /26091mywgitems/etidm.htm HTTP/1.1 1-743110/159/6643_ 79.731080194240.01.6398.38 159.203.182.222http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/239/6754_ 79.700078210170.04.2390.55 159.203.182.222http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/225/6745_ 79.78092597153540.04.4187.83 203.170.192.183http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 1-743110/160/6779_ 79.731090618180.01.5289.93 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1 1-743110/222/6884_ 79.780060843660.01.7287.84 137.184.150.232http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/141/6698_ 79.72185083225900.01.4892.54 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /sfhfijs-45739uitems/etidm HTTP/1.1 1-743110/97/6419_ 79.431990968030.01.1290.68 139.144.150.205http/1.1localhos
Found on 2024-01-07 06:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c569cf4d156Apache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 03:47:54 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 17 hours 46 minutes 33 seconds Server load: 2.52 2.61 2.65 Total accesses: 314397 - Total Traffic: 4.4 GB - Total Duration: 288973144 CPU Usage: u221.83 s13.87 cu5056.5 cs270.41 - 8.69% CPU load 4.91 requests/sec - 72.5 kB/second - 14.7 kB/request - 919.135 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 122317no11yes329008 227923no2yes626000 Sum2013 955008 ................................___W________R______________W____ _W_______________W___R___R___R_R................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2-0/0/3194. 0.00306942528768890.00.0047.11 194.58.121.229http/1.1www.rooffurnish.com:443POST /wp-login.php HTTP/1.1 0-2-0/0/3455. 0.003069107724901260.00.0045.28 85.208.96.202http/1.1www.krongthongsecurity.com:443GET /htygzna229132litems/etidm14ugl.html HTTP/1.1 0-2-0/0/3118. 0.00306983437593330.00.0053.55 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?mjiecaw-286155vetidm4.htm HTTP/1.1 0-2-0/0/3380. 0.00306963627408070.00.0042.71 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5341tbrmitems/etidm45 HTTP/1.1 0-2-0/0/3237. 0.00306984125511080.00.0040.44 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ufshsbr-320093fetidm39hsf HTTP/1.1 0-2-0/0/3477. 0.00306983932480400.00.0043.86 52.167.144.24h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3259. 0.00306984025454740.00.0055.68 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ajwecaw-316459jetidm8 HTTP/1.1 0-2-0/0/3286. 0.00306940226514000.00.0042.47 91.92.252.141http/1.1www.ltclevelup.com:443GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3334. 0.00306983926277530.00.0084.92 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uuqaonh-122935detidm92hhd HTTP/1.1 0-2-0/0/3256. 0.00306983825449070.00.0042.02 3.224.220.101http/1.1www.chonlateeboi.com:443GET /11370ztiaetid.htm HTTP/1.1 0-2-0/0/3173. 0.003069101128795120.00.0038.86 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?eetvrsm-293297geti.html HTTP/1.1 0-2-0/0/3146. 0.003069407425688950.00.0040.21 66.249.69.228http/1.1www.chonlateenextbiz.com:443GET /sitemap3.xml HTTP/1.1 0-2-0/0/3096. 0.00306984525479180.00.0042.08 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5335tbrmitems/etidm69fm HTTP/1.1 0-2-0/0/3367. 0.00306983736720350.00.0045.96 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?liavrsm-295332netidm4.htm HTTP/1.1 0-2-0/0/3430. 0.00306984328925500.00.0045.91 85.208.96.193http/1.1www.chonlateeadmin.com:443GET /mnbwaok-38297oeti.html HTTP/1.1 0-2-0/0/3138. 0.003069030630950.00.0040.43 195.211.77.142http/1.1localhost:443HEAD / HTTP/1.1 0-2-0/0/3141. 0.003069109829741030.00.0040.23 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?jiyvrsm-295304litems/etidm19wvl.html HTTP/1.1 0-2-0/0/3394. 0.003069122126703460.00.0044.77 52.167.144.18h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3301. 0.00306984324881610.00.0042.98 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?lmahlzs-466netid HTTP/1.1 0-2-0/0/3155. 0.003069240229467670.00.0046.16 40.77.167.255h2www.chonlateeaa.com:443[0/0] init 0-2-0/0/3247. 0.00306984224826040.00.0050.02 52.70.240.171http/1.1www.chonlateeboi.com:443GET /37327bzlnitems/etidm82rn HTTP/1.1 0-2-0/0/3261. 0.003069408127242670.00.0046.03 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /sitemap16.xml HTTP/1.1 0-2-0/0/3606. 0.00306983325294670.00.0045.78 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?vfkvrsm-295862xitems/etidm84i.html HTTP/1.1 0-2-0/0/3167. 0.00306984525092350.00.0040.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /38206ztiaetidm39m HTTP/1.1 0-2-0/0/3161. 0.00306984225364790.00.0040.26 52.70.240.171http/1.1www.chonlateeboi.com:443GET /13039ztiaitems/etidm67na HTTP/1.1 0-2-0/0/3165. 0.00306988326235840.00.0040.77 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?hiwvrsm-306404jitems/etidm1.html HTTP/1.1 0-2-0/0/3226. 0.00306989028272940.00.0051.28 40.77.167.8h2www.chonlateenextbiz.com:443GET /g2016469.shtml HTTP/2.0 0-2-0/0/3171. 0.00306983831863910.00.0070.95 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-295296detidm28ovd.htm HTTP/1.1 0-2-0/0/3109. 0.003069025398020.00.0039.01 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3454. 0.00306984824072460.00.0079.52 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ikfqxjd-247957setidm79vx.html HTTP/1.1 0-2-0/0/3133. 0.00306983727805250.00.0047.82 3.224.220.101http/1.1www.chonlateeboi.com:443GET /1944gcmpetidm89ugj.htm HTTP/1.1 0-2-0/0/3519. 0.003069028024720.00.0043.22 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/themes/include.php HTTP/1.1 1-2223170/235/2558_ 123.9101119226140.02.9233.19 128.199.61.251http/1.1localhost:443GET /server-status HTTP/1.1 1-2223170/203/2303_ 123.8802321233660.02.6229.64 27.254.96.168http/1.1www.partymanagementthailand.comPOST /wp-cron.php?doing_wp_cron=1704487673.38875794410705566406 1-2223170/223/2450_ 123.601019309030.02.6433.32 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 1-2223171/201/2290W 123.660020092840.02.7430.63 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?fzkqgmy-326266xetidm6 HTTP/1.1 1-2223170/165/2294_ 123.771028078970.02.0534.56 178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/261/2446_ 123.860018350260.03.6532.04 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2223170/196/2331_ 122.950419020680.02.4428.81 162.243.186.177h2localhost:443[0/0] Software caused connection abort 1-2223170/222/2407_ 123.59184519501540.03.8533.31 23.22.35.162http/1.1www.chonlateeboi.com:443GET /28775biwxetidm98tx.html HTTP/1.1 1-2223170/222/2385_ 123.91054019281340.02.8032.78 217.113.194.213http/1.1www.mkandptfoods.com:443GET /etajrvhu/fat-girl-car-wash-nude.html HTTP/1.1 1-2223170/192/2304_ 123.820018353620.02.3929.93 134.122.89.242http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-2223170/229/2347_ 123.880018428920.02.6834.66 178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2223170/212/2461_ 123.880019918610.02.6433.86 74.207.237.46http/1.1
Found on 2024-01-05 20:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56083fca7bApache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 03:31:55 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 43 Parent Server MPM Generation: 42 Server uptime: 11 days 3 hours 8 minutes 57 seconds Server load: 0.22 0.36 0.46 Total accesses: 4408810 - Total Traffic: 56.5 GB - Total Duration: 4157793474 CPU Usage: u199.14 s46.79 cu79452.5 cs4157.09 - 8.72% CPU load 4.58 requests/sec - 61.6 kB/second - 13.4 kB/request - 943.065 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 017105no4yes626001 117528no2yes230000 Sum206 856001 ____R______W____R_R___R___R______________W__________________W___ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-42171050/106/39544_ 75.421688358813680.01.10500.60 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?125224himsetidm77ihx HTTP/1.1 0-42171050/126/38950_ 75.610694366081370.02.49492.35 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?89538himsetid.htm HTTP/1.1 0-42171050/175/39371_ 75.421893400868330.06.05508.69 85.208.96.211http/1.1www.chonlateeadmin.com:443GET /zbouxox-15742betidm49m HTTP/1.1 0-42171050/102/39341_ 75.1810389564440.01.07513.60 66.249.64.71http/1.1www.twinbuilt.co.th:443GET /?e=march-madness-bracket-2021-printable-ncaa-tournament-ch 0-42171050/112/39863R 75.7010371008330.01.21567.52 161.35.27.144http/1.1localhost:443GET / HTTP/1.1 0-42171050/122/38936_ 75.590864398977350.02.49493.22 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xeqihro-20082detidm31krd HTTP/1.1 0-42171050/119/39257_ 75.330928402711230.01.29494.33 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?fnyazkf-25940letid.htm HTTP/1.1 0-42171050/118/40027_ 75.240860367696700.01.26502.11 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?125193himsitems/eti.htm HTTP/1.1 0-42171050/118/38986_ 75.330881379846060.01.24510.14 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-42171050/116/39386_ 75.7300368028910.01.28502.75 139.59.230.191http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-42171050/129/39007_ 75.830862384736370.01.45474.61 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?89585himseti.html HTTP/1.1 0-42171051/109/39039W 75.7000369080660.01.33523.71 139.59.230.191http/1.1localhost:443GET /server-status HTTP/1.1 0-42171050/127/38952_ 75.7300375198440.01.36475.71 139.59.230.191http/1.1localhost:443GET /about HTTP/1.1 0-42171050/131/39128_ 75.171887407551330.01.62504.31 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?lraecaw-255864netidm90yen.htm HTTP/1.1 0-42171050/117/39302_ 75.7200380322440.01.49493.75 139.59.230.191http/1.1localhost:443GET / HTTP/1.1 0-42171050/117/38996_ 74.5800372037230.01.40548.52 128.199.62.55http/1.1 0-42171050/118/39968R 75.6910375077730.01.27528.08 52.70.240.171http/1.1www.krongthongsecurity.com:443 0-42171050/119/39486_ 75.330678366756660.01.23486.36 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jnyecaw-258202letid HTTP/1.1 0-42171050/146/39534R 75.701656367925080.01.52510.55 54.36.149.53http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1 0-42171050/110/39767_ 75.7300384591510.01.54547.00 167.99.8.63http/1.1localhost:80GET / HTTP/1.1 0-42171050/196/39196_ 75.7100364536740.02.36516.18 159.203.63.67http/1.1localhost:443GET / HTTP/1.1 0-42171050/103/39324_ 74.950893388049850.01.05507.29 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-42171050/111/39098R 75.671396408434000.01.20517.27 66.249.71.3http/1.1 0-42171050/200/38488_ 75.431828361787830.01.50477.59 85.208.96.210http/1.1www.chonlateefood.com:443GET /getid/xxm47707oeuxitems HTTP/1.1 0-42171050/170/39499_ 75.7200371552280.01.54523.06 144.126.198.24http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-42171050/122/38745_ 75.7100388751980.01.65473.99 167.99.8.63http/1.1localhost:80GET / HTTP/1.1 0-42171050/135/39467R 74.4811373209540.02.93588.04 128.199.62.55http/1.1 0-42171050/111/38668_ 75.7100370337920.01.23512.98 167.99.8.63http/1.1localhost:80GET / HTTP/1.1 0-42171050/103/39261_ 75.610741411881240.01.30526.27 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-42171050/99/39236_ 74.271825375236920.01.17506.91 217.113.194.101http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-42171050/103/39229_ 75.200955370183200.01.17496.23 139.59.230.191http/1.1 0-42171050/113/38972_ 75.320880378134470.01.67541.02 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?95463himsitems/etidm36rs.htm HTTP/1.1 1-42175280/99/40400_ 59.290926375889300.01.13509.81 128.199.62.55http/1.1 1-42175280/122/40305_ 59.490689384681990.01.61552.35 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ewxfooj-37067kitems/eti.htm HTTP/1.1 1-42175280/89/40094_ 59.4800385604530.00.92559.71 159.223.108.26http/1.1localhost:443GET / HTTP/1.1 1-42175280/87/40324_ 58.7000393767480.01.09567.22 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /pawgzna22778jetid.htm HTTP/1.1 1-42175280/97/41202_ 58.930872365683080.01.09628.09 139.59.230.191http/1.1 1-42175280/102/39884_ 59.2900362748970.02.17573.51 139.59.230.191h2localhost:443[0/0] Software caused connection abort 1-42175280/79/40018_ 59.5200365433380.00.90534.50 144.126.198.24http/1.1localhost:80GET /about HTTP/1.1 1-42175280/94/40483_ 59.5300389411980.01.19515.97 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-42175280/86/40174_ 59.5000377987020.00.99505.42 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-42175281/97/40276W 59.1700370369040.01.06514.88 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?drsecaw-206612fitems/etidm7.html HTTP/1.1 1-42175280/75/40814_ 59.5300366892620.00.92538.59 178.128.151.41http/1.1localhost:80GET / HTTP/1.1 1-42175280/83/40649_ 59.3800371897560.00.96506.15 178.128.151.41http/1.1localhost:80\x16\x03\x01\x01\x04\x01 1-42175280/97/40525_ 59.3600363444810.01.13502.48 159.203.63.67h2localhost:443[0/0] Software caused connection abort 1-4217528
Found on 2023-12-11 20:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56ca50b3b2Apache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:31 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 32 seconds Server load: 2.72 2.08 1.70 Total accesses: 696994 - Total Traffic: 9.7 GB - Total Duration: 517714387 CPU Usage: u82.52 s12.5 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.782 ms/request 18 requests currently being processed, 110 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no7yes329103 330151no8yes428002 630155no20yes5271010 730156no0yes626000 Sum4035 181102015 ................................................................ _______R_____W_________________R___R___________R_WW_____________ ................................................................ _______R__W_____W________W__R_______W_R________R___RR__________R ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0068689745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0068696045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0068680245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0068695746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00686167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0068694846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00686145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0068692346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00686107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00686104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0068670146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0068689947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0068672146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00686104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00686108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0068646846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0068670945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0068684445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0068671246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0068670946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00686046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0068649045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0068693646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0068686945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006864146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0068673844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00686722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0068696345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00686107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00686146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00686778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0068696044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0068686344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0068647946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00686150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0068667645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0068645143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00686044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00686232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0068658244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00686183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00686822744746080.00.0079.16
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351bbfd9654Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:49:49 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 2 hours 26 minutes 3 seconds Server load: 0.61 0.55 0.55 Total accesses: 10642 - Total Traffic: 162.2 MB - Total Duration: 23115990 CPU Usage: u3264.76 s5863.43 cu55530100 cs13588500 - 789000% CPU load 1.21 requests/sec - 19.0 kB/second - 15.6 kB/request - 2172.15 ms/request 11 requests currently being processed, 13 idle workers ____C_C_CC___WRC__C__CWR.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964101610/52/941_ 28.350120637760.00.4210.32 159.65.138.217http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 1-1964100330/69/901_ 39.550120760340.01.2312.66 139.144.150.45http/1.1localhost:443GET /about HTTP/1.1 2-1964106990/4/866_ 0.930118823130.00.0211.18 143.110.156.182http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1964101710/47/872_ 30.540117899420.00.3614.02 159.65.138.217http/1.1localhost:443GET /config.json HTTP/1.1 4-1964107211/2/776C 0.001117035361.40.009.85 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1964107270/1/771_ 0.000217348240.00.008.82 143.198.72.96http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-1964107401/1/914C 0.001219985531.30.0013.46 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 7-1964107330/1/707_ 0.000017196110.00.008.26 159.65.138.217http/1.1localhost:443GET /.git/config HTTP/1.1 8-1964107421/1/800C 0.001118022021.30.009.72 143.198.72.96http/1.1localhost:443GET /about HTTP/1.1 9-196498181/90/615C 50.450112811003.90.857.46 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 10-196498280/85/542_ 47.34008791300.00.925.90 147.182.130.98http/1.1 11-196498370/74/568_ 48.040582112416300.01.067.91 147.182.130.98http/1.1 12-196498430/82/281_ 51.08005765480.00.695.71 143.198.72.96http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 13-196498500/72/307W 41.291008089430.01.375.59 139.59.182.142http/1.1www.partymanagementthailand.comGET / HTTP/1.1 14-1964107520/3/158R 0.01013406020.00.001.84 143.110.156.182http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 15-1964107541/1/167C 0.00113538441.30.002.34 143.110.156.182http/1.1localhost:443GET /about HTTP/1.1 16-1964107650/1/64_ 0.3904051078070.00.001.96 162.158.106.175http/1.1www.mgacccount.com:80POST /wp-login.php HTTP/1.0 17-1964107710/1/2_ 0.3803957920.00.000.00 172.70.142.133http/1.1www.mgacccount.com:80POST /wp-login.php HTTP/1.0 18-1964107771/1/4C 0.0001791.40.001.37 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-1964107830/1/99_ 0.00012012300.00.001.40 143.110.156.182http/1.1localhost:443GET /v2/_catalog HTTP/1.1 20-1964107890/1/90_ 0.00001872330.00.002.90 143.198.72.96http/1.1localhost:443GET /v2/_catalog HTTP/1.1 21-1964107951/1/2C 0.000131.40.000.00 207.154.240.169http/1.1localhost:443GET /login.action HTTP/1.1 22-1964108010/0/100W 0.00001850270.00.0017.49 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 23-1964108070/0/95R 0.0007141812190.00.002.03 172.69.214.81http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 292 seconds, (range: 288...295)index usage: 0%, cache usage: 0%total entries stored since starting: 82total entries replaced since starting: 0total entries expired since starting: 70total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5122 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d35107d770bbApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 06:30:56 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 2 hours 28 minutes 44 seconds Server load: 0.43 0.42 0.45 Total accesses: 13332 - Total Traffic: 196.4 MB - Total Duration: 31974386 CPU Usage: u2979.91 s5754.56 cu55143800 cs13500100 - 769000% CPU load 1.49 requests/sec - 22.5 kB/second - 15.1 kB/request - 2398.32 ms/request 11 requests currently being processed, 11 idle workers _CW_CRW.._W_CC_C__R__C__.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932141730/18/1103_ 3.150127303340.00.1611.35 139.144.96.150http/1.1 1-1932140151/44/1082C 5.361126638461.40.3714.97 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1932141260/28/1129W 2.181027339690.00.2615.60 172.71.167.128http/1.1www.proplustech.co.th:443GET /?page_id=M589064 HTTP/1.1 3-1932139840/51/1122_ 8.100542327349150.01.6425.41 139.144.96.150http/1.1www.partymanagementthailand.comGET / HTTP/1.1 4-1932139951/53/1129C 4.760127188941.41.4815.82 165.232.76.155http/1.1localhost:443GET /_all_dbs HTTP/1.1 5-1932142530/4/1084R 0.52148224772290.00.0116.29 137.184.162.65http/1.1 6-1932140730/33/1063W 2.690026413610.00.2916.07 143.110.156.182http/1.1localhost:443GET /server-status HTTP/1.1 7-1932-0/0/1012. 0.001024407030.00.0011.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1932-0/0/1040. 0.000024998880.00.0015.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1932142610/2/850_ 0.100118794590.00.0013.40 143.110.156.182http/1.1localhost:443GET /about HTTP/1.1 10-1932142730/2/782W 0.040018400370.00.0111.77 74.207.237.46http/1.1www.importantaccount.com:443GET /.vscode/sftp.json HTTP/1.1 11-1932142740/1/619_ 0.020170315637940.00.019.70 137.184.162.65http/1.1 12-1932138131/91/634C 10.910114402611.42.908.30 143.110.156.182http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-1932138221/95/407C 16.36008984520.24.527.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932142770/2/261_ 0.01017083200.00.003.04 143.110.156.182http/1.1localhost:443GET /v2/_catalog HTTP/1.1 15-1932142821/2/5C 0.0101281.30.000.01 165.232.76.155http/1.1localhost:443GET /login.action HTTP/1.1 16-1932142980/2/2_ 0.010160.00.000.00 144.126.198.24http/1.1localhost:443GET /v2/_catalog HTTP/1.1 17-1932142990/1/1_ 0.020240.00.000.00 144.126.198.24http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 18-1932143010/1/1R 0.011240.00.000.00 162.158.174.16http/1.1 20-1932143090/1/1_ 0.010240.00.000.00 139.144.96.150http/1.1 21-1932143111/2/2C 0.011031.30.000.00 144.126.198.24http/1.1localhost:443GET /about HTTP/1.1 22-1932143170/2/2_ 0.010160.00.000.00 144.126.198.24http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 23-1932143220/1/1_ 0.030142928580.00.010.01 162.158.174.135http/1.1www.proplustech.co.th:443GET /?page_id=W1256430 HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 17subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 230 seconds, (range: 50...299)index usage: 0%, cache usage: 0%total entries stored since starting: 61total entries replaced since starting: 0total entries expired since starting: 44total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 9953 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-05 23:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351c70e4cafApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 01:37:35 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 1 hour 13 minutes 40 seconds Server load: 4.34 3.38 3.31 Total accesses: 18590 - Total Traffic: 261.3 MB - Total Duration: 76705241 CPU Usage: u3335.9 s5697.78 cu53825200 cs13127100 - 1510000% CPU load 4.21 requests/sec - 60.5 kB/second - 14.4 kB/request - 4126.16 ms/request 22 requests currently being processed, 4 idle workers WWWCRW_WCRC__RWWWWRCWWWCW_........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1895187230/87/931W 62.442036390780.01.1313.17 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=pin-by-becky-williams-art-on-my-art-palm-mm-ABkPQKHZ HT 1-1895188480/62/883W 55.772036560630.00.9313.92 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=palm-tree-sunset-solid-faced-canvas-print-mm-YJ6vWoFb H 2-1895187400/83/884W 67.202037805860.00.9813.24 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=1954-gibson-eb-1-mahogany-electric-bass-musical-lot-mm- 3-1895194741/2/912C 0.970036975781.40.0213.38 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1895192000/25/822R 25.930408537262710.00.4211.08 52.70.240.171http/1.1www.chonlateefbc.com:443 5-1895189390/62/892W 44.161035549400.00.9611.27 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=40-easy-landscape-painting-ideas-for-beginners-easy-acr 6-1895194800/1/838_ 0.810181735706330.00.0111.98 162.158.106.185http/1.1www.business.co.th:443GET /.env HTTP/1.1 7-1895192550/21/827W 22.670033302750.00.2511.57 172.68.234.147http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 8-1895192191/29/760C 16.9106064293813327.50.4810.40 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=vintage-1969-gibson-eb-1-violin-bass-natural-finish-mm- 9-1895194820/1/765R 0.960102331217890.00.0011.16 52.70.240.171http/1.1www.thaidaoherb.com:443 10-1895192351/30/817C 21.840033742011.30.3711.06 138.197.88.136http/1.1localhost:443GET /about HTTP/1.1 11-1895187680/78/797_ 57.780479331770230.00.9810.84 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=sunset-painting-palm-tree-original-art-trees-wall-art-m 12-1895188670/66/751_ 55.090401531028490.00.7910.43 139.59.182.142http/1.1 13-1895188690/69/751R 51.540029909740.01.1010.64 161.35.155.246http/1.1 14-1895194930/0/806W 0.000035122160.00.0010.77 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=colorful-palm-tree-canvas-painting-rainbow-colour-decor 15-1895194350/10/799W 4.910031610200.00.0711.07 27.254.96.168http/1.1www.partymanagementthailand.comPOST /wp-cron.php?doing_wp_cron=1698345454.79915809631347656250 16-1895190520/41/658W 35.140026210090.00.567.99 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=kate-and-laurel-sylvie-coastal-coconut-palm-tree-beach- 17-1895193270/15/619W 16.460025825730.00.218.72 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 18-1895190840/32/663R 30.151028027310.00.509.69 3.224.220.101http/1.1www.thaidaoherb.com:443 19-1895192821/30/600C 16.940105025866909.70.228.32 47.128.35.91http/1.1www.mkandptfoods.com:443GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.mi 20-1895193420/14/519W 11.323022804030.00.188.40 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=custom-panels-palm-tree-picture-designs-art-painting-fo 21-1895194080/9/493W 5.452017488960.00.456.90 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=gibson-eb-1-1969-1972-reverb-bass-guitar-guitar-mm-KEOY 22-1895194950/0/288W 0.001012266050.00.004.18 159.203.63.67http/1.1www.partymanagementthailand.comGET / HTTP/1.1 23-1895195051/1/180C 0.011110101292.60.002.37 138.197.88.136http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 24-1895195070/0/256W 0.001011897040.00.003.52 172.68.234.166http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1698345453.82582497596740722656 25-1895195220/0/141_ 0.00006130220.00.001.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1895-0/0/110. 0.00165440965481370.00.001.57 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=print-square-4x4-photo-prints-online-photo-printing-sna 27-1895-0/0/39. 0.00209801857100.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1895-0/0/6. 0.0030470353680.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/101. 0.00304503336930.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/30. 0.0029950806520.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/13. 0.0030130494500.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1895-0/0/61. 0.00304402819260.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1895-0/0/44. 0.00291901303770.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/195. 0.0026969967390860.00.002.79 36.150.60.24http/1.1www.thaiquickservice.net:443GET / HTTP/1.1 35-1895-0/0/24. 0.00300901258990.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/5. 0.0030410127750.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/101. 0.00304604152930.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/21. 0.0029720718280.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/31. 0.00360501275910.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1895-0/0/5. 0.003720041080.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1895-0/0/97. 0.00323012584050640.00.001.68 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848319153023.html HTTP/1.1 42-1895-0/0/3. 0.003733017490.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/3. 0.0037250146420.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/49. 0.00356201464770.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 756subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 14 seconds, (range: 0...44)index usage: 26%, cache usage: 34%total entries stored since starting: 10171total entries replaced since starting: 0total entries expired since starting: 9415total (pre-expiry) entries scrolled out of the cache: 0total retrieves since s
Found on 2023-10-26 18:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351ffb1b43bApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 10:30:00 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 6 hours 27 minutes 47 seconds Server load: 0.84 0.70 0.85 Total accesses: 36665 - Total Traffic: 656.9 MB - Total Duration: 44150962 CPU Usage: u2886.65 s5354.77 cu52307900 cs12766900 - 280000% CPU load 1.58 requests/sec - 28.9 kB/second - 18.3 kB/request - 1204.17 ms/request 19 requests currently being processed, 3 idle workers RCRCRCCCCCCCRCCWCRC___............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1823194430/83/3133R 33.711035581420.01.2147.99 162.243.186.177http/1.1localhost:443GET /about HTTP/1.1 1-1823194561/79/3036C 30.450691359751716.01.1256.30 139.144.150.205http/1.1www.partymanagementthailand.comGET /.vscode/sftp.json HTTP/1.1 2-1823194690/68/2977R 28.401036430820.01.1147.07 159.203.94.228http/1.1localhost:443GET /about HTTP/1.1 3-1823195831/60/2749C 18.920133376251.31.5444.48 164.92.192.25http/1.1localhost:443GET /config.json HTTP/1.1 4-1823200190/20/2808R 6.55042534852610.00.1635.97 137.184.106.30http/1.1www.importantaccount.com:443 5-1823197211/47/2458C 16.691132717611.30.3850.99 178.62.73.12http/1.1localhost:443GET /.git/config HTTP/1.1 6-1823201121/12/2506C 3.920134284471.30.1055.88 142.93.153.3http/1.1localhost:443GET /login.action HTTP/1.1 7-1823200311/11/2457C 3.290028610061.30.1439.02 139.144.150.8http/1.1localhost:443GET /login.action HTTP/1.1 8-1823201861/2/2256C 0.011026493501.30.0048.93 178.62.73.12http/1.1localhost:443GET /.env HTTP/1.1 9-1823201381/6/2300C 1.460024579401.40.1035.23 159.203.94.228http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1823201931/3/1599C 0.010119148001.30.0137.77 178.62.73.12http/1.1localhost:443GET /config.json HTTP/1.1 11-1823201441/3/1691C 1.450021281921.40.0335.27 178.62.73.12http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 12-1823201500/4/1481R 0.731018742570.00.0127.16 217.138.195.27http/1.1 13-1823201571/5/585C 0.04107598891.30.0133.40 164.92.192.25http/1.1localhost:443GET /.git/config HTTP/1.1 14-1823201631/5/890C 0.061011744301.40.0111.43 164.92.192.25http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 15-1823201690/5/775W 0.47007799160.00.0112.67 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 16-1823201711/8/724C 1.32108615271.40.0312.46 142.93.153.3http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1823201940/2/472R 0.51004981830.00.016.86 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1823202061/3/499C 0.66004993331.40.014.95 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-1823202120/3/79_ 0.560581662160.00.010.63 172.69.150.84http/1.1www.singkansard.com:443GET /wp-admin/css/colors/light/admin.php HTTP/1.1 20-1823202180/2/314_ 0.48014494185420.00.022.33 107.189.11.215http/1.1www.nadapool.com:443GET /wp-login.php HTTP/1.1 21-1823202200/3/238_ 0.01003028650.00.004.54 193.42.32.105http/1.1www.nadapool.com:80GET /simple.php HTTP/1.0 22-1823-0/0/87. 0.005320750460.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/34. 0.007200271400.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/262. 0.0073102578000.00.002.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1823-0/0/26. 0.007300308520.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1823-0/0/8. 0.00721027750.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1823-0/0/42. 0.005300279830.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1823-0/0/2. 0.00717036190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1823-0/0/52. 0.004560299600.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1823-0/0/2. 0.00716038360.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1823-0/0/98. 0.002691236330.00.001.48 172.71.131.85http/1.1www.siamerp.com:443GET /wp-content/uploads/siteorigin-widgets/sow-button-flat-8d17 32-1823-0/0/3. 0.00735010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1823-0/0/2. 0.00728050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1823-0/0/2. 0.00740010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1823-0/0/2. 0.00736120.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1823-0/0/3. 0.00738030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1823-0/0/1. 0.00743000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1823-0/0/2. 0.00742010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1823-0/0/3. 0.00732010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1823-0/0/3. 0.00733010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1823-0/0/4. 0.00729020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 100subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 108 seconds, (range: 1...293)index usage: 3%, cache usage: 4%total entries stored since starting: 7862total entries replaced since starting: 0total entries expired since starting: 7762total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 250 hit, 13500 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 03:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d3510142eb20Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 22:54:35 +07 Restart Time: Tuesday, 03-Oct-2023 04:02:11 +07 Parent Server Config. Generation: 1799 Parent Server MPM Generation: 1798 Server uptime: 18 hours 52 minutes 23 seconds Server load: 1.27 0.86 0.71 Total accesses: 99477 - Total Traffic: 2.4 GB - Total Duration: 158643823 CPU Usage: u2905.47 s5296.53 cu51826800 cs12662400 - 94900% CPU load 1.46 requests/sec - 36.5 kB/second - 24.9 kB/request - 1594.78 ms/request 17 requests currently being processed, 7 idle workers _WCCCWCW_CC__CR_C_RCWC_C.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-17989590/45/8364_ 25.0101653145696810.00.78244.38 137.184.106.30http/1.1 1-179813850/16/8332W 10.7610130168250.00.24182.64 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%82%E0%B9%88%E0%B8%B2%E0%B8%A7-%E0%B8%88%E0%B8%94%E0 2-179814111/13/7908C 6.9610125784721.40.09172.37 144.126.198.24http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-17985911/86/7818C 37.8802131290444.61.75222.97 167.71.48.191http/1.1localhost:443GET /server-status HTTP/1.1 4-17984101/81/7454C 40.0700116583121.30.95219.40 161.35.155.246http/1.1localhost:443GET /about HTTP/1.1 5-17989750/40/7442W 18.9870116162540.00.51174.06 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1696348468.11303091049194335937 6-17985991/84/7346C 35.5010114442201.41.17162.34 167.71.48.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-179815360/0/7172W 0.0060112264060.00.00147.68 27.254.96.168http/1.1www.importantaccount.com:443POST /wp-cron.php?doing_wp_cron=1696348468.65592288970947265625 8-179815450/2/6350_ 0.0800107840490.00.00147.61 164.92.192.25http/1.1 9-179815461/2/6336C 1.370199969131.30.01128.63 144.126.198.24http/1.1localhost:443GET /login.action HTTP/1.1 10-179815611/2/5727C 0.120196859471.30.00179.68 167.71.48.191http/1.1localhost:443GET /login.action HTTP/1.1 11-179815630/1/4981_ 0.000176979550.00.00131.10 142.93.153.3http/1.1 12-179815660/2/3691_ 1.300160159665090.00.0291.01 85.208.96.193http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 13-17989851/44/3037C 25.130045936171.40.7172.65 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-17989870/44/1957R 20.731129457050.00.6639.73 164.92.192.25http/1.1 15-179815750/0/1509_ 0.000019979540.00.0033.05 45.55.193.222http/1.1 16-179815891/2/871C 0.010111989262.70.0021.50 46.101.103.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 17-179815950/1/240_ 0.00023349190.00.003.50 164.92.192.25http/1.1 18-179815960/1/353R 0.01015526140.00.007.09 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 19-179815991/2/301C 1.28105326592.70.017.40 161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 20-179816050/1/71W 0.0400926200.00.000.67 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 21-179816151/2/88C 0.01041029654.60.010.70 144.126.198.24http/1.1localhost:443GET /server-status HTTP/1.1 22-179816200/1/99_ 0.0101738540.00.000.73 137.184.106.30http/1.1 23-179816231/2/228C 0.00014775991.40.002.73 161.35.155.246http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 24-1798-0/0/211. 0.00405003012730.00.002.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1798-0/0/174. 0.00499602258600.00.002.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1798-0/0/12. 0.0049920132980.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1798-0/0/99. 0.00397021931778170.00.001.26 185.191.171.7http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 28-1798-0/0/103. 0.0049940940790.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1798-0/0/7. 0.005001099910.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1798-0/0/12. 0.0050020247870.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1798-0/0/189. 0.00400503328680.00.002.39 128.199.61.251http/1.1localhost:443GET /_all_dbs HTTP/1.1 32-1798-0/0/190. 0.00399702308920.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1798-0/0/99. 0.00399713381712710.00.001.19 149.202.65.189http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%99 34-1798-0/0/123. 0.00500501056340.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1798-0/0/125. 0.00499301403490.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1798-0/0/11. 0.0050040217480.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1798-0/0/57. 0.0050081573560.00.001.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1798-0/0/10. 0.0050070121730.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1798-0/0/9. 0.0050090129820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1798-0/0/44. 0.0050060551430.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1798-0/0/9. 0.00375790116370.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1798-0/0/12. 0.00375680172750.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1798-0/0/5. 0.0037582076270.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1798-0/0/76. 0.003757501477960.00.001.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1798-0/0/5. 0.0037588020710.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1798-0/0/104. 0.0037324547812450.00.001.54 159.192.136.230http/1.1www.importantaccount.com:443POST //xmlrpc.php HTTP/1.1 47-1798-0/0/10. 0.0037567051750.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1798-0/0/101. 0.00373122271071880.00.001.39 54.36.148.103http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2022/10/Chondesign_logo_-174-215x215.jp 49-1798-0/0/5. 0.0037586022460.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes tr
Found on 2023-10-03 15:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351f9eeeffdApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:18 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 31 seconds Server load: 0.88 1.13 1.25 Total accesses: 486 - Total Traffic: 2.6 MB - Total Duration: 213816 CPU Usage: u2759.19 s5256.84 cu51774600 cs12651800 - 7.08e+7% CPU load 5.34 requests/sec - 29.5 kB/second - 5.5 kB/request - 439.951 ms/request 9 requests currently being processed, 7 idle workers _CCCW_C_W__C__.CC................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299410/45/45_ 6.2014143690.00.220.22 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swip 1-1797299571/26/26C 6.7300417551.40.300.30 167.99.182.39http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1797301251/21/38C 1.970291083.60.050.09 159.203.63.67http/1.1localhost:443GET /server-status HTTP/1.1 3-1797301601/8/37C 1.1110130801.40.050.21 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1797301310/15/30W 1.9700156440.00.050.19 74.207.237.114http/1.1www.pokaorganize.com:443GET /about HTTP/1.1 5-1797301720/4/15_ 0.02014126040.00.020.22 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP 6-1797300731/28/40C 5.9410127081.40.140.16 74.207.237.46http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1797301780/3/14_ 0.03013155470.00.000.14 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/essential-addons-for-elementor-lite/ass 8-1797300250/43/43W 1.560026320.00.150.15 167.99.182.39http/1.1localhost:443GET /server-status HTTP/1.1 9-1797300310/33/33_ 2.920876450.00.070.07 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/uploads/elementor/css/post-9.css?ver=1695264046 10-1797301840/3/14_ 0.010180130.00.020.16 74.207.237.46http/1.1localhost:443GET /server-status HTTP/1.1 11-1797300441/29/29C 4.301422998110.70.200.20 74.207.237.114http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 12-1797301860/3/19_ 0.01143139120.00.020.04 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/elementor/assets/css/frontend-lite.min. 13-1797300520/36/36_ 5.01036299340.00.150.15 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1 14-1797-0/0/10. 0.0058011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300841/23/23C 6.930397168181.20.100.10 162.243.161.105http/1.1www.pokaorganize.com:443GET /v2/_catalog HTTP/1.1 16-1797300921/20/20C 4.9001149851.40.160.16 161.35.176.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1797-0/0/6. 0.0043011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0051013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0045013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 52subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 237 seconds, (range: 208...294)index usage: 1%, cache usage: 2%total entries stored since starting: 52total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 265 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351b02d2d08Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:38 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 1 minute 7 seconds Server load: 3.97 4.26 4.33 Total accesses: 489 - Total Traffic: 4.6 MB - Total Duration: 538096 CPU Usage: u2475.02 s4256.28 cu40848700 cs9867590 - 7.57e+7% CPU load 7.3 requests/sec - 70.2 kB/second - 9.6 kB/request - 1100.4 ms/request 15 requests currently being processed, 7 idle workers CCCWCC__C___WWC__WCWRR............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239901/32/32C 17.9701371981.40.410.41 146.190.160.11http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1527239921/39/39C 17.860413435601.20.280.28 207.154.240.169http/1.1www.pokaorganize.com:443GET /about HTTP/1.1 2-1527242401/5/32C 0.0110365701.30.010.27 137.184.106.30http/1.1localhost:443GET /about HTTP/1.1 3-1527240120/35/35W 16.4300402720.00.370.37 172.68.18.26http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 4-1527242191/9/29C 2.7810331251.40.050.23 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1527240371/35/35C 17.9800373601.30.300.30 139.144.150.8http/1.1localhost:443GET /login.action HTTP/1.1 6-1527240450/35/35_ 18.8300381480.00.350.35 137.184.106.30http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-1527240470/36/36_ 17.370658361360.00.300.30 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 8-1527240581/35/35C 19.1201405851.40.360.36 192.53.126.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1527241270/19/30_ 9.900864369140.00.170.31 89.175.184.250http/1.1www.pokaorganize.com:443GET / HTTP/1.1 10-1527240700/31/31_ 18.7101395260.00.280.28 146.190.160.11http/1.1localhost:443GET /v2/_catalog HTTP/1.1 11-1527240760/40/40_ 18.6701371970.00.340.34 89.175.184.250http/1.1localhost:443GET / HTTP/1.1 12-1527240860/27/27W 16.9400342180.00.280.28 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 13-1527241040/30/30W 14.2500293290.00.350.35 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-1527241421/16/16C 7.1314531378010.70.130.13 207.154.240.169http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 15-1527242320/3/3_ 0.890117630.00.020.02 146.190.160.11http/1.1localhost:443GET /about HTTP/1.1 16-1527242470/2/2_ 0.4604448910.00.010.01 206.81.1.88http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 17-1527242530/1/1W 0.750015110.00.010.01 52.251.36.208http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 18-1527242601/1/1C 0.000241.30.000.00 137.184.106.30http/1.1localhost:443GET /v2/_catalog HTTP/1.1 19-1527242620/0/0W 0.000000.00.000.00 192.53.126.23http/1.1localhost:443GET /server-status HTTP/1.1 20-1527242680/0/0R 0.000000.00.000.00 21-1527242740/0/0R 0.000000.00.000.00 91.213.50.8http/1.1www.pokaorganize.com:443 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 46subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 268 seconds, (range: 231...298)index usage: 1%, cache usage: 2%total entries stored since starting: 46total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 145 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d3518591cb88Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:10 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 21 seconds Server load: 1.01 1.21 1.38 Total accesses: 259 - Total Traffic: 1.7 MB - Total Duration: 176218 CPU Usage: u1987.76 s3434.57 cu32339200 cs7737160 - 4.95e+7% CPU load 3.2 requests/sec - 21.8 kB/second - 6.8 kB/request - 680.378 ms/request 9 requests currently being processed, 6 idle workers R_._W.___WWCRC_RC................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/19/19R 6.2101163320.00.290.29 165.22.74.203http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-129450830/13/17_ 3.450822120830.00.080.11 171.67.70.229http/1.1www.pokaorganize.com:443GET / HTTP/1.1 2-1294-0/0/29. 0.0020125600.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-129449890/19/19_ 6.9501233880.00.220.22 139.144.96.150http/1.1localhost:443GET / HTTP/1.1 4-129449950/16/16W 5.6700245400.00.090.09 143.198.72.96http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 5-1294-0/0/17. 0.0030219350.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-129450210/25/25_ 4.29073685100.00.170.17 171.67.70.229http/1.1www.pokaorganize.com:443GET / HTTP/1.1 7-129450280/24/24_ 7.510396189330.00.220.22 137.184.106.30http/1.1www.pokaorganize.com:443GET / HTTP/1.1 8-129450300/20/20_ 5.8000164210.00.060.06 137.184.222.107http/1.1www.pokaorganize.com:80GET /config.json HTTP/1.0 9-129450540/22/22W 4.660099820.00.090.09 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 10-129451900/11/12W 1.161023210.00.040.04 172.71.223.81http/1.1www.anumotanaboon.com:443GET /wp-content/uploads/2022/03/nganboon_02.jpg HTTP/1.1 11-129452001/5/8C 0.030121141.40.010.02 165.22.74.203http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-129452060/6/6R 0.680114460.00.020.02 205.169.39.241http/1.1 13-129452181/4/4C 1.58036130838.80.040.04 209.141.49.234http/1.1www.thai-pack.com:443POST /wp-login.php HTTP/1.1 14-129452190/4/4_ 0.010070.00.000.00 165.22.74.203http/1.1localhost:443GET /about HTTP/1.1 15-129452220/6/6R 0.690126625390.00.100.10 143.198.72.96http/1.1www.pokaorganize.com:443GET / HTTP/1.1 16-129452231/11/11C 0.0701172.60.010.01 142.93.158.96http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 64subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 264 seconds, (range: 231...297)index usage: 2%, cache usage: 2%total entries stored since starting: 64total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 147 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d3519945e1dfApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:41 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 7 seconds Server load: 0.45 1.03 0.97 Total accesses: 257 - Total Traffic: 1.7 MB - Total Duration: 101526 CPU Usage: u1629.16 s2824.55 cu26678600 cs6409520 - 4.94e+7% CPU load 3.84 requests/sec - 25.3 kB/second - 6.6 kB/request - 395.043 ms/request 23 requests currently being processed, 1 idle workers _CCCRWCCCCWWCCCCCRCRRCRR.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416030/26/26_ 6.370578131310.00.130.13 146.190.160.11http/1.1 1-108416211/25/25C 4.7610101772.60.140.14 128.199.195.68http/1.1localhost:443GET /.env HTTP/1.1 2-108416231/28/28C 7.2511214032.70.140.14 128.199.195.68http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 3-108416251/28/28C 4.9511138222.60.510.51 128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-108416270/19/19R 6.5001329161720.00.300.30 172.104.102.196http/1.1 5-108416520/37/37W 3.520084170.00.110.11 172.104.102.196http/1.1localhost:443GET /server-status HTTP/1.1 6-108416591/34/34C 3.411169842.70.120.12 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-108416831/22/22C 2.240050612.60.140.14 172.104.102.196http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-108417061/19/19C 3.251162931.30.040.04 128.199.195.68http/1.1localhost:443GET /config.json HTTP/1.1 9-108417461/4/4C 0.0311101.30.010.01 128.199.195.68http/1.1localhost:443GET /about HTTP/1.1 10-108417541/2/2L 0.020042.30.000.00 172.104.102.196http/1.1localhost:443GET / HTTP/1.1 11-108417560/1/1W 0.000040.00.000.00 172.104.102.196http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-108417671/1/1C 0.011242.60.000.00 128.199.195.68http/1.1localhost:443GET /.git/config HTTP/1.1 13-108417691/1/1C 0.011242.60.000.00 128.199.195.68http/1.1localhost:443GET /info.php HTTP/1.1 14-108417751/1/1C 0.011242.60.000.00 128.199.195.68http/1.1localhost:443GET /telescope/requests HTTP/1.1 15-108417811/2/2C 0.011051.30.000.00 128.199.195.68http/1.1localhost:443GET /login.action HTTP/1.1 16-108417931/1/1C 0.010242.60.000.00 172.104.102.196http/1.1localhost:443GET /.env HTTP/1.1 17-108417950/4/4R 0.010070.00.000.00 164.92.192.25http/1.1 18-108418011/1/1C 0.010242.60.000.00 172.104.102.196http/1.1localhost:443GET /telescope/requests HTTP/1.1 19-108418070/1/1R 0.000240.00.000.00 172.104.102.196http/1.1 20-108418130/0/0R 0.000000.00.000.00 172.104.102.196http/1.1 21-108418191/1/1C 0.000242.70.000.00 172.104.102.196http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 22-108418290/0/0R 0.000000.00.000.00 172.104.102.196http/1.1 23-108418350/0/0R 0.000000.00.000.00 172.104.102.196http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 19subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 279 seconds, (range: 232...297)index usage: 0%, cache usage: 0%total entries stored since starting: 19total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 115 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d35112dedbe5Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:29 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 34 seconds Server load: 1.64 1.58 1.47 Total accesses: 207 - Total Traffic: 970 kB - Total Duration: 103498 CPU Usage: u1265.48 s2310.98 cu21800400 cs5275950 - 7.96e+7% CPU load 6.09 requests/sec - 28.5 kB/second - 4798 B/request - 499.99 ms/request 20 requests currently being processed, 0 idle workers CCRCWCCRCCRRCCRCRRRR.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775491/14/14C 5.0601162002.70.070.07 194.195.219.36http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-84775501/27/27C 4.001196372.60.080.08 161.35.153.48http/1.1localhost:443GET /.env HTTP/1.1 2-84775520/18/18R 2.890057320.00.060.06 170.187.164.222http/1.1 3-84777311/7/14C 0.061159912.60.010.07 194.195.219.36http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-84775790/22/22W 4.260087200.00.090.09 194.195.219.36http/1.1localhost:443GET /server-status HTTP/1.1 5-84776001/9/9C 3.321175592.70.130.13 194.195.219.36http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 6-84776071/10/10C 2.511046892.60.050.05 194.195.219.36http/1.1localhost:443GET /info.php HTTP/1.1 7-84776090/14/14R 3.100172360.00.140.14 5.253.18.199http/1.1 8-84776231/11/11C 3.971177582.60.110.11 194.195.219.36http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-84776341/23/23C 2.150059702.30.050.05 194.195.219.36http/1.1localhost:443GET / HTTP/1.1 10-84776360/14/14R 2.7201193960.00.050.05 66.36.234.242http/1.1 11-84777200/18/18R 0.1501280.00.020.02 139.59.138.104http/1.1 12-84777331/9/9C 1.2102384456222.60.030.03 84.246.85.166http/1.1www.chonlateepro.com:443GET / HTTP/1.1 13-84777461/2/2C 0.020162.60.000.00 194.195.219.36http/1.1localhost:443GET /.git/config HTTP/1.1 14-84777530/1/1R 0.010230.00.000.00 194.195.219.36http/1.1localhost:443GET /.DS_Store HTTP/1.1 15-84777551/1/1C 0.000242.60.000.00 194.195.219.36http/1.1localhost:443GET /.env HTTP/1.1 16-84777670/0/0R 0.000000.00.000.00 17-84777690/0/0R 0.000000.00.000.00 18-84777750/0/0R 0.000000.00.000.00 19-84777810/0/0R 0.000000.00.000.00 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 13subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 291 seconds, (range: 281...299)index usage: 0%, cache usage: 0%total entries stored since starting: 13total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 111 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d35154710f72Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:06 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 4 seconds Server load: 2.45 1.80 1.59 Total accesses: 90 - Total Traffic: 367 kB - Total Duration: 14030 CPU Usage: u631.23 s1252.6 cu12780600 cs3072970 - 3.96e+8% CPU load 22.5 requests/sec - 91.8 kB/second - 4175 B/request - 155.889 ms/request 20 requests currently being processed, 0 idle workers CCCCCCCCCCCCWCCCRRCW.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799541/7/7C 1.291124652.70.050.05 172.105.120.53http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-43799721/3/3C 1.60013814812101.00.100.10 45.79.148.46http/1.1www.pokaorganize.com:443GET / HTTP/1.1 2-43799781/16/16C 1.131022442.60.020.02 172.105.120.53http/1.1localhost:443GET /.env HTTP/1.1 3-43799881/5/5C 0.541010692.60.010.01 172.105.120.53http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-43799941/3/3C 0.671013162.60.010.01 172.105.120.53http/1.1localhost:443GET /.git/config HTTP/1.1 5-437100011/24/24C 0.0410232.70.020.02 172.105.120.53http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 6-437100151/7/7C 0.650111392.60.100.10 157.245.53.210http/1.1localhost:443GET /telescope/requests HTTP/1.1 7-437100211/4/4C 0.48009272.70.010.01 157.245.53.210http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 8-437100281/1/1C 0.001122.60.000.00 172.105.120.53http/1.1localhost:443GET /info.php HTTP/1.1 9-437100341/5/5C 0.010062.60.010.01 157.245.53.210http/1.1localhost:443GET /.git/config HTTP/1.1 10-437100361/5/5C 0.010052.70.010.01 157.245.53.210http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-437100421/5/5C 0.010172.60.010.01 157.245.53.210http/1.1localhost:443GET /info.php HTTP/1.1 12-437100530/0/0W 0.000000.00.000.00 157.245.53.210http/1.1localhost:443GET /server-status HTTP/1.1 13-437100551/1/1C 0.000012.70.000.00 157.245.53.210http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 14-437100651/1/1C 0.010012.30.000.00 157.245.53.210http/1.1localhost:443GET / HTTP/1.1 15-437100671/1/1C 0.000012.60.000.00 157.245.53.210http/1.1localhost:443GET /.env HTTP/1.1 16-437100730/0/0R 0.000000.00.000.00 17-437100790/0/0R 0.000000.00.000.00 18-437100851/1/1C 0.000111.30.000.00 172.105.120.53http/1.1localhost:443GET /config.json HTTP/1.1 19-437100910/1/1W 0.000010.00.000.00 69.164.213.24http/1.1www.pokaorganize.com:80GET / HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 297 seconds, (range: 297...299)index usage: 0%, cache usage: 0%total entries stored since starting: 8total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 51 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 17:25
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56f3f301c0Apache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 00:25:23 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 94 Parent Server MPM Generation: 93 Server uptime: 28 days 14 hours 24 minutes 2 seconds Server load: 3.11 3.06 2.67 Total accesses: 1850450 - Total Traffic: 23.8 GB - Total Duration: 2141120810 CPU Usage: u172.09 s105.48 cu32158.1 cs2231.61 - 1.4% CPU load .749 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.08 ms/request 3 requests currently being processed, 125 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 025364no0yes329000 225369no0yes032000 325368no0yes032000 525366no0yes032000 Sum400 3125000 ________________________R_WR____................................ ________________________________________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-93253640/2/14804_ 0.2041160261010.00.00193.80 159.203.182.222http/1.1localhost:80\x16\x03\x01\x01\x07\x01 0-93253640/0/15295_ 0.0030139013530.00.00198.97 159.203.182.222http/1.1localhost:443GET /.env HTTP/1.1 0-93253640/1/14866_ 0.1130150309570.00.00192.75 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-93253640/0/15047_ 0.0030145875140.00.00186.02 138.197.88.136h2localhost:443[0/0] Software caused connection abort 0-93253640/1/14950_ 0.2330147711740.00.00185.46 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-93253640/0/15172_ 0.0038156649250.00.00188.55 161.35.190.56http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/1/14845_ 0.1520145588900.00.02200.30 161.35.190.56http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/1/15154_ 0.2320150182090.00.00187.60 146.190.64.200http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-93253640/1/15114_ 0.1620145226990.00.00229.90 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-93253640/1/15248_ 0.2320148853450.00.00194.92 159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-93253640/1/14812_ 0.2420154393440.00.02200.74 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/1/14823_ 0.1627147156440.00.00195.46 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/1/14691_ 0.1610137182780.00.00185.56 74.207.237.114h2localhost:443[0/0] Software caused connection abort 0-93253640/1/14844_ 0.2410169086640.00.00186.04 146.190.64.200http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-93253640/0/15798_ 0.0010141615390.00.00187.81 164.90.205.35http/1.1 0-93253640/2/14848_ 0.2410165341260.00.00182.52 159.203.182.222http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-93253640/0/14899_ 0.0010143405110.00.00206.39 142.93.158.96http/1.1 0-93253640/0/14958_ 0.0010144940050.00.00189.33 162.142.125.11h2clocalhost:80[0/0] done 0-93253640/1/14779_ 0.1710160388390.00.00200.58 142.93.64.15http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-93253640/1/15001_ 0.1710144639410.00.00193.85 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-93253640/1/14991_ 0.2510181496040.00.00193.46 159.203.182.222http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-93253640/1/15016_ 0.2500147053800.00.00204.12 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.1 0-93253640/1/15472_ 0.1800150756110.00.00188.31 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x0c\x01 0-93253640/1/14676_ 0.1909138765420.00.00190.21 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/0/14986R 0.0050162205960.00.00186.91 167.99.8.63http/1.1localhost:443GET /config.json HTTP/1.1 0-93253640/2/14661_ 0.2500135981680.00.00197.05 164.90.222.93http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-93253641/0/15158W 0.0000144713520.00.00194.53 159.203.182.222http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/0/14941R 0.0050159195750.00.00213.32 167.172.20.95http/1.1localhost:443GET / HTTP/1.1 0-93253640/0/14742_ 0.0040152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-93253640/0/15188_ 0.0040135139150.00.00225.16 78.153.196.120http/1.1localhost:80HEAD /.env HTTP/1.1 0-93253640/0/14677_ 0.0040155573090.00.00199.15 138.197.88.136h2localhost:443[0/0] Software caused connection abort 0-93253640/1/14939_ 0.2030145815220.00.00185.19 162.243.184.251http/1.1localhost:443GET / HTTP/1.1 1-93-0/0/15731. 0.007790138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-93-0/0/15813. 0.007790136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-93-0/0/15602. 0.007790174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-93-0/0/15318. 0.007790150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-93-0/0/15276. 0.007790146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-93-0/0/15655. 0.007790134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-93-0/0/15351. 0.007790172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-93-0/0/15185. 0.007790165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-93-0/0/15335. 0.007790127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-93-0/0/14956. 0.007790152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-93-0/0/15041. 0.007790148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-93-0/0/15506. 0.007790159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-93-0/0/15329. 0.007790159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-93-0/0/15189. 0.007790137016410.00.00183.04 159.223.102.13http/1.1localhost:80GET /config.json HTTP/1.1 1-93</
Found on 2024-02-02 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56ae727a59Apache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 18:35:03 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 8 hours 33 minutes 42 seconds Server load: 2.71 2.75 2.72 Total accesses: 938108 - Total Traffic: 12.6 GB - Total Duration: 1140754887 CPU Usage: u313.9 s22.75 cu15734.7 cs827.39 - 8.3% CPU load 4.61 requests/sec - 64.6 kB/second - 14.0 kB/request - 1216.02 ms/request 10 requests currently being processed, 54 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 128172no11yes527014 232702no5yes527001 Sum2016 1054015 ................................W_________R_R______W_________W__ ______R___W_______R______R____R_................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/7491. 0.00368963598326540.00.00107.52 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ocdxhvp-10531qitems/etidm HTTP/1.1 0-7-0/0/7997. 0.00368963376283270.00.00109.31 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/7552. 0.00368983882954630.00.00106.80 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-21596fitems/etidm3.html HTTP/1.1 0-7-0/0/7977. 0.003689079870500.00.00100.07 54.186.174.90http/1.1www.chonlateekeyman.com:80GET /vendor/.git/config HTTP/1.1 0-7-0/0/7820. 0.00368963180228580.00.0097.38 85.208.96.203http/1.1www.chonlateeboi.com:443GET /32346yytxetid.htm HTTP/1.1 0-7-0/0/7945. 0.00368938492820970.00.00103.92 66.249.73.128http/1.1www.twinbuilt.co.th:443GET /?e=claudio-valentino-watch-cheap-off-58%-10-ii-91mVN1T9 HT 0-7-0/0/7751. 0.00368972876982120.00.00116.50 85.208.96.205http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 0-7-0/0/7744. 0.00368963785766580.00.00100.00 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /uujxhvp-10537witems/eti HTTP/1.1 0-7-0/0/7941. 0.00368941879902650.00.00150.52 173.201.180.210http/1.1www.nadapool.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7828. 0.00368984482475300.00.0098.26 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zkoxhvp-14156bitems/etidm7.html HTTP/1.1 0-7-0/0/7717. 0.00368984690869310.00.00120.03 52.70.240.171http/1.1www.chonlateeboi.com:443GET /12284sabfitems/etidm2.html HTTP/1.1 0-7-0/0/7353. 0.00368963488696230.00.0094.39 3.224.220.101http/1.1www.chonlateeboi.com:443GET /3328eslwetidm1aep0 HTTP/1.1 0-7-0/0/7441. 0.003689205967886060.00.0098.26 158.220.124.129http/1.1www.chonlateeboi.com:443GET /%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%95%E0%B9%88%E0%B8%AD/ HT 0-7-0/0/7637. 0.003689637102146600.00.00103.73 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /biqxhvp-21646detidm25o HTTP/1.1 0-7-0/0/8309. 0.003689351676006020.00.00103.58 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=godfather-trilogy-i-i%EF%BC%A9-iii-%E3%82%AB%E3%83%A9%E 0-7-0/0/7485. 0.003689104297978530.00.0095.31 103.154.184.42http/1.1www.xn--72cztbd4dxek5iqd.com:44GET /wp-login.php HTTP/1.1 0-7-0/0/7646. 0.0036891663779286410.00.0097.21 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=1906-new-highs-fast-acting-precision-edibles-leafly-9-i 0-7-0/0/7679. 0.00368984477601570.00.00101.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /44576eslwitems/etidm31meb.html HTTP/1.1 0-7-0/0/7728. 0.00368964096209810.00.0096.20 23.22.35.162http/1.1www.chonlateeboi.com:443GET /18447eslwitems/etidm86nw.htm HTTP/1.1 0-7-0/0/7810. 0.00368963579141840.00.00103.23 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /kczxhvp-10527mitems/etidm62xp.htm HTTP/1.1 0-7-0/0/7791. 0.003689375119150970.00.00106.94 184.168.99.253http/1.1www.plastandtrans.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7461. 0.003689202982744190.00.0099.22 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/8210. 0.00368963690213850.00.00106.76 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-25912fetidm59qxf HTTP/1.1 0-7-0/0/7600. 0.00368984875263560.00.00105.28 3.224.220.101http/1.1www.chonlateeboi.com:443GET /15240bzlnetidm71ebt.htm HTTP/1.1 0-7-0/0/7639. 0.00368934698577400.00.0096.02 66.249.71.202http/1.1www.twinbuilt.co.th:443GET /?e=bundesliga-dortmund-giovanni-reyna-injured-8-ii-y3GKO2i 0-7-0/0/7756. 0.00368963767494950.00.0097.99 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lkaxhvp-14116netidm6 HTTP/1.1 0-7-0/0/7624. 0.00368985483401880.00.00106.30 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /byqlgro-3472detidm94old HTTP/1.1 0-7-0/0/7698. 0.00368984193126660.00.00127.64 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2836bzlnetidm7 HTTP/1.1 0-7-0/0/7504. 0.00368964981009190.00.0093.37 81.70.248.169http/1.1www.nakindogtraining.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7720. 0.00368951486170310.00.00131.95 173.201.191.207http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4GET /wp-login.php HTTP/1.1 0-7-0/0/7415. 0.00368987289899570.00.00105.91 97.74.211.129http/1.1www.dinocoffees.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7754. 0.00368963380644190.00.0098.18 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wclxhvp-10227yitems/etidm.htm HTTP/1.1 1-7281721/315/7765W 179.940088930910.03.36127.39 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.1 1-7281720/294/7571_ 179.920084044140.03.2794.86 144.126.202.105http/1.1 1-7281720/307/7662_ 179.9810110752640.03.2599.88 162.243.184.251http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-7281720/331/7281_ 179.56163789426690.03.6693.96 3.224.220.101http/1.1www.chonlateeboi.com:443GET /21278qecvitems/etidm11k.html HTTP/1.1 1-7281720/307/7365_ 179.981095686620.03.69107.01 137.184.162.65http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-7281720/317/7530_ 179.76063884763780.04.66100.16 162.243.161.105h2localhost:443[0/0] Software caused connection abort 1-7281720/328/7592_ 179.600902102376470.04.2997.58 74.207.237.114h2localhost:443[0/0] Software caused connection abort 1-7281720/316/7602_ 180.180095656940.03.48101.50 143.42.118.5http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7281720/334/7633_ 179.87064078889270.03.9496.27 23.22.35.162http/1.1www.chonlateeboi.com:443GET /48940sstyetidm7 HTTP/1.1 1-7281720/291/7410_ 179.920093760170.03.33101.40 143.42.118.5http/1.1localhost:80GET / HTTP/1.1 1-7281720/297/7189R 179.18284796107880.03.3699.16 185.187.235.204http/1.1www.chonlateefood.com:443 1-7281720/323/7749_ 179.920087801150.03.61108.91 128.199.61.2
Found on 2024-01-07 11:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c562252474aApache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 01:15:41 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 15 hours 14 minutes 20 seconds Server load: 2.91 3.14 2.90 Total accesses: 272798 - Total Traffic: 3.9 GB - Total Duration: 229448224 CPU Usage: u286.86 s16.53 cu4282.28 cs230.01 - 8.78% CPU load 4.97 requests/sec - 74.7 kB/second - 15.0 kB/request - 841.092 ms/request 10 requests currently being processed, 118 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 019907no1yes230000 419908no1yes428000 719927no1yes131000 919931no6yes329002 Sum409 10118002 _____________W_______________W__................................ ................................................................ __R__R___R_______________R______................................ ................................__________W_____________________ ................................_____WW__________________W______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2199070/94/2937_ 59.59283824491080.01.1344.16 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-2199070/93/3188_ 59.190104323054330.01.1442.09 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?uwxadej-96103ketidm55hj.html HTTP/1.1 0-2199070/93/2886_ 60.652035872210.01.2750.91 146.190.64.200http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/82/3112_ 60.177105025719630.01.1539.62 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?fpesvcw-243066retidm52s.htm HTTP/1.1 0-2199070/96/3020_ 60.44184323697120.01.0437.86 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?yzdvrsm-125487qitems/eti.htm HTTP/1.1 0-2199070/102/3255_ 60.652024037930.01.3341.02 134.122.34.144http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-2199070/89/3011_ 59.711103523651640.01.0852.65 52.167.144.166http/1.1www.chonlateefbc.com:80GET /sitemaps.xml HTTP/1.1 0-2199070/109/3029_ 60.622024499760.01.2039.60 178.62.73.12http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-2199070/103/3078_ 60.177110424419700.01.1781.95 91.134.248.211http/1.1www.chonlateepro.com:443POST /wp-login.php HTTP/1.1 0-2199070/89/3010_ 60.60489023508860.01.1038.93 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?jqmggdh-341402zetid.htm HTTP/1.1 0-2199070/100/2947_ 59.95284427127830.01.2936.29 165.22.74.203h2localhost:443[0/0] Software caused connection abort 0-2199070/103/2880_ 60.32584523699330.01.2137.27 23.22.35.162http/1.1www.chonlateeboi.com:443GET /17544oqmietidm17uoj.htm HTTP/1.1 0-2199070/86/2853_ 60.08184123677170.01.0139.23 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?epaecaw-103809netid.htm HTTP/1.1 0-2199071/91/3143W 56.05197024405620.01.3843.04 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-2199070/89/3184_ 60.56584326976790.00.9242.91 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ogdrtxd-29537qeti.html HTTP/1.1 0-2199070/79/2928_ 60.32384823417990.00.8938.05 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /uqjrtxd-44415witems/etidm77hd.htm HTTP/1.1 0-2199070/80/2867_ 59.92489327616540.00.9937.29 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?miosvcw-361893betidm3.htm HTTP/1.1 0-2199070/88/3167_ 60.09184323195990.00.9842.15 46.101.103.192h2localhost:443[0/0] Software caused connection abort 0-2199070/93/3067_ 60.652023089330.01.2040.21 159.89.83.196http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-2199070/95/2916_ 60.6911125290770.01.0543.39 178.62.73.12http/1.1localhost:80GET /server-status HTTP/1.1 0-2199070/96/2961_ 60.49084223168830.01.2642.29 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-2199070/101/3027_ 60.661025514980.01.3443.52 134.122.34.144http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/90/3335_ 59.97284323243680.01.0242.50 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-2199070/76/2849_ 60.59494523157750.00.8937.69 40.77.167.101http/1.1www.chonlateeaa.com:443GET /robots.txt HTTP/2.0 0-2199070/101/2910_ 60.18584923542630.01.2337.23 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /xemrtxd-29572zetidm3 HTTP/1.1 0-2199070/95/2895_ 60.651105423331830.01.1537.59 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?puqhlzs-108656detidm63c HTTP/1.1 0-2199070/82/2974_ 59.88484426437580.00.9948.08 40.77.167.101h2www.chonlateeaa.com:443[1/1] done: stream 1, GET /robots.txt 0-2199070/80/2956_ 60.185105427552100.01.0168.23 40.77.167.101h2www.chonlateeaa.com:443[0/0] init 0-2199070/94/2859_ 60.60384723464280.01.1036.07 3.224.220.101http/1.1www.chonlateeboi.com:443GET /32683gcmpitems/etidm HTTP/1.1 0-2199071/85/3194W 59.720022164250.01.0976.66 23.22.35.162http/1.1www.chonlateeboi.com:443GET /32665gcmpitems/eti HTTP/1.1 0-2199070/95/2904_ 60.49784623539350.01.1145.20 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /igxrtxd-29557kitems/etidm70 HTTP/1.1 0-2199070/89/3252_ 60.32485726180090.01.0039.63 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ziwvrsm-237184jitems/etid.html HTTP/1.1 1-1-0/0/2323. 0.00303286617630010.00.0030.27 207.46.13.154http/1.1www.thaidaoherb.com:443GET /9i7h/dyv42461ryyhc053875235.html HTTP/2.0 1-1-0/0/2100. 0.003032173417390000.00.0027.02 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /db.php?g3192039.shtml HTTP/1.1 1-1-0/0/2227. 0.003032107117630050.00.0030.69 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rngadej-26472tetidm80eat.htm HTTP/1.1 1-1-0/0/2089. 0.003032211517285130.00.0027.89 66.249.69.229http/1.1www.chonlateenextbiz.com:443GET /db.php?g335424.shtml HTTP/1.1 1-1-0/0/2129. 0.00303285117106500.00.0032.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /48835biwxitems/etidm HTTP/1.1 1-1-0/0/2185. 0.00303285816794840.00.0028.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jryadej-23266letid HTTP/1.1 1-1-0/0/2135. 0.00303297217421340.00.0026.37 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22684biwxetidm7 HTTP/1.1 1-1-0/0/2185. 0.0030321717237790.00.0029.46 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?papaw99.xml HTTP/1.1 1-1-0/0/2163. 0.00303284617365570.00.0029.98 23.22.35.162http/1.1www.chonlateeboi.com:443GET /42349biwxitems/etidm52 HTTP/1.1 1-1-0/0/2112. 0.00303289516912400.00.0027.55 185.191.171.3http/1.1www.chonlateefood.com:443GET /geti/cer43578htewitems.htm HTTP/1.1 1-1-0/0/2118. 0.003032102016733450.00.0031.98 157.55.39.202h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /tviipbe-49432v
Found on 2024-01-05 18:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56d12eb917Apache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 05:44:09 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 44 Parent Server MPM Generation: 43 Server uptime: 11 days 5 hours 21 minutes 11 seconds Server load: 0.62 0.74 0.85 Total accesses: 4447507 - Total Traffic: 57.0 GB - Total Duration: 4186277613 CPU Usage: u611.2 s69.47 cu79757.4 cs4172.6 - 8.73% CPU load 4.59 requests/sec - 61.7 kB/second - 13.4 kB/request - 941.264 ms/request 8 requests currently being processed, 120 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031012no8yes032005 131030no0yes329000 431190no0yes032000 531192no3yes527000 Sum4011 8120005 _______________________________________________________R___RW___ ................................................................ ____________________________________R___R__________W______WR____ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43310120/248/39945_ 147.862749362518760.02.82505.13 85.208.96.199http/1.1www.chonlateefood.com:443GET /get/lda47617odmjitems HTTP/1.1 0-43310120/241/39339_ 147.350863368421390.02.77496.69 198.199.121.22h2localhost:443[0/0] Software caused connection abort 0-43310120/228/39789_ 147.430826403847000.02.63513.40 51.77.53.202http/1.1www.dreamhightravel.com:443POST /wp-login.php HTTP/1.1 0-43310120/256/39770_ 147.882900392119540.02.69518.19 159.65.138.217http/1.1localhost:80GET /server-status HTTP/1.1 0-43310120/226/40270_ 146.8150374201980.02.50571.97 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /sdzuqhe53773metidm11.html HTTP/1.1 0-43310120/280/39379_ 147.342883401508090.04.75499.84 209.97.169.15http/1.1www.ss-cool.com:443POST /wp-login.php HTTP/1.1 0-43310120/235/39651_ 147.8820405795820.03.01498.95 159.65.138.217http/1.1localhost:80GET /.env HTTP/1.1 0-43310120/312/40513_ 147.9310370103390.02.71506.62 137.184.222.107http/1.1localhost:80GET / HTTP/1.1 0-43310120/232/39415_ 147.8820382795650.02.69514.95 159.65.138.217http/1.1localhost:80GET /login.action HTTP/1.1 0-43310120/234/39788_ 147.9410370607750.02.60507.31 137.184.222.107http/1.1localhost:80GET / HTTP/1.1 0-43310120/244/39415_ 147.795920387054500.09.89486.17 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?jzoqbmb-50826betidm20w.htm HTTP/1.1 0-43310120/227/39422_ 147.872676371614340.02.68528.05 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xxqdpkr-18522detidm73kkd HTTP/1.1 0-43310120/245/39368_ 147.8620378346540.04.17481.84 159.65.138.217http/1.1localhost:80GET / HTTP/1.1 0-43310120/240/39540_ 147.960877411034830.02.67508.79 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?qrrtrge-14511eetidm87de.html HTTP/1.1 0-43310120/243/39715_ 147.4330382774350.02.77498.22 40.77.167.152h2www.thesungolden.com:443[1/1] done: stream 1, GET /g1441008.shtml 0-43310120/228/39382_ 147.701862376188860.02.56552.74 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?vbofooj-47406betidm4 HTTP/1.1 0-43310120/242/40366_ 147.430896377620500.02.97532.60 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?evxvbri-15227kitems/eti.htm HTTP/1.1 0-43310120/227/39869_ 147.652685369294820.02.59490.57 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?srltrge-3203yitems/eti.htm HTTP/1.1 0-43310120/206/39901_ 147.950672372266190.03.46515.69 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?okhrxma-28549uetidm.html HTTP/1.1 0-43310120/233/40149_ 147.21212387214030.02.62551.38 159.65.138.217http/1.1localhost:80GET /server-status HTTP/1.1 0-43310120/231/39593_ 147.8620367443630.02.68520.61 159.65.138.217http/1.1localhost:80GET / HTTP/1.1 0-43310120/240/39736_ 147.853687390944430.02.73512.10 40.77.167.152h2www.thesungolden.com:443GET /g1441008.shtml HTTP/2.0 0-43310120/245/39497_ 147.185886411083720.02.88521.88 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?250491rvjfitems/etidm.htm HTTP/1.1 0-43310120/258/38918_ 147.770872364359980.021.45501.07 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?250581rvjfitems/etidm22.htm HTTP/1.1 0-43310120/225/39884_ 147.532859374640970.02.93527.78 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?jacniby-39516petid HTTP/1.1 0-43310120/243/39167_ 147.960766390982150.03.30479.06 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /cdvlrkq-25495ietidm24.html HTTP/1.1 0-43310120/224/39846_ 147.021660375941280.02.52592.28 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?rnkazkf-25484xetid.htm HTTP/1.1 0-43310120/252/39085_ 147.7950373080950.08.45523.18 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /urbuqhe52475oitems/etidm.htm HTTP/1.1 0-43310120/258/39675_ 147.8620414634690.02.91530.93 159.65.138.217http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-43310120/246/39639_ 146.631866377648110.03.00511.94 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?wylhlzs-48629yetidm86.html HTTP/1.1 0-43310120/220/39611_ 147.492898372437300.02.65500.77 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ihbnuow-29869oetidm.html HTTP/1.1 0-43310120/207/39334_ 147.562695380711490.02.28545.15 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?218926rvjfetidm46g HTTP/1.1 1-43310300/184/40721_ 116.016899378061100.02.27513.56 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?hmwhlzs-10810jetid HTTP/1.1 1-43310300/187/40641_ 117.1510386671560.02.03556.39 161.35.27.144http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-43310300/177/40423_ 116.7620388442360.02.24563.58 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /crjuqhe194599wetidm55pe.html HTTP/1.1 1-43310300/197/40673_ 116.733884396026900.02.30571.29 66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ycrapuc-6277eetidm.html HTTP/1.1 1-43310300/158/41491_ 117.152865367703290.01.83631.30 137.184.222.107http/1.1localhost:80\x16\x03\x01\x01\x12\x01 1-43310300/184/40223_ 115.5611924365027880.02.41577.57 34.228.52.21http/1.1www.12gobiz.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%A0%E0%B8%B2%E0%B8%A9%E0%B8%B5 1-43310300/185/40347_ 117.133850367496730.02.08538.12 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mhfillu-44095setidm79.html HTTP/1.1 1-43310300/174/40874_ 117.142913391596910.01.96519.96 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ppicvxg-15732vetid HTTP/1.1 1-43310300/190/40517_ 116.346850380106300.02.35509.38 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?jzcmrbm-24332petid.htm HTTP/1.1 1-43310300/180/40595_ 117.1420372533480.02.02518.41 159.65.138.217http/1.1localhost:80GET /v2/_catalog HTTP/1.1
Found on 2023-12-11 22:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a62f1c56a62f1c56971d4448Apache Status Apache Server Status for ftp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:36 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 38 seconds Server load: 2.82 2.11 1.72 Total accesses: 697175 - Total Traffic: 9.7 GB - Total Duration: 517742613 CPU Usage: u83.52 s12.57 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.629 ms/request 17 requests currently being processed, 111 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no14yes4281011 330151no14yes626007 630155no23yes6261017 730156no0yes131000 Sum4051 171112035 ................................................................ _____W__R_________W__W__________RW___R______R_______R________R__ ................................................................ ___W_____R_R__W____________W_R________R_________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0069189745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0069196045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0069180245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0069195746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00691167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0069194846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00691145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0069192346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00691107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00691104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0069170146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0069189947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0069172146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00691104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00691108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0069146846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0069170945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0069184445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0069171246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0069170946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00691046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0069149045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0069193646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0069186945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006914146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0069173844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00691722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0069196345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00691107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00691146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00691778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0069196044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0069186344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0069147946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00691150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0069167645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0069145143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00691044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00691232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0069158244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00691183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00691822744746080.00.0079.16 <
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d3512a520b1eApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 03:30:28 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 3 hours 6 minutes 42 seconds Server load: 1.56 1.32 1.00 Total accesses: 14093 - Total Traffic: 205.5 MB - Total Duration: 27571736 CPU Usage: u3113.16 s5826.08 cu55531500 cs13588800 - 617000% CPU load 1.26 requests/sec - 18.8 kB/second - 14.9 kB/request - 1956.41 ms/request 4 requests currently being processed, 6 idle workers __W_WW__W_........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964132210/42/1224_ 18.940124230630.00.1913.93 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1964131280/62/1137_ 26.910024119200.00.2315.04 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-1964132290/39/1116W 18.570022739850.00.1713.61 162.158.189.123http/1.1www.chonlateecamping.com:80GET /%E0%B9%80%E0%B8%81%E0%B8%B5%E0%B9%88%E0%B8%A2%E0%B8%A7%E0% 3-1964132350/41/1125_ 16.81142321090580.01.0817.80 172.70.55.19http/1.1www.yuritrading.com:80POST /wp-login.php HTTP/1.0 4-1964132500/40/986W 15.040019428330.00.1110.92 172.71.123.133http/1.1www.anumotanaboon.com:443POST /wp-login.php HTTP/1.1 5-1964132740/36/978W 10.930020384790.01.0012.37 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 6-1964132980/23/1136_ 9.12033022644560.00.0614.83 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 7-1964133070/23/929_ 13.28032920129990.00.1711.29 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 8-1964133140/24/987W 9.190020429380.00.0911.90 172.70.38.201http/1.1www.business.co.th:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 9-1964133200/22/797_ 10.151014895480.00.118.97 164.90.222.93http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 10-1964-0/0/554. 0.0086108945590.00.005.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1964-0/0/596. 0.00870012738830.00.008.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1964-0/0/378. 0.005534956622540.00.006.11 162.158.154.143http/1.1www.altaccount.com:80GET //wp-admin/network/class.api.php HTTP/1.0 13-1964-0/0/320. 0.0087608337480.00.005.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1964-0/0/259. 0.005353644371360.00.002.29 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 15-1964-0/0/265. 0.005474084629690.00.002.72 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 16-1964-0/0/250. 0.005573333322960.00.003.45 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 17-1964-0/0/196. 0.005485582350890.00.003.51 162.158.154.143http/1.1www.altaccount.com:80GET /images/class.api.php HTTP/1.0 18-1964-0/0/156. 0.005426882234690.00.002.37 162.158.154.143http/1.1www.altaccount.com:80GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.0 19-1964-0/0/117. 0.0086902013170.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1964-0/0/193. 0.005393612853630.00.003.34 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 21-1964-0/0/102. 0.0086701476840.00.007.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964-0/0/193. 0.0098913213903990.00.0019.39 172.68.234.185http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 23-1964-0/0/99. 0.00241901822810.00.002.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 3subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 220 seconds, (range: 193...267)index usage: 0%, cache usage: 0%total entries stored since starting: 119total entries replaced since starting: 0total entries expired since starting: 116total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5721 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 20:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d35151e17138Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 07:49:25 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 3 hours 47 minutes 13 seconds Server load: 0.44 0.34 0.41 Total accesses: 22938 - Total Traffic: 311.1 MB - Total Duration: 48091444 CPU Usage: u3004.11 s5760.15 cu55146600 cs13500900 - 504000% CPU load 1.68 requests/sec - 23.4 kB/second - 13.9 kB/request - 2096.58 ms/request 3 requests currently being processed, 7 idle workers WR__._.__W_.._.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932188240/8/1860W 1.250040143510.00.0320.26 164.92.84.255http/1.1localhost:80GET /server-status HTTP/1.0 1-1932186960/22/1831R 8.601139274720.00.1923.39 137.184.162.65http/1.1localhost:443GET / HTTP/1.1 2-1932188340/6/1881_ 0.080139743170.00.0324.15 137.184.162.65http/1.1 3-1932186270/36/1816_ 8.960139082210.00.6432.97 137.184.162.65http/1.1 4-1932-0/0/1832. 0.0043039140710.00.0023.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1932187440/19/1780_ 3.471136267900.00.1522.88 164.92.84.255http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 6-1932-0/0/1725. 0.00308437293380.00.0021.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1932184990/42/1673_ 14.40152735363060.00.4518.49 137.184.162.65http/1.1 8-1932181680/91/1588_ 19.260134594770.00.9120.81 164.92.84.255http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-1932182680/66/1481W 12.090029431280.00.5519.89 147.182.168.210http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 10-1932183560/59/1171_ 14.601100524858750.00.5815.31 172.69.65.213http/1.1www.proplustech.co.th:443GET /?page_id=Y1341095 HTTP/1.1 11-1932-0/0/1044. 0.0042023253160.00.0013.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1932-0/0/985. 0.0041019560220.00.0010.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1932188490/6/802_ 0.690116781440.00.0326.77 164.92.84.255http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1932-0/0/438. 0.004009992030.00.004.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/171. 0.00257202356490.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/199. 0.00270103019630.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/109. 0.0026966001343770.00.000.70 162.158.106.83http/1.1www.chonlateetravel.com:80GET /x.php HTTP/1.0 18-1932-0/0/106. 0.0026755751576250.00.000.75 162.158.163.114http/1.1www.chonlateeplus.com:443GET /wxo.php HTTP/1.1 19-1932-0/0/142. 0.00257602494810.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/177. 0.00238503205100.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/26. 0.0027000445250.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/99. 0.00428510801664140.00.001.31 162.158.189.46http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%9B 23-1932-0/0/2. 0.004707028590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 6subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 257 seconds, (range: 234...298)index usage: 0%, cache usage: 0%total entries stored since starting: 116total entries replaced since starting: 0total entries expired since starting: 110total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 15323 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 00:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d3518e2b6826Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 26-Oct-2023 23:23:06 +07 Restart Time: Thursday, 26-Oct-2023 15:16:50 +07 Parent Server Config. Generation: 1894 Parent Server MPM Generation: 1893 Server uptime: 8 hours 6 minutes 15 seconds Server load: 2.41 2.72 3.08 Total accesses: 123883 - Total Traffic: 1.8 GB - Total Duration: 506187035 CPU Usage: u3030.19 s5598.31 cu53802700 cs13120500 - 229000% CPU load 4.25 requests/sec - 63.1 kB/second - 14.9 kB/request - 4086.01 ms/request 14 requests currently being processed, 6 idle workers RR___R_WWWW._WW..WC.RWR_.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1893276600/84/6205R 44.7606173229494940.00.7079.98 136.243.228.193http/1.1www.mkandptfoods.com:443 1-1893282820/5/6165R 0.9501227978480.00.0273.81 3.224.220.101http/1.1www.chonlateefbc.com:443 2-1893280770/29/6013_ 19.4403134233192470.00.4297.36 178.62.3.65http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 3-1893282900/5/6112_ 0.4600224073720.00.01121.94 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1893281430/20/5950_ 8.660401223926260.00.2680.37 45.55.193.222http/1.1 5-1893281730/12/5860R 5.3300216019830.00.1696.84 45.55.193.222http/1.1 6-1893281850/9/5754_ 4.7103333219045000.00.0874.02 164.92.192.25http/1.1 7-1893282920/1/5873W 0.0130221554800.00.0172.71 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=rev-powersports-37%E2%80%9D-bkt-on-left-33%E2%80%9D-mot 8-1893283050/1/5615W 0.0800206069160.00.0574.39 172.71.151.137http/1.1www.acumaticathailand.com:80POST //wp-login.php HTTP/1.0 9-1893283120/0/5623W 0.0010202821360.00.0072.23 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=the-westin-resort-spa-ubud-bali-189-%CC%B62%CC%B60%CC%B 10-1893283180/1/5517W 0.0010206238200.00.0075.55 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=bkt-me-kj-motorsports-blog-mm-zz44BPSM HTTP/1.0 11-1893-0/0/5226. 0.00290197991760.00.0066.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1893282000/15/5186_ 5.6201194092610.00.2963.26 143.110.156.182http/1.1localhost:80GET /v2/_catalog HTTP/1.0 13-189390280/1/3895W 1.9482740142196370.00.0161.57 147.78.47.38http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /?ARRAY=5o313639383333323631352p22687474703n5p2s5p2s3632367 14-1893282080/8/4943W 7.1120185953990.00.1081.60 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=introducing-the-bkt-at-171-kj-motorsports-blog-mm-gRKK2 15-1893-0/0/4700. 0.00320175213130.00.0059.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1893-0/0/4892. 0.00180175393090.00.0062.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1893278780/52/4252W 32.9200170630010.00.5064.61 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 18-1893279071/59/4368C 25.3401941638272930.80.7054.53 185.73.240.251http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 19-1893-0/0/3326. 0.00160125713980.00.0056.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1893279690/51/3472R 28.5201140058130.00.4445.11 52.70.240.171http/1.1 21-1893282140/10/3197W 6.2340122973310.00.1040.19 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=lay-z-spa-zurich-hot-tub-review-perfect-for-mm-JOQr5nFb 22-1893282200/13/2287R 5.831084872180.00.1431.80 52.70.240.171http/1.1 23-1893282260/10/1831_ 6.50041671614440.00.0723.38 172.71.151.137http/1.1www.acumaticathailand.com:80POST //wp-login.php HTTP/1.0 24-1893-0/0/1587. 0.00618057227790.00.0033.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1893-0/0/1019. 0.00905042454920.00.0027.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1893-0/0/645. 0.001656024459310.00.009.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1893-0/0/576. 0.003438022395260.00.006.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1893-0/0/487. 0.003485019953890.00.004.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1893-0/0/465. 0.005417021489570.00.0017.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1893-0/0/281. 0.005418011369410.00.003.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1893-0/0/251. 0.00550308888110.00.005.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1893-0/0/39. 0.0055550393568120.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1893-0/0/329. 0.005070015469950.00.0021.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1893-0/0/300. 0.005300012572870.00.002.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1893-0/0/168. 0.00540208866990.00.002.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1893-0/0/67. 0.00547102338890.00.001.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1893-0/0/105. 0.00551905388650.00.0012.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1893-0/0/131. 0.00545408682640.00.001.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1893-0/0/170. 0.00555106825550.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1893-0/0/104. 0.00554803681930.00.001.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1893-0/0/81. 0.00557302794690.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1893-0/0/97. 0.00557003568650.00.001.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1893-0/0/128. 0.00545204280980.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1893-0/0/155. 0.00556204730310.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1893-0/0/24. 0.0055690835200.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1893-0/0/163. 0.00542007682970.00.001.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1893-0/0/117. 0.00546504262870.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1893-0/0/59. 0.00555001923210.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1893-0/0/73. 0.00516705212840.00.000.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 < SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection Child
Found on 2023-10-26 16:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351d4bc42fcApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 08:14:08 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 4 hours 11 minutes 56 seconds Server load: 0.77 0.54 0.72 Total accesses: 22409 - Total Traffic: 283.0 MB - Total Duration: 23580258 CPU Usage: u2919.11 s5356.17 cu52302500 cs12765900 - 431000% CPU load 1.48 requests/sec - 19.2 kB/second - 12.9 kB/request - 1052.27 ms/request 12 requests currently being processed, 2 idle workers C_CWCC_CCCCCW.C................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182390291/6/1942C 2.091119067152.60.0321.30 165.22.108.223http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-182383280/78/1940_ 38.27071120286720.05.3425.18 154.6.94.133http/1.1www.xn--12ca1al2c4cm5fzaon1x.coGET /\xe0\xb8\xad\xe0\xb8\xa2-\xe0\xb9\x81\xe0\xb8\x88\xe0\xb8\x87\xe0\xb8\x82\xe0\xb8\xb1\xe0\xb9\x89\xe0\xb8\x99\xe0\xb8\x95\xe0\xb8\xad\xe0\xb8\x99\xe0\xb8\x81\xe0\xb8\xb2\xe0\xb8\xa3\xe0\xb8\x99\xe0\xb8\xb3\xe0\xb9\x80\xe0\xb8\x82 2-182390421/8/1933C 2.270120274031.40.1024.68 165.22.108.223http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 3-182390500/2/1664W 1.480299917843290.00.0221.71 164.92.192.25http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 4-182382011/89/1736C 31.201119909271.31.5917.50 165.22.108.223http/1.1localhost:443GET /.env HTTP/1.1 5-182384861/66/1563C 35.011017339521.31.3319.02 165.22.108.223http/1.1localhost:443GET /about HTTP/1.1 6-182390520/6/1661_ 2.51046218844740.00.0523.34 143.42.118.5http/1.1www.pokaorganize.com:443GET / HTTP/1.1 7-182385051/62/1627C 21.430741172096711.10.6921.78 154.6.94.133http/1.1www.xn--12ca1al2c4cm5fzaon1x.coGET /feed/ HTTP/1.1 8-182390961/2/1357C 0.000113918751.30.0028.48 165.22.108.223http/1.1localhost:443GET /.git/config HTTP/1.1 9-182391021/1/1319C 0.000213428561.30.0015.80 165.22.108.223http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-182383391/84/1031C 31.190010115331.31.7616.27 165.22.108.223http/1.1localhost:443GET /config.json HTTP/1.1 11-182386671/42/852C 11.37117838231.30.407.26 165.22.108.223http/1.1localhost:443GET /login.action HTTP/1.1 12-182391040/3/778W 0.01008508330.00.0010.07 139.59.182.142http/1.1localhost:80GET /server-status HTTP/1.0 13-1823-0/0/222. 0.001801700860.00.002.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-182387701/19/448C 8.02114968451.40.264.47 165.22.108.223http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1823-0/0/303. 0.0023403067130.00.003.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1823-0/0/436. 0.0020604912960.00.003.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1823-0/0/404. 0.0026104259260.00.005.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/427. 0.00105304212810.00.004.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1823-0/0/53. 0.0011530508580.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/299. 0.007303763365250.00.002.28 45.81.39.198http/1.1www.pndintertrade.com:80GET /wp-content/plugins/core/include.php HTTP/1.0 21-1823-0/0/118. 0.0073101392090.00.001.41 185.194.142.81http/1.1www.xn--12ca1al2c4cm5fzaon1x.coGET /xmlrpc.php HTTP/1.1 22-1823-0/0/32. 0.0011470223930.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/23. 0.0023340163790.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/239. 0.00234202434840.00.002.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1823-0/0/2. 0.00233508920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 81subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 124 seconds, (range: 4...298)index usage: 2%, cache usage: 3%total entries stored since starting: 4910total entries replaced since starting: 0total entries expired since starting: 4829total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 94 hit, 7376 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 01:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d35141eea819Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 23:41:16 +07 Restart Time: Tuesday, 03-Oct-2023 04:02:11 +07 Parent Server Config. Generation: 1799 Parent Server MPM Generation: 1798 Server uptime: 19 hours 39 minutes 4 seconds Server load: 0.40 0.58 0.67 Total accesses: 104632 - Total Traffic: 2.4 GB - Total Duration: 164600581 CPU Usage: u2874.28 s5290.07 cu51828500 cs12662800 - 91200% CPU load 1.48 requests/sec - 36.0 kB/second - 24.3 kB/request - 1573.14 ms/request 2 requests currently being processed, 8 idle workers _W____..W._.__.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-179853770/10/8733_ 4.2601150236020.00.07247.69 199.249.230.122http/1.1www.chonlateebusiness.com:443POST /xmlrpc.php HTTP/1.1 1-179855010/0/8712W 0.0020134602100.00.00187.02 64.227.126.135http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 2-179849400/64/8275_ 21.2901129985640.00.28177.22 207.154.240.169http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-179853830/12/8119_ 3.8201134704690.00.15228.57 128.199.61.251http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-179853870/11/7815_ 3.9901120637920.00.09225.38 161.35.155.246http/1.1 5-179846970/84/7721_ 35.2701119314520.00.74176.46 207.154.240.169http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 6-1798-0/0/7600. 0.003960117536180.00.00164.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1798-0/0/7550. 0.00100346117301500.00.00152.45 158.69.23.79http/1.1www.happy-carrent.com:80GET /wp-includes/images/include.php HTTP/1.0 8-179847180/81/6698W 35.5200111636760.00.54151.98 128.199.61.251http/1.1localhost:80GET /server-status HTTP/1.0 9-1798-0/0/6687. 0.001990104261780.00.00134.15 71.6.134.230http/1.1localhost:443GET / HTTP/1.1 10-179847040/80/5863_ 39.770198511040.00.72180.86 165.232.76.155http/1.1 11-1798-0/0/5185. 0.0010568079416560.00.00133.53 27.254.96.168http/1.1www.leadingservice.co.th:443POST /wp-cron.php?doing_wp_cron=1696351169.64363408088684082031 12-179850640/43/3944_ 24.71087762637230.00.3694.29 165.232.76.155http/1.1 13-179850660/41/3147_ 18.600146888440.00.2873.38 161.35.155.246http/1.1 14-1798-0/0/2060. 0.00744030680840.00.0041.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1798-0/0/1684. 0.00805022025390.00.0035.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1798-0/0/889. 0.001320012097890.00.0021.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1798-0/0/368. 0.0083304650570.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1798-0/0/366. 0.00133105543310.00.007.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1798-0/0/314. 0.00132205390900.00.007.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1798-0/0/173. 0.00132501917750.00.001.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1798-0/0/275. 0.0071014313391690.00.002.45 172.71.223.55http/1.1www.smetast.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B9%80 22-1798-0/0/106. 0.0013320738700.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1798-0/0/240. 0.00133404805790.00.002.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1798-0/0/316. 0.0080804364940.00.003.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1798-0/0/191. 0.00119502449070.00.002.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1798-0/0/100. 0.007106931250430.00.000.98 172.68.234.189http/1.1www.smetast.com:80POST /wp-cron.php?doing_wp_cron=1696350564.33738398551940917968 27-1798-0/0/102. 0.00133701785870.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1798-0/0/105. 0.0013390966930.00.002.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1798-0/0/12. 0.0013290108990.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1798-0/0/94. 0.008180939280.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1798-0/0/193. 0.00132703328780.00.002.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1798-0/0/190. 0.00679802308920.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1798-0/0/99. 0.00679813381712710.00.001.19 149.202.65.189http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%99 34-1798-0/0/123. 0.00780601056340.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1798-0/0/125. 0.00779401403490.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1798-0/0/11. 0.0078050217480.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1798-0/0/57. 0.0078091573560.00.001.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1798-0/0/10. 0.0078080121730.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1798-0/0/9. 0.0078100129820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1798-0/0/44. 0.0078070551430.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1798-0/0/9. 0.00403800116370.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1798-0/0/12. 0.00403690172750.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1798-0/0/5. 0.0040383076270.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1798-0/0/76. 0.004037601477960.00.001.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1798-0/0/5. 0.0040389020710.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1798-0/0/104. 0.0040125547812450.00.001.54 159.192.136.230http/1.1www.importantaccount.com:443POST //xmlrpc.php HTTP/1.1 47-1798-0/0/10. 0.0040368051750.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1798-0/0/101. 0.00401132271071880.00.001.39 54.36.148.103http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2022/10/Chondesign_logo_-174-215x215.jp 49-1798-0/0/5. 0.0040387022460.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-10-03 16:39 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351b89a20d8Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:09 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 22 seconds Server load: 0.86 1.14 1.26 Total accesses: 388 - Total Traffic: 2.2 MB - Total Duration: 194693 CPU Usage: u2752.74 s5255.58 cu51774600 cs12651800 - 7.86e+7% CPU load 4.73 requests/sec - 28.0 kB/second - 5.9 kB/request - 501.786 ms/request 7 requests currently being processed, 5 idle workers RR_W_._._R.R.R._R................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299410/39/39R 6.0902143240.00.200.20 172.105.37.32http/1.1localhost:80GET /config.json HTTP/1.0 1-1797299570/21/21R 6.1900408230.00.290.29 87.249.134.39http/1.1 2-1797301250/8/25_ 0.930071230.00.030.08 172.105.37.32http/1.1localhost:80GET /telescope/requests HTTP/1.0 3-1797301600/2/31W 0.0500103280.00.000.17 167.99.8.63http/1.1localhost:80GET /server-status HTTP/1.0 4-1797301310/6/21_ 1.9100156190.00.040.18 162.243.184.251http/1.1www.pokaorganize.com:80GET /_all_dbs HTTP/1.0 5-1797-0/0/11. 0.00450125320.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1797300730/21/33_ 5.8301126960.00.130.15 74.207.237.114http/1.1 7-1797-0/0/11. 0.00460155160.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1797300250/34/34_ 1.460025950.00.130.13 159.203.63.67http/1.1 9-1797300310/27/27R 2.370065970.00.060.06 74.207.237.46http/1.1 10-1797-0/0/11. 0.0047076200.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1797300440/22/22R 3.310081100.00.180.18 162.243.161.105http/1.1 12-1797-0/0/16. 0.0042034670.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1797300520/30/30R 4.920095380.00.110.11 193.32.248.149http/1.1www.yadaacc168.co.th:443 14-1797-0/0/10. 0.0048011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300840/18/18_ 4.5401110370.00.060.06 167.99.184.41http/1.1localhost:80GET /server-status HTTP/1.0 16-1797300920/14/14R 4.3101116880.00.070.07 193.32.248.149http/1.1www.yadaacc168.co.th:443 17-1797-0/0/6. 0.0033011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0041013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0035013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 44subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 242 seconds, (range: 217...293)index usage: 1%, cache usage: 2%total entries stored since starting: 44total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 221 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351eababa94Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:30 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 59 seconds Server load: 4.14 4.30 4.35 Total accesses: 350 - Total Traffic: 3.9 MB - Total Duration: 474330 CPU Usage: u2464.08 s4253.34 cu40848700 cs9867590 - 8.6e+7% CPU load 5.93 requests/sec - 67.8 kB/second - 11.4 kB/request - 1355.23 ms/request 14 requests currently being processed, 1 idle workers WWRCRC_CRWCWCRR................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239900/22/22W 15.5500322640.00.380.38 172.70.39.107http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 1-1527239920/27/27W 15.9000397450.00.240.24 172.105.37.32http/1.1localhost:80GET /server-status HTTP/1.0 2-1527240080/25/25R 16.400905334820.00.250.25 139.144.150.8http/1.1 3-1527240121/23/23C 15.170113437792101.00.350.35 207.154.240.169http/1.1www.pokaorganize.com:443GET / HTTP/1.1 4-1527242190/2/22R 0.0101275710.00.000.18 165.227.146.2http/1.1localhost:80GET /about HTTP/1.0 5-1527240371/25/25C 17.180733357615.50.290.29 172.70.38.243http/1.1www.proplustech.co.th:443POST /wp-login.php HTTP/1.1 6-1527240450/29/29_ 17.4301353940.00.300.30 143.110.156.182http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 7-1527240471/25/25C 16.640745348035.20.280.28 162.158.91.60http/1.1www.proplustech.co.th:443GET /wp-login.php HTTP/1.1 8-1527240580/24/24R 16.0601951345860.00.290.29 52.251.36.208http/1.1www.chonlateedesign.com:443 9-1527241270/12/23W 6.4500300140.00.100.24 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 10-1527240701/24/24C 16.580420349975.80.250.25 206.81.1.88http/1.1www.pokaorganize.com:443GET / HTTP/1.1 11-1527240760/27/27W 17.0400340230.00.300.30 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 12-1527240861/21/21C 14.6501119297046.60.230.23 159.223.38.52http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 13-1527241040/21/21R 11.2500226240.00.220.22 159.65.135.96http/1.1 14-1527241420/12/12R 5.8800115650.00.110.11 167.172.232.142http/1.1localhost:80GET / HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 38subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 273 seconds, (range: 239...298)index usage: 1%, cache usage: 1%total entries stored since starting: 38total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 82 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351d8efdd26Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:02 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 13 seconds Server load: 0.65 1.15 1.36 Total accesses: 116 - Total Traffic: 1.1 MB - Total Duration: 132493 CPU Usage: u1983.69 s3433.6 cu32339200 cs7737160 - 5.49e+7% CPU load 1.59 requests/sec - 15.9 kB/second - 10.0 kB/request - 1142.18 ms/request 7 requests currently being processed, 4 idle workers _W_WW_WRRR_....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/14/14_ 4.55014118860.00.160.16 146.190.98.165http/1.1 1-129450830/4/8W 0.431033940.00.010.04 54.36.148.10http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 2-129449750/17/17_ 5.1201125370.00.070.07 139.59.230.191http/1.1localhost:80GET /login.action HTTP/1.0 3-129449890/8/8W 5.3300202760.00.190.19 91.213.50.8http/1.1www.pokaorganize.com:443GET /.git/config HTTP/1.1 4-129449950/11/11W 4.8000136670.00.080.08 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1685726641.75789499282836914062 5-129450150/8/8_ 4.5501211230.00.140.14 146.190.98.165http/1.1 6-129450210/14/14W 3.690072140.00.140.14 165.22.108.223http/1.1localhost:80GET /server-status HTTP/1.0 7-129450280/12/12R 5.3800146600.00.170.17 139.59.230.191http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-129450300/10/10R 5.7200164050.00.050.05 165.22.74.203http/1.1 9-129450540/10/10R 4.170092200.00.070.07 146.190.98.165http/1.1 10-129451900/0/1_ 0.000010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1294-0/0/3. 0.0034021050.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 34subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 265 seconds, (range: 239...298)index usage: 1%, cache usage: 1%total entries stored since starting: 34total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 80 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d3512b497ab9Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:39 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 5 seconds Server load: 0.49 1.05 0.98 Total accesses: 185 - Total Traffic: 1.6 MB - Total Duration: 96495 CPU Usage: u1627.45 s2824.05 cu26678600 cs6409520 - 5.09e+7% CPU load 2.85 requests/sec - 24.4 kB/second - 8.6 kB/request - 521.595 ms/request 12 requests currently being processed, 0 idle workers WCWRRWWCWCCC...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416031/20/20L 5.6601119550.70.120.12 143.198.72.96http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 1-108416211/17/17C 4.7412101632.60.130.13 146.190.98.165http/1.1localhost:443GET /.env HTTP/1.1 2-108416231/22/22L 7.2200213930.70.130.13 143.198.72.96http/1.1localhost:80GET /.DS_Store HTTP/1.0 3-108416250/27/27R 4.9001138200.00.510.51 165.22.108.223http/1.1localhost:80GET /api/search?folderIds=0 HTTP/1.0 4-108416270/18/18R 5.9301135150.00.290.29 185.2.5.77http/1.1www.uniqueworkthailand.com:443 5-108416521/22/22L 2.910073360.70.100.10 143.198.72.96http/1.1localhost:80GET /.git/config HTTP/1.0 6-108416591/26/26L 3.360069680.70.110.11 143.198.72.96http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-108416831/19/19C 2.220150561.30.130.13 146.190.98.165http/1.1localhost:443GET /config.json HTTP/1.1 8-108417060/13/13W 3.210062690.00.030.03 143.198.72.96http/1.1localhost:80GET /server-status HTTP/1.0 9-108417461/3/3C 0.021182.70.010.01 146.190.98.165http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-108417541/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /login.action HTTP/1.1 11-108417561/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 278 seconds, (range: 234...296)index usage: 0%, cache usage: 0%total entries stored since starting: 15total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 69 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d351ccb600afApache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:22 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 26 seconds Server load: 1.69 1.59 1.47 Total accesses: 97 - Total Traffic: 630 kB - Total Duration: 81539 CPU Usage: u1257.49 s2309.29 cu21800400 cs5275950 - 1.04e+8% CPU load 3.73 requests/sec - 24.2 kB/second - 6.5 kB/request - 840.608 ms/request 8 requests currently being processed, 3 idle workers WLC.RWW_RW__...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775490/9/9W 3.0400121190.00.030.03 194.195.219.36http/1.1localhost:80GET /server-status HTTP/1.0 1-84775501/14/14L 3.520087570.70.070.07 134.209.207.188http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 2-84775521/7/7C 2.830157222.20.050.05 139.59.138.104http/1.1localhost:443GET / HTTP/1.1 3-847-0/0/7. 0.000059750.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-84775790/14/14R 3.620075530.00.080.08 134.209.207.188http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 5-84776000/4/4W 1.780034900.00.020.02 165.22.205.214http/1.1www.pokaorganize.com:443GET / HTTP/1.1 6-84776070/4/4W 1.950038100.00.040.04 143.110.217.252http/1.1www.pokaorganize.com:443GET / HTTP/1.1 7-84776090/6/6_ 2.760167300.00.130.13 161.35.153.48http/1.1 8-84776230/6/6R 2.610153410.00.080.08 5.253.18.199http/1.1www.nptpropertythailand.com:443 9-84776340/11/11W 2.080059560.00.040.04 134.209.207.188http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-84776360/9/9_ 1.5800160650.00.030.03 194.195.219.36http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 11-84777200/7/7_ 0.0102150.00.010.01 134.209.207.188http/1.1localhost:80GET /server-status HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 295 seconds, (range: 288...298)index usage: 0%, cache usage: 0%total entries stored since starting: 9total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 31 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3144b0d35144b0d35152acdd40Apache Status Apache Server Status for ftp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:04 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 1 second Server load: 2.23 1.75 1.57 Total accesses: 10 - Total Traffic: 46 kB - Total Duration: 4379 CPU Usage: u627.75 s1251.75 cu12780600 cs3072970 - 1.59e+9% CPU load 10 requests/sec - 46.0 kB/second - 4710 B/request - 437.9 ms/request 6 requests currently being processed, 0 idle workers RWWRWC............................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799540/1/1R 0.65067313470.00.040.04 157.245.53.210http/1.1 1-43799720/1/1W 0.40008260.00.000.00 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 2-43799780/6/6W 0.570011380.00.010.01 172.104.179.101http/1.1localhost:80GET /server-status HTTP/1.0 3-43799880/1/1R 0.51053210650.00.000.00 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 4-43799940/0/0W 0.000000.00.000.00 5.188.62.140http/1.1www.brobanglan.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 5-437100011/1/1C 0.010122.20.000.00 172.105.120.53http/1.1localhost:443GET / HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 2subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 299 seconds, (range: 299...299)index usage: 0%, cache usage: 0%total entries stored since starting: 2total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 09:01
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c3682db003Apache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 16:01:21 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 6 hours Server load: 2.08 2.02 2.01 Total accesses: 1847849 - Total Traffic: 23.8 GB - Total Duration: 2141104250 CPU Usage: u214.54 s116.78 cu32089.3 cs2210.25 - 1.42% CPU load .757 requests/sec - 10.2 kB/second - 13.5 kB/request - 1158.7 ms/request 3 requests currently being processed, 125 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no2yes032002 229661no1yes230001 329394no1yes131001 529374no1yes032001 Sum405 3125005 ________________________________................................ ___________WR_____________________________________________R_____ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/39/14787_ 13.15100160260950.00.14193.77 164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/39/15282_ 13.17100139013330.00.11198.96 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/35/14848_ 13.1910150309430.00.16192.73 178.62.3.65h2localhost:443[0/0] Software caused connection abort 0-92293730/33/15026_ 13.2170145874900.00.08185.96 161.35.27.144http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/33/14931_ 13.1520147711670.00.15185.42 178.128.151.41http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/29/15156_ 13.2240156649120.00.11188.53 139.144.150.45http/1.1localhost:443GET / HTTP/1.1 0-92293730/27/14827_ 13.17400145588370.00.13200.23 143.110.156.182http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/30/15137_ 13.1920150182020.00.07187.57 167.172.232.142http/1.1 0-92293730/29/15096_ 13.1340145226800.00.07229.87 147.182.130.98http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/38/15232_ 13.15160148853320.00.15194.87 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/37/14797_ 13.21120154393230.00.09200.68 143.110.218.229http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/34/14807_ 13.21190147156120.00.08195.45 143.110.218.229http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/43/14674_ 13.1840137182720.00.14185.50 178.128.151.41http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/35/14826_ 13.17180169086490.00.09186.02 161.35.27.144http/1.1 0-92293730/31/15777_ 13.1900141614990.00.09187.75 162.243.161.105http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/37/14829_ 12.9610165341190.00.08182.47 139.144.150.45h2localhost:443[0/0] Software caused connection abort 0-92293730/44/14883_ 13.1600143404980.00.12206.38 74.207.237.114http/1.1 0-92293730/36/14943_ 13.1910144939930.00.12189.30 162.243.161.105http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/28/14756_ 12.6920160388140.00.05200.53 74.207.237.114h2localhost:443[0/0] Software caused connection abort 0-92293730/35/14980_ 13.1870144639340.00.13193.81 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/37/14974_ 13.2710181495860.00.15193.41 161.35.155.246http/1.1localhost:80GET /login.action HTTP/1.1 0-92293730/32/14997_ 13.1518147053740.00.09204.06 167.172.232.142http/1.1 0-92293730/36/15454_ 13.0620150748540.00.15188.27 74.207.237.114h2localhost:443[0/0] Software caused connection abort 0-92293730/32/14663_ 12.6197138765130.00.13190.18 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/41/14965_ 13.21120162205820.00.09186.87 143.110.218.229http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/36/14639_ 13.2710135981630.00.13196.98 143.198.72.96http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-92293730/29/15136_ 13.21120144713440.00.04194.49 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 0-92293730/34/14919_ 13.2610159187410.00.05213.30 161.35.190.56http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/34/14721_ 13.17400152174350.00.11175.92 161.35.190.56http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/27/15175_ 13.2150135139110.00.08225.13 161.35.155.246http/1.1localhost:80GET / HTTP/1.1 0-92293730/42/14661_ 13.2150155572970.00.06199.14 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/31/14921_ 13.2810145814970.00.15185.14 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-92-0/0/15731. 0.00424660138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00424660136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00424660174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00424660150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00424660146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00424660134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00424660172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00424660165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00424660127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00424660152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00424660148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00424660159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00424660159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00424660137016410.00.00183.04 159.223.102.13http/1.1localhost:80GET
Found on 2024-02-02 09:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c3e6bbd6f9Apache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 08:25:57 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 22 hours 24 minutes 36 seconds Server load: 3.45 2.89 2.64 Total accesses: 789355 - Total Traffic: 10.7 GB - Total Duration: 962202881 CPU Usage: u315.65 s22.14 cu13326.1 cs698.67 - 8.6% CPU load 4.72 requests/sec - 67.1 kB/second - 14.2 kB/request - 1218.97 ms/request 11 requests currently being processed, 117 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425no7yes428007 111360no2yes329000 216287no1yes329000 316453no10yes131009 Sum4020 111170016 R___________W________R_____R_______________________R__W___W_____ __R________R__________________R______________R__________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-784250/200/6088R 125.882213783649780.02.7390.26 23.22.35.162http/1.1 0-784250/212/6564_ 126.301061118340.02.2186.67 159.65.138.217http/1.1localhost:80GET /login.action HTTP/1.1 0-784250/183/6087_ 125.840072862250.02.3690.66 165.232.106.187http/1.1 0-784250/219/6427_ 126.231070419450.02.4183.40 137.184.162.65h2localhost:443[0/0] Software caused connection abort 0-784250/201/6146_ 125.68183967286620.02.1579.42 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /eoaaebb-41383netidm12rbn HTTP/1.1 0-784250/273/6519_ 126.260078647410.03.7185.87 138.197.88.136http/1.1localhost:80GET / HTTP/1.1 0-784250/211/6318_ 126.361059342240.02.6697.07 159.65.138.217http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/202/6360_ 124.081170468237720.02.2783.12 66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /db.php?g3205818.shtml HTTP/1.1 0-784250/262/6376_ 126.30184963260300.02.70125.55 52.70.240.171http/1.1www.chonlateeboi.com:443GET /31193crwdeti.html HTTP/1.1 0-784250/250/6293_ 126.151072255780.02.7180.95 192.53.126.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-784250/187/6048_ 125.731076897820.02.1077.31 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-784250/197/6003_ 126.30141376045400.02.3978.21 159.65.138.217http/1.1localhost:80\x16\x03\x01\x01\b\x01 0-784251/214/6073W 126.300053864370.02.6180.54 139.144.150.23http/1.1localhost:80GET /server-status HTTP/1.1 0-784250/211/6276_ 126.380082370980.02.5184.80 139.144.150.23http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-784250/189/6708_ 125.17189857337760.02.2686.68 165.232.106.187h2www.dreamhightravel.com:443[0/0] Software caused connection abort 0-784250/267/6042_ 126.361083769760.02.5778.91 159.65.138.217http/1.1localhost:80GET /config.json HTTP/1.1 0-784250/214/6210_ 124.54068165117970.02.3781.04 159.203.94.228h2localhost:443[0/0] Software caused connection abort 0-784250/209/6360_ 126.270059751980.02.2182.59 128.199.62.55http/1.1 0-784250/201/6364_ 126.221062600780.02.2181.00 128.199.62.55http/1.1localhost:443GET /config.json HTTP/1.1 0-784250/188/6124_ 125.60089969230350.02.5386.36 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-784250/284/6401_ 126.361090790670.02.7988.99 165.22.74.203http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-784250/187/6095R 126.292071650100.02.1582.87 137.184.106.30http/1.1localhost:80GET / HTTP/1.1 0-784250/187/6667_ 125.671074227080.02.3288.88 139.144.150.205http/1.1localhost:80GET / HTTP/1.1 0-784250/212/6177_ 126.30155663664100.02.2889.23 142.4.12.109http/1.1www.winnerpropest.com:443POST /wp-login.php HTTP/1.1 0-784250/268/6079_ 125.862105675840670.02.9376.37 3.224.220.101http/1.1www.chonlateeboi.com:443GET /41878eslwetidm17s HTTP/1.1 0-784250/185/6193_ 125.88188458123810.02.1180.24 3.224.220.101http/1.1www.chonlateeboi.com:443GET /44021eslwetidm55.html HTTP/1.1 0-784250/207/6225_ 126.311057269080.02.3490.22 159.65.138.217http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-784250/205/6201R 125.802071110030.02.65110.76 104.192.3.74http/1.1www.uniqueworkthailand.com:443 0-784250/208/6144_ 126.301054722130.02.2977.66 139.144.150.23http/1.1localhost:80GET /about HTTP/1.1 0-784250/303/6402_ 126.26084473245630.03.41116.55 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2486tobeitems/etidm35q.html HTTP/1.1 0-784250/184/6095_ 126.390067867840.02.2189.87 138.197.88.136http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-784250/200/6401_ 126.11184965751040.02.5782.33 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /lxakawv-4080netidm36ykn.htm HTTP/1.1 1-7113600/175/6279_ 105.550073426600.01.9581.52 207.154.240.169h2localhost:443[0/0] Software caused connection abort 1-7113600/214/6078_ 104.88083867238740.02.4877.44 128.199.62.55h2localhost:443[0/0] Software caused connection abort 1-7113600/190/6065_ 106.0201293910290.02.2678.49 203.170.192.183http/1.1www.pokaorganize.com:443POST /wp-cron.php?doing_wp_cron=1704590757.05838489532470703125 1-7113600/169/5729_ 105.930076526930.02.3176.14 164.92.192.25http/1.1localhost:80GET /about HTTP/1.1 1-7113600/171/5983_ 105.76083875766560.01.9988.75 207.154.240.169http/1.1 1-7113600/167/6040_ 105.940065211850.02.0479.51 138.197.88.136http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7113600/154/6086_ 105.900065795430.01.7877.02 159.65.138.217http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-7113600/170/6169_ 105.790408477025830.02.8182.66 66.249.65.233http/1.1www.chonlateenextbiz.com:443GET /sitemap82.xml HTTP/1.1 1-7113600/184/6131_ 105.611056112710.02.3379.05 139.59.182.142h2localhost:443[0/0] Software caused connection abort 1-7113600/169/6087_ 105.830070230670.01.7985.02 164.92.192.25http/1.1localhost:80GET / HTTP/1.1 1-7113600/164/5880_ 105.810076765000.02.1184.33 207.154.240.169http/1.1 1-7113600/162/6396_ 106.020059409760.01.8992.62 162.243.186.177http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7113600/182/6116_ 105.15086779954910.02.1682.62 137.184.162.65h2localhost:443[0/0] Software caused connection abort 1-7113600/159/6000_ 105.5900</
Found on 2024-01-07 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c3da2de37dApache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 23:25:49 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 hours 24 minutes 28 seconds Server load: 3.81 3.81 3.41 Total accesses: 240325 - Total Traffic: 3.5 GB - Total Duration: 192202875 CPU Usage: u82.11 s5.78 cu3895.6 cs208.8 - 8.69% CPU load 4.98 requests/sec - 75.8 kB/second - 15.2 kB/request - 799.762 ms/request 11 requests currently being processed, 85 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 030686no5yes725000 132728no1yes230000 229460no5yes230002 Sum3011 1185002 ______RR_____WR_______WW_______R______WW________________________ ______________________W________R................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0306860/69/2677_ 31.250021681460.00.7840.82 128.199.195.68http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-0306860/68/2951_ 31.420020742750.00.7539.24 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-0306860/50/2621_ 31.570032958730.00.5747.64 147.182.130.98http/1.1localhost:80GET /login.action HTTP/1.1 0-0306860/58/2855_ 31.470021056120.00.6136.44 147.182.130.98http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-0306860/62/2741_ 31.500021483400.00.7634.21 139.144.150.23http/1.1localhost:443GET / HTTP/1.1 0-0306860/65/3006_ 31.470021661830.00.7537.94 159.203.44.43http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0306860/56/2757R 31.351021063510.00.6249.71 20.163.30.95http/1.1 0-0306860/54/2748R 31.461021900300.00.7236.15 66.249.72.66http/1.1www.chonlateeadmin.com:443 0-0306860/54/2806_ 31.540020816530.00.6278.65 142.93.64.15http/1.1localhost:80GET /login.action HTTP/1.1 0-0306860/70/2752_ 31.370020899000.00.8935.63 128.199.195.68http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-0306860/57/2693_ 31.590024471730.00.6233.06 139.59.182.142http/1.1localhost:80GET /.env HTTP/1.1 0-0306860/47/2611_ 31.46058721113430.00.5233.97 20.163.30.95http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 0-0306860/56/2592_ 31.470021069560.00.5335.95 139.59.182.142http/1.1localhost:80GET /login.action HTTP/1.1 0-0306861/54/2897W 30.800021801510.00.6339.80 3.224.220.101http/1.1www.chonlateeboi.com:443GET /44695khrritems/etidm94br HTTP/1.1 0-0306860/55/2933R 31.441023963130.00.5939.88 185.191.171.9http/1.1www.chonlateefood.com:443 0-0306860/55/2694_ 31.610021063190.00.6335.35 142.93.64.15http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-0306860/52/2602_ 31.130021396290.00.6233.90 139.144.150.205http/1.1localhost:80GET /login.action HTTP/1.1 0-0306860/53/2925_ 31.500021327310.00.5839.14 142.93.64.15http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0306860/62/2813_ 31.100020792340.00.7637.11 137.184.150.232h2localhost:443[0/0] Software caused connection abort 0-0306860/61/2655_ 31.54062022723210.00.6540.11 20.163.30.95http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 0-0306860/70/2719_ 31.620320778190.00.8739.21 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 0-0306860/64/2748_ 31.590021776950.00.7339.99 146.190.64.200http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-0306861/54/3087W 31.460020755300.00.6439.61 159.203.63.67http/1.1localhost:80GET /server-status HTTP/1.1 0-0306861/48/2618W 31.500020293400.00.5634.80 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?weavrsm-129593netid HTTP/1.1 0-0306860/60/2659_ 31.390021286670.00.5534.30 192.95.30.177http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%9A 0-0306860/66/2640_ 31.540020734970.01.0534.37 159.203.63.67http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0306860/62/2715_ 31.510620584040.00.6044.97 159.203.44.43http/1.1localhost:80GET /server-status HTTP/1.1 0-0306860/58/2714_ 31.490106120780700.00.6865.10 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?wutggdh-235959gitems/eti HTTP/1.1 0-0306860/53/2604_ 30.960172720988550.00.5832.81 185.70.94.16http/1.1www.dtacsme.com:443GET / HTTP/1.1 0-0306860/56/2946_ 31.540020133410.00.5773.58 138.68.163.10http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-0306860/57/2633_ 31.620020924550.00.6841.68 142.93.64.15http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-0306860/95/2984R 31.36173520966700.00.8436.60 185.70.94.16http/1.1www.dtacsme.com:443 1-0327280/8/2117_ 4.640205416015740.00.0827.92 128.199.195.68h2localhost:443[0/0] Software caused connection abort 1-0327280/6/1901_ 4.950246915793450.00.0824.61 23.22.35.162http/1.1www.chonlateeboi.com:443GET /44685khrritems/etidm97.htm HTTP/1.1 1-0327280/15/2041_ 4.970205816135420.00.1328.38 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?otrggdh-46177eeti.html HTTP/1.1 1-0327280/15/1910_ 4.980015557550.00.1725.56 137.184.150.232http/1.1localhost:443GET / HTTP/1.1 1-0327280/12/1940_ 4.970110015511530.00.1730.02 185.70.94.16http/1.1www.dtacsme.com:443GET / HTTP/1.1 1-0327280/9/1949_ 4.920615305150.00.0926.00 159.203.63.67http/1.1 1-0327281/8/1954W 4.800015866350.00.0924.09 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?uetvrsm-32013gitems/eti.htm HTTP/1.1 1-0327281/11/2024W 4.831015735570.00.1227.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?ziovrsm-32460betidm3.htm HTTP/1.1 1-0327280/9/1988_ 4.800015904630.00.1027.84 23.22.35.162http/1.1www.chonlateeboi.com:443GET /32110qbkeetidm82a HTTP/1.1 1-0327280/9/1923_ 4.850015459960.00.1025.17 128.199.195.68http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0327280/13/1931_ 4.980015193010.00.1228.53 188.165.232.135http/1.1www.chonlateedesign.com:80GET /%E0%B8%94%E0%B8%B2%E0%B8%A7%E0%B8%99%E0%B9%8C%E0%B9%82%E0% 1-0327280/11/2069_ 4.880016343450.00.0828.94 159.203.44.43http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-0327280/10/1976_ 4.590016007740.00.0626.10 128.199.195.68h2localhost:443[0/0] Software caused connection abort 1-0327280/12/1919_ 4.97001561850
Found on 2024-01-05 16:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c3307d77faApache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 22:40:07 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 22 hours 17 minutes 8 seconds Server load: 1.35 1.68 1.41 Total accesses: 4322812 - Total Traffic: 55.5 GB - Total Duration: 4091396643 CPU Usage: u205.39 s46 cu77797.2 cs4073.16 - 8.7% CPU load 4.58 requests/sec - 61.6 kB/second - 13.5 kB/request - 946.466 ms/request 7 requests currently being processed, 57 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03068no26yes4280018 17820no5yes329000 Sum2031 7570018 ______W______________R___R__W___R_______________________W______W ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-4030680/168/39046_ 105.1809355423210.01.86494.12 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.1 0-4030680/159/38392_ 105.440939362081680.01.70484.88 94.156.68.28http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 0-4030680/161/38802_ 105.4100397237770.01.77497.51 162.243.161.105http/1.1localhost:80GET /about HTTP/1.1 0-4030680/171/38843_ 105.3000385646840.01.82507.95 162.243.161.105http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-4030680/162/39337_ 105.3300366019660.01.78561.26 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-4030680/146/38403_ 105.1101020395162750.01.66485.79 85.208.96.193http/1.1www.chonlateefood.com:443GET /getid/zco32707qihcitems HTTP/1.1 0-4030681/142/38724W 105.1400399114960.01.60487.79 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?dm-4904zetidm93qz8.htm HTTP/1.1 0-4030680/161/39480_ 105.4401658363901780.01.85495.63 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mprasnc-50699eetidm90zc.html HTTP/1.1 0-4030680/161/38469_ 104.800860376273260.01.76503.84 161.35.155.246http/1.1localhost:80\x16\x03\x01\x01\x07\x01 0-4030680/144/38889_ 104.9200364403230.01.58497.01 178.128.151.41http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-4030680/168/38453_ 105.340737380394260.01.78467.51 66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?iybillu-12085oetidm.html HTTP/1.1 0-4030680/155/38527_ 105.2200364303840.01.68517.75 159.203.182.222http/1.1 0-4030680/164/38387_ 105.25013371232630.01.85468.91 144.126.202.105http/1.1localhost:80GET /server-status HTTP/1.1 0-4030680/171/38581_ 105.4400400535370.01.92497.19 144.126.202.105http/1.1localhost:80GET /server-status HTTP/1.1 0-4030680/152/38799_ 104.6201248376506980.01.85487.85 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-4030680/168/38475_ 105.4401368505420.01.87541.93 203.170.192.183http/1.1www.chonlateepro.com:443POST /wp-cron.php?doing_wp_cron=1702309206.83394098281860351562 0-4030680/149/39440_ 105.1400371429180.01.59521.92 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-4030680/169/38936_ 105.0800362546870.01.88480.01 137.184.162.65h2localhost:443[0/0] Software caused connection abort 0-4030680/158/38982_ 105.420737363849890.01.71503.58 192.99.3.137http/1.1www.12gobiz.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%A3 0-4030680/159/39261_ 105.2100379873310.01.74512.60 144.126.202.105http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-4030680/162/38644_ 105.4200358097650.01.91509.57 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /wndgzna88435qetidm.html HTTP/1.1 0-4030680/148/38813R 105.2611129384520610.01.67501.23 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4b 0-4030680/169/38563_ 105.3300403331530.01.98510.94 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-4030680/152/37875_ 102.8306506357925160.01.65470.89 137.184.162.65h2localhost:443[0/0] Software caused connection abort 0-4030680/148/38919_ 105.410948367269530.01.72516.59 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?iyxhlzs-93517kitems/etidm20 HTTP/1.1 0-4030680/170/38198R 105.2610384408790.01.95467.34 104.236.193.132http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-4030680/158/38901_ 105.340971368705050.01.85580.24 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?399004himsetidm8 HTTP/1.1 0-4030680/158/38147_ 105.19011366596930.01.54507.09 27.254.96.168http/1.1www.yadaacc168.co.th:443POST /wp-cron.php?doing_wp_cron=1702309205.35574889183044433593 0-4030681/152/38741W 105.3000407812150.01.69520.11 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 0-4030680/149/38609_ 105.2600371530000.01.66499.90 31.184.236.34http/1.1 0-4030680/153/38727_ 105.3300366490440.01.62490.45 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.1 0-4030680/120/38406_ 105.2400374436380.01.39533.78 207.154.240.169h2localhost:443[0/0] Software caused connection abort 1-4078200/72/39614R 38.0510370063300.00.69500.98 23.22.35.162http/1.1www.chonlateeboi.com:443 1-4078200/53/39532_ 37.8200378273060.00.49543.25 165.22.74.203http/1.1 1-4078200/53/39317_ 37.9200379936990.00.55546.62 159.223.102.13http/1.1 1-4078200/54/39573_ 38.1800388078160.00.57558.26 144.126.202.105http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-4078200/49/40344_ 37.9210359739310.00.60613.22 164.90.222.93http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-4078200/58/39156_ 37.7909945357126270.00.64560.14 207.154.240.169http/1.1 1-4078200/54/39243_ 36.5300360394090.00.66525.64 167.172.232.142h2localhost:443[0/0] Software caused connection abort 1-4078200/69/39691_ 38.1600384109220.00.71506.39 144.126.202.105http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-4078200/52/39440_ 38.040798372633190.00.54497.48 66.249.71.166http/1.1www.chonlateefbc.com:443GET /?m=current-used-loom-listings-mm-VVnV7TK HTTP/1.1 1-4078200/52/39505_ 37.950955364782750.00.55505.96 94.156.68.28http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 1-4078200/48/40067_ 38.0401137360608540.00.56529.89 159.223.102.13http/1.1 1-4078200/63/39857_ 37.8601470364656660.00.70496.76 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?405145himsitems/eti HTTP/1.1 1-4078200/75/39796_ 37.82013357092630.00.75493.84 144.126.202.105http/1.1localhost:
Found on 2023-12-11 15:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c34a8e63d3Apache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:34 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 36 seconds Server load: 2.72 2.08 1.70 Total accesses: 697120 - Total Traffic: 9.7 GB - Total Duration: 517732814 CPU Usage: u83.24 s12.54 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.674 ms/request 19 requests currently being processed, 109 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no14yes5271011 330151no14yes527007 630155no23yes5271017 730156no0yes428000 Sum4051 191092035 ................................................................ _____R______W_R______R________R___R__R___W_______W____W_________ ................................................................ ___W__R______RW_____________W___R_____R__W__________________W___ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0068989745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0068996045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0068980245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0068995746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00689167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0068994846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00689145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0068992346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00689107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00689104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0068970146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0068989947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0068972146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00689104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00689108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0068946846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0068970945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0068984445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0068971246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0068970946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00689046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0068949045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0068993646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0068986945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006894146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0068973844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00689722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0068996345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00689107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00689146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00689778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0068996044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0068986344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0068947946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00689150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0068967645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0068945143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00689044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00689232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0068958244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00689183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00689822744746080.00.0079.16 <
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc08de9f452Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:03:47 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 1 hour 40 minutes 2 seconds Server load: 0.20 0.30 0.39 Total accesses: 7556 - Total Traffic: 98.5 MB - Total Duration: 17072337 CPU Usage: u3181.4 s5843.04 cu55529000 cs13588200 - 1150000% CPU load 1.26 requests/sec - 16.8 kB/second - 13.4 kB/request - 2259.44 ms/request 3 requests currently being processed, 5 idle workers _R___W..W...._.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-196462360/95/734_ 43.810017052810.01.158.41 161.35.176.95http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-196467120/45/721R 27.370117287000.01.4110.54 144.126.198.24http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-196464650/73/703_ 35.320116108350.00.939.79 139.144.150.205http/1.1 3-196463980/74/688_ 32.900286214088510.02.7210.87 139.144.150.205http/1.1 4-196468430/38/654_ 14.980014574240.00.638.50 144.126.198.24http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-196465450/66/637W 32.450014730800.00.747.30 144.126.198.24http/1.1localhost:80GET /server-status HTTP/1.0 6-1964-0/0/664. 0.00122141314770550.00.008.99 172.70.38.60http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%95 7-1964-0/0/587. 0.002114006830.00.006.55 161.35.176.95http/1.1localhost:80GET / HTTP/1.0 8-196470780/20/609W 10.393014297520.00.307.23 172.71.151.140http/1.1www.proplustech.co.th:443GET /?page_id=K656851 HTTP/1.1 9-1964-0/0/516. 0.00836011274090.00.006.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1964-0/0/357. 0.0096705440930.00.003.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1964-0/0/395. 0.0096108961830.00.005.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1964-0/0/98. 0.007345362830490.00.001.86 162.158.222.250http/1.1www.acumaticathailand.com:80GET /z.php HTTP/1.0 13-196462560/89/182_ 37.73015103940.02.053.36 144.126.202.105http/1.1 14-1964-0/0/3. 0.00960011450.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1964-0/0/3. 0.00962026240.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1964-0/0/5. 0.009380157710.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 2subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 297 seconds, (range: 296...298)index usage: 0%, cache usage: 0%total entries stored since starting: 39total entries replaced since starting: 0total entries expired since starting: 37total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3754 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0e59d9e75Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:08:07 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 5 minutes 55 seconds Server load: 0.27 0.30 0.29 Total accesses: 48502 - Total Traffic: 897.1 MB - Total Duration: 94146927 CPU Usage: u2998.55 s5760.58 cu55152300 cs13502200 - 210000% CPU load 1.48 requests/sec - 28.0 kB/second - 18.9 kB/request - 1941.09 ms/request 2 requests currently being processed, 7 idle workers C____.W.._.._._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193260541/22/4078C 5.580184321562.40.26116.34 206.81.1.88http/1.1localhost:443GET / HTTP/1.1 1-193260850/21/4007_ 8.051177849260.00.1251.08 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-193261420/16/4015_ 4.340076867150.00.1153.92 198.199.121.22http/1.1 3-193254410/89/3885_ 21.380277162030.011.3268.90 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.0 4-193262120/6/3924_ 0.160176322530.00.0362.32 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1932-0/0/3640. 0.0037146266994170.00.0044.62 172.70.143.45http/1.1www.tun36.com:80POST /wp-cron.php?doing_wp_cron=1699250847.55477404594421386718 6-193255770/69/3627W 15.320071313920.00.9157.27 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 7-1932-0/0/3516. 0.00210070991930.00.0092.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1932-0/0/3266. 0.00209063649440.00.0054.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-193259760/30/2879_ 6.280155414830.00.2034.74 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1932-0/0/2588. 0.000135949380080.00.0042.00 172.71.99.86http/1.1www.bizproceed.com:80GET /simple.php HTTP/1.0 11-1932-0/0/1995. 0.00156040035970.00.0029.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-193259890/29/1884_ 8.960134569920.00.2833.66 139.144.96.150http/1.1localhost:443GET / HTTP/1.1 13-1932-0/0/1733. 0.00126037525450.00.00116.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-193259970/25/915_ 5.660117601300.00.1910.01 139.144.96.150http/1.1 15-1932-0/0/468. 0.00201407032580.00.004.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/349. 0.00235205526000.00.002.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/250. 0.00235302763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00320107137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00384902780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00385005022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0038400690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00384402695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.003042192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.003845029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00369701528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00332502033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00314001828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00129030140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00128920108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 181 seconds, (range: 63...298)index usage: 0%, cache usage: 0%total entries stored since starting: 365total entries replaced since starting: 0total entries expired since starting: 357total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 28287 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0799fc0d7Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 03:35:58 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 3 hours 12 minutes 3 seconds Server load: 2.20 2.93 3.34 Total accesses: 51883 - Total Traffic: 740.6 MB - Total Duration: 271393902 CPU Usage: u3189.76 s5653.02 cu53843400 cs13132600 - 581000% CPU load 4.5 requests/sec - 65.8 kB/second - 14.6 kB/request - 5230.88 ms/request 16 requests currently being processed, 3 idle workers WW_._WWRWWRWRRWRWW..............W......._......... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-189557380/27/2239W 16.9840108015950.00.3130.68 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=the-tree-of-life-canvas-wall-art-by-gustav-mm-DBM3L6U1 1-189560510/0/2138W 0.0000108762220.00.0030.12 85.208.96.197http/1.1www.mkandptfoods.com:443GET /m0924764043.html HTTP/1.1 2-189554630/48/2107_ 28.1600108398810.00.9131.18 206.81.1.88http/1.1localhost:80GET / HTTP/1.0 3-1895-0/0/2176. 0.0050106724670.00.0030.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-189557460/24/2024_ 14.9900106782980.00.1833.66 142.93.158.96http/1.1localhost:80GET / HTTP/1.0 5-189555220/36/2133W 26.4800105476800.00.5327.74 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=tree-of-life-by-gustav-klimt-landscape-wall-art-mm-4zne 6-189559220/7/2084W 0.28160104108120.00.1830.34 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?wiki-AMBITION.xml HTTP/1.1 7-189548400/71/2004R 47.6501102981000.01.0727.81 164.90.205.35http/1.1localhost:80GET / HTTP/1.0 8-189555280/35/1951W 27.822097477710.00.5226.94 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=tree-of-life-wall-art-tree-of-life-canvas-mm-Bb9DlPi0 H 9-189557480/29/2051W 9.440094795160.00.5128.29 162.243.186.177http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 10-189557870/27/2035R 14.630096374860.00.3728.11 134.122.89.242http/1.1 11-189556140/28/1891W 19.2110097163200.00.4128.41 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?lakes-ASN.xml HTTP/1.1 12-189558040/25/1942R 15.870095835920.00.3527.66 138.197.133.204http/1.1www.chonlateehosting.com:443 13-189558260/19/1804R 11.110190389450.00.3425.46 136.243.228.193http/1.1www.mkandptfoods.com:443 14-189558490/16/1926W 14.3020100391080.00.2725.14 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=buy-cardinal-birch-tree-canvas-painting-by-amy-marie-mm 15-189551090/53/1945R 31.990094995240.00.5433.04 162.243.161.105http/1.1 16-189551110/69/1788W 49.000088706890.00.7122.48 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848315124534.html HTTP/1.1 17-189559350/9/1732W 3.880084950460.00.0524.19 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 18-1895-0/0/1723. 0.00307085340900.00.0024.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1895-0/0/1517. 0.00303084564990.00.0020.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1895-0/0/1472. 0.00302077540580.00.0021.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1895-0/0/1389. 0.00301073119770.00.0019.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1895-0/0/954. 0.00286055132690.00.0013.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1895-0/0/1052. 0.00318066140500.00.0014.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1895-0/0/939. 0.00296052652160.00.0013.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1895-0/0/742. 0.00285050815960.00.0010.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1895-0/0/715. 0.00314040102070.00.0010.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1895-0/0/484. 0.00168032991170.00.006.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1895-0/0/383. 0.00304029355210.00.005.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/595. 0.00135034643710.00.007.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/382. 0.00241124009730.00.004.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/378. 0.00295027554720.00.004.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-189551650/62/537W 37.980036713620.00.847.44 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=huawei-watch-smartwatch-review-reviews-mm-qMdEg9sg HTTP 33-1895-0/0/358. 0.00306024023640.00.004.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/485. 0.00292026996880.00.008.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1895-0/0/183. 0.0030809135190.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/278. 0.00312020456110.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/273. 0.00298015420740.00.003.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/172. 0.0029907214030.00.003.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/176. 0.004909598860.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-189552290/65/126_ 41.03005225730.00.871.79 164.90.205.35http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 41-1895-0/0/121. 0.0029404496740.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1895-0/0/44. 0.0029001329400.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/87. 0.0017406315840.00.001.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/92. 0.0031003849330.00.007.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1895-0/0/89. 0.0029705996930.00.000.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1895-0/0/16. 0.002750298370.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1895-0/0/20. 0.002400560060.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1895-0/0/96. 0.0031508615040.00.001.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1895-0/0/35. 0.0014201397580.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child
Found on 2023-10-26 20:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc08fe2eb21Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 06:52:45 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 2 hours 50 minutes 33 seconds Server load: 0.46 0.49 0.41 Total accesses: 10519 - Total Traffic: 132.9 MB - Total Duration: 11605250 CPU Usage: u2873.15 s5348.61 cu52298900 cs12765100 - 636000% CPU load 1.03 requests/sec - 13.3 kB/second - 12.9 kB/request - 1103.27 ms/request 6 requests currently being processed, 5 idle workers RW_W_R_W_W_....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182321630/5/952R 0.07009529110.00.0011.13 159.89.83.196http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-182320490/33/1034W 7.110010808790.00.1312.22 27.254.96.168http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /wp-cron.php?doing_wp_cron=1696981965.08120107650756835937 2-182320830/18/1023_ 5.350111923610.00.1313.71 164.90.222.93http/1.1 3-182318670/49/873W 18.28009657800.00.8915.07 165.232.76.155http/1.1localhost:80GET /server-status HTTP/1.0 4-182319240/43/909_ 10.740111695550.00.1710.11 167.99.182.39http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-182314000/73/686R 20.83008435610.00.598.70 143.198.72.96http/1.1localhost:80GET /v2/_catalog HTTP/1.0 6-182314080/94/896_ 27.670010709190.01.4710.37 159.203.182.222http/1.1 7-182319580/38/813W 13.82208934860.01.6711.96 193.202.110.21http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-content/style-css.php HTTP/1.1 8-182319890/39/673_ 12.53036192650.00.197.92 178.62.3.65http/1.1localhost:80GET /server-status HTTP/1.0 9-182321070/11/672W 1.90006848120.00.167.35 172.71.167.16http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 10-182319980/33/486_ 14.07004897080.03.3210.92 134.122.89.242http/1.1localhost:80GET /login.action HTTP/1.0 11-1823-0/0/354. 0.0018813398770.00.003.38 125.212.214.217http/1.1www.wealneosupply.com:443GET /xmlrpc.php HTTP/1.1 12-1823-0/0/300. 0.00501557973781420.00.002.70 172.68.234.190http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1696976943.40467000007629394531 13-1823-0/0/18. 0.0080710121020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1823-0/0/200. 0.00739002199440.00.001.69 20.127.125.189http/1.1www.dreamhightravel.com:80GET //wp.php HTTP/1.0 15-1823-0/0/5. 0.00816202380.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1823-0/0/198. 0.00740802524510.00.001.74 188.116.22.119http/1.1www.tkadvicesystem.com:80GET /OLD/ HTTP/1.0 17-1823-0/0/101. 0.0081530991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0074125051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.0080830144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0073887821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.0081540300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.0081570210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.008167050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.00816601095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 94subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 138 seconds, (range: 5...237)index usage: 3%, cache usage: 4%total entries stored since starting: 2809total entries replaced since starting: 0total entries expired since starting: 2715total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 73 hit, 3788 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-10 23:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc069da66ffApache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 04-Oct-2023 00:15:00 +07 Restart Time: Wednesday, 04-Oct-2023 00:11:05 +07 Parent Server Config. Generation: 1800 Parent Server MPM Generation: 1799 Server uptime: 3 minutes 55 seconds Server load: 2.37 2.16 1.49 Total accesses: 595 - Total Traffic: 5.0 MB - Total Duration: 895011 CPU Usage: u2890.3 s5296.17 cu51830300 cs12663200 - 2.74e+7% CPU load 2.53 requests/sec - 21.9 kB/second - 8.6 kB/request - 1504.22 ms/request 8 requests currently being processed, 4 idle workers CR___.RCR...CW..C.._.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1799110771/8/45C 0.0900636622.60.020.34 128.199.62.55http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-179984210/54/54R 27.9600754520.00.400.40 206.81.1.88http/1.1 2-179989010/45/48_ 20.5300556830.00.690.71 142.93.153.3http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-1799111130/9/27_ 0.1100272710.00.010.13 207.154.240.169http/1.1localhost:443GET / HTTP/1.1 4-179984270/53/53_ 28.8800786230.00.480.48 46.101.103.192http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 5-1799-0/0/37. 0.00350601410.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1799101560/29/36R 11.8000424030.00.170.22 207.154.240.169http/1.1localhost:80GET /config.json HTTP/1.0 7-1799101581/27/33C 12.7700454122.60.160.20 161.35.27.144http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-1799105800/10/13R 5.2930202070.00.080.09 94.23.207.193http/1.1 9-1799-0/0/3. 0.00225033720.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1799-0/0/3. 0.00226029730.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1799-0/0/4. 0.00224022470.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-179985741/43/43C 24.0300791001.30.360.36 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 13-179985750/49/49W 29.0300800260.00.430.43 138.197.88.136http/1.1localhost:80GET /server-status HTTP/1.0 14-1799-0/0/22. 0.001150402450.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1799-0/0/1. 0.00229000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-179985891/42/42C 24.5500717882.60.360.36 161.35.27.144http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 17-1799-0/0/31. 0.00530533510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1799-0/0/5. 0.00197078280.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-179986180/46/46_ 22.6701852180.00.330.33 74.207.237.46http/1.1localhost:80GET /.DS_Store HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 117subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 128 seconds, (range: 64...289)index usage: 4%, cache usage: 5%total entries stored since starting: 117total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 229 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-03 17:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc07e78f85cApache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:05 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 18 seconds Server load: 0.85 1.14 1.26 Total accesses: 351 - Total Traffic: 2.1 MB - Total Duration: 179128 CPU Usage: u2749.77 s5254.94 cu51774600 cs12651800 - 8.26e+7% CPU load 4.5 requests/sec - 27.5 kB/second - 6.1 kB/request - 510.336 ms/request 9 requests currently being processed, 3 idle workers RWWRC.R.__.R._.WR................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299410/35/35R 6.0400143150.00.200.20 137.184.162.65http/1.1www.pokaorganize.com:80GET /debug/default/view?panel=config HTTP/1.0 1-1797299570/19/19W 5.6010370100.00.190.19 74.207.237.114http/1.1www.pokaorganize.com:443GET / HTTP/1.1 2-1797301250/6/23W 0.110011990.00.020.07 172.71.242.118http/1.1www.dealaccounting.com:80POST /wp-login.php HTTP/1.0 3-1797301600/2/31R 0.0500103280.00.000.17 172.105.37.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1797301311/2/17C 1.90117541561733.00.040.18 87.249.134.39http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 5-1797-0/0/11. 0.00420125320.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1797300730/21/33R 5.8301126960.00.130.15 167.99.8.63http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 7-1797-0/0/11. 0.00430155160.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1797300250/28/28_ 1.430125860.00.130.13 167.99.182.39http/1.1 9-1797300310/22/22_ 2.300065910.00.050.05 74.207.237.46http/1.1 10-1797-0/0/11. 0.0044076200.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1797300440/21/21R 3.292081090.00.180.18 193.32.248.149http/1.1www.yadaacc168.co.th:443 12-1797-0/0/16. 0.0039034670.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1797300520/26/26_ 4.230183760.00.110.11 159.203.63.67http/1.1 14-1797-0/0/10. 0.0045011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300840/13/13W 3.930077990.00.050.05 172.105.37.32http/1.1localhost:80GET /server-status HTTP/1.0 16-1797300920/10/10R 3.5901102870.00.050.05 172.70.174.185http/1.1www.siamautomation.com:443 17-1797-0/0/6. 0.0030011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0038013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0032013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 44subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 245 seconds, (range: 221...297)index usage: 1%, cache usage: 2%total entries stored since starting: 44total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 199 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc02185af06Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:33 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 1 minute 2 seconds Server load: 4.14 4.30 4.35 Total accesses: 402 - Total Traffic: 4.1 MB - Total Duration: 498568 CPU Usage: u2473.41 s4256.03 cu40848700 cs9867590 - 8.18e+7% CPU load 6.48 requests/sec - 67.9 kB/second - 10.5 kB/request - 1240.22 ms/request 11 requests currently being processed, 5 idle workers W_C_RR_R_WCWRRW_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239900/25/25W 16.2500338340.00.390.39 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 1-1527239920/35/35_ 15.9700397820.00.250.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1527240080/27/27C 17.860866365640.00.260.26 207.154.240.169http/1.1 3-1527240120/26/26_ 15.9700393920.00.360.36 165.227.146.2http/1.1localhost:80GET /.DS_Store HTTP/1.0 4-1527242190/4/24R 0.5000285610.00.000.19 167.172.232.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1527240370/27/27R 17.940791373460.00.290.29 172.70.34.62http/1.1www.proplustech.co.th:443GET /xmlrpc.php HTTP/1.1 6-1527240450/33/33_ 18.1600368500.00.330.33 198.199.121.22http/1.1www.pokaorganize.com:80GET /server-status HTTP/1.0 7-1527240470/33/33R 16.6600348150.00.280.28 137.184.106.30http/1.1 8-1527240580/26/26_ 16.9400362940.00.310.31 143.110.156.182http/1.1localhost:80GET /login.action HTTP/1.0 9-1527241270/14/25W 7.2300313320.00.110.25 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 10-1527240701/27/27C 17.9906863813713.90.270.27 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 11-1527240760/33/33W 18.6400371850.00.330.33 167.172.232.142http/1.1localhost:80GET /server-status HTTP/1.0 12-1527240860/23/23R 16.200815327630.00.260.26 146.190.160.11http/1.1 13-1527241040/25/25R 12.0201241390.00.230.23 143.110.156.182http/1.1localhost:80GET /server-status HTTP/1.0 14-1527241420/12/12W 5.8800115650.00.110.11 52.251.36.208http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 15-1527242320/1/1_ 0.000000.00.000.00 192.53.126.23http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 38subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 270 seconds, (range: 236...295)index usage: 1%, cache usage: 1%total entries stored since starting: 38total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 115 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc08481d0f5Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:05 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 16 seconds Server load: 0.84 1.18 1.37 Total accesses: 191 - Total Traffic: 1.4 MB - Total Duration: 149848 CPU Usage: u1989.35 s3434.98 cu32339200 cs7737160 - 5.27e+7% CPU load 2.51 requests/sec - 19.4 kB/second - 7.7 kB/request - 784.544 ms/request 13 requests currently being processed, 4 idle workers WRCCW__CRC_RRWCR_................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/16/16W 5.1200141860.00.260.26 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 1-129450830/10/14R 2.240194860.00.060.09 172.70.210.126http/1.1www.dr-rpi.com:443 2-129449751/27/27C 5.1611125571.30.080.08 146.190.98.165http/1.1localhost:443GET /.env HTTP/1.1 3-129449891/13/13C 6.4211223791.40.200.20 146.190.98.165http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-129449950/11/11W 4.8030136670.00.080.08 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1685726641.75789499282836914062 5-129450150/15/15_ 5.0401219330.00.150.15 146.190.98.165http/1.1localhost:443GET /login.action HTTP/1.1 6-129450210/20/20_ 3.720072270.00.150.15 146.190.160.11http/1.1www.pokaorganize.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-129450281/17/17C 6.4610168761.30.200.20 146.190.98.165http/1.1localhost:443GET /.git/config HTTP/1.1 8-129450300/17/17R 5.7601164180.00.060.06 45.79.83.159http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-129450541/17/17C 4.271192301.30.080.08 146.190.98.165http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-129451900/5/6_ 1.090115423160.00.030.03 137.184.106.30http/1.1 11-129452000/2/5R 0.000021080.00.000.02 146.190.98.165http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-129452060/3/3R 0.640014420.00.020.02 165.22.74.203http/1.1 13-129452180/1/1W 0.010000.00.000.00 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.0 14-129452191/1/1C 0.001231.30.000.00 146.190.98.165http/1.1localhost:443GET /config.json HTTP/1.1 15-129452220/3/3R 0.010040.00.000.00 137.184.222.107http/1.1www.pokaorganize.com:80GET /debug/default/view?panel=config HTTP/1.0 16-129452230/5/5_ 0.030080.00.000.00 139.144.96.150http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 49subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 267 seconds, (range: 236...297)index usage: 1%, cache usage: 2%total entries stored since starting: 49total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 115 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc090067052Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:38 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 5 seconds Server load: 0.49 1.05 0.98 Total accesses: 166 - Total Traffic: 1.5 MB - Total Duration: 96453 CPU Usage: u1627.3 s2824.01 cu26678600 cs6409520 - 5.09e+7% CPU load 2.55 requests/sec - 24.2 kB/second - 9.5 kB/request - 581.042 ms/request 12 requests currently being processed, 0 idle workers RCLWRRWCRCCC...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416030/19/19R 5.6601119530.00.120.12 104.248.140.11http/1.1localhost:80GET /about HTTP/1.0 1-108416211/17/17C 4.7412101632.60.130.13 146.190.98.165http/1.1localhost:443GET /.env HTTP/1.1 2-108416231/15/15L 7.2000213790.70.130.13 165.22.108.223http/1.1localhost:80GET /info.php HTTP/1.0 3-108416250/23/23W 4.8300138120.00.510.51 165.22.108.223http/1.1localhost:80GET / HTTP/1.0 4-108416270/18/18R 5.9301135150.00.290.29 185.2.5.77http/1.1www.uniqueworkthailand.com:443 5-108416520/20/20R 2.840173330.00.100.10 104.248.140.11http/1.1localhost:80GET /login.action HTTP/1.0 6-108416590/19/19W 3.340069550.00.100.10 165.22.108.223http/1.1localhost:80GET /server-status HTTP/1.0 7-108416831/19/19C 2.220150561.30.130.13 146.190.98.165http/1.1localhost:443GET /config.json HTTP/1.1 8-108417060/11/11R 3.200062650.00.030.03 207.154.240.169http/1.1www.pokaorganize.com:80GET / HTTP/1.0 9-108417461/3/3C 0.021182.70.010.01 146.190.98.165http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-108417541/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /login.action HTTP/1.1 11-108417561/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 278 seconds, (range: 235...297)index usage: 0%, cache usage: 0%total entries stored since starting: 15total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 66 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc00a1b71f6Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:22 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 26 seconds Server load: 1.69 1.59 1.47 Total accesses: 92 - Total Traffic: 625 kB - Total Duration: 81521 CPU Usage: u1257.49 s2309.27 cu21800400 cs5275950 - 1.04e+8% CPU load 3.54 requests/sec - 24.0 kB/second - 6.8 kB/request - 886.098 ms/request 9 requests currently being processed, 2 idle workers LWC._WWRR_LW...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775491/9/9L 3.0403121140.70.030.03 194.195.219.36http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-84775501/13/13L 3.510087550.70.070.07 170.187.164.222http/1.1localhost:80GET /.env HTTP/1.0 2-84775521/7/7C 2.830157222.20.050.05 139.59.138.104http/1.1localhost:443GET / HTTP/1.1 3-847-0/0/7. 0.000059750.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-84775790/13/13R 3.620075520.00.080.08 27.254.96.168http/1.1 5-84776000/4/4W 1.780034900.00.020.02 165.22.205.214http/1.1www.pokaorganize.com:443GET / HTTP/1.1 6-84776070/4/4W 1.950038100.00.040.04 143.110.217.252http/1.1www.pokaorganize.com:443GET / HTTP/1.1 7-84776090/6/6R 2.760167300.00.130.13 170.187.164.222http/1.1localhost:80GET / HTTP/1.0 8-84776230/6/6R 2.610153410.00.080.08 5.253.18.199http/1.1www.nptpropertythailand.com:443 9-84776340/10/10W 2.080059550.00.030.03 194.195.219.36http/1.1localhost:80GET / HTTP/1.0 10-84776360/8/8_ 1.5701160630.00.020.02 134.209.207.188http/1.1localhost:80GET /.DS_Store HTTP/1.0 11-84777200/6/6W 0.0100100.00.000.00 134.209.207.188http/1.1localhost:80GET /server-status HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 295 seconds, (range: 288...298)index usage: 0%, cache usage: 0%total entries stored since starting: 9total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 30 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0acbd9ca3Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:04 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 1 second Server load: 2.23 1.75 1.57 Total accesses: 20 - Total Traffic: 54 kB - Total Duration: 4394 CPU Usage: u627.75 s1251.76 cu12780600 cs3072970 - 1.59e+9% CPU load 20 requests/sec - 54.0 kB/second - 2764 B/request - 219.7 ms/request 5 requests currently being processed, 1 idle workers _WRRWW............................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799540/1/1R 0.65067313470.00.040.04 27.254.96.168http/1.1 1-43799720/1/1W 0.40008260.00.000.00 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 2-43799780/12/12R 0.580311500.00.010.01 172.104.179.101http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 3-43799880/1/1R 0.51053210650.00.000.00 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 4-43799940/0/0W 0.000000.00.000.00 5.188.62.140http/1.1www.brobanglan.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 5-437100010/5/5W 0.010050.00.000.00 188.166.242.249http/1.1localhost:80GET /server-status HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 2subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 299 seconds, (range: 299...299)index usage: 0%, cache usage: 0%total entries stored since starting: 2total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 6 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 09:01
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c37120c160Apache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 16:01:26 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 6 hours 5 seconds Server load: 2.07 2.02 2.00 Total accesses: 1847964 - Total Traffic: 23.8 GB - Total Duration: 2141104358 CPU Usage: u214.81 s116.8 cu32089.3 cs2210.25 - 1.42% CPU load .757 requests/sec - 10.2 kB/second - 13.5 kB/request - 1158.63 ms/request 2 requests currently being processed, 126 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no2yes032002 229661no1yes131001 329394no1yes131001 529374no1yes032001 Sum405 2126005 ________________________________................................ ____________________________W__________________R________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/40/14788_ 13.3300160260950.00.14193.77 143.198.72.96http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/39/15282_ 13.1720139013330.00.11198.96 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/36/14849_ 13.3220150309430.00.16192.73 143.198.72.96http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/34/15027_ 13.3310145874900.00.08185.96 167.172.232.142http/1.1localhost:443GET /about HTTP/1.1 0-92293730/33/14931_ 13.1500147711670.00.15185.42 178.128.151.41http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/31/15158_ 13.3300156649120.00.12188.53 139.144.150.45http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/28/14828_ 13.3220145588370.00.13200.23 161.35.190.56http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/31/15138_ 13.3320150182030.00.07187.57 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-92293730/30/15097_ 13.3100145226800.00.07229.87 143.198.72.96http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/38/15232_ 13.1520148853320.00.15194.87 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/39/14799_ 13.3320154393230.00.09200.68 143.198.72.96http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/35/14808_ 13.3320147156120.00.08195.45 164.90.222.93http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/44/14675_ 13.3100137182730.00.14185.50 164.92.192.25http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/36/14827_ 13.2920169086490.00.09186.02 164.90.222.93http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/32/15778_ 13.3320141615000.00.09187.75 134.122.89.242http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/37/14829_ 12.9620165341190.00.08182.47 139.144.150.45h2localhost:443[0/0] Software caused connection abort 0-92293730/45/14884_ 13.3220143404980.00.12206.38 144.126.198.24http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/37/14944_ 13.3220144939930.00.12189.30 164.92.192.25http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/29/14757_ 13.3100160388150.00.05200.53 164.92.192.25http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/36/14981_ 13.3300144639340.00.13193.81 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-92293730/38/14975_ 13.3220181495860.00.15193.41 139.144.150.45http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/33/14998_ 13.3320147053740.00.09204.07 178.62.3.65http/1.1localhost:443GET /about HTTP/1.1 0-92293730/38/15456_ 13.3300150748550.00.15188.27 159.223.108.26http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/33/14664_ 13.2910138765130.00.13190.18 164.92.192.25http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/43/14967_ 13.3320162205830.00.10186.87 142.93.153.3http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/37/14640_ 13.3200135981630.00.13196.98 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/30/15137_ 13.2920144713450.00.05194.49 161.35.155.246http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/35/14920_ 13.3200159187410.00.05213.30 144.126.198.24http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/35/14722_ 13.2920152174350.00.11175.92 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-92293730/28/15176_ 13.3310135139110.00.08225.13 161.35.190.56http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/42/14661_ 13.2100155572970.00.06199.14 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/31/14921_ 13.2820145814970.00.15185.14 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-92-0/0/15731. 0.00424720138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00424720136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00424720174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00424720150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00424720146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00424720134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00424720172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00424720165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00424720127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00424720152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00424720148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00424720159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00424720159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/1518
Found on 2024-02-02 09:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c35b9b3bd2Apache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 08:26:04 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 22 hours 24 minutes 43 seconds Server load: 3.41 2.89 2.64 Total accesses: 789507 - Total Traffic: 10.7 GB - Total Duration: 962221113 CPU Usage: u316.66 s22.23 cu13326.1 cs698.67 - 8.6% CPU load 4.73 requests/sec - 67.1 kB/second - 14.2 kB/request - 1218.76 ms/request 7 requests currently being processed, 121 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425no7yes230007 111360no2yes329000 216287no1yes032000 316453no23yes2300018 Sum4033 71210025 ______________________R_______W___________________W_______W_R___ ________________________________________W______W________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-784250/202/6090_ 126.522083661430.02.7590.28 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 0-784250/213/6565_ 126.4521161118450.02.2386.69 162.243.186.177http/1.1localhost:80GET /server-status HTTP/1.1 0-784250/183/6087_ 125.841072862250.02.3690.66 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-784250/220/6428_ 126.532070419450.02.4183.40 162.243.186.177http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/202/6147_ 126.522067286630.02.1579.43 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-784250/273/6519_ 126.262078647410.03.7185.87 138.197.88.136http/1.1localhost:80GET / HTTP/1.1 0-784250/211/6318_ 126.362059342240.02.6697.07 159.65.138.217http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/203/6361_ 126.532068237730.02.2783.12 164.92.192.25http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-784250/264/6378_ 126.513063260310.02.70125.55 137.184.106.30http/1.1localhost:80GET /.git/config HTTP/1.1 0-784250/250/6293_ 126.150072255780.02.7180.95 192.53.126.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-784250/187/6048_ 125.731076897820.02.1077.31 159.203.94.228http/1.1 0-784250/198/6004_ 126.513076045410.02.3978.21 165.22.74.203http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-784250/215/6074_ 126.400453864410.02.6280.55 139.144.150.23http/1.1localhost:80GET /server-status HTTP/1.1 0-784250/212/6277_ 126.541082370980.02.5184.80 41.216.188.92http/1.1www.hotlineservicethailand.com:GET /.well-known/acme-challenge/cloud.php HTTP/1.1 0-784250/191/6710_ 126.54185057346270.02.2786.69 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /anpkawv-41665citems/eti HTTP/1.1 0-784250/268/6043_ 126.541083769760.02.5778.91 161.35.27.144http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-784250/215/6211_ 126.481065117980.02.3781.04 139.144.150.23http/1.1localhost:80GET /.git/config HTTP/1.1 0-784250/210/6361_ 126.541059751990.02.2182.59 139.59.182.142http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-784250/203/6366_ 126.532062600790.02.2181.01 128.199.62.55http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-784250/188/6124_ 125.60189969230350.02.5386.36 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-784250/284/6401_ 126.361090790670.02.7988.99 139.59.182.142h2localhost:443[0/0] Software caused connection abort 0-784250/187/6095_ 126.290071650100.02.1582.87 128.199.62.55http/1.1 0-784250/188/6668R 126.493074227090.02.3288.88 139.144.150.23http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-784250/213/6178_ 126.513063664110.02.2889.23 138.197.88.136http/1.1localhost:80GET /.git/config HTTP/1.1 0-784250/268/6079_ 125.863105675840670.02.9376.37 161.35.27.144h2localhost:443[0/0] Software caused connection abort 0-784250/187/6195_ 126.570058133390.02.1280.24 161.35.27.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-784250/208/6226_ 126.522057269080.02.3490.22 138.197.88.136http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/206/6202_ 126.44344571114490.02.65110.76 104.192.3.74http/1.1www.uniqueworkthailand.com:443GET /wp-json/wp/v2/users/1 HTTP/1.1 0-784250/209/6145_ 126.443054722140.02.2977.66 206.81.1.88http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-784250/304/6403_ 126.532073245630.03.41116.55 137.184.106.30http/1.1localhost:80GET /config.json HTTP/1.1 0-784251/184/6095W 126.390067867840.02.2189.87 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ajdsvcw-119899qetidm.html HTTP/1.1 0-784250/201/6402_ 126.400065751040.02.5782.33 165.22.74.203http/1.1localhost:80GET /login.action HTTP/1.1 1-7113600/178/6282_ 106.291073426620.01.9581.52 162.243.186.177http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7113600/216/6080_ 106.300067247270.02.4977.45 162.243.186.177http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-7113600/190/6065_ 106.0211293910290.02.2678.49 165.232.76.155h2localhost:443[0/0] Software caused connection abort 1-7113600/172/5732_ 106.29184576535510.02.3376.16 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /acxxpcs-25597ketidm95np.html HTTP/1.1 1-7113600/172/5984_ 106.190075766560.01.9988.76 165.232.76.155http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-7113600/167/6040_ 105.941065211850.02.0479.51 137.184.162.65h2localhost:443[0/0] Software caused connection abort 1-7113600/154/6086_ 105.900065795430.01.7877.02 128.199.62.55http/1.1 1-7113600/172/6171_ 106.350077025840.02.8182.66 128.199.62.55http/1.1localhost:443GET /login.action HTTP/1.1 1-7113600/185/6132_ 106.120056112720.02.3379.05 137.184.106.30http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-7113600/171/6089_ 106.30084770239150.01.8085.03 185.191.171.9http/1.1www.chonlateeadmin.com:443GET /btqitgo-40210detid HTTP/1.1 1-7113600/166/5882_ 106.220105176775520.02.1384.34 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /eitkawv-41695gitems/etidm72rv HTTP/1.1 1-7113600/163/6397_ 106.291059409770.01.8992.62 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 1-7113600/183/6117_ 106.171079954920.02.1782.62 139.59.182.142http/1.1localhost:443G
Found on 2024-01-07 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c36bcb81f2Apache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 23:25:51 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 hours 24 minutes 30 seconds Server load: 3.81 3.81 3.41 Total accesses: 240383 - Total Traffic: 3.5 GB - Total Duration: 192213950 CPU Usage: u82.41 s5.82 cu3895.6 cs208.8 - 8.69% CPU load 4.98 requests/sec - 75.8 kB/second - 15.2 kB/request - 799.615 ms/request 13 requests currently being processed, 83 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 030686no19yes6260012 132728no1yes230000 229460no5yes527002 Sum3025 13830014 __R___R_____WW___R________W_________________R____________R______ _____W___R_________W______W____R................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0306860/70/2678_ 31.630021681470.00.7840.82 139.144.150.23http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-0306860/68/2951_ 31.421020742750.00.7539.24 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-0306860/50/2621R 31.571032958730.00.5747.64 147.182.130.98http/1.1localhost:80GET /login.action HTTP/1.1 0-0306860/59/2856_ 31.630021056120.00.6136.44 147.182.130.98http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-0306860/63/2742_ 31.73084321491830.00.7834.22 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?lapaonh-50178cetidm.html HTTP/1.1 0-0306860/65/3006_ 31.470021661830.00.7537.94 159.203.44.43http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0306860/57/2758R 31.66164321069940.00.6349.72 23.22.35.162http/1.1www.chonlateeboi.com:443 0-0306860/55/2749_ 31.68184921908800.00.7336.17 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?cbgaonh-76325tetidm70p HTTP/1.1 0-0306860/54/2806_ 31.540020816530.00.6278.65 142.93.64.15http/1.1localhost:80GET /login.action HTTP/1.1 0-0306860/70/2752_ 31.371020899000.00.8935.63 128.199.195.68http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-0306860/58/2694_ 31.671024471730.00.6233.06 138.68.163.10http/1.1localhost:80GET /.git/config HTTP/1.1 0-0306860/48/2612_ 31.671021113440.00.5233.97 164.90.222.93http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-0306861/57/2593W 31.650021069560.00.5335.95 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?czrvrsm-275eetidm.html HTTP/1.1 0-0306861/55/2898W 31.650021810810.00.6439.81 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?fdjqgmy-161192witems/eti HTTP/1.1 0-0306860/56/2934_ 31.78070623970200.00.6139.89 185.191.171.9http/1.1www.chonlateefood.com:443GET /geti/elt14746obleitems HTTP/1.1 0-0306860/56/2695_ 31.671021063190.00.6335.35 164.90.205.35http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-0306860/53/2603_ 31.690021396290.00.6233.90 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0306860/53/2925R 31.501021327310.00.5839.14 188.165.232.135http/1.1www.chonlateedesign.com:443 0-0306860/62/2813_ 31.101020792340.00.7637.11 137.184.150.232h2localhost:443[0/0] Software caused connection abort 0-0306860/63/2657_ 31.680022723210.00.6740.13 185.70.94.16http/1.1www.dtacsme.com:443GET /wp-json HTTP/1.1 0-0306860/70/2719_ 31.621320778190.00.8739.21 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 0-0306860/64/2748_ 31.590021776950.00.7339.99 146.190.64.200http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-0306860/55/3088_ 31.631620755360.00.6539.62 159.203.63.67http/1.1localhost:80GET /server-status HTTP/1.1 0-0306860/49/2619_ 31.690157720309170.00.5734.82 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?weavrsm-129593netid HTTP/1.1 0-0306860/61/2660_ 31.630021286670.00.5534.30 142.93.64.15http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-0306860/67/2641_ 31.750020734980.01.0534.37 142.93.64.15http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-0306861/63/2716W 31.660020584040.00.6044.97 164.90.205.35http/1.1localhost:443GET /server-status HTTP/1.1 0-0306860/58/2714_ 31.490106120780700.00.6865.10 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?wutggdh-235959gitems/eti HTTP/1.1 0-0306860/54/2605_ 31.750020988550.00.5832.81 142.93.64.15http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-0306860/56/2946_ 31.540020133410.00.5773.58 159.203.63.67h2localhost:443[0/0] Software caused connection abort 0-0306860/57/2633_ 31.621020924550.00.6841.68 142.93.64.15http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-0306860/95/2984_ 31.36187220975420.00.8436.60 185.70.94.16http/1.1www.dtacsme.com:443GET /wp-json HTTP/1.1 1-0327280/9/2118_ 5.031016015750.00.0827.92 142.93.64.15http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-0327280/7/1902_ 5.06084915801950.00.0924.62 3.224.220.101http/1.1www.chonlateeboi.com:443GET /44661khrritems/etidm77.htm HTTP/1.1 1-0327280/15/2041_ 4.970205816135420.00.1328.38 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?otrggdh-46177eeti.html HTTP/1.1 1-0327280/15/1910_ 4.980015557550.00.1725.56 137.184.150.232http/1.1localhost:443GET / HTTP/1.1 1-0327280/13/1941_ 5.031015511540.00.1730.02 159.203.63.67http/1.1localhost:80GET /login.action HTTP/1.1 1-0327280/9/1949_ 4.921615305150.00.0926.00 159.203.63.67http/1.1 1-0327280/9/1955_ 5.01085015874850.00.1024.11 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?uetvrsm-32013gitems/eti.htm HTTP/1.1 1-0327280/12/2025_ 5.000105415746110.00.1327.39 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?ziovrsm-32460betidm3.htm HTTP/1.1 1-0327280/10/1989_ 5.000015904640.00.1027.84 159.203.44.43http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-0327280/10/1924_ 5.041015459960.00.1025.17 159.203.44.43http/1.1localhost:80GET /.git/config HTTP/1.1 1-0327280/14/1932_ 5.060015193010.00.1228.53 164.90.205.35http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-0327280/12/2070_ 5.041016343460.00.0828.95 159.203.44.43http/1.1localhost:80GET /.env HTTP/1.1 1-0327280/10/1976R 4.591016007740.00.0626.10 66.249.72.65http/1.1www.chonlateeadmin.com:443
Found on 2024-01-05 16:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c36f201b2aApache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 22:40:14 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 22 hours 17 minutes 16 seconds Server load: 1.32 1.67 1.40 Total accesses: 4322986 - Total Traffic: 55.5 GB - Total Duration: 4091431260 CPU Usage: u206.85 s46.11 cu77797.2 cs4073.16 - 8.7% CPU load 4.58 requests/sec - 61.6 kB/second - 13.5 kB/request - 946.436 ms/request 11 requests currently being processed, 53 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03068no24yes5270019 17820no5yes626000 Sum2029 11530019 ______________R_W_RW_________W________W__R__W_____W___R____R____ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-4030680/170/39048_ 106.2300355434470.01.87494.12 137.184.162.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-4030680/160/38393_ 105.7900362081680.01.70484.88 144.126.202.105http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-4030680/163/38804_ 106.350689397244660.01.77497.51 192.99.3.137http/1.1www.12gobiz.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%A3 0-4030680/174/38846_ 106.3200385662530.01.83507.97 137.184.162.65http/1.1localhost:443GET /about HTTP/1.1 0-4030680/165/39340_ 106.1700366030800.01.80561.27 165.22.74.203http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-4030680/149/38406_ 106.1600395162890.01.69485.82 167.172.232.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-4030680/146/38728_ 106.3800399124610.01.71487.90 162.243.161.105http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-4030680/166/39485_ 106.3501227363914080.01.87495.65 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?nrghgeq-26234tetidm15aet.htm HTTP/1.1 0-4030680/164/38472_ 106.3401001376291590.01.78503.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?405163himsitems/etidm HTTP/1.1 0-4030680/148/38893_ 106.340828364411530.01.61497.03 35.209.9.73http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /wp-login.php HTTP/1.1 0-4030680/171/38456_ 106.2300380394280.01.78467.51 159.203.182.222http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-4030680/157/38529_ 106.2500364303850.01.68517.75 167.172.232.142http/1.1localhost:443GET /about HTTP/1.1 0-4030680/165/38388_ 105.97011371232760.01.86468.92 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 0-4030680/173/38583_ 106.0400400535380.01.92497.19 104.236.193.132http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-4030680/157/38804R 106.1810376507000.01.86487.86 66.249.64.226http/1.1 0-4030680/170/38477_ 106.320962368515040.01.89541.94 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?oxtzkxl-17005gitems/eti HTTP/1.1 0-4030681/153/39444W 106.3200371429200.01.59521.92 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?cblbopr-14809yeti.html HTTP/1.1 0-4030680/173/38940_ 106.2301232362559210.01.90480.03 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?oismlcv-13651fetidm17b.htm HTTP/1.1 0-4030680/161/38985R 106.1610363849900.01.73503.60 54.36.148.122h2www.chonlateefood.com:443[1/0] schedule: stream 1, GET /tag/%E0%B8%88%E0%B8%B1%E0%B8%94% 0-4030681/164/39266W 106.3200379873340.01.74512.60 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 0-4030680/166/38648_ 106.3601041358116910.01.95509.60 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rmghlzs-39186tetid.htm HTTP/1.1 0-4030680/150/38815_ 106.09013384530710.01.69501.25 159.65.58.104http/1.1localhost:443GET /server-status HTTP/1.1 0-4030680/170/38564_ 106.1601123403342770.01.99510.95 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?lpsmlcv-17002fetidm88ycf.htm HTTP/1.1 0-4030680/153/37876_ 105.850895357934180.01.67470.90 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mmrszzn-15261eitems/eti.htm HTTP/1.1 0-4030680/151/38922_ 106.2501117367280710.01.74516.62 94.156.68.28http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 0-4030680/174/38202_ 106.4000384417410.01.97467.36 137.184.162.65http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-4030680/160/38903_ 106.1101106368716120.01.87580.26 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?rmghlzs-14538tetid.htm HTTP/1.1 0-4030680/163/38152_ 106.3400366596950.01.56507.11 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 0-4030680/154/38743_ 106.3501209407824350.01.71520.13 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?riyvbri-43996letid.htm HTTP/1.1 0-4030681/151/38611W 106.0400371530010.01.66499.90 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?405179himsetidm.html HTTP/1.1 0-4030680/155/38729_ 106.3100366490440.01.62490.45 159.65.58.104http/1.1localhost:443GET /login.action HTTP/1.1 0-4030680/127/38413_ 106.3600374436410.01.41533.81 159.65.58.104http/1.1localhost:443GET /_all_dbs HTTP/1.1 1-4078200/75/39617_ 38.6400370073600.00.71501.00 165.22.74.203http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-4078200/56/39535_ 38.7310378285710.00.51543.27 159.223.102.13http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-4078200/54/39318_ 38.5710379936990.00.55546.62 161.35.155.246http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-4078200/56/39575_ 38.7600388078170.00.57558.26 167.172.232.142http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-4078200/53/40348_ 38.7600359739320.00.60613.22 159.223.102.13http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-4078200/59/39157_ 38.7100357126270.00.65560.14 165.22.74.203http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-4078201/57/39246W 38.7100360404310.00.68525.66 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?txvkqbs-13604ietidm44.html HTTP/1.1 1-4078200/72/39694_ 38.5810384109230.00.73506.41 144.126.202.105http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-4078200/56/39444_ 38.75011372645610.00.56497.50 203.170.192.183http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /wp-cron.php?doing_wp_cron=1702309213.51003909111022949218 1-4078200/54/39507R 38.7110364794090.00.57505.98 137.184.222.107http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-4078200/49/40068_ 38.6511093360619470.00.57529.91 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?inloazi-3817yetidm.html HTTP/1.1 1
Found on 2023-12-11 15:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ee6f83c3ee6f83c3866e45b0Apache Status Apache Server Status for pop.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:42 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 44 seconds Server load: 2.84 2.12 1.72 Total accesses: 697456 - Total Traffic: 9.7 GB - Total Duration: 517787824 CPU Usage: u84.82 s12.68 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.395 ms/request 15 requests currently being processed, 113 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no14yes2301011 330151no14yes329007 630155no13yes626008 730156no0yes428000 Sum4041 151131026 ................................................................ ___R___________R__________________________W____R______R_________ ................................................................ ___L_______R__W_________WR_R_____R___W____W____________________R ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0069789745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0069796045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0069780245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0069795746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00697167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0069794846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00697145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0069792346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00697107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00697104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0069770146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0069789947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0069772146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00697104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00697108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0069746846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0069770945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0069784445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0069771246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0069770946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00697046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0069749045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0069793646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0069786945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006974146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0069773844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00697722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0069796345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00697107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00697146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00697778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0069796044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0069786344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0069747946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00697150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0069767645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0069745143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00697044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00697232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0069758244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00697183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00697822744746080.00.0079.16 </
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc089c5a489Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:03:52 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 1 hour 40 minutes 7 seconds Server load: 0.43 0.35 0.40 Total accesses: 7587 - Total Traffic: 98.6 MB - Total Duration: 17085665 CPU Usage: u3147.08 s5834.92 cu55529000 cs13588200 - 1150000% CPU load 1.26 requests/sec - 16.8 kB/second - 13.3 kB/request - 2251.97 ms/request 5 requests currently being processed, 4 idle workers C_R_W__.C....W.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-196474651/1/735C 0.000117052831.40.008.41 139.144.150.205http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-196467120/47/723_ 27.40040817291090.01.4110.54 159.203.44.43http/1.1 2-196464650/79/709R 35.400016109670.00.939.80 144.126.202.105http/1.1localhost:443GET / HTTP/1.1 3-196463980/80/694_ 32.940014089450.02.7210.87 161.35.176.95http/1.1localhost:80GET /config.json HTTP/1.0 4-196468430/40/656W 15.080014574260.00.648.51 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1 5-196465450/70/641_ 33.36096714750230.00.767.32 172.70.189.100http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 6-196474560/2/666_ 0.010014770590.00.008.99 139.144.150.205http/1.1localhost:443GET /about HTTP/1.1 7-1964-0/0/587. 0.007114006830.00.006.55 161.35.176.95http/1.1localhost:80GET / HTTP/1.0 8-196470781/27/616C 10.470014377242.70.357.28 144.126.202.105http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1964-0/0/516. 0.00841011274090.00.006.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1964-0/0/357. 0.0097205440930.00.003.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1964-0/0/395. 0.0096608961830.00.005.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1964-0/0/98. 0.007395362830490.00.001.86 162.158.222.250http/1.1www.acumaticathailand.com:80GET /z.php HTTP/1.0 13-196462560/90/183W 37.74027685131640.02.053.36 172.71.150.247http/1.1www.proplustech.co.th:443GET /?page_id=S743744 HTTP/1.1 14-1964-0/0/3. 0.00965011450.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1964-0/0/3. 0.00967026240.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1964-0/0/5. 0.009430157710.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 5subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 294 seconds, (range: 291...298)index usage: 0%, cache usage: 0%total entries stored since starting: 42total entries replaced since starting: 0total entries expired since starting: 37total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3777 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0bfa05ba0Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:08:14 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 6 minutes 2 seconds Server load: 0.31 0.30 0.29 Total accesses: 48541 - Total Traffic: 897.2 MB - Total Duration: 94148064 CPU Usage: u2999.18 s5760.72 cu55152300 cs13502200 - 210000% CPU load 1.48 requests/sec - 28.0 kB/second - 18.9 kB/request - 1939.56 ms/request 5 requests currently being processed, 7 idle workers _W_CW_C___.._.R................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193260540/25/4081_ 5.600184321620.00.26116.35 206.81.1.88http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-193260850/23/4009W 8.080077849300.00.1351.09 162.158.174.217http/1.1www.proplustech.co.th:443GET /?page_id=E1212260 HTTP/1.1 2-193261420/19/4018_ 4.370176867220.00.1153.93 139.144.96.150http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-193254411/94/3890C 21.410177162121.411.3368.91 139.144.96.150http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-193262120/11/3929W 0.170076322620.00.0362.32 139.144.96.150http/1.1localhost:443GET /server-status HTTP/1.1 5-193262530/1/3641_ 0.000266994220.00.0044.63 139.144.96.150http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-193255771/76/3634C 15.350171314111.40.9257.28 206.81.1.88http/1.1localhost:443GET /login.action HTTP/1.1 7-193262590/0/3516_ 0.000070991930.00.0092.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-193262610/0/3266_ 0.000063649440.00.0054.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-193259760/33/2882_ 6.310155414890.00.2034.74 139.144.96.150http/1.1localhost:443GET /about HTTP/1.1 10-1932-0/0/2588. 0.007135949380080.00.0042.00 172.71.99.86http/1.1www.bizproceed.com:80GET /simple.php HTTP/1.0 11-1932-0/0/1995. 0.00164040035970.00.0029.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-193259890/32/1887_ 9.500134580460.00.2933.67 198.199.121.22http/1.1localhost:443GET /v2/_catalog HTTP/1.1 13-1932-0/0/1733. 0.00133037525450.00.00116.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-193259970/32/922R 5.701217601470.00.2010.02 206.81.1.88http/1.1localhost:443GET /server-status HTTP/1.1 15-1932-0/0/468. 0.00202107032580.00.004.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/349. 0.00235905526000.00.002.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/250. 0.00236002763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00320807137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00385602780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00385705022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0038470690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00385102695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.003050192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.003852029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00370401528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00333202033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00314701828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00129100140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00128990108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 187 seconds, (range: 56...294)index usage: 0%, cache usage: 0%total entries stored since starting: 367total entries replaced since starting: 0total entries expired since starting: 357total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 28303 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc09b5b7ab6Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 03:36:08 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 3 hours 12 minutes 13 seconds Server load: 2.33 2.93 3.33 Total accesses: 52058 - Total Traffic: 741.2 MB - Total Duration: 271570329 CPU Usage: u3208.63 s5658.21 cu53843400 cs13132600 - 581000% CPU load 4.51 requests/sec - 65.8 kB/second - 14.6 kB/request - 5216.69 ms/request 19 requests currently being processed, 5 idle workers WC_W__W_C_WWRWCCCWWWWR..........W.......C......... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-189557380/43/2255W 18.8410108132500.00.3430.71 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=tree-of-life-canvas-print-canvas-art-by-tanielle-mm-6z7 1-189560511/6/2144C 1.480596108791815.90.0530.17 162.243.186.177http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 2-189554630/62/2121_ 28.2701108399160.00.9331.20 142.93.158.96http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 3-189560590/11/2187W 0.0530106725380.00.0331.01 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=the-tree-of-life-canvas-wall-art-by-gustav-mm-DBM3L6U1 4-189557460/33/2033_ 15.1200106828960.00.2333.72 142.93.158.96http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-189555220/43/2140_ 28.5900105563340.00.5627.77 134.122.89.242http/1.1localhost:443GET /about HTTP/1.1 6-189559220/8/2085W 0.3100104604140.00.1930.35 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?trusted-MSO.xml HTTP/1.1 7-189548400/77/2010_ 49.4300103071140.01.0827.82 159.203.63.67http/1.1localhost:443GET /about HTTP/1.1 8-189555281/43/1959C 31.280197607304.80.5726.98 134.122.89.242http/1.1localhost:443GET /server-status HTTP/1.1 9-189557480/34/2056_ 12.05094794974170.00.5228.30 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m2613297277.html HTTP/1.1 10-189557870/34/2042W 17.010096495790.00.3828.12 3.224.220.101http/1.1www.thaidaoherb.com:443GET /43848315121834.html HTTP/1.1 11-189556140/28/1891W 19.2120097163200.00.4128.41 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?lakes-ASN.xml HTTP/1.1 12-189558040/33/1950R 15.93166695849360.00.3827.69 23.22.35.162http/1.1 13-189558260/29/1814W 11.240090451630.00.3925.52 162.243.161.105http/1.1localhost:443GET /server-status HTTP/1.1 14-189558491/26/1936C 16.4100100476091.40.3125.18 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-189551091/62/1954C 32.890195036331.40.6033.10 134.122.89.242http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-189551111/82/1801C 49.101088747801.30.7722.54 142.93.158.96http/1.1localhost:443GET /about HTTP/1.1 17-189559350/18/1741W 3.992084979540.00.1224.25 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=twilight-tree-of-life-canvas-print-canvas-art-by-mm-gbr 18-189560670/1/1724W 0.007085340930.00.0024.44 27.254.96.168http/1.1www.yadaacc168.co.th:443POST /wp-cron.php?doing_wp_cron=1698352560.29064798355102539062 19-189560730/4/1521W 0.004084565090.00.0120.59 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=tree-of-life-wall-art-tree-of-life-canvas-mm-Bb9DlPi0 H 20-189560870/3/1475W 0.003077540630.00.0021.07 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=mua-huawei-watch-gt-2019-bluetooth-smartwatch-longer-la 21-189560980/2/1391R 0.000073119800.00.0019.28 159.203.63.67http/1.1localhost:443GET /v2/_catalog HTTP/1.1 22-1895-0/0/954. 0.00296055132690.00.0013.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1895-0/0/1052. 0.00328066140500.00.0014.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1895-0/0/939. 0.00306052652160.00.0013.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1895-0/0/742. 0.00295050815960.00.0010.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1895-0/0/715. 0.00324040102070.00.0010.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1895-0/0/484. 0.00178032991170.00.006.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1895-0/0/383. 0.00314029355210.00.005.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/595. 0.00145034643710.00.007.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/382. 0.00251124009730.00.004.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/378. 0.00305027554720.00.004.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-189551650/66/541W 40.761036810670.00.877.47 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=los-huawei-watch-y-watch-pro-llegan-a-espa%C3%B1a-mm-18 33-1895-0/0/358. 0.00316024023640.00.004.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/485. 0.00302026996880.00.008.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1895-0/0/183. 0.0031809135190.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/278. 0.00322020456110.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/273. 0.00308015420740.00.003.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/172. 0.0030907214030.00.003.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/176. 0.005909598860.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-189552291/77/138C 42.89005325651.40.901.82 162.243.161.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 41-1895-0/0/121. 0.0030404496740.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1895-0/0/44. 0.0030001329400.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/87. 0.0018406315840.00.001.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/92. 0.0032003849330.00.007.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1895-0/0/89. 0.0030705996930.00.000.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1895-0/0/16. 0.002850298370.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1895-0/0/20. 0.002500560060.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1895-0/0/96. 0.0032508615040.00.001.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1895-0/0/35. 0.0015201397580.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SS
Found on 2023-10-26 20:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc002502c47Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 06:52:51 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 2 hours 50 minutes 39 seconds Server load: 0.70 0.54 0.43 Total accesses: 10628 - Total Traffic: 133.1 MB - Total Duration: 11617496 CPU Usage: u2854.35 s5344.67 cu52298900 cs12765100 - 636000% CPU load 1.04 requests/sec - 13.3 kB/second - 12.8 kB/request - 1093.1 ms/request 10 requests currently being processed, 3 idle workers CRWWC_CR_CCC_..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182321631/20/967C 0.13019529351.40.0211.15 138.68.163.10http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-182320490/46/1047R 8.380110836530.00.1512.23 64.227.126.135http/1.1localhost:443GET /server-status HTTP/1.1 2-182320830/28/1033W 5.400011923790.00.1413.72 138.68.163.10http/1.1localhost:443GET /server-status HTTP/1.1 3-182318670/54/878W 18.31009657920.00.8915.08 159.203.182.222http/1.1www.yadaacc168.co.th:443GET /.vscode/sftp.json HTTP/1.1 4-182319241/49/915C 10.771111695651.40.1810.12 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-182314000/85/698_ 20.890108436010.00.608.72 172.69.65.91http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-fb78 6-182321731/2/901C 0.610010721701.30.0110.38 164.90.222.93http/1.1localhost:443GET /login.action HTTP/1.1 7-182319580/43/818R 15.46018993360.01.6911.99 164.90.205.35http/1.1localhost:80GET /config.json HTTP/1.0 8-182319890/47/681_ 12.57016192770.00.207.93 164.90.205.35http/1.1localhost:80GET /telescope/requests HTTP/1.0 9-182321071/21/682C 2.94016870261.30.197.39 64.227.126.135http/1.1localhost:443GET /login.action HTTP/1.1 10-182319981/47/500C 14.12114897321.43.3310.93 64.227.126.135http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-182321801/2/356C 0.01013398822.70.003.38 161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 12-182321820/4/304_ 0.01003781520.00.002.70 159.89.83.196http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 13-1823-0/0/18. 0.0080780121020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1823-0/0/200. 0.00739602199440.00.001.69 20.127.125.189http/1.1www.dreamhightravel.com:80GET //wp.php HTTP/1.0 15-1823-0/0/5. 0.00816802380.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1823-0/0/198. 0.00741402524510.00.001.74 188.116.22.119http/1.1www.tkadvicesystem.com:80GET /OLD/ HTTP/1.0 17-1823-0/0/101. 0.0081590991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0074185051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.0080890144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0073947821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.0081600300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.0081630210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.008173050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.00817201095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 98subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 141 seconds, (range: 56...297)index usage: 3%, cache usage: 4%total entries stored since starting: 2814total entries replaced since starting: 0total entries expired since starting: 2716total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 73 hit, 3815 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-10 23:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0ba3f9da0Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 04-Oct-2023 00:15:03 +07 Restart Time: Wednesday, 04-Oct-2023 00:11:05 +07 Parent Server Config. Generation: 1800 Parent Server MPM Generation: 1799 Server uptime: 3 minutes 57 seconds Server load: 2.37 2.16 1.49 Total accesses: 636 - Total Traffic: 5.1 MB - Total Duration: 899280 CPU Usage: u2892.1 s5296.6 cu51830300 cs12663200 - 2.72e+7% CPU load 2.68 requests/sec - 22.0 kB/second - 8.2 kB/request - 1413.96 ms/request 10 requests currently being processed, 5 idle workers _____CCRCRC.RW..W..C.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1799110770/8/45_ 0.0900636620.00.020.34 159.223.102.13http/1.1 1-179984210/55/55_ 28.0100754530.00.410.41 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-179989010/51/54_ 20.5500556930.00.700.72 138.197.88.136http/1.1localhost:80GET /.DS_Store HTTP/1.0 3-1799111130/11/29_ 0.4501279550.00.020.14 207.154.240.169http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-179984270/63/63_ 28.9100786390.00.490.49 143.42.118.5http/1.1localhost:80GET /.git/config HTTP/1.0 5-1799111311/1/38C 0.0011601431.30.000.42 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 6-1799101561/30/37C 11.8710424041.30.170.22 128.199.62.55http/1.1localhost:443GET /about HTTP/1.1 7-1799101580/28/34R 12.7701454140.00.160.20 74.207.237.46http/1.1localhost:80GET /config.json HTTP/1.0 8-1799105801/11/14C 6.59015012302020.60.100.11 94.23.207.193http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2%E0%B8%87%E0%B8%82 9-1799111370/4/7R 0.010133800.00.000.01 161.35.27.144http/1.1localhost:443GET /v2/_catalog HTTP/1.1 10-1799111431/2/5C 0.000029761.40.000.02 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1799-0/0/4. 0.00226022470.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-179985740/44/44R 24.0401791020.00.360.36 45.55.193.222http/1.1localhost:80GET /login.action HTTP/1.0 13-179985750/52/52W 29.3900807440.00.440.44 192.99.15.29http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%81%E0%B8%A7 14-1799-0/0/22. 0.001170402450.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1799-0/0/1. 0.00231000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-179985890/45/45W 24.5500717910.00.370.37 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 17-1799-0/0/31. 0.00550533510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1799-0/0/5. 0.00199078280.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-179986181/51/51C 22.6910852231.30.330.33 207.154.240.169http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 118subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 126 seconds, (range: 61...286)index usage: 4%, cache usage: 5%total entries stored since starting: 118total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 234 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-03 17:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0e9c30b98Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:18 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 31 seconds Server load: 0.88 1.13 1.25 Total accesses: 482 - Total Traffic: 2.6 MB - Total Duration: 212652 CPU Usage: u2758.86 s5256.74 cu51774600 cs12651800 - 7.08e+7% CPU load 5.3 requests/sec - 29.0 kB/second - 5.5 kB/request - 441.187 ms/request 11 requests currently being processed, 5 idle workers _CRCRCC___WC_W.WC................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299410/45/45_ 6.2004143690.00.220.22 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swip 1-1797299571/26/26C 6.7300417551.40.300.30 167.99.182.39http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1797301250/20/37R 1.97054291040.00.040.09 162.243.161.105http/1.1www.pokaorganize.com:443GET /debug/default/view?panel=config HTTP/1.1 3-1797301601/8/37C 1.1100130801.40.050.21 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1797301310/15/30R 1.9707156440.00.050.19 74.207.237.114http/1.1www.pokaorganize.com:443 5-1797301721/4/15C 0.02014126046.40.020.22 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP 6-1797300731/28/40C 5.9400127081.40.140.16 74.207.237.46http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1797301780/3/14_ 0.03013155470.00.000.14 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/essential-addons-for-elementor-lite/ass 8-1797300250/43/43_ 1.560026320.00.150.15 161.35.176.95http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-1797300310/33/33_ 2.920876450.00.070.07 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/uploads/elementor/css/post-9.css?ver=1695264046 10-1797301840/2/13W 0.010080110.00.020.16 74.207.237.46http/1.1localhost:443GET /server-status HTTP/1.1 11-1797300441/29/29C 4.300422998110.70.200.20 74.207.237.114http/1.1www.pokaorganize.com:443GET /.vscode/sftp.json HTTP/1.1 12-1797301860/3/19_ 0.01043139120.00.020.04 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-content/plugins/elementor/assets/css/frontend-lite.min. 13-1797300520/35/35W 4.9802995720.00.120.12 54.89.200.90http/1.1www.importantaccount.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1 14-1797-0/0/10. 0.0058011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300840/22/22W 6.5300160220.00.100.10 162.243.161.105http/1.1www.pokaorganize.com:443GET /v2/_catalog HTTP/1.1 16-1797300921/20/20C 4.9001149851.40.160.16 161.35.176.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1797-0/0/6. 0.0043011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0051013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0045013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 52subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 238 seconds, (range: 208...294)index usage: 1%, cache usage: 2%total entries stored since starting: 52total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 265 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0ce332bb8Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:41 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 1 minute 10 seconds Server load: 4.29 4.33 4.35 Total accesses: 519 - Total Traffic: 4.8 MB - Total Duration: 558601 CPU Usage: u2482.7 s4258.77 cu40848700 cs9867590 - 7.25e+7% CPU load 7.41 requests/sec - 69.8 kB/second - 9.4 kB/request - 1076.3 ms/request 16 requests currently being processed, 6 idle workers WC___W_CCCWWWR_WC_CCCW............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239900/32/32W 17.9700371980.00.410.41 172.68.186.128http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 1-1527239921/41/41C 17.8800435621.30.280.28 139.144.150.8http/1.1localhost:443GET /.git/config HTTP/1.1 2-1527242400/6/33_ 0.790795381610.00.020.28 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 3-1527240120/37/37_ 17.1200418860.00.380.38 146.190.160.11http/1.1localhost:443GET /_all_dbs HTTP/1.1 4-1527242190/10/30_ 3.480686344980.00.060.24 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 5-1527240370/35/35W 17.9800373600.00.300.30 207.154.240.169http/1.1www.pokaorganize.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1527240450/37/37_ 19.5501395650.00.360.36 192.53.126.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 7-1527240471/37/37C 17.3710361381.30.300.30 192.53.126.23http/1.1localhost:443GET /login.action HTTP/1.1 8-1527240581/36/36C 19.1201405881.40.360.36 139.144.150.8http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 9-1527241271/21/32C 10.3500378031.30.170.32 146.190.160.11http/1.1localhost:443GET /.DS_Store HTTP/1.1 10-1527240700/32/32W 19.4300409860.00.300.30 172.68.19.54http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 11-1527240760/41/41W 19.1400381500.00.350.35 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 12-1527240860/29/29W 17.6600356440.00.290.29 137.184.106.30http/1.1localhost:443GET /server-status HTTP/1.1 13-1527241040/32/32R 15.630678320950.00.380.38 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 14-1527241420/17/17_ 7.560431146430.00.140.14 207.154.240.169http/1.1www.pokaorganize.com:443GET /v2/_catalog HTTP/1.1 15-1527242320/4/4W 1.610032270.00.030.03 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 16-1527242471/4/4C 0.47008941.40.010.01 137.184.106.30http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1527242530/3/3_ 1.87039637440.00.030.03 206.81.1.88http/1.1www.pokaorganize.com:443GET /debug/default/view?panel=config HTTP/1.1 18-1527242601/2/2C 0.011161.30.000.00 146.190.160.11http/1.1localhost:443GET /login.action HTTP/1.1 19-1527242621/2/2C 0.001171.30.000.00 139.144.150.8http/1.1localhost:443GET /.env HTTP/1.1 20-1527242681/2/2C 0.730722144613.50.010.01 52.251.36.208http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 21-1527242740/1/1W 0.50009890.00.010.01 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 47subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 266 seconds, (range: 228...295)index usage: 1%, cache usage: 2%total entries stored since starting: 47total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 145 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc012dbc5d0Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:14 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 25 seconds Server load: 1.01 1.21 1.38 Total accesses: 293 - Total Traffic: 2.1 MB - Total Duration: 187667 CPU Usage: u1990.65 s3435.25 cu32339200 cs7737160 - 4.72e+7% CPU load 3.45 requests/sec - 25.1 kB/second - 7.3 kB/request - 640.502 ms/request 13 requests currently being processed, 5 idle workers W_CRCWRW_R_CWC__CC................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/20/20W 6.2200163360.00.300.30 137.184.106.30http/1.1www.pokaorganize.com:443GET /debug/default/view?panel=config HTTP/1.1 1-129450830/14/18_ 3.4600120840.00.080.11 139.144.96.150http/1.1localhost:443GET /about HTTP/1.1 2-129453011/2/31C 0.0001125661.30.000.08 165.22.74.203http/1.1localhost:443GET /.git/config HTTP/1.1 3-129449890/21/21R 7.870470252090.00.230.23 146.70.117.217http/1.1www.pokaorganize.com:443 4-129449951/18/18C 6.15013254736.90.110.11 205.169.39.241http/1.1www.pokaorganize.com:443GET /wp-content/plugins/so-widgets-bundle/js/sow.jquery.fittext 5-129453150/0/17W 0.0000219350.00.000.15 171.67.70.229http/1.1www.pokaorganize.com:443GET / HTTP/1.1 6-129450210/26/26R 4.300185120.00.170.17 146.70.117.217http/1.1www.pokaorganize.com:443 7-129450280/26/26W 7.9000197250.00.220.22 142.93.158.96http/1.1localhost:443GET /server-status HTTP/1.1 8-129450300/24/24_ 6.1601171410.00.070.07 171.67.70.229http/1.1localhost:443GET / HTTP/1.1 9-129450540/25/25R 5.0501107670.00.100.10 171.67.70.229http/1.1www.pokaorganize.com:443 10-129451900/14/15_ 1.180061070.00.300.30 171.67.70.229http/1.1localhost:443GET / HTTP/1.1 11-129452001/6/9C 0.041121161.30.010.02 165.22.74.203http/1.1localhost:443GET /.env HTTP/1.1 12-129452060/9/9W 0.700014730.00.040.04 143.198.72.96http/1.1www.pokaorganize.com:443GET /v2/_catalog HTTP/1.1 13-129452181/6/6C 1.990147121.40.040.04 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-129452190/6/6_ 0.4904329300.00.020.02 171.67.70.229http/1.1www.pokaorganize.com:443GET / HTTP/1.1 15-129452220/8/8_ 0.710025420.00.110.11 171.67.70.229http/1.1localhost:443GET / HTTP/1.1 16-129452231/13/13C 0.1001251.40.020.02 165.22.74.203http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 17-129453171/1/1C 0.000241.30.000.00 139.144.96.150http/1.1localhost:443GET /v2/_catalog HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 73subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 262 seconds, (range: 227...298)index usage: 2%, cache usage: 3%total entries stored since starting: 73total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 150 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0dfa5d368Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:36 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 3 seconds Server load: 0.49 1.05 0.98 Total accesses: 123 - Total Traffic: 1.4 MB - Total Duration: 88986 CPU Usage: u1624.75 s2823.22 cu26678600 cs6409520 - 5.25e+7% CPU load 1.95 requests/sec - 22.3 kB/second - 11.4 kB/request - 723.463 ms/request 9 requests currently being processed, 0 idle workers RCCWCCWRW......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416030/17/17R 5.6301119460.00.110.11 47.242.255.46http/1.1www.chonlateepro.com:80POST /xmlrpc.php HTTP/1.0 1-108416211/14/14C 4.7100101552.20.120.12 172.104.102.196http/1.1localhost:443GET / HTTP/1.1 2-108416231/11/11C 7.1801213702.60.120.12 146.190.98.165http/1.1localhost:443GET /.DS_Store HTTP/1.1 3-108416250/14/14W 4.2700114560.00.400.40 146.190.160.11http/1.1www.pokaorganize.com:443GET / HTTP/1.1 4-108416271/17/17C 5.9201135132.60.290.29 146.190.98.165http/1.1localhost:443GET /telescope/requests HTTP/1.1 5-108416521/18/18C 2.830073302.50.090.09 146.190.98.165http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 6-108416590/15/15W 3.310069380.00.090.09 146.190.98.165http/1.1localhost:443GET /server-status HTTP/1.1 7-108416830/14/14R 1.710041260.00.120.12 64.227.126.135http/1.1www.pokaorganize.com:443 8-108417060/3/3W 1.090021470.00.010.01 195.201.27.201http/1.1www.chonlateepro.com:443POST /xmlrpc.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 278 seconds, (range: 237...299)index usage: 0%, cache usage: 0%total entries stored since starting: 12total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 46 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc014220342Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:31 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 35 seconds Server load: 1.58 1.57 1.46 Total accesses: 241 - Total Traffic: 1.0 MB - Total Duration: 105949 CPU Usage: u1266.69 s2311.29 cu21800400 cs5275950 - 7.74e+7% CPU load 6.89 requests/sec - 30.5 kB/second - 4537 B/request - 439.622 ms/request 28 requests currently being processed, 0 idle workers CCCCCCCCWCRCCWCRCCCCCCCCCCCC...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775491/15/15C 5.0701162021.40.070.07 194.195.219.36http/1.1localhost:443GET /api/search?folderIds=0 HTTP/1.1 1-84775501/28/28C 4.020196392.60.080.08 170.187.164.222http/1.1localhost:443GET /.git/config HTTP/1.1 2-84775521/19/19C 2.891157342.60.070.07 170.187.164.222http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-84777311/9/16C 0.070159931.30.010.07 194.195.219.36http/1.1localhost:443GET /login.action HTTP/1.1 4-84775791/24/24C 4.270187282.60.100.10 170.187.164.222http/1.1localhost:443GET /info.php HTTP/1.1 5-84776001/10/10C 3.340175611.30.130.13 161.35.153.48http/1.1localhost:443GET /about HTTP/1.1 6-84776071/11/11C 2.530146911.30.050.05 161.35.153.48http/1.1localhost:443GET /login.action HTTP/1.1 7-84776091/16/16C 3.690183771.30.150.15 161.35.153.48http/1.1localhost:443GET /config.json HTTP/1.1 8-84776230/11/11W 3.970077580.00.110.11 109.107.182.52http/1.1www.chonlateevip.com:443GET / HTTP/1.1 9-84776341/25/25C 2.180159742.60.050.05 139.59.138.104http/1.1localhost:443GET /info.php HTTP/1.1 10-84776360/15/15R 3.360610206180.00.050.05 139.59.138.104http/1.1 11-84777201/19/19C 0.1611302.60.020.02 170.187.164.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 12-84777331/10/10C 1.221145642.70.030.03 170.187.164.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-84777460/2/2W 0.020060.00.000.00 139.59.138.104http/1.1localhost:443GET /server-status HTTP/1.1 14-84777531/2/2C 0.021152.70.010.01 170.187.164.222http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 15-84777550/1/1R 0.000240.00.000.00 194.195.219.36http/1.1localhost:443GET /.env HTTP/1.1 16-84777671/2/2C 0.020052.70.010.01 139.59.138.104http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-84777691/3/3C 0.0201111.30.010.01 194.195.219.36http/1.1localhost:443GET /about HTTP/1.1 18-84777751/3/3C 0.010161.30.000.00 194.195.219.36http/1.1localhost:443GET /config.json HTTP/1.1 19-84777811/1/1C 0.011242.60.000.00 170.187.164.222http/1.1localhost:443GET /.env HTTP/1.1 20-84777911/1/1C 0.010242.70.000.00 139.59.138.104http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 21-84777931/1/1C 0.010242.60.000.00 139.59.138.104http/1.1localhost:443GET /.git/config HTTP/1.1 22-84777991/1/1C 0.010242.70.000.00 139.59.138.104http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 23-84778051/1/1C 0.010122.60.000.00 139.59.138.104http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 24-84778061/1/1C 0.010242.50.000.00 139.59.138.104http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 25-84778121/1/1C 0.000132.60.000.00 139.59.138.104http/1.1localhost:443GET /telescope/requests HTTP/1.1 26-84778151/1/1C 0.010242.30.000.00 139.59.138.104http/1.1localhost:443GET / HTTP/1.1 27-84778251/1/1C 0.010232.60.000.00 139.59.138.104http/1.1localhost:443GET /.env HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 290 seconds, (range: 279...298)index usage: 0%, cache usage: 0%total entries stored since starting: 15total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 130 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c1eacc08c1eacc0415c0eb0Apache Status Apache Server Status for pop.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:05 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 2 seconds Server load: 2.45 1.80 1.59 Total accesses: 58 - Total Traffic: 108 kB - Total Duration: 9168 CPU Usage: u629.78 s1252.26 cu12780600 cs3072970 - 7.93e+8% CPU load 29 requests/sec - 54.0 kB/second - 1906 B/request - 158.069 ms/request 8 requests currently being processed, 0 idle workers WWCCCCWW.......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799540/4/4W 1.280024580.00.040.04 172.105.120.53http/1.1localhost:443GET /server-status HTTP/1.1 1-43799720/2/2W 1.010020490.00.000.00 45.79.148.46http/1.1www.pokaorganize.com:443GET / HTTP/1.1 2-43799781/16/16C 1.130022442.60.020.02 172.105.120.53http/1.1localhost:443GET /.env HTTP/1.1 3-43799881/5/5C 0.540010692.60.010.01 172.105.120.53http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-43799941/3/3C 0.670013162.60.010.01 172.105.120.53http/1.1localhost:443GET /.git/config HTTP/1.1 5-437100011/24/24C 0.0400232.70.020.02 172.105.120.53http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 6-437100150/3/3W 0.000030.00.000.00 170.187.195.217http/1.1www.pokaorganize.com:80GET / HTTP/1.0 7-437100210/1/1W 0.000020.00.000.00 139.177.198.221http/1.1www.pokaorganize.com:443GET / HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 6subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 298 seconds, (range: 298...298)index usage: 0%, cache usage: 0%total entries stored since starting: 6total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 31 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 03:58
Last seen 2024-02-02 09:01
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309e569a5ccbApache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 16:01:20 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 5 hours 59 minutes 59 seconds Server load: 2.00 2.00 2.00 Total accesses: 1847838 - Total Traffic: 23.8 GB - Total Duration: 2141104233 CPU Usage: u214.51 s116.77 cu32089.3 cs2210.25 - 1.42% CPU load .757 requests/sec - 10.2 kB/second - 13.5 kB/request - 1158.71 ms/request 3 requests currently being processed, 125 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no2yes032002 229661no1yes131001 329394no1yes230001 529374no1yes032001 Sum405 3125005 ________________________________................................ ___R_________________________________R_________________W________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/39/14787_ 13.1590160260950.00.14193.77 164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/39/15282_ 13.1790139013330.00.11198.96 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/35/14848_ 13.1900150309430.00.16192.73 178.62.3.65h2localhost:443[0/0] Software caused connection abort 0-92293730/33/15026_ 13.2160145874900.00.08185.96 161.35.27.144http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/33/14931_ 13.1510147711670.00.15185.42 178.128.151.41http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/29/15156_ 13.2230156649120.00.11188.53 139.144.150.45http/1.1localhost:443GET / HTTP/1.1 0-92293730/27/14827_ 13.17390145588370.00.13200.23 143.110.156.182http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/30/15137_ 13.1910150182020.00.07187.57 167.172.232.142http/1.1 0-92293730/29/15096_ 13.1330145226800.00.07229.87 147.182.130.98http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/38/15232_ 13.15150148853320.00.15194.87 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/37/14797_ 13.21110154393230.00.09200.68 143.110.218.229http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/34/14807_ 13.21180147156120.00.08195.45 143.110.218.229http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/43/14674_ 13.1830137182720.00.14185.50 178.128.151.41http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/35/14826_ 13.17180169086490.00.09186.02 161.35.27.144http/1.1 0-92293730/31/15777_ 13.1900141614990.00.09187.75 162.243.161.105http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/37/14829_ 12.9600165341190.00.08182.47 139.144.150.45h2localhost:443[0/0] Software caused connection abort 0-92293730/44/14883_ 13.1600143404980.00.12206.38 74.207.237.114http/1.1 0-92293730/36/14943_ 13.1900144939930.00.12189.30 162.243.161.105http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/28/14756_ 12.6910160388140.00.05200.53 74.207.237.114h2localhost:443[0/0] Software caused connection abort 0-92293730/35/14980_ 13.1860144639340.00.13193.81 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/37/14974_ 13.2700181495860.00.15193.41 161.35.155.246http/1.1localhost:80GET /login.action HTTP/1.1 0-92293730/32/14997_ 13.1508147053740.00.09204.06 167.172.232.142http/1.1 0-92293730/36/15454_ 13.0610150748540.00.15188.27 74.207.237.114h2localhost:443[0/0] Software caused connection abort 0-92293730/32/14663_ 12.6187138765130.00.13190.18 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/41/14965_ 13.21110162205820.00.09186.87 143.110.218.229http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/36/14639_ 13.2700135981630.00.13196.98 143.198.72.96http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-92293730/29/15136_ 13.21120144713440.00.04194.49 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 0-92293730/34/14919_ 13.2600159187410.00.05213.30 161.35.190.56http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/34/14721_ 13.17390152174350.00.11175.92 161.35.190.56http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/27/15175_ 13.2140135139110.00.08225.13 161.35.155.246http/1.1localhost:80GET / HTTP/1.1 0-92293730/42/14661_ 13.2140155572970.00.06199.14 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/31/14921_ 13.2800145814970.00.15185.14 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-92-0/0/15731. 0.00424650138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00424650136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00424650174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00424650150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00424650146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00424650134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00424650172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00424650165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00424650127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00424650152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00424650148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00424650159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00424650159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00424650137016410.00.00183.04 159.223.102.13http/1.1localhost:
Found on 2024-02-02 09:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309e46c2e8f8Apache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 08:25:55 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 22 hours 24 minutes 34 seconds Server load: 3.49 2.89 2.64 Total accesses: 789308 - Total Traffic: 10.7 GB - Total Duration: 962197333 CPU Usage: u315.21 s22.13 cu13326.1 cs698.67 - 8.6% CPU load 4.72 requests/sec - 67.1 kB/second - 14.2 kB/request - 1219.04 ms/request 14 requests currently being processed, 114 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425no1yes032001 111360no2yes230000 216287no1yes923000 316453no3yes329001 Sum407 14114002 __________________________________________________________W_W___ _________R___R_RWW_W__R_R_____W______________R_______R______W___ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-784250/200/6088_ 125.880213783649780.02.7390.26 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2493tobeitems/etidm71.htm HTTP/1.1 0-784250/211/6563_ 125.883061118330.02.2186.67 139.144.150.205http/1.1localhost:80GET /.git/config HTTP/1.1 0-784250/183/6087_ 125.840072862250.02.3690.66 165.232.106.187http/1.1 0-784250/219/6427_ 126.231070419450.02.4183.40 128.199.62.55http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-784250/201/6146_ 125.68083967286620.02.1579.42 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /eoaaebb-41383netidm12rbn HTTP/1.1 0-784250/273/6519_ 126.261078647410.03.7185.87 138.197.88.136http/1.1localhost:80GET / HTTP/1.1 0-784250/210/6317_ 126.231059342240.02.6597.07 161.35.27.144http/1.1localhost:80GET / HTTP/1.1 0-784250/202/6360_ 124.082170468237720.02.2783.12 66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /db.php?g3205818.shtml HTTP/1.1 0-784250/262/6376_ 126.30084963260300.02.70125.55 52.70.240.171http/1.1www.chonlateeboi.com:443GET /31193crwdeti.html HTTP/1.1 0-784250/250/6293_ 126.150072255780.02.7180.95 192.53.126.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-784250/187/6048_ 125.732076897820.02.1077.31 165.232.106.187h2www.dreamhightravel.com:443[0/0] Software caused connection abort 0-784250/197/6003_ 126.30041376045400.02.3978.21 159.65.138.217http/1.1localhost:80\x16\x03\x01\x01\b\x01 0-784250/214/6073_ 126.300053864370.02.6180.54 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-784250/210/6275_ 126.040082370980.02.5184.80 192.53.126.23http/1.1localhost:443GET /login.action HTTP/1.1 0-784250/189/6708_ 125.17089857337760.02.2686.68 165.232.106.187h2www.dreamhightravel.com:443[0/0] Software caused connection abort 0-784250/266/6041_ 126.26184583769750.02.5678.91 162.243.186.177http/1.1localhost:80\x16\x03\x01\x01\x13\x01 0-784250/214/6210_ 124.54168165117970.02.3781.04 192.53.126.23h2localhost:443[0/0] Software caused connection abort 0-784250/209/6360_ 126.271059751980.02.2182.59 199.45.154.51http/1.1www.leadingservice.co.th:443GET /wp-content/uploads/2019/12/cropped-Icon_Home-32x32.jpg HTT 0-784250/201/6364_ 126.222062600780.02.2181.00 128.199.62.55http/1.1localhost:443GET /config.json HTTP/1.1 0-784250/188/6124_ 125.60189969230350.02.5386.36 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-784250/283/6400_ 126.261090790670.02.7988.99 165.22.74.203http/1.1localhost:80GET / HTTP/1.1 0-784250/187/6095_ 126.290071650100.02.1582.87 137.184.106.30http/1.1localhost:80GET / HTTP/1.1 0-784250/187/6667_ 125.670074227080.02.3288.88 139.144.150.205http/1.1localhost:80GET / HTTP/1.1 0-784250/212/6177_ 126.30055663664100.02.2889.23 142.4.12.109http/1.1www.winnerpropest.com:443POST /wp-login.php HTTP/1.1 0-784250/268/6079_ 125.860105675840670.02.9376.37 3.224.220.101http/1.1www.chonlateeboi.com:443GET /41878eslwetidm17s HTTP/1.1 0-784250/185/6193_ 125.88388458123810.02.1180.24 3.224.220.101http/1.1www.chonlateeboi.com:443GET /44021eslwetidm55.html HTTP/1.1 0-784250/206/6224_ 125.932057269070.02.3490.22 192.53.126.23http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-784250/205/6201_ 125.801071110030.02.65110.76 178.62.73.12http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-784250/207/6143_ 126.16385154722130.02.2977.66 23.22.35.162http/1.1www.chonlateeboi.com:443GET /2489tobeeti.html HTTP/1.1 0-784250/303/6402_ 126.26184473245630.03.41116.55 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2486tobeitems/etidm35q.html HTTP/1.1 0-784250/183/6094_ 126.29035167867830.02.2189.87 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2493tobeitems/etidm71.htm HTTP/1.1 0-784250/200/6401_ 126.11084965751040.02.5782.33 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /lxakawv-4080netidm36ykn.htm HTTP/1.1 1-7113600/175/6279_ 105.550073426600.01.9581.52 207.154.240.169h2localhost:443[0/0] Software caused connection abort 1-7113600/214/6078_ 104.88283867238740.02.4877.44 110.42.217.219http/1.1 1-7113600/189/6064_ 105.840093910160.02.2578.48 159.65.138.217http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-7113600/168/5728_ 105.66184876526930.02.3176.14 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /byyjflh-34542letidm43oll HTTP/1.1 1-7113600/171/5983_ 105.76083875766560.01.9988.75 3.224.220.101http/1.1www.chonlateeboi.com:443GET /40648eslwetidm95kez HTTP/1.1 1-7113600/166/6039_ 105.83084265211850.02.0479.51 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /tjikawv-4062vetidm59g.htm HTTP/1.1 1-7113600/153/6085_ 105.791065795420.01.7877.02 192.53.126.23http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-7113600/170/6169_ 105.791408477025830.02.8182.66 66.249.65.233http/1.1www.chonlateenextbiz.com:443GET /sitemap82.xml HTTP/1.1 1-7113600/184/6131_ 105.612056112710.02.3379.05 128.199.62.55http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-7113600/169/6087_ 105.830070230670.01.7985.02 164.92.192.25http/1.1localhost:80GET / HTTP/1.1 1-7113600/164/5880_ 105.811076765000.02.1184.33 192.53.126.23http/1.1localhost:443GET /config.json HTTP/1.1 1-7113600/161/6395_ 105.850059409760.01.8992.62 159.65.138.217http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7113600/182/6116_ 105.15186779954910.02.1682.62 66.249.65.39http/1.1www.chonl
Found on 2024-01-07 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309ebb4d170cApache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 23:25:47 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 hours 24 minutes 26 seconds Server load: 3.88 3.82 3.41 Total accesses: 240264 - Total Traffic: 3.5 GB - Total Duration: 192189066 CPU Usage: u81.68 s5.74 cu3895.6 cs208.8 - 8.68% CPU load 4.98 requests/sec - 75.8 kB/second - 15.2 kB/request - 799.908 ms/request 12 requests currently being processed, 84 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 030686no5yes428000 132728no1yes329000 229460no5yes527002 Sum3011 1284002 ___________W__________W____W__R__WW______________R______________ _R_W__________________WR_______R................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0306860/69/2677_ 31.251021681460.00.7840.82 128.199.195.68http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-0306860/68/2951_ 31.420020742750.00.7539.24 139.144.150.205http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-0306860/49/2620_ 30.96088432958730.00.5747.64 159.223.108.26http/1.1 0-0306860/57/2854_ 30.97081621056110.00.6136.44 188.165.232.135http/1.1www.chonlateedesign.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%84%E0%B8%9F%E0%B8%A5%E0% 0-0306860/61/2740_ 31.260021483390.00.7634.21 138.68.163.10http/1.1localhost:80GET / HTTP/1.1 0-0306860/64/3005_ 31.260421661830.00.7537.94 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-0306860/56/2757_ 31.350021063510.00.6249.71 142.93.64.15http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-0306860/54/2748_ 31.460021900300.00.7236.15 147.182.130.98http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-0306860/52/2804_ 31.410020816520.00.6278.65 188.165.232.135http/1.1www.chonlateedesign.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%84%E0%B8%9F%E0%B8%A5%E0% 0-0306860/70/2752_ 31.371020899000.00.8935.63 128.199.195.68http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-0306860/56/2692_ 31.37066424471730.00.6233.06 159.223.108.26http/1.1 0-0306861/46/2610W 31.160021107550.00.5133.97 20.163.30.95http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 0-0306860/55/2591_ 31.270021069560.00.5335.95 137.184.150.232http/1.1 0-0306860/54/2897_ 30.80184721801510.00.6339.80 164.90.222.93http/1.1 0-0306860/55/2933_ 31.440023963130.00.5939.88 138.68.163.10http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-0306860/53/2692_ 30.231114221063120.00.6235.34 137.184.150.232http/1.1 0-0306860/52/2602_ 31.131021396290.00.6233.90 139.144.150.205http/1.1localhost:80GET /login.action HTTP/1.1 0-0306860/52/2924_ 31.420021327300.00.5839.14 139.59.182.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0306860/62/2813_ 31.100020792340.00.7637.11 66.115.181.202http/1.1www.partymanagementthailand.comGET / HTTP/1.1 0-0306860/60/2654_ 31.400022717000.00.6440.10 142.93.64.15http/1.1localhost:80GET /about HTTP/1.1 0-0306860/69/2718_ 31.350020778150.00.8639.20 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-0306860/62/2746_ 31.440021776950.00.7339.99 142.93.64.15http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-0306861/53/3086W 31.250020744230.00.6239.60 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?eeivrsm-184201vetid.htm HTTP/1.1 0-0306860/47/2617_ 30.24085020293390.00.5634.80 139.144.150.23h2localhost:443[0/0] Software caused connection abort 0-0306860/60/2659_ 31.390021286670.00.5534.30 192.95.30.177http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%9A 0-0306860/65/2639_ 31.430020734970.01.0534.37 146.190.64.200http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-0306860/61/2714_ 31.440020583970.00.5944.96 185.70.94.16http/1.1www.dtacsme.com:443GET / HTTP/1.1 0-0306861/57/2713W 31.110020770090.00.6665.09 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?wutggdh-235959gitems/eti HTTP/1.1 0-0306860/53/2604_ 30.960172720988550.00.5832.81 185.70.94.16http/1.1www.dtacsme.com:443GET / HTTP/1.1 0-0306860/55/2945_ 30.85085020133410.00.5773.58 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-0306860/55/2631R 31.09165820915470.00.6741.67 23.22.35.162http/1.1www.chonlateeadmin.com:443 0-0306860/95/2984_ 31.36073520966700.00.8436.60 45.138.16.107http/1.1www.chonlateemeet.com:443POST /xmlrpc.php HTTP/1.1 1-0327280/8/2117_ 4.640205416015740.00.0827.92 128.199.195.68h2localhost:443[0/0] Software caused connection abort 1-0327281/5/1900W 3.741015768760.00.0724.59 23.22.35.162http/1.1www.chonlateeboi.com:443GET /44685khrritems/etidm97.htm HTTP/1.1 1-0327281/14/2040W 4.800016114830.00.1228.37 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?otrggdh-46177eeti.html HTTP/1.1 1-0327280/14/1909_ 4.870015557540.00.1725.56 142.93.64.15http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-0327280/11/1939_ 4.610110015511530.00.1529.99 139.144.150.23http/1.1 1-0327280/8/1948_ 4.181112715305090.00.0925.99 20.15.133.170h2www.twinbuilt.co.th:443GET /?a=dcm-the-drawing-specialists-3-vv-kdmKE5i6 HTTP/2.0 1-0327280/8/1954_ 4.801015866350.00.0924.09 139.59.182.142http/1.1localhost:80GET /about HTTP/1.1 1-0327280/11/2024_ 4.83184315735570.00.1227.38 52.70.240.171http/1.1www.chonlateeboi.com:443GET /44656khrretidm20okd HTTP/1.1 1-0327280/9/1988_ 4.800015904630.00.1027.84 23.22.35.162http/1.1www.chonlateeboi.com:443GET /32110qbkeetidm82a HTTP/1.1 1-0327280/9/1923_ 4.851015459960.00.1025.17 128.199.195.68http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0327280/11/1929_ 4.851015192980.00.1128.52 139.144.150.205http/1.1localhost:80GET /config.json HTTP/1.1 1-0327280/11/2069_ 4.880016343450.00.0828.94 159.203.44.43http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-0327280/10/1976_ 4.590016007740.00.0626.10 128.199.195.68h2localhost:443[0/0] Software caused connection abort 1-0327280/10/1917_ 4.8411215618490.00.1025.74 203.170.192.183http/1.1
Found on 2024-01-05 16:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309e701d5a7eApache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 22:40:06 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 22 hours 17 minutes 7 seconds Server load: 1.35 1.68 1.41 Total accesses: 4322788 - Total Traffic: 55.5 GB - Total Duration: 4091389555 CPU Usage: u205.19 s45.98 cu77797.2 cs4073.16 - 8.7% CPU load 4.58 requests/sec - 61.6 kB/second - 13.5 kB/request - 946.47 ms/request 12 requests currently being processed, 52 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03068no26yes9230018 17820no5yes329000 Sum2031 12520018 WW____RW__W_______W_____W_W_W_____R___R____________R____________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-4030681/168/39046W 105.1800355423120.01.86494.12 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.1 0-4030681/158/38391W 105.0300362072280.01.69484.87 94.156.68.28http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 0-4030680/160/38801_ 104.8900397237760.01.77497.51 165.22.74.203http/1.1 0-4030680/170/38842_ 104.8800385646840.01.82507.95 178.128.151.41http/1.1localhost:80GET / HTTP/1.1 0-4030680/161/39336_ 104.780860366019650.01.78561.26 159.203.182.222http/1.1 0-4030680/146/38403_ 105.1101020395162750.01.66485.79 85.208.96.193http/1.1www.chonlateefood.com:443GET /getid/zco32707qihcitems HTTP/1.1 0-4030680/142/38724R 105.1400399114960.01.60487.79 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4b 0-4030681/160/39479W 104.3000363885200.01.84495.62 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mprasnc-50699eetidm90zc.html HTTP/1.1 0-4030680/161/38469_ 104.800860376273260.01.76503.84 161.35.155.246http/1.1localhost:80\x16\x03\x01\x01\x07\x01 0-4030680/144/38889_ 104.9200364403230.01.58497.01 178.128.151.41http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-4030681/167/38452W 105.1200380386880.01.76467.49 66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?iybillu-12085oetidm.html HTTP/1.1 0-4030680/155/38527_ 105.2200364303840.01.68517.75 164.90.222.93http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-4030680/164/38387_ 105.2500371232500.01.85468.91 137.184.222.107http/1.1localhost:80GET /about HTTP/1.1 0-4030680/170/38580_ 105.1900400535370.01.90497.18 178.128.151.41http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-4030680/152/38799_ 104.6201248376506980.01.85487.85 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-4030680/167/38474_ 103.9401933368505400.01.87541.92 159.65.58.104http/1.1 0-4030680/149/39440_ 105.1400371429180.01.59521.92 162.243.161.105http/1.1localhost:80GET / HTTP/1.1 0-4030680/169/38936_ 105.0800362546870.01.88480.01 137.184.162.65h2localhost:443[0/0] Software caused connection abort 0-4030681/157/38981W 105.1600363842520.01.71503.58 192.99.3.137http/1.1www.12gobiz.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%A3 0-4030680/159/39261_ 105.2100379873310.01.74512.60 144.126.202.105http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-4030680/161/38643_ 105.0000358097650.01.91509.56 31.184.236.34http/1.1 0-4030680/148/38813_ 105.2601129384520610.01.67501.23 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?405172himsetidm6 HTTP/1.1 0-4030680/168/38562_ 105.1100403331530.01.98510.94 144.126.202.105http/1.1localhost:80GET /about HTTP/1.1 0-4030680/152/37875_ 102.8306506357925160.01.65470.89 165.22.74.203h2localhost:443[0/0] Software caused connection abort 0-4030681/147/38918W 104.9300367260040.01.70516.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?iyxhlzs-93517kitems/etidm20 HTTP/1.1 0-4030680/170/38198_ 105.2600384408790.01.95467.34 104.236.193.132http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-4030681/157/38900W 104.8500368695330.01.84580.23 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?399004himsetidm8 HTTP/1.1 0-4030680/158/38147_ 105.19011366596930.01.54507.09 27.254.96.168http/1.1www.yadaacc168.co.th:443POST /wp-cron.php?doing_wp_cron=1702309205.35574889183044433593 0-4030681/151/38740W 103.9800407801520.01.67520.10 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bluagyn-30486hetidm6 HTTP/1.1 0-4030680/149/38609_ 105.2600371530000.01.66499.90 178.128.151.41http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-4030680/152/38726_ 104.9300366490440.01.60490.43 167.172.232.142h2localhost:443[0/0] Software caused connection abort 0-4030680/120/38406_ 105.2400374436380.01.39533.78 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-4078200/72/39614_ 38.0500370063300.00.69500.98 162.243.161.105http/1.1localhost:80GET / HTTP/1.1 1-4078200/53/39532_ 37.8200378273060.00.49543.25 31.184.236.34http/1.1 1-4078200/53/39317R 37.9210379936990.00.55546.62 165.22.74.203http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-4078200/53/39572_ 37.9000388078160.00.57558.26 162.243.161.105http/1.1localhost:80\x16\x03\x01\x01\x03\x01 1-4078200/49/40344_ 37.9200359739310.00.60613.22 164.90.222.93http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-4078200/58/39156_ 37.7909945357126270.00.64560.14 207.154.240.169http/1.1 1-4078200/54/39243R 36.5310360394090.00.66525.64 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /raygzna69294letidm14e HTTP/1.1 1-4078200/68/39690_ 38.0200384109220.00.71506.39 165.22.74.203http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-4078200/52/39440_ 38.040798372633190.00.54497.48 66.249.71.166http/1.1www.chonlateefbc.com:443GET /?m=current-used-loom-listings-mm-VVnV7TK HTTP/1.1 1-4078200/52/39505_ 37.950955364782750.00.55505.96 94.156.68.28http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 1-4078200/48/40067_ 38.0401137360608540.00.56529.89 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?kedbcsr-9799qetidm83.html HTTP/1.1 1-4078200/63/39857_ 37.8601470364656660.00.70496.76 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?405145himsitems/eti HTTP/1.1 1-4078200/75/39796_ 37.82013357092630.00.75493.84 144.126.202.105http/1.1localhost:80GET /serv
Found on 2023-12-11 15:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31347a309e347a309e37d65d44Apache Status Apache Server Status for smtp.pokaorganize.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:28:35 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 5 minutes 37 seconds Server load: 2.82 2.11 1.72 Total accesses: 697143 - Total Traffic: 9.7 GB - Total Duration: 517738016 CPU Usage: u83.38 s12.55 cu12013 cs653.85 - 7.37% CPU load 4.03 requests/sec - 58.6 kB/second - 14.6 kB/request - 742.657 ms/request 19 requests currently being processed, 109 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no14yes6261011 330151no14yes032007 630155no23yes7251017 730156no0yes626000 Sum4051 191092035 ................................................................ _____W____R__________W__R___R_W_________________________________ ................................................................ W__W__W_______________WR___RR_________R_________W_R_______R_W_R_ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0069089745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0069096045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0069080245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0069095746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00690167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0069094846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00690145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0069092346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00690107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00690104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0069070146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0069089947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0069072146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00690104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00690108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0069046846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0069070945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0069084445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0069071246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0069070946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00690046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0069049045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0069093646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0069086945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006904146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0069073844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00690722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0069096345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00690107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00690146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00690778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0069096044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0069086344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0069047946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00690150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0069067645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0069045143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00690044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00690232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0069058244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00690183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00690822744746080.00.0079.16
Found on 2023-12-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153919f6457bApache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:03:48 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 1 hour 40 minutes 3 seconds Server load: 0.20 0.30 0.39 Total accesses: 7563 - Total Traffic: 98.6 MB - Total Duration: 17080310 CPU Usage: u3146.22 s5834.72 cu55529000 cs13588200 - 1150000% CPU load 1.26 requests/sec - 16.8 kB/second - 13.3 kB/request - 2258.4 ms/request 2 requests currently being processed, 6 idle workers ._W____._....C.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964-0/0/734. 0.000017052810.00.008.41 139.144.150.205http/1.1 1-196467120/45/721_ 27.370117287000.01.4110.54 144.126.202.105http/1.1 2-196464650/75/705W 35.330016108390.00.939.79 161.35.176.95http/1.1localhost:80GET /server-status HTTP/1.0 3-196463980/75/689_ 32.930114088530.02.7210.87 139.144.150.205http/1.1 4-196468430/39/655_ 15.060014574250.00.648.50 144.126.198.24http/1.1localhost:80GET /_all_dbs HTTP/1.0 5-196465450/67/638_ 32.470214730840.00.757.30 139.144.150.205http/1.1 6-196474560/0/664_ 0.000141314770550.00.008.99 172.70.38.60http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%95 7-1964-0/0/587. 0.003114006830.00.006.55 161.35.176.95http/1.1localhost:80GET / HTTP/1.0 8-196470780/21/610_ 10.440409214377130.00.347.27 172.71.151.140http/1.1www.proplustech.co.th:443GET /?page_id=K656851 HTTP/1.1 9-1964-0/0/516. 0.00838011274090.00.006.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1964-0/0/357. 0.0096805440930.00.003.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1964-0/0/395. 0.0096208961830.00.005.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1964-0/0/98. 0.007355362830490.00.001.86 162.158.222.250http/1.1www.acumaticathailand.com:80GET /z.php HTTP/1.0 13-196462561/90/183C 37.74005103952.22.053.36 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 14-1964-0/0/3. 0.00961011450.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1964-0/0/3. 0.00963026240.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1964-0/0/5. 0.009390157710.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 3subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 297 seconds, (range: 295...299)index usage: 0%, cache usage: 0%total entries stored since starting: 40total entries replaced since starting: 0total entries expired since starting: 37total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3760 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef0715397611755bApache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:08:07 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 5 minutes 54 seconds Server load: 0.27 0.30 0.29 Total accesses: 48500 - Total Traffic: 897.1 MB - Total Duration: 94146920 CPU Usage: u2998.53 s5760.57 cu55152300 cs13502200 - 210000% CPU load 1.48 requests/sec - 28.0 kB/second - 18.9 kB/request - 1941.17 ms/request 4 requests currently being processed, 5 idle workers R_RW_._.._..C._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193260540/21/4077R 5.551229084321540.00.26116.34 206.81.1.88http/1.1 1-193260850/21/4007_ 8.050177849260.00.1251.08 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-193261420/16/4015R 4.340076867150.00.1153.92 165.22.74.203http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-193254410/88/3884W 21.380077161980.011.3268.90 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.0 4-193262120/6/3924_ 0.160176322530.00.0362.32 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1932-0/0/3640. 0.0037146266994170.00.0044.62 172.70.143.45http/1.1www.tun36.com:80POST /wp-cron.php?doing_wp_cron=1699250847.55477404594421386718 6-193255770/69/3627_ 15.320271313920.00.9157.27 172.71.246.128http/1.1www.jbbgarment.com:80POST /xmlrpc.php HTTP/1.0 7-1932-0/0/3516. 0.00209070991930.00.0092.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1932-0/0/3266. 0.00208063649440.00.0054.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-193259760/30/2879_ 6.280155414830.00.2034.74 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1932-0/0/2588. 0.000135949380080.00.0042.00 172.71.99.86http/1.1www.bizproceed.com:80GET /simple.php HTTP/1.0 11-1932-0/0/1995. 0.00156040035970.00.0029.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-193259891/29/1884C 8.960134569922.20.2833.66 139.144.96.150http/1.1localhost:443GET / HTTP/1.1 13-1932-0/0/1733. 0.00126037525450.00.00116.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-193259970/25/915_ 5.660117601300.00.1910.01 206.81.1.88http/1.1 15-1932-0/0/468. 0.00201407032580.00.004.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/349. 0.00235105526000.00.002.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/250. 0.00235202763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00320007137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00384902780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00385005022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0038400690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00384402695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.003042192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.003845029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00369701528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00332402033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00313901828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00129020140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00128910108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 181 seconds, (range: 63...298)index usage: 0%, cache usage: 0%total entries stored since starting: 365total entries replaced since starting: 0total entries expired since starting: 357total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 28286 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539ba67ce22Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 03:35:59 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 3 hours 12 minutes 4 seconds Server load: 2.20 2.93 3.34 Total accesses: 51907 - Total Traffic: 740.6 MB - Total Duration: 271406612 CPU Usage: u3191.89 s5653.62 cu53843400 cs13132600 - 581000% CPU load 4.5 requests/sec - 65.8 kB/second - 14.6 kB/request - 5228.71 ms/request 17 requests currently being processed, 3 idle workers RCW_RWWRWWRWCWW_WR..............W......._......... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-189557380/29/2241R 18.7400108112730.00.3130.68 206.81.1.88http/1.1localhost:80GET /about HTTP/1.0 1-189560511/1/2139C 0.8308491087792114.50.0130.14 85.208.96.197http/1.1www.mkandptfoods.com:443GET /m0924764043.html HTTP/1.1 2-189554630/53/2112W 28.1700108398880.00.9131.18 192.53.126.23http/1.1localhost:80GET /server-status HTTP/1.0 3-189560590/1/2177_ 0.00028106725240.00.0230.99 172.71.122.225http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%AA%E0%B8%AD%E0%B8%99%E0% 4-189557460/26/2026R 15.0000106783000.00.1833.66 144.126.198.24http/1.1localhost:80GET / HTTP/1.0 5-189555220/36/2133W 26.4810105476800.00.5327.74 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=tree-of-life-by-gustav-klimt-landscape-wall-art-mm-4zne 6-189559220/7/2084W 0.28170104108120.00.1830.34 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?wiki-AMBITION.xml HTTP/1.1 7-189548400/73/2006R 47.6500102981030.01.0827.81 3.224.220.101http/1.1www.chonlateefbc.com:443 8-189555280/35/1951W 27.823097477710.00.5226.94 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=tree-of-life-wall-art-tree-of-life-canvas-mm-Bb9DlPi0 H 9-189557480/29/2051W 9.441094795160.00.5128.29 162.243.186.177http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 10-189557870/31/2039R 14.650096374910.00.3728.11 138.197.133.204http/1.1www.chonlateehosting.com:443 11-189556140/28/1891W 19.2111097163200.00.4128.41 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?lakes-ASN.xml HTTP/1.1 12-189558041/26/1943C 15.880095835943.30.3527.67 138.197.133.204http/1.1www.chonlateehosting.com:443GET / HTTP/1.1 13-189558260/19/1804W 11.110090389450.00.3425.46 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m2613287807.html HTTP/1.1 14-189558490/16/1926W 14.3030100391080.00.2725.14 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=buy-cardinal-birch-tree-canvas-painting-by-amy-marie-mm 15-189551090/53/1945_ 31.990094995240.00.5433.04 134.122.89.242http/1.1 16-189551110/69/1788W 49.000124788719370.00.7122.48 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848315124534.html HTTP/1.1 17-189559350/12/1735R 3.900084950510.00.0624.19 52.70.240.171http/1.1 18-1895-0/0/1723. 0.00308085340900.00.0024.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1895-0/0/1517. 0.00304084564990.00.0020.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1895-0/0/1472. 0.00303077540580.00.0021.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1895-0/0/1389. 0.00302073119770.00.0019.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1895-0/0/954. 0.00287055132690.00.0013.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1895-0/0/1052. 0.00319066140500.00.0014.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1895-0/0/939. 0.00297052652160.00.0013.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1895-0/0/742. 0.00286050815960.00.0010.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1895-0/0/715. 0.00315040102070.00.0010.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1895-0/0/484. 0.00169032991170.00.006.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1895-0/0/383. 0.00305029355210.00.005.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/595. 0.00136034643710.00.007.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/382. 0.00242124009730.00.004.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/378. 0.00296027554720.00.004.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-189551650/62/537W 37.981036713620.00.847.44 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=huawei-watch-smartwatch-review-reviews-mm-qMdEg9sg HTTP 33-1895-0/0/358. 0.00307024023640.00.004.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/485. 0.00293026996880.00.008.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1895-0/0/183. 0.0030909135190.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/278. 0.00313020456110.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/273. 0.00299015420740.00.003.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/172. 0.0030007214030.00.003.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/176. 0.005009598860.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-189552290/68/129_ 41.10005225770.00.871.79 159.89.83.196http/1.1localhost:80GET /v2/_catalog HTTP/1.0 41-1895-0/0/121. 0.0029504496740.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1895-0/0/44. 0.0029101329400.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/87. 0.0017506315840.00.001.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/92. 0.0031103849330.00.007.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1895-0/0/89. 0.0029805996930.00.000.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1895-0/0/16. 0.002760298370.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1895-0/0/20. 0.002410560060.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1895-0/0/96. 0.0031608615040.00.001.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1895-0/0/35. 0.0014301397580.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 < SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection
Found on 2023-10-26 20:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153982fda1e3Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 06:52:46 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 2 hours 50 minutes 34 seconds Server load: 0.59 0.52 0.42 Total accesses: 10537 - Total Traffic: 132.9 MB - Total Duration: 11610227 CPU Usage: u2875.03 s5349.06 cu52298900 cs12765100 - 636000% CPU load 1.03 requests/sec - 13.3 kB/second - 12.9 kB/request - 1101.85 ms/request 5 requests currently being processed, 6 idle workers __WRR_CW___....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182321630/8/955_ 0.09009529150.00.0011.13 46.101.103.192http/1.1localhost:80GET /.DS_Store HTTP/1.0 1-182320490/34/1035_ 8.330137710836330.00.1412.22 27.254.96.168http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /wp-cron.php?doing_wp_cron=1696981965.08120107650756835937 2-182320830/21/1026W 5.380011923650.00.1413.71 167.99.182.39http/1.1localhost:80GET /server-status HTTP/1.0 3-182318670/50/874R 18.28029657840.00.8915.08 138.68.163.10http/1.1 4-182319240/45/911R 10.760011695570.00.1710.12 161.35.155.246http/1.1 5-182314000/73/686_ 20.83008435610.00.598.70 159.203.182.222http/1.1 6-182314081/97/899C 27.690010709240.71.4710.37 165.232.76.155http/1.1localhost:80GET /login.action HTTP/1.0 7-182319580/38/813W 13.82208934860.01.6711.96 193.202.110.21http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-content/style-css.php HTTP/1.1 8-182319890/41/675_ 12.54006192670.00.197.92 134.122.89.242http/1.1localhost:80GET /.DS_Store HTTP/1.0 9-182321070/14/675_ 2.91006870130.00.187.38 159.89.83.196http/1.1localhost:80GET /server-status HTTP/1.0 10-182319980/33/486_ 14.07004897080.03.3210.92 164.90.222.93http/1.1 11-1823-0/0/354. 0.0018813398770.00.003.38 125.212.214.217http/1.1www.wealneosupply.com:443GET /xmlrpc.php HTTP/1.1 12-1823-0/0/300. 0.00501657973781420.00.002.70 172.68.234.190http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1696976943.40467000007629394531 13-1823-0/0/18. 0.0080720121020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1823-0/0/200. 0.00739102199440.00.001.69 20.127.125.189http/1.1www.dreamhightravel.com:80GET //wp.php HTTP/1.0 15-1823-0/0/5. 0.00816202380.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1823-0/0/198. 0.00740902524510.00.001.74 188.116.22.119http/1.1www.tkadvicesystem.com:80GET /OLD/ HTTP/1.0 17-1823-0/0/101. 0.0081530991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0074135051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.0080830144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0073897821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.0081540300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.0081570210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.008167050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.00816601095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 94subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 137 seconds, (range: 4...236)index usage: 3%, cache usage: 4%total entries stored since starting: 2809total entries replaced since starting: 0total entries expired since starting: 2715total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 73 hit, 3795 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-10 23:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153900a77d15Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 04-Oct-2023 00:14:59 +07 Restart Time: Wednesday, 04-Oct-2023 00:11:05 +07 Parent Server Config. Generation: 1800 Parent Server MPM Generation: 1799 Server uptime: 3 minutes 54 seconds Server load: 2.49 2.18 1.49 Total accesses: 568 - Total Traffic: 5.0 MB - Total Duration: 892325 CPU Usage: u2888.9 s5295.84 cu51830300 cs12663200 - 2.76e+7% CPU load 2.43 requests/sec - 21.7 kB/second - 8.9 kB/request - 1570.99 ms/request 6 requests currently being processed, 6 idle workers R_W_W.W_R...R_.._.._.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1799110770/6/43R 0.0801636600.00.010.34 74.207.237.46http/1.1localhost:80GET /server-status HTTP/1.0 1-179984210/53/53_ 27.9600754510.00.400.40 142.93.153.3http/1.1localhost:80GET /about HTTP/1.0 2-179989010/42/45W 19.2801298541110.00.670.69 192.99.15.29http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%81%E0%B8%A7 3-1799111130/7/25_ 0.0900272690.00.000.13 45.55.193.222http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-179984270/50/50W 28.4700775360.00.470.47 138.197.64.219http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 5-1799-0/0/37. 0.00340601410.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1799101560/26/33W 11.8000423980.00.170.22 143.42.118.5http/1.1localhost:80GET /server-status HTTP/1.0 7-1799101580/24/30_ 12.7600454080.00.160.19 206.81.1.88http/1.1 8-1799105800/10/13R 5.2920202070.00.080.09 94.23.207.193http/1.1 9-1799-0/0/3. 0.00224033720.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1799-0/0/3. 0.00225029730.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1799-0/0/4. 0.00223022470.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-179985740/40/40R 24.0200790960.00.360.36 161.35.27.144http/1.1 13-179985750/46/46_ 29.0200800230.00.430.43 128.199.62.55http/1.1 14-1799-0/0/22. 0.001130402450.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1799-0/0/1. 0.00228000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-179985890/41/41_ 24.5400717870.00.360.36 207.154.240.169http/1.1 17-1799-0/0/31. 0.00510533510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1799-0/0/5. 0.00195078280.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-179986180/43/43_ 22.6701852140.00.320.32 74.207.237.114http/1.1localhost:80GET /v2/_catalog HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 114subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 130 seconds, (range: 65...290)index usage: 4%, cache usage: 5%total entries stored since starting: 114total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 220 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-03 17:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539cc521da3Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:34:08 +07 Restart Time: Tuesday, 03-Oct-2023 00:32:47 +07 Parent Server Config. Generation: 1798 Parent Server MPM Generation: 1797 Server uptime: 1 minute 21 seconds Server load: 0.86 1.14 1.26 Total accesses: 385 - Total Traffic: 2.2 MB - Total Duration: 194690 CPU Usage: u2752.74 s5255.58 cu51774600 cs12651800 - 7.95e+7% CPU load 4.75 requests/sec - 28.3 kB/second - 6.0 kB/request - 505.688 ms/request 4 requests currently being processed, 8 idle workers _____.R._R.R._.W_................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1797299410/39/39_ 6.0902143240.00.200.20 172.105.37.32http/1.1localhost:80GET /config.json HTTP/1.0 1-1797299570/21/21_ 6.1900408230.00.290.29 87.249.134.39http/1.1 2-1797301250/7/24_ 0.930296171220.00.030.08 172.71.242.118http/1.1www.dealaccounting.com:80POST /wp-login.php HTTP/1.0 3-1797301600/2/31_ 0.0500103280.00.000.17 87.249.134.39http/1.1 4-1797301310/5/20_ 1.9100156190.00.040.18 161.35.176.95http/1.1 5-1797-0/0/11. 0.00450125320.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1797300730/21/33R 5.8301126960.00.130.15 74.207.237.114http/1.1 7-1797-0/0/11. 0.00460155160.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1797300250/34/34_ 1.460025950.00.130.13 159.203.63.67http/1.1 9-1797300310/27/27R 2.370065970.00.060.06 74.207.237.46http/1.1 10-1797-0/0/11. 0.0047076200.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1797300440/22/22R 3.310081100.00.180.18 162.243.161.105http/1.1 12-1797-0/0/16. 0.0042034670.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1797300520/30/30_ 4.920095380.00.110.11 137.184.162.65http/1.1www.pokaorganize.com:80GET /login.action HTTP/1.0 14-1797-0/0/10. 0.0048011270.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1797300840/17/17W 4.5400110350.00.060.06 167.99.184.41http/1.1localhost:80GET /server-status HTTP/1.0 16-1797300920/14/14_ 4.3101116880.00.070.07 161.35.190.56http/1.1localhost:80GET /login.action HTTP/1.0 17-1797-0/0/6. 0.0033011870.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1797-0/0/4. 0.0041013960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1797-0/0/4. 0.0035013630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 44subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 242 seconds, (range: 218...294)index usage: 1%, cache usage: 2%total entries stored since starting: 44total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 217 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153906ac1850Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 00:24:31 +07 Restart Time: Thursday, 03-Aug-2023 00:23:30 +07 Parent Server Config. Generation: 1528 Parent Server MPM Generation: 1527 Server uptime: 1 minute 1 second Server load: 4.14 4.30 4.35 Total accesses: 380 - Total Traffic: 4.0 MB - Total Duration: 486674 CPU Usage: u2468.7 s4254.8 cu40848700 cs9867590 - 8.32e+7% CPU load 6.23 requests/sec - 67.7 kB/second - 10.9 kB/request - 1280.72 ms/request 12 requests currently being processed, 3 idle workers RWWWWWW_CR_WW_R................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1527239900/24/24R 16.2401338330.00.380.38 146.190.160.11http/1.1 1-1527239920/31/31W 15.9600397780.00.240.24 165.227.146.2http/1.1localhost:80GET /server-status HTTP/1.0 2-1527240080/26/26W 17.1300348320.00.260.26 172.70.38.40http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 3-1527240120/23/23W 15.1700377920.00.350.35 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1527242190/2/22W 0.0100275710.00.000.18 172.70.188.102http/1.1www.bizproceed.com:80POST /wp-login.php HTTP/1.0 5-1527240370/26/26W 17.1800357630.00.290.29 172.70.34.62http/1.1www.proplustech.co.th:443GET /xmlrpc.php HTTP/1.1 6-1527240450/31/31W 17.4400354240.00.330.33 162.158.90.117http/1.1www.proplustech.co.th:443POST /wp-login.php HTTP/1.1 7-1527240470/32/32_ 16.6600348140.00.280.28 172.105.37.32http/1.1localhost:80GET /telescope/requests HTTP/1.0 8-1527240581/25/25C 16.9308533629213.50.310.31 52.251.36.208http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 9-1527241270/13/24R 7.120658313310.00.110.25 206.81.1.88http/1.1 10-1527240700/26/26_ 17.3100367630.00.250.25 143.110.156.182http/1.1localhost:80GET /v2/_catalog HTTP/1.0 11-1527240760/32/32W 17.8500356390.00.320.32 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 12-1527240860/22/22W 15.3800311320.00.250.25 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 13-1527241040/24/24_ 12.0100241370.00.230.23 167.172.232.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 14-1527241420/12/12R 5.8800115650.00.110.11 137.184.106.30http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 38subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 271 seconds, (range: 238...297)index usage: 1%, cache usage: 1%total entries stored since starting: 38total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 100 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef0715394ebe92e8Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 03-Jun-2023 00:24:06 +07 Restart Time: Saturday, 03-Jun-2023 00:22:48 +07 Parent Server Config. Generation: 1295 Parent Server MPM Generation: 1294 Server uptime: 1 minute 17 seconds Server load: 0.84 1.18 1.37 Total accesses: 198 - Total Traffic: 1.5 MB - Total Duration: 151996 CPU Usage: u1990.32 s3435.2 cu32339200 cs7737160 - 5.21e+7% CPU load 2.57 requests/sec - 19.6 kB/second - 7.6 kB/request - 767.657 ms/request 9 requests currently being processed, 8 idle workers _W__WC_W_C_R_W_RR................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-129449670/17/17_ 6.1701070163260.00.290.29 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 1-129450830/10/14W 2.240094860.00.060.09 172.70.210.126http/1.1www.dr-rpi.com:443GET /wp-login.php HTTP/1.1 2-129449750/27/27_ 5.1601125570.00.080.08 142.93.158.96http/1.1 3-129449890/13/13_ 6.4201223790.00.200.20 146.190.98.165http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-129449950/11/11W 4.8040136670.00.080.08 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1685726641.75789499282836914062 5-129450151/17/17C 5.0400219350.20.150.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-129450210/21/21_ 3.720072280.00.150.15 146.190.160.11http/1.1www.pokaorganize.com:80GET /server-status HTTP/1.0 7-129450280/17/17W 6.4600168760.00.200.20 45.79.83.159http/1.1localhost:80GET /server-status HTTP/1.0 8-129450300/17/17_ 5.7601164180.00.060.06 143.198.72.96http/1.1 9-129450541/17/17C 4.271192301.30.080.08 146.190.98.165http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-129451900/7/8_ 1.140023170.00.040.04 161.35.155.246http/1.1localhost:80GET /login.action HTTP/1.0 11-129452000/2/5R 0.000021080.00.000.02 165.22.74.203http/1.1 12-129452060/3/3_ 0.640014420.00.020.02 137.184.106.30http/1.1 13-129452180/2/2W 0.100030.00.000.00 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 14-129452190/1/1_ 0.000230.00.000.00 146.190.98.165http/1.1localhost:443GET /config.json HTTP/1.1 15-129452220/3/3R 0.010040.00.000.00 142.93.158.96http/1.1 16-129452230/5/5R 0.030080.00.000.00 139.144.96.150http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 50subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 266 seconds, (range: 235...296)index usage: 1%, cache usage: 2%total entries stored since starting: 50total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 118 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-02 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153959674415Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 03-Apr-2023 00:23:39 +07 Restart Time: Monday, 03-Apr-2023 00:22:33 +07 Parent Server Config. Generation: 1085 Parent Server MPM Generation: 1084 Server uptime: 1 minute 6 seconds Server load: 0.45 1.03 0.97 Total accesses: 212 - Total Traffic: 1.6 MB - Total Duration: 96539 CPU Usage: u1627.47 s2824.09 cu26678600 cs6409520 - 5.01e+7% CPU load 3.21 requests/sec - 24.4 kB/second - 7.6 kB/request - 455.373 ms/request 12 requests currently being processed, 0 idle workers RWRRRCWCRCCC...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-108416030/20/20R 5.6602119570.00.120.12 143.198.72.96http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 1-108416210/23/23W 4.7500101710.00.130.13 143.110.156.182http/1.1localhost:80GET /server-status HTTP/1.0 2-108416230/26/26R 7.2300213990.00.140.14 207.154.240.169http/1.1www.pokaorganize.com:80GET / HTTP/1.0 3-108416250/27/27R 4.9001138200.00.510.51 165.22.108.223http/1.1localhost:80GET /api/search?folderIds=0 HTTP/1.0 4-108416270/18/18R 5.9301135150.00.290.29 185.2.5.77http/1.1 5-108416520/28/28R 2.930173470.00.100.10 27.254.96.168http/1.1 6-108416590/30/30W 3.380069760.00.110.11 143.110.156.182http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 7-108416831/19/19C 2.221150561.30.130.13 146.190.98.165http/1.1localhost:443GET /config.json HTTP/1.1 8-108417060/16/16R 3.210062770.00.030.03 207.154.240.169http/1.1www.pokaorganize.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-108417461/3/3C 0.021182.70.010.01 146.190.98.165http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-108417541/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /login.action HTTP/1.1 11-108417561/1/1C 0.000241.30.000.00 146.190.98.165http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 16subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 279 seconds, (range: 234...298)index usage: 0%, cache usage: 0%total entries stored since starting: 16total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 74 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-02 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef071539c4d3cb55Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 01-Feb-2023 15:01:22 +07 Restart Time: Wednesday, 01-Feb-2023 15:00:55 +07 Parent Server Config. Generation: 848 Parent Server MPM Generation: 847 Server uptime: 27 seconds Server load: 1.69 1.59 1.47 Total accesses: 126 - Total Traffic: 659 kB - Total Duration: 82450 CPU Usage: u1257.92 s2309.41 cu21800400 cs5275950 - 1.e+8% CPU load 4.67 requests/sec - 24.4 kB/second - 5.2 kB/request - 654.365 ms/request 8 requests currently being processed, 5 idle workers WW___WCRR_WR_..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-84775490/10/10W 3.0400121220.00.030.03 172.70.189.67http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%95 1-84775500/20/20W 3.520087660.00.070.07 204.48.18.203http/1.1localhost:80GET /server-status HTTP/1.0 2-84775520/12/12_ 2.850157280.00.060.06 204.48.18.203http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 3-84777310/0/7_ 0.000059750.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-84775790/14/14_ 3.620075530.00.080.08 194.195.219.36http/1.1 5-84776000/4/4W 1.780034900.00.020.02 165.22.205.214http/1.1www.pokaorganize.com:443GET / HTTP/1.1 6-84776071/5/5C 2.42043646835.80.040.04 143.110.217.252http/1.1www.pokaorganize.com:443GET / HTTP/1.1 7-84776090/7/7R 2.770067310.00.130.13 134.209.207.188http/1.1localhost:80GET /.git/config HTTP/1.0 8-84776230/6/6R 2.610153410.00.080.08 5.253.18.199http/1.1 9-84776340/18/18_ 2.100059640.00.040.04 204.48.18.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-84776360/10/10W 1.5800160690.00.030.03 162.158.170.160http/1.1www.mbaaccount.com:80POST /xmlrpc.php HTTP/1.0 11-84777200/13/13R 0.0300210.00.010.01 204.48.18.203http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 295 seconds, (range: 288...298)index usage: 0%, cache usage: 0%total entries stored since starting: 9total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 34 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-02-01 07:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ef071539ef07153952d2cad4Apache Status Apache Server Status for smtp.pokaorganize.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 11:00:05 +07 Restart Time: Monday, 24-Oct-2022 11:00:02 +07 Parent Server Config. Generation: 438 Parent Server MPM Generation: 437 Server uptime: 2 seconds Server load: 2.23 1.75 1.57 Total accesses: 50 - Total Traffic: 92 kB - Total Duration: 8052 CPU Usage: u629.29 s1252.15 cu12780600 cs3072970 - 7.93e+8% CPU load 25 requests/sec - 46.0 kB/second - 1884 B/request - 161.04 ms/request 8 requests currently being processed, 0 idle workers WWRRCWWW.......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43799540/3/3W 0.730013500.00.040.04 20.170.0.62http/1.1www.sarmakbitkub.com:80POST //xmlrpc.php HTTP/1.0 1-43799720/2/2W 1.010020490.00.000.00 45.79.148.46http/1.1www.pokaorganize.com:443GET / HTTP/1.1 2-43799780/14/14R 1.11054522410.00.010.01 141.94.247.170http/1.1www.xn--12ca1al2c4cm5fzaon1x.coPOST /wp-login.php HTTP/1.0 3-43799880/4/4R 0.530010680.00.010.01 134.209.227.71http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-43799941/1/1C 0.65065713148.80.010.01 5.188.62.140http/1.1www.brobanglan.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 5-437100010/22/22W 0.0400200.00.020.02 134.209.227.71http/1.1localhost:80GET /server-status HTTP/1.0 6-437100150/3/3W 0.000030.00.000.00 170.187.195.217http/1.1www.pokaorganize.com:80GET / HTTP/1.0 7-437100210/1/1W 0.000020.00.000.00 139.177.198.221http/1.1www.pokaorganize.com:443GET / HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 6subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 298 seconds, (range: 298...298)index usage: 0%, cache usage: 0%total entries stored since starting: 6total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 27 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 03:58
-
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-09-26 17:00
HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 17:00:40 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found one day ago by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-09-26 15:03
HTTP/1.1 301 Moved Permanently Date: Thu, 26 Sep 2024 15:03:13 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2 days ago by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-09-24 19:24
HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 19:25:00 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-24 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-09-24 17:09
HTTP/1.1 301 Moved Permanently Date: Tue, 24 Sep 2024 17:09:02 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-24 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-09-16 02:19
HTTP/1.1 301 Moved Permanently Date: Mon, 16 Sep 2024 02:19:05 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-16 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-09-14 16:48
HTTP/1.1 301 Moved Permanently Date: Sat, 14 Sep 2024 16:48:57 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-14 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-09-14 14:11
HTTP/1.1 200 OK Date: Sat, 14 Sep 2024 14:11:46 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-14 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-09-12 18:40
HTTP/1.1 301 Moved Permanently Date: Thu, 12 Sep 2024 18:40:37 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-12 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-09-12 18:21
HTTP/1.1 200 OK Date: Thu, 12 Sep 2024 18:21:15 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-12 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-09-10 22:52
HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 22:53:07 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-10 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-09-10 20:29
HTTP/1.1 301 Moved Permanently Date: Tue, 10 Sep 2024 20:29:28 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-10 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-09-08 19:05
HTTP/1.1 200 OK Date: Sun, 08 Sep 2024 19:05:23 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-08 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-09-08 03:27
HTTP/1.1 301 Moved Permanently Date: Sun, 08 Sep 2024 03:27:55 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-08 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-09-06 23:58
HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 23:58:59 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-06 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-08-28 04:49
HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 04:49:07 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-08-28 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.pokaorganize.com
2024-08-18 10:30
HTTP/1.1 301 Moved Permanently Date: Sun, 18 Aug 2024 10:30:47 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Redirect-By: WordPress Location: https://pokaorganize.com/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-08-18 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · pokaorganize.com
2024-08-16 20:07
HTTP/1.1 200 OK Date: Fri, 16 Aug 2024 20:07:03 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 Link: <https://pokaorganize.com/wp-json/>; rel="https://api.w.org/" Link: <https://pokaorganize.com/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-08-16 by HttpPluginCreate report
ftp.pokaorganize.commail.pokaorganize.compokaorganize.compop.pokaorganize.comsmtp.pokaorganize.comwww.pokaorganize.com
CN:
pokaorganize.com
Not before:
2023-10-02 16:29
Not after:
2023-12-31 16:29