Domain pop.nadapool.com
Thailand
CS LOXINFO Public Company Limited.
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-08-29 03:41
Last seen 2024-02-02 09:01
Open for 522 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb71ca4835Apache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 16:01:21 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 6 hours Server load: 2.08 2.02 2.01 Total accesses: 1847849 - Total Traffic: 23.8 GB - Total Duration: 2141104243 CPU Usage: u214.54 s116.78 cu32089.3 cs2210.25 - 1.42% CPU load .757 requests/sec - 10.2 kB/second - 13.5 kB/request - 1158.7 ms/request 5 requests currently being processed, 123 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no2yes032002 229661no1yes329001 329394no1yes230001 529374no1yes032001 Sum405 5123005 ________________________________................................ ____________R_________R_______R__________W________________R_____ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/39/14787_ 13.15100160260950.00.14193.77 164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/39/15282_ 13.1790139013330.00.11198.96 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/35/14848_ 13.1900150309430.00.16192.73 178.62.3.65h2localhost:443[0/0] Software caused connection abort 0-92293730/33/15026_ 13.2170145874900.00.08185.96 161.35.27.144http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/33/14931_ 13.1520147711670.00.15185.42 178.128.151.41http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/29/15156_ 13.2240156649120.00.11188.53 139.144.150.45http/1.1localhost:443GET / HTTP/1.1 0-92293730/27/14827_ 13.17400145588370.00.13200.23 143.110.156.182http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/30/15137_ 13.1910150182020.00.07187.57 167.172.232.142http/1.1 0-92293730/29/15096_ 13.1340145226800.00.07229.87 147.182.130.98http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/38/15232_ 13.15160148853320.00.15194.87 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/37/14797_ 13.21120154393230.00.09200.68 143.110.218.229http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/34/14807_ 13.21190147156120.00.08195.45 143.110.218.229http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/43/14674_ 13.1840137182720.00.14185.50 178.128.151.41http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/35/14826_ 13.17180169086490.00.09186.02 161.35.27.144http/1.1 0-92293730/31/15777_ 13.1900141614990.00.09187.75 162.243.161.105http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/37/14829_ 12.9600165341190.00.08182.47 139.144.150.45h2localhost:443[0/0] Software caused connection abort 0-92293730/44/14883_ 13.1600143404980.00.12206.38 74.207.237.114http/1.1 0-92293730/36/14943_ 13.1900144939930.00.12189.30 162.243.161.105http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/28/14756_ 12.6910160388140.00.05200.53 74.207.237.114h2localhost:443[0/0] Software caused connection abort 0-92293730/35/14980_ 13.1860144639340.00.13193.81 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/37/14974_ 13.2710181495860.00.15193.41 161.35.155.246http/1.1localhost:80GET /login.action HTTP/1.1 0-92293730/32/14997_ 13.1508147053740.00.09204.06 167.172.232.142http/1.1 0-92293730/36/15454_ 13.0620150748540.00.15188.27 74.207.237.114h2localhost:443[0/0] Software caused connection abort 0-92293730/32/14663_ 12.6197138765130.00.13190.18 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 0-92293730/41/14965_ 13.21110162205820.00.09186.87 143.110.218.229http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/36/14639_ 13.2710135981630.00.13196.98 143.198.72.96http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-92293730/29/15136_ 13.21120144713440.00.04194.49 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 0-92293730/34/14919_ 13.2610159187410.00.05213.30 161.35.190.56http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/34/14721_ 13.17390152174350.00.11175.92 161.35.190.56http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/27/15175_ 13.2150135139110.00.08225.13 161.35.155.246http/1.1localhost:80GET / HTTP/1.1 0-92293730/42/14661_ 13.2140155572970.00.06199.14 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/31/14921_ 13.2800145814970.00.15185.14 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-92-0/0/15731. 0.00424660138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00424660136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00424660174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00424660150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00424660146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00424660134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00424660172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00424660165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00424660127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00424660152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00424660148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00424660159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00424660159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00424660137016410.00.00183.04 159.223.102.13http/1.1localhost:80GET /conf
Found on 2024-02-02 09:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb189545e7Apache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 08:25:58 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 22 hours 24 minutes 37 seconds Server load: 3.45 2.89 2.64 Total accesses: 789376 - Total Traffic: 10.7 GB - Total Duration: 962203771 CPU Usage: u315.88 s22.14 cu13326.1 cs698.67 - 8.6% CPU load 4.72 requests/sec - 67.1 kB/second - 14.2 kB/request - 1218.94 ms/request 12 requests currently being processed, 116 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425no7yes329007 111360no2yes329000 216287no1yes428000 316453no10yes230009 Sum4020 121160016 W________________________R_W_______________________W______WR____ __W__R__W___________R____________________________R__________W___ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process </SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-784251/200/6088W 125.880083649780.02.7390.26 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yinkawv-4067aetidm.html HTTP/1.1 0-784250/212/6564_ 126.302061118340.02.2186.67 159.65.138.217http/1.1localhost:80GET /login.action HTTP/1.1 0-784250/183/6087_ 125.841072862250.02.3690.66 165.232.106.187http/1.1 0-784250/219/6427_ 126.232070419450.02.4183.40 137.184.162.65h2localhost:443[0/0] Software caused connection abort 0-784250/201/6146_ 125.68083967286620.02.1579.42 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /eoaaebb-41383netidm12rbn HTTP/1.1 0-784250/273/6519_ 126.261078647410.03.7185.87 138.197.88.136http/1.1localhost:80GET / HTTP/1.1 0-784250/211/6318_ 126.362059342240.02.6697.07 159.65.138.217http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/202/6360_ 124.082170468237720.02.2783.12 66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /db.php?g3205818.shtml HTTP/1.1 0-784250/263/6377_ 126.410063260310.02.70125.55 137.184.106.30http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-784250/250/6293_ 126.150072255780.02.7180.95 192.53.126.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-784250/187/6048_ 125.732076897820.02.1077.31 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-784250/197/6003_ 126.30041376045400.02.3978.21 137.184.162.65http/1.1 0-784250/215/6074_ 126.401453864410.02.6280.55 139.144.150.23http/1.1localhost:80GET /server-status HTTP/1.1 0-784250/211/6276_ 126.381082370980.02.5184.80 139.144.150.23http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-784250/190/6709_ 126.410057337770.02.2686.68 162.243.186.177http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-784250/267/6042_ 126.362083769760.02.5778.91 159.65.138.217http/1.1localhost:80GET /config.json HTTP/1.1 0-784250/214/6210_ 124.54168165117970.02.3781.04 159.203.94.228h2localhost:443[0/0] Software caused connection abort 0-784250/209/6360_ 126.271059751980.02.2182.59 128.199.62.55http/1.1 0-784250/201/6364_ 126.222062600780.02.2181.00 128.199.62.55http/1.1localhost:443GET /config.json HTTP/1.1 0-784250/188/6124_ 125.60189969230350.02.5386.36 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-784250/284/6401_ 126.362090790670.02.7988.99 165.22.74.203http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-784250/187/6095_ 126.291071650100.02.1582.87 128.199.62.55http/1.1 0-784250/187/6667_ 125.670074227080.02.3288.88 139.59.182.142http/1.1 0-784250/212/6177_ 126.30055663664100.02.2889.23 161.35.27.144http/1.1 0-784250/268/6079_ 125.860105675840670.02.9376.37 165.232.76.155http/1.1 0-784250/185/6193R 125.88288458123810.02.1180.24 164.132.112.87http/1.1www.siamsolarrooftop.com:443 0-784250/207/6225_ 126.312057269080.02.3490.22 159.65.138.217http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-784251/205/6201W 125.800071110030.02.65110.76 104.192.3.74http/1.1www.uniqueworkthailand.com:443GET /wp-json/wp/v2/users/1 HTTP/1.1 0-784250/208/6144_ 126.302054722130.02.2977.66 139.144.150.23http/1.1localhost:80GET /about HTTP/1.1 0-784250/303/6402_ 126.26184473245630.03.41116.55 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2486tobeitems/etidm35q.html HTTP/1.1 0-784250/184/6095_ 126.391067867840.02.2189.87 138.197.88.136http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-784250/201/6402_ 126.401065751040.02.5782.33 165.22.74.203http/1.1localhost:80GET /login.action HTTP/1.1 1-7113600/175/6279_ 105.551073426600.01.9581.52 207.154.240.169h2localhost:443[0/0] Software caused connection abort 1-7113600/214/6078_ 104.88183867238740.02.4877.44 128.199.62.55h2localhost:443[0/0] Software caused connection abort 1-7113600/190/6065_ 106.0211293910290.02.2678.49 203.170.192.183http/1.1www.pokaorganize.com:443POST /wp-cron.php?doing_wp_cron=1704590757.05838489532470703125 1-7113600/170/5730_ 106.050076526940.02.3276.14 138.197.88.136http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-7113600/171/5983_ 105.76183875766560.01.9988.75 207.154.240.169http/1.1 1-7113600/167/6040_ 105.940065211850.02.0479.51 138.197.88.136http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7113600/154/6086_ 105.900065795430.01.7877.02 128.199.62.55http/1.1 1-7113600/171/6170_ 106.040077025830.02.8182.66 164.92.192.25http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-7113600/184/6131_ 105.611056112710.02.3379.05 139.59.182.142h2localhost:443[0/0] Software caused connection abort 1-7113600/169/6087_ 105.830070230670.01.7985.02 164.92.192.25http/1.1localhost:80GET / HTTP/1.1 1-7113600/165/5881_ 106.050076765000.02.1184.33 206.81.1.88http/1.1localhost:80GET /about HTTP/1.1 1-7113600/162/6396_ 106.021059409760.01.8992.62 162.243.186.177http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7113600/182/6116_ 105.15086779954910.02.1682.62 137.184.162.65h2localhost:443[0/0] Software caused connection abort 1-7113600/159/6000_ 105.591059060350.02.0177.83 192.53.126.23http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1
Found on 2024-01-07 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0ebf6ab6e1fApache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 23:25:45 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 hours 24 minutes 24 seconds Server load: 3.88 3.82 3.41 Total accesses: 240197 - Total Traffic: 3.5 GB - Total Duration: 192176360 CPU Usage: u81.33 s5.73 cu3895.6 cs208.8 - 8.68% CPU load 4.98 requests/sec - 75.8 kB/second - 15.2 kB/request - 800.078 ms/request 13 requests currently being processed, 83 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 030686no5yes725000 132728no1yes230000 229460no5yes428002 Sum3011 1383002 _W_R_W____R________________RW__W_______W___________________R____ __________W______W_______R____W_................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0306860/69/2677_ 31.250021681460.00.7840.82 128.199.195.68http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-0306861/66/2949W 31.061020727020.00.7439.23 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?jrmecaw-357080zetidm85wez.htm HTTP/1.1 0-0306860/49/2620_ 30.96088432958730.00.5747.64 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-0306860/57/2854R 30.972125921047950.00.6136.44 188.165.232.135http/1.1 0-0306860/60/2739_ 31.141021483390.00.7634.20 146.190.64.200http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-0306861/63/3004W 31.140021661780.00.7437.93 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-0306860/55/2756_ 31.210021063510.00.6249.71 138.68.163.10http/1.1localhost:80GET / HTTP/1.1 0-0306860/52/2746_ 31.110171421900290.00.7236.15 94.25.174.77http/1.1www.ss-cool.com:443POST /contact/ HTTP/1.0 0-0306860/50/2802_ 30.45067120816520.00.5978.63 85.208.96.211http/1.1www.chonlateefood.com:443GET /items/iox6716omhftidm62.html HTTP/1.1 0-0306860/69/2751_ 30.98087320899000.00.8935.63 85.208.96.199http/1.1www.chonlateeadmin.com:443GET /hbwhmop-20274jetid.htm HTTP/1.1 0-0306860/55/2691R 30.79274524465080.00.6133.05 20.163.30.95http/1.1 0-0306860/46/2610_ 31.160021107550.00.5133.97 142.93.64.15http/1.1localhost:80\x16\x03\x01\x01\b\x01 0-0306860/54/2590_ 31.081105321069550.00.5335.95 128.199.195.68h2localhost:443[0/0] Software caused connection abort 0-0306860/54/2897_ 30.80084721801510.00.6339.80 164.90.222.93http/1.1 0-0306860/53/2931_ 31.210023963120.00.5939.87 139.144.150.205http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-0306860/53/2692_ 30.230114221063120.00.6235.34 164.90.222.93h2localhost:443[0/0] Software caused connection abort 0-0306860/52/2602_ 31.130021396290.00.6233.90 139.144.150.205http/1.1localhost:80GET /login.action HTTP/1.1 0-0306860/50/2922_ 29.260121327300.00.5739.14 164.90.222.93h2localhost:443[0/0] Software caused connection abort 0-0306860/62/2813_ 31.100020792340.00.7637.11 66.115.181.202http/1.1www.partymanagementthailand.comGET / HTTP/1.1 0-0306860/58/2652_ 31.09084222717000.00.6440.10 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?liavrsm-72200nitems/etidm95yvn.html HTTP/1.1 0-0306860/68/2717_ 31.100020778150.00.8639.20 128.199.195.68h2localhost:443[0/0] Software caused connection abort 0-0306860/61/2745_ 31.220021776940.00.7339.99 142.93.64.15http/1.1localhost:80GET / HTTP/1.1 0-0306860/53/3086_ 31.250020744230.00.6239.60 128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-0306860/47/2617_ 30.24085020293390.00.5634.80 128.199.195.68h2localhost:443[0/0] Software caused connection abort 0-0306860/59/2658_ 31.060021286670.00.5534.30 139.144.150.23h2localhost:443[0/0] Software caused connection abort 0-0306860/63/2637_ 30.96058620734960.01.0534.37 164.90.222.93h2localhost:443[0/0] Software caused connection abort 0-0306860/59/2712_ 31.220020583970.00.5844.95 128.199.195.68http/1.1localhost:443GET / HTTP/1.1 0-0306860/57/2713R 31.112020770090.00.6665.09 146.190.64.200http/1.1localhost:80GET /about HTTP/1.1 0-0306861/53/2604W 30.960020971270.00.5832.81 185.70.94.16http/1.1www.dtacsme.com:443GET / HTTP/1.1 0-0306860/55/2945_ 30.85085020133410.00.5773.58 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-0306860/55/2631_ 31.09065820915470.00.6741.67 20.163.30.95http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 0-0306861/94/2983W 30.680020959340.00.8436.59 45.138.16.107http/1.1www.chonlateemeet.com:443POST /xmlrpc.php HTTP/1.1 1-0327280/8/2117_ 4.640205416015740.00.0827.92 128.199.195.68h2localhost:443[0/0] Software caused connection abort 1-0327280/5/1900_ 3.74086215768760.00.0724.59 137.184.150.232h2localhost:443[0/0] Software caused connection abort 1-0327280/13/2039_ 4.740016114830.00.1228.37 139.144.150.205http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-0327280/13/1908_ 4.740015557540.00.1725.56 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 1-0327280/11/1939_ 4.610110015511530.00.1529.99 128.199.195.68http/1.1 1-0327280/8/1948_ 4.180112715305090.00.0925.99 20.15.133.170h2www.twinbuilt.co.th:443GET /?a=dcm-the-drawing-specialists-3-vv-kdmKE5i6 HTTP/2.0 1-0327280/7/1953_ 4.53155115866350.00.0824.09 66.249.71.3http/1.1www.chonlateeaa.com:443GET /?w=galaxy-tab-s8+-s7-fe-s7+-book-cover-keyboard-yy-8gDLnyF 1-0327281/10/2023W 4.630015727130.00.1027.37 52.70.240.171http/1.1www.chonlateeboi.com:443GET /44656khrretidm20okd HTTP/1.1 1-0327280/8/1987_ 4.730015904630.00.0727.82 142.93.64.15http/1.1localhost:80\x16\x03\x01\x01\v\x01 1-0327280/8/1922_ 3.92084315459960.00.1025.17 164.90.222.93h2localhost:443[0/0] Software caused connection abort 1-0327280/9/1927_ 4.330105415192970.00.1128.52 128.199.195.68h2localhost:443[0/0] Software caused connection abort 1-0327280/9/2067_ 4.770016343450.00.0828.94 147.182.130.98http/1.1localhost:80\x16\x03\x01\x01\x13\x01 1-0327280/10/1976_ 4.590016007740.00.0626.10 128.199.195.68h2localhost:443[0/0] Software caused connection abort 1-0327280/9/1916_ 3.94088615618370.00.0925.74 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?etfggdh-116445setidm.html HTTP
Found on 2024-01-05 16:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb964220beApache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 22:40:09 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 22 hours 17 minutes 10 seconds Server load: 1.35 1.68 1.41 Total accesses: 4322859 - Total Traffic: 55.5 GB - Total Duration: 4091404932 CPU Usage: u205.87 s46.03 cu77797.2 cs4073.16 - 8.7% CPU load 4.58 requests/sec - 61.6 kB/second - 13.5 kB/request - 946.458 ms/request 11 requests currently being processed, 53 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03068no23yes7250019 17820no5yes428000 Sum2028 11530019 __R_W_R____________RW__R_______R_W_R_____________W____________W_ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-4030680/169/39047_ 105.7301125355434460.01.86494.12 94.156.68.28http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 0-4030680/159/38392_ 105.440939362081680.01.70484.88 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-4030680/161/38802R 105.4110397237770.01.77497.51 162.243.161.105http/1.1localhost:80GET /about HTTP/1.1 0-4030680/172/38844_ 105.6301017385657020.01.83507.97 66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?tvbrxij-6818oeti.html HTTP/1.1 0-4030681/162/39337W 105.3300366019660.01.78561.26 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?dyiymlj-14394vetidm21q.htm HTTP/1.1 0-4030680/146/38403_ 105.11013395162880.01.66485.79 167.172.232.142h2localhost:443[0/0] Software caused connection abort 0-4030680/143/38725R 105.561964399124610.01.62487.81 157.55.39.61h2www.chonlateefbc.com:443[1/0] schedule: stream 1, GET /sitemap262.xml 0-4030680/162/39481_ 105.5600363901790.01.85495.63 137.184.162.65http/1.1 0-4030680/162/38470_ 105.5700376273270.01.76503.84 165.22.74.203h2localhost:443[0/0] Software caused connection abort 0-4030680/146/38891_ 105.6200364403240.01.60497.03 144.126.202.105http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-4030680/169/38454_ 105.6700380394270.01.78467.51 162.243.161.105http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-4030680/155/38527_ 105.2200364303840.01.68517.75 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-4030680/164/38387_ 105.25013371232630.01.85468.91 144.126.202.105http/1.1localhost:80GET /server-status HTTP/1.1 0-4030680/171/38581_ 105.4400400535370.01.92497.19 144.126.202.105http/1.1localhost:80GET /server-status HTTP/1.1 0-4030680/155/38802_ 105.6400376506990.01.85487.85 144.126.202.105http/1.1localhost:80GET /.git/config HTTP/1.1 0-4030680/168/38475_ 105.4401368505420.01.87541.93 165.22.74.203h2localhost:443[0/0] Software caused connection abort 0-4030680/149/39440_ 105.1400371429180.01.59521.92 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-4030680/171/38938_ 105.6700362546880.01.89480.02 164.90.222.93http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-4030680/159/38983_ 105.520737363849890.01.72503.60 159.203.182.222h2localhost:443[0/0] Software caused connection abort 0-4030680/159/39261R 105.2110379873310.01.74512.60 165.22.74.203http/1.1 0-4030681/163/38645W 105.5900358097660.01.92509.57 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?lbenuow-6914retidm25yor.htm HTTP/1.1 0-4030680/149/38814_ 105.640995384530560.01.68501.25 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?jbsothe-10188fetidm4 HTTP/1.1 0-4030680/169/38563_ 105.3300403331530.01.98510.94 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-4030680/152/37875R 102.8316357925230.01.65470.89 66.249.64.227http/1.1 0-4030680/149/38920_ 105.510948367269530.01.73516.61 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-4030680/171/38199_ 105.5700384408800.01.95467.34 164.90.222.93http/1.1localhost:80GET /login.action HTTP/1.1 0-4030680/159/38902_ 105.6700368705060.01.85580.24 161.35.155.246http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-4030680/159/38148_ 105.5600366596940.01.54507.09 137.184.222.107http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-4030680/152/38741_ 105.3009407812250.01.69520.11 159.223.102.13h2localhost:443[0/0] Software caused connection abort 0-4030680/149/38609_ 105.2600371530000.01.66499.90 157.55.39.61h2www.chonlateefbc.com:443[0/0] init 0-4030680/153/38727_ 105.3300366490440.01.62490.45 159.223.102.13h2localhost:443[0/0] Software caused connection abort 0-4030680/121/38407R 105.6210374436380.01.39533.79 161.35.155.246http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-4078200/73/39615_ 38.3701028370073590.00.71500.99 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?403706himsitems/etid.html HTTP/1.1 1-4078201/53/39532W 37.8210378273060.00.49543.25 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?hzpmlcv-39332cetidm.html HTTP/1.1 1-4078200/53/39317_ 37.9200379936990.00.55546.62 167.172.232.142h2localhost:443[0/0] Software caused connection abort 1-4078200/54/39573R 38.1810388078160.00.57558.26 144.126.202.105http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-4078200/51/40346_ 38.3400359739320.00.60613.22 164.90.222.93http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-4078200/58/39156_ 37.7909945357126270.00.64560.14 167.172.232.142http/1.1 1-4078200/55/39244_ 38.3901020360404300.00.68525.65 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?wflhlzs-14491yitems/etidm HTTP/1.1 1-4078200/70/39692_ 38.3800384109230.00.71506.39 137.184.222.107http/1.1localhost:80GET /login.action HTTP/1.1 1-4078200/54/39442_ 38.3700372633200.00.54497.48 165.22.74.203http/1.1localhost:80GET /.git/config HTTP/1.1 1-4078200/52/39505_ 37.95014364782900.00.55505.96 137.184.222.107http/1.1localhost:80GET /server-status HTTP/1.1 1-4078200/48/40067_ 38.0401137360608540.00.56529.89 159.223.102.13http/1.1 1-4078200/65/39859_ 38.3900364656670.00.70496.76 159.65.58.104http/1.1localhost:443GET / HTTP/1.1 1-4078200/76/39797_ 38.2100357092630.00.75493.84 159.223.102.13h2localhost:443[0/0] Software caused connection abort 1-4078200/62/39354_ 38.240113710704
Found on 2023-12-11 15:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb137c337bApache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:25:13 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 2 minutes 15 seconds Server load: 1.00 1.74 1.55 Total accesses: 693875 - Total Traffic: 9.6 GB - Total Duration: 516866413 CPU Usage: u56.72 s10.55 cu12013 cs653.85 - 7.36% CPU load 4.01 requests/sec - 58.4 kB/second - 14.6 kB/request - 744.898 ms/request 13 requests currently being processed, 115 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no1yes428000 330151no2yes329001 630155no5yes527004 730156no5yes131001 Sum4013 13115006 ................................................................ __W_________R_R_______________R_______________R______R______R___ ................................................................ ___R___________WRW_____________R_____________________________W__ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0048889745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0048896045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0048880245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0048895746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00488167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0048894846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00488145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0048892346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00488107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00488104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0048870146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0048889947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0048872146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00488104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00488108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0048846846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0048870945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0048884445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0048871246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0048870946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00488046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0048849045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0048893646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0048886945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.004884146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0048873844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00488722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0048896345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00488107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00488146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00488778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0048896044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0048886344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0048847946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00488150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0048867645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0048845143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00488044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00488232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0048858244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00488183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00488822744746080.00.0079.16 45
Found on 2023-12-02 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e859c0aebeApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 06:53:02 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 2 hours 50 minutes 51 seconds Server load: 0.89 1.05 0.81 Total accesses: 14703 - Total Traffic: 166.3 MB - Total Duration: 18036735 CPU Usage: u2792.99 s5186.19 cu51092900 cs12500400 - 620000% CPU load 1.43 requests/sec - 16.6 kB/second - 11.6 kB/request - 1226.74 ms/request 2 requests currently being processed, 8 idle workers _W___.._..__...W.._............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762172280/17/1280_ 10.150115992550.00.1712.29 146.190.160.11http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1762172340/17/1191W 5.770014075310.00.1923.97 172.71.26.20http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-content/plugins/linkpreview/index.php HTTP/1.1 2-1762172360/16/1306_ 9.290115725710.00.2812.40 146.190.160.11http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-1762172560/13/1137_ 7.672113757340.00.1313.22 146.190.160.11http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 4-1762168860/82/1289_ 33.852114926210.01.0312.73 146.190.160.11http/1.1localhost:80GET / HTTP/1.0 5-1762-0/0/1252. 0.0080016009610.00.0012.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1762-0/0/1061. 0.0070013237860.00.009.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1762172640/12/1039_ 7.190148812261990.00.1510.05 5.62.34.21http/1.1www.chonlateepr.com:443POST //wp-login.php HTTP/1.1 8-1762-0/0/867. 0.0079010726830.00.009.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1762-0/0/722. 0.0022909069250.00.008.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1762169710/60/992_ 24.3903112242440.00.638.51 172.70.42.31http/1.1www.smebkk.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 11-1762169480/65/622_ 26.19117918040.00.576.48 146.190.160.11http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 12-1762-0/0/352. 0.0022603825480.00.004.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/431. 0.006705864820.00.004.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/547. 0.004507548530.00.008.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762170000/55/386W 16.94004189440.00.985.60 146.190.160.11http/1.1localhost:80GET /server-status HTTP/1.0 16-1762-0/0/140. 0.0022802184360.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/25. 0.002200188410.00.001.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762170050/56/64_ 24.3811623090.01.001.06 146.190.160.11http/1.1localhost:80GET /about HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 87subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 114 seconds, (range: 14...248)index usage: 3%, cache usage: 4%total entries stored since starting: 1815total entries replaced since starting: 0total entries expired since starting: 1728total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 33 hit, 4651 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-22 23:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8ee7c39dfApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 10:31:29 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 6 hours 29 minutes 17 seconds Server load: 2.06 1.93 1.65 Total accesses: 39264 - Total Traffic: 694.4 MB - Total Duration: 57247158 CPU Usage: u2827.17 s5168.09 cu50870600 cs12453000 - 271000% CPU load 1.68 requests/sec - 30.4 kB/second - 18.1 kB/request - 1458.01 ms/request 4 requests currently being processed, 7 idle workers __R__R__..............R.W..............._......... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743207860/63/3187_ 21.530147613050.03.7168.64 161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1743207950/53/3203_ 21.03073046639960.01.1966.51 124.120.27.176http/1.1www.chonlateefbl.com:80POST /wp-admin/admin-ajax.php HTTP/1.0 2-1743208010/47/3333R 18.3711131148173870.00.8864.28 203.158.193.247http/1.1 3-1743209120/8/3213_ 4.98047243829340.00.1360.94 162.158.239.43http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 4-1743208820/19/2946_ 11.511330741232170.00.4039.87 35.171.144.152http/1.1www.cnb.co.th:443GET / HTTP/1.1 5-1743204180/85/3082R 37.7311042828620.01.6957.15 203.158.193.247http/1.1 6-1743209340/2/2821_ 0.460040250900.00.0052.59 35.171.144.152http/1.1www.cnb.co.th:80GET / HTTP/1.0 7-1743209060/11/2819_ 4.900138911170.00.2445.42 161.35.27.144http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1743-0/0/2790. 0.00119041199790.00.0040.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1743-0/0/2476. 0.00298036509190.00.0034.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1743-0/0/2072. 0.00306031699880.00.0033.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/1662. 0.00303026348540.00.0028.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/1478. 0.00293019985210.00.0030.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/1294. 0.00313021748900.00.0022.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743-0/0/901. 0.00300013446970.00.0017.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/548. 0.0029207324100.00.008.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/543. 0.0029408771470.00.008.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/205. 0.001603058470.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/104. 0.0030401612270.00.002.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/73. 0.0012001440450.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/15. 0.003010238140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/14. 0.003170278290.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743202350/75/77R 45.22112791367080.01.281.35 54.88.179.33http/1.1www.cnb.co.th:443 23-1743-0/0/12. 0.002880191960.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743204610/88/92W 36.18001158690.01.271.35 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 25-1743-0/0/9. 0.002890283310.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/8. 0.002860353910.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/6. 0.002870264130.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743-0/0/4. 0.003050218360.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1743-0/0/7. 0.002990307910.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/7. 0.003080184790.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743-0/0/5. 0.003020391520.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1743-0/0/78. 0.004401026520.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743-0/0/8. 0.003110210680.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1743-0/0/7. 0.003160184990.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/10. 0.002700367420.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743-0/0/4. 0.003070174810.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1743-0/0/8. 0.003100163710.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/7. 0.002830227090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/10. 0.002910153750.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743204970/67/67_ 38.7815041068510.01.101.10 168.61.166.20http/1.1www.seasabithailand.com:80GET /wp-admin/dropdown.php HTTP/1.0 41-1743-0/0/2. 0.00309078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.00314041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.002850128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.001120756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.00321000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.00284080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.00297050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.00320010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.00296025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 119subcaches: 32, indexes
Found on 2023-09-19 03:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8fb30ddaeApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 16-Sep-2023 23:44:33 +07 Restart Time: Saturday, 16-Sep-2023 04:02:13 +07 Parent Server Config. Generation: 1732 Parent Server MPM Generation: 1731 Server uptime: 19 hours 42 minutes 20 seconds Server load: 0.73 0.55 0.53 Total accesses: 128446 - Total Traffic: 1.9 GB - Total Duration: 234618625 CPU Usage: u2722.46 s5122.42 cu50708100 cs12418000 - 89000% CPU load 1.81 requests/sec - 27.8 kB/second - 15.4 kB/request - 1826.59 ms/request 2 requests currently being processed, 4 idle workers _.._...._W_W...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1731260210/35/10283_ 10.7501183414940.00.18174.67 172.70.43.160http/1.1www.dr-rpi.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0% 1-1731-0/0/10399. 0.002350178406710.00.00166.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1731-0/0/9720. 0.00341198781710.00.00130.55 172.69.64.253http/1.1www.mgacccount.com:80GET //.well-known/acme-challenge/wp-signup.php HTTP/1.0 3-1731254920/85/9610_ 43.0011172149190.00.96120.27 139.59.182.142http/1.1localhost:80GET /about HTTP/1.0 4-1731-0/0/9105. 0.0027548192919980.00.00151.00 40.77.58.106http/1.1www.plastandtrans.com:443GET /wp-admin/repeater.php HTTP/1.1 5-1731-0/0/9539. 0.0001165206420.00.00142.28 139.59.182.142http/1.1localhost:80GET /v2/_catalog HTTP/1.0 6-1731-0/0/9211. 0.0000152387520.00.00125.07 139.59.182.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 7-1731-0/0/8940. 0.002360153519800.00.00128.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1731256090/71/8349_ 28.530746142494200.00.61141.98 40.77.58.106http/1.1www.plastandtrans.com:443GET /wp-content/repeater.php HTTP/1.1 9-1731258220/47/7366W 20.8000120925140.00.32101.61 139.59.182.142http/1.1localhost:80GET /server-status HTTP/1.0 10-1731259940/39/6944_ 13.8500116192220.00.16116.97 139.59.182.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1731260400/29/6557W 13.5700143684910.00.20102.12 172.70.188.11http/1.1www.accgoing.com:80GET /robots.txt HTTP/1.0 12-1731-0/0/5557. 0.002340103695680.00.0067.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1731-0/0/4115. 0.002584077891170.00.0094.24 162.158.86.176http/1.1www.mgacccount.com:80POST /xmlrpc.php HTTP/1.0 14-1731-0/0/3000. 0.005813060318540.00.0042.68 104.197.209.149http/1.1www.chonlateeadmin.com:443POST /xmlrpc.php HTTP/1.1 15-1731-0/0/2249. 0.006533043213970.00.0026.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1731-0/0/1413. 0.005818032973810.00.0018.10 104.199.1.238http/1.1www.ozonepluswater.net:443POST /xmlrpc.php HTTP/1.1 17-1731-0/0/873. 0.007768014076680.00.0011.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1731-0/0/906. 0.006928102414633540.00.0012.38 117.18.13.234http/1.1www.chonlateebusiness.com:443GET /?author=43 HTTP/1.1 19-1731-0/0/651. 0.00680192310930420.00.008.58 31.14.123.176http/1.1www.tkadvicesystem.com:443GET /?author=16 HTTP/1.1 20-1731-0/0/429. 0.00773605748350.00.005.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1731-0/0/529. 0.00690022818268060.00.006.22 81.70.157.183http/1.1www.tkadvicesystem.com:443GET /?author=16 HTTP/1.1 22-1731-0/0/205. 0.00777103994600.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1731-0/0/503. 0.00767009870970.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1731-0/0/230. 0.00776204121130.00.003.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1731-0/0/215. 0.00700903830620.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1731-0/0/46. 0.00775101498040.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1731-0/0/127. 0.00774302650280.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1731-0/0/27. 0.0077760598370.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1731-0/0/67. 0.00776701499110.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1731-0/0/237. 0.00694404038520.00.002.89 67.215.2.86http/1.1www.chonlateebusiness.com:80GET /?author=21 HTTP/1.0 31-1731-0/0/57. 0.00751601107810.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1731-0/0/18. 0.0077750177310.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1731-0/0/48. 0.0077530539560.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1731-0/0/126. 0.00776003187600.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1731-0/0/155. 0.00775902624890.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1731-0/0/33. 0.0077640666060.00.000.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1731-0/0/136. 0.00775403697660.00.001.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1731-0/0/51. 0.0077420653380.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1731-0/0/24. 0.0077740459740.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1731-0/0/120. 0.00692411051982980.00.001.48 117.18.13.234http/1.1www.chonlateebusiness.com:443GET /?author=46 HTTP/1.1 41-1731-0/0/12. 0.00562640248910.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1731-0/0/105. 0.00557243942319840.00.001.87 23.97.205.210http/1.1www.ss-cool.com:443POST /wp-login.php HTTP/1.1 43-1731-0/0/10. 0.0056292362040.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1731-0/0/15. 0.00562630357110.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1731-0/0/99. 0.005563216283147040.00.001.20 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 46-1731-0/0/9. 0.00562440303520.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1731-0/0/8. 0.00562680271660.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1731-0/0/7. 0.00562650237160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1731-0/0/11. 0.00562567207120.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child
Found on 2023-09-16 16:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8fd38b028Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 08:39:39 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 4 hours 37 minutes 27 seconds Server load: 0.91 0.69 0.73 Total accesses: 21248 - Total Traffic: 332.6 MB - Total Duration: 24300491 CPU Usage: u2709.82 s5098.58 cu50520300 cs12377300 - 378000% CPU load 1.28 requests/sec - 20.5 kB/second - 16.0 kB/request - 1143.66 ms/request 3 requests currently being processed, 7 idle workers ___W___W_W........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720310850/2/1784_ 0.651022095270.00.0128.46 139.144.150.26http/1.1localhost:80GET /about HTTP/1.0 1-1720309180/13/1806_ 2.112120171560.00.4725.46 139.144.150.26http/1.1localhost:80GET / HTTP/1.0 2-1720309330/10/1665_ 2.701118046540.00.1121.85 139.144.150.26http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 3-1720296480/74/1640W 36.850019138320.02.1822.54 184.22.232.72http/1.1www.chonlateemeet.com:443POST /wp-admin/admin-ajax.php?_panelsnonce=1a66065284 HTTP/1.1 4-1720302310/45/1781_ 12.12176520115280.01.1935.56 47.92.33.185http/1.1www.thefixup333.com:443GET /?%3A2835 HTTP/1.1 5-1720305920/21/1464_ 10.901017448580.00.2523.37 139.144.150.26http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 6-1720306030/22/1447_ 10.000117387070.00.7419.05 139.144.150.26http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-1720302460/48/1480W 19.730015807480.01.3322.77 124.120.27.176http/1.1www.chonlateemeet.com:443POST /wp-admin/admin-ajax.php?_panelsnonce=1a66065284 HTTP/1.1 8-1720302520/46/1319_ 19.630115157130.03.0124.99 139.144.150.26http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1720302780/41/1418W 17.940017041340.00.8818.61 139.144.150.26http/1.1localhost:80GET /server-status HTTP/1.0 10-1720-0/0/1113. 0.0020012145920.00.0016.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1720-0/0/962. 0.0019011003160.00.0014.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1720-0/0/596. 0.002206518580.00.008.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1720-0/0/520. 0.001806664590.00.0018.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/500. 0.00006954190.00.007.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1720-0/0/274. 0.0070202949200.00.003.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720-0/0/331. 0.0070504264520.00.003.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1720-0/0/269. 0.00335102175030.00.005.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/108. 0.00335001329770.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/43. 0.0033440450530.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/133. 0.0033540881410.00.001.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1720-0/0/43. 0.0033350433750.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/5. 0.003336031690.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/99. 0.0033550586780.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1720-0/0/4. 0.003345025950.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1720-0/0/86. 0.002641960937090.00.001.42 172.71.161.143http/1.1www.chorsiam.com:80GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.0 26-1720-0/0/2. 0.003349018900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1720-0/0/2. 0.003347025180.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1720-0/0/89. 0.0026510750470.00.002.47 139.144.150.45http/1.1localhost:80GET /.DS_Store HTTP/1.0 29-1720-0/0/2. 0.003343026770.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1720-0/0/86. 0.00266510547560.00.000.88 223.205.223.205http/1.1www.hotlineservicethailand.com:GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1 31-1720-0/0/7. 0.003219097730.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1720-0/0/82. 0.002668347788700.00.000.52 172.173.68.5http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 33-1720-0/0/2. 0.003360030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1720-0/0/80. 0.0026662988590.00.000.68 223.205.223.205http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-fc29 35-1720-0/0/1. 0.003362000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1720-0/0/1. 0.003359000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1720-0/0/1. 0.003361010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1720-0/0/1. 0.003358000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1720-0/0/2. 0.003338060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 43subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 136 seconds, (range: 10...285)index usage: 1%, cache usage: 1%total entries stored since starting: 3472total entries replaced since starting: 0total entries expired since starting: 3429total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 32 hit, 7806 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-14 01:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8403b1822Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 09:49:34 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 5 hours 47 minutes 22 seconds Server load: 2.22 1.45 1.26 Total accesses: 31140 - Total Traffic: 534.8 MB - Total Duration: 41981256 CPU Usage: u2727.45 s5095.95 cu50469300 cs12366400 - 302000% CPU load 1.49 requests/sec - 26.3 kB/second - 17.6 kB/request - 1348.15 ms/request 8 requests currently being processed, 7 idle workers ___C__WWRRWR_W_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716320700/49/2675_ 22.560036902850.00.7646.27 167.71.48.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1716322530/24/2764_ 8.510185735218110.00.1935.08 172.68.234.138http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 2-1716323120/9/2756_ 8.840324135069270.00.4353.44 138.199.60.176http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 3-1716323221/7/2581C 4.22013352244623.80.2242.78 17.246.23.76http/1.1www.npaccounting.co.th:443GET /wp-content/themes/sydney/js/scripts.js?ver=6.3.1 HTTP/1.1 4-1716321410/39/2529_ 22.070835211480.01.0634.86 17.246.19.214http/1.1www.npaccounting.co.th:443GET /wp-content/themes/sydney/js/functions.min.js?ver=20230315 5-1716323380/8/2492_ 4.260131563640.00.0439.41 167.71.48.191http/1.1localhost:80GET /v2/_catalog HTTP/1.0 6-1716323630/5/2241W 0.040027690660.00.0231.01 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 7-1716323440/7/2246W 0.920029430830.00.0429.01 172.71.174.177http/1.1www.siamautomation.com:443POST /wp-login.php HTTP/1.1 8-1716321770/31/2027R 19.051728613560.00.6345.36 172.69.67.20http/1.1 9-1716323710/2/1991R 2.380926609860.00.1938.79 138.199.60.176http/1.1www.chonlateemeet.com:443 10-1716319810/59/1836W 26.995025645800.00.8936.79 172.68.234.204http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1694573368.92342805862426757812 11-1716321850/31/1540R 21.601180223502910.00.4416.83 17.246.23.55http/1.1www.npaccounting.co.th:443 12-1716321870/30/1018_ 18.040189617916970.00.6834.45 184.22.232.72http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-json/aioseo/v1/ping/ HTTP/1.1 13-1716323800/2/568W 1.69009143640.00.016.20 172.68.234.138http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 14-1716323810/2/362_ 0.84014354194040.00.015.72 172.69.67.21http/1.1www.business.co.th:443GET //shop//?author=1 HTTP/1.1 15-1716-0/0/45. 0.0018230394960.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/491. 0.0015374797412150.00.006.92 52.167.144.223http/1.1www.winnerpropest.com:443GET /wp-sitemap-users-1.xml HTTP/1.1 17-1716-0/0/121. 0.00183101234130.00.000.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/31. 0.001833054890.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/173. 0.00137111965670.00.0016.27 172.68.4.148http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-c25a 20-1716-0/0/110. 0.0018320853700.00.001.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1716-0/0/117. 0.0017740766370.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/113. 0.0034600855510.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1716-0/0/18. 0.0034340109850.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1716-0/0/21. 0.003439037670.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1716-0/0/9. 0.003437063280.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1716-0/0/76. 0.00294201550070.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1716-0/0/3. 0.003447033330.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1716-0/0/3. 0.0034560700.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1716-0/0/3. 0.0034550510.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1716-0/0/9. 0.00343804950.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1716-0/0/4. 0.0034500390.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1716-0/0/3. 0.00344902160.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1716-0/0/15. 0.0034100149050.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1716-0/0/4. 0.00344801040.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1716-0/0/6. 0.003442036240.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1716-0/0/6. 0.003423053100.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1716-0/0/61. 0.0031160977890.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1716-0/0/69. 0.00303301316420.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1716-0/0/3. 0.0034580250.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 97subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 85 seconds, (range: 5...284)index usage: 3%, cache usage: 4%total entries stored since starting: 5129total entries replaced since starting: 0total entries expired since starting: 5032total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 249 hit, 10814 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 02:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8c8e8ee47Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 22:31:28 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 18 hours 29 minutes 14 seconds Server load: 0.18 0.36 0.35 Total accesses: 94209 - Total Traffic: 1.4 GB - Total Duration: 135167780 CPU Usage: u2744.45 s5080.4 cu50292900 cs12327700 - 94100% CPU load 1.42 requests/sec - 21.3 kB/second - 15.1 kB/request - 1434.77 ms/request 1 requests currently being processed, 9 idle workers ______W_..._._.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170249800/46/8036_ 17.1601111017250.00.46111.92 167.99.8.63http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-170248170/67/8012_ 23.4811111878700.02.14122.27 82.156.229.224http/1.1www.nptpropertythailand.com:443POST /xmlrpc.php HTTP/1.1 2-170246320/92/7731_ 29.4431113599910.01.05114.58 167.99.8.63http/1.1localhost:80GET / HTTP/1.0 3-170251340/27/7614_ 10.5711107062800.00.40103.88 167.99.8.63http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-170248190/67/7116_ 23.1831104620840.00.89103.17 167.99.8.63http/1.1localhost:80GET / HTTP/1.0 5-170248300/69/7508_ 21.4301102769580.00.65112.31 217.61.36.230http/1.1www.spamechanicssystem.com:443POST /xmlrpc.php HTTP/1.1 6-170251990/14/6843W 6.1100103289500.00.1193.82 167.99.8.63http/1.1localhost:80GET /server-status HTTP/1.0 7-170246900/81/7108_ 32.1021102939980.01.09105.55 167.99.8.63http/1.1localhost:80GET /about HTTP/1.0 8-1702-0/0/6416. 0.00621090587530.00.0083.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1702-0/0/5985. 0.00628084596450.00.0091.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1702-0/0/5300. 0.0028365675060690.00.0084.21 172.71.242.86http/1.1www.yuritrading.com:80GET /v2/_catalog HTTP/1.0 11-170247010/85/4654_ 23.302163294210.00.9376.02 167.99.8.63http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 12-1702-0/0/4209. 0.00637063046030.00.0067.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-170248390/68/2176_ 20.731133498120.00.5443.75 167.99.8.63http/1.1localhost:80GET /v2/_catalog HTTP/1.0 14-1702-0/0/1764. 0.005703135624652010.00.0026.43 162.158.106.47http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 15-1702-0/0/1167. 0.006378014904440.00.0014.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/525. 0.005650225810731050.00.008.04 67.207.85.29http/1.1 17-1702-0/0/370. 0.00636504247590.00.003.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/73. 0.0071450909090.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.00711801786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.00935701383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.0092660344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.00936404959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.0093690735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.009350077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.0093630103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.0093530121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.00883942131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.00934901402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.009376074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.0092320299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.00926901458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.0092130524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.00937501921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.00936202967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.00937403934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.009361057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.0088708722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.00937302571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.009359045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0056557060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 138 seconds, (range: 66...237)index usage: 0%, cache usage: 0%total entries stored since starting: 16496total entries replaced since starting: 0total entries expired since starting: 16481total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 397 hit, 38244 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 15:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e82e795d6bApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 09:51:06 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 5 hours 48 minutes 54 seconds Server load: 2.81 2.58 2.69 Total accesses: 42052 - Total Traffic: 580.6 MB - Total Duration: 61664929 CPU Usage: u2715.22 s5041 cu50064700 cs12279200 - 298000% CPU load 2.01 requests/sec - 28.4 kB/second - 14.1 kB/request - 1466.4 ms/request 5 requests currently being processed, 8 idle workers W__C____RW.C..__.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685265500/5/3410W 3.420051267850.00.0548.26 172.70.39.76http/1.1www.time2hand.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 1-1685262820/91/3424_ 34.020048841790.00.8645.38 159.65.58.104http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 2-1685263970/41/3322_ 45.800147157750.00.4240.62 144.126.202.105http/1.1localhost:443GET /config.json HTTP/1.1 3-1685264731/34/3136C 12.511047875751.30.5240.33 144.126.202.105http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-1685263620/52/3051_ 25.590135542426410.00.4039.04 172.70.134.192http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 5-1685264050/52/2767_ 21.720038093210.00.4636.25 144.126.202.105http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 6-1685265580/2/2932_ 0.520140597180.00.0137.11 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1685265640/1/3090_ 0.000445146370.00.0052.48 144.126.202.105http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 8-1685265700/1/2848R 0.001240942370.00.0035.87 178.32.187.122http/1.1www.dinocoffees.com:443 9-1685264900/18/2885W 32.190043753920.00.1745.45 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.0 10-1685-0/0/2155. 0.001031736060.00.0035.68 165.22.74.203http/1.1localhost:80GET / HTTP/1.0 11-1685265051/26/1846C 5.260770268963316.20.1928.96 40.77.57.22http/1.1www.chonlateebusiness.com:443GET /wp-content/plugins/revslider/includes/page/ HTTP/1.1 12-1685-0/0/1784. 0.0013126590400.00.0020.72 171.97.46.13http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-content/plugins/elementor/assets/lib/animations/animati 13-1685-0/0/1585. 0.0013224655640.00.0023.28 171.97.46.13http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-content/plugins/happy-elementor-addons/assets/fonts/sty 14-1685265120/20/1388_ 6.070121698770.00.1617.35 200.37.23.221http/1.1www.thaidaoherb.com:443POST /xmlrpc.php HTTP/1.1 15-1685265180/23/1052_ 8.140117472560.00.2213.87 159.65.58.104http/1.1localhost:80GET / HTTP/1.0 16-1685-0/0/263. 0.00164504239530.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/232. 0.00165003257690.00.002.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/130. 0.00256402267410.00.001.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/111. 0.00256501550090.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1685-0/0/103. 0.00235513311644320.00.001.01 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 21-1685-0/0/185. 0.00237903156980.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/194. 0.0023106583469950.00.002.36 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 23-1685-0/0/100. 0.00226511431318330.00.001.61 172.68.234.148http/1.1www.accprogress.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 24-1685-0/0/39. 0.0024550480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/5. 0.00256602860.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/8. 0.002552074820.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0018437011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0018438012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001843509920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0018449010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 330subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 31 seconds, (range: 0...123)index usage: 11%, cache usage: 15%total entries stored since starting: 6103total entries replaced since starting: 0total entries expired since starting: 5773total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 121 hit, 10130 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 02:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e86ef50d71Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 01:47:33 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 10 hours 24 minutes 19 seconds Server load: 1.17 2.47 3.93 Total accesses: 143911 - Total Traffic: 1.1 GB - Total Duration: 303354719 CPU Usage: u2690.15 s5007.73 cu49730600 cs12203400 - 165000% CPU load 3.84 requests/sec - 30.8 kB/second - 8.0 kB/request - 2107.93 ms/request 1 requests currently being processed, 10 idle workers __.___W__._..__................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674154920/65/9387_ 27.1311172417490.00.8679.56 167.71.48.191http/1.1localhost:80GET /about HTTP/1.0 1-1674157490/30/9245_ 17.5111056168598270.00.1781.17 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693766850.95791697502136230468 2-1674-0/0/9329. 0.00930169645360.00.0075.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1674158310/24/9049_ 8.5421161435820.00.2879.45 167.71.48.191http/1.1localhost:80GET / HTTP/1.0 4-1674158120/31/8844_ 9.7011164191530.01.7585.82 167.71.48.191http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 5-1674158440/27/8705_ 10.0730161241870.00.1975.25 167.71.48.191http/1.1localhost:80GET / HTTP/1.0 6-1674152100/86/8246W 46.6600154239610.00.6870.27 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 7-1674153370/83/8108_ 40.0520150131300.00.6762.45 167.71.48.191http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 8-1674158520/23/7852_ 7.9100148749950.00.2062.82 167.71.48.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1674-0/0/7962. 0.001060153131700.00.0079.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1674158650/24/7384_ 10.6302995139668930.00.1972.76 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 11-1674-0/0/6774. 0.001090133425660.00.0047.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1674-0/0/6303. 0.001100127563460.00.0047.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1674158530/25/4998_ 8.7931436109992120.00.4231.36 172.173.100.80http/1.1www.tkadvicesystem.com:443GET /simple.php HTTP/1.1 14-1674158670/24/4841_ 11.8600111630330.00.2746.59 167.71.48.191http/1.1localhost:80GET /v2/_catalog HTTP/1.0 15-1674-0/0/3889. 0.00105094600010.00.0024.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1674-0/0/2897. 0.00107078341320.00.0014.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1674-0/0/2449. 0.00103065629530.00.0011.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1674-0/0/2460. 0.00319069671840.00.0011.59 162.158.158.190http/1.1www.chonlateeit.com:443POST /xmlrpc.php HTTP/1.1 19-1674-0/0/1936. 0.00691057282660.00.007.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1674-0/0/1695. 0.00446052749470.00.005.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/1492. 0.00629208446323600.00.009.95 172.68.234.141http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693766221.86524391174316406250 22-1674-0/0/1445. 0.00659042596020.00.007.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1674-0/0/1141. 0.00438174536074130.00.004.55 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693766412.3577 HTTP/1.0 24-1674-0/0/885. 0.00461029813030.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/902. 0.00401165528664230.00.004.25 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693766449.4602 HTTP/1.0 26-1674-0/0/735. 0.001893023810270.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/773. 0.002858024880470.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1674-0/0/565. 0.002856018692190.00.002.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/513. 0.002773617752930.00.001.71 179.43.169.218http/1.1www.tkadvicesystem.com:443GET /config/config.php HTTP/1.1 30-1674-0/0/385. 0.0027701713935110.00.001.59 194.31.173.201http/1.1www.thairuamthaiparty.com:443GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?v 31-1674-0/0/418. 0.002783186714720090.00.002.37 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693764067.2714 HTTP/1.0 32-1674-0/0/353. 0.002938012743660.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1674-0/0/426. 0.002861015652510.00.001.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/322. 0.002846011395600.00.002.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/197. 0.00289507990170.00.001.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1674-0/0/177. 0.00272206926660.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/218. 0.00268117087825030.00.000.86 172.68.234.197http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693764169.0834 HTTP/1.0 38-1674-0/0/46. 0.001301302531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.001287527385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.001294203865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.001292104242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.001287104803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.001278315754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.001276719884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 225subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 45 seconds, (range: 0...189)index usage: 7%, cache usage: 10%total entries stored since starting: 20864total entries replaced since starting: 0total entries expired since starting: 20639total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 252 hit, 20577 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 18:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e83c695509Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 20:32:06 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 2 hours 44 minutes 5 seconds Server load: 4.39 4.45 4.26 Total accesses: 62778 - Total Traffic: 540.0 MB - Total Duration: 76304465 CPU Usage: u2712.02 s4932.1 cu48688200 cs11936000 - 616000% CPU load 6.38 requests/sec - 56.2 kB/second - 8.8 kB/request - 1215.47 ms/request 7 requests currently being processed, 7 idle workers W___W.RW___WWW...._............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1652139170/29/4188W 16.590049650780.00.1835.66 162.158.175.119http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 1-1652139640/15/4063_ 8.020248600170.00.0844.95 172.70.246.41http/1.1www.business.co.th:443GET /admin/ajax/avatar.php?id=-1+union+select+md5(999999999)%23 2-1652137460/86/4015_ 37.220147462540.00.6435.37 144.126.202.105http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1652138710/37/3811_ 16.35052546807880.00.4030.60 172.69.65.122http/1.1www.siamerp.com:443POST //xmlrpc.php HTTP/1.1 4-1652138020/74/3905W 33.800046471440.00.4431.84 162.158.175.145http/1.1www.chonlateeplus.com:443POST //xmlrpc.php HTTP/1.1 5-1652-0/0/3693. 0.002143948230.00.0029.42 124.120.32.193http/1.1www.chonlateekeyman.com:443GET /wp-content/plugins/wp-fastest-cache/js/toolbar.js?ver=1693 6-1652139800/5/3693W 2.250044969300.00.1029.06 172.71.223.81http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 7-1652137350/88/3848W 41.480045232650.00.8729.49 144.126.202.105http/1.1localhost:80GET /server-status HTTP/1.0 8-1652138880/43/3607_ 17.11038842618030.00.2927.92 162.158.175.119http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 9-1652139110/35/3421_ 15.44047241254020.00.3131.25 172.71.174.196http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 10-1652139910/2/3390_ 1.12082042006210.00.0041.42 162.158.174.63http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 11-1652139190/38/3139W 16.540036432180.00.4128.94 162.158.174.63http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 12-1652139300/39/2981W 16.610036119030.00.2223.95 172.173.117.242http/1.1www.ozonepluswater.net:443POST //wp-login.php HTTP/1.1 13-1652139530/20/2926W 10.970035183750.00.1021.33 172.71.174.196http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 14-1652-0/0/2996. 0.0045036065750.00.0023.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1652-0/0/1964. 0.0078023180310.00.0017.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1652-0/0/1862. 0.007939822885110.00.0013.86 162.158.175.120http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 17-1652-0/0/1542. 0.0034018611960.00.0012.42 124.120.32.193http/1.1www.chonlateekeyman.com:443GET /wp-content/plugins/gallery-by-supsystic/app/assets/js/img/ 18-1652138420/60/960_ 28.82066011637080.00.697.93 172.68.11.158http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 19-1652-0/0/411. 0.0079705340640.00.006.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1652-0/0/443. 0.0087006517470.00.003.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1652-0/0/177. 0.00115203380140.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1652-0/0/149. 0.00340702888040.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1652-0/0/136. 0.00318112217730.00.001.11 162.158.90.49http/1.1www.chonlateefarm.com:443GET /wp-content/themes/chonlateedesign/js/skip-link-focus-fix.j 24-1652-0/0/72. 0.00340601718740.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1652-0/0/139. 0.00341502399250.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1652-0/0/110. 0.0054265042172870.00.000.55 172.71.167.87http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 27-1652-0/0/81. 0.00545601658530.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/47. 0.00557601000020.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/114. 0.00544711983960.00.000.70 194.169.175.26http/1.1www.dtacbusiness.com:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.0 30-1652-0/0/3. 0.007145080530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1652-0/0/11. 0.007144092740.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1652-0/0/37. 0.0070890566180.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1652-0/0/60. 0.0070710565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.0070690696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.0070650719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.0071200349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.0069234061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.0071407143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.0070960530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.0071220257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.0071280208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.0071340142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.0070990543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.0069604221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.0071100415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.0069207931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.00693210251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.0069119421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.0071390109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent
Found on 2023-08-31 13:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8b559497dApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 08:32:52 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 4 hours 30 minutes 34 seconds Server load: 5.79 5.07 4.82 Total accesses: 140950 - Total Traffic: 769.8 MB - Total Duration: 183102720 CPU Usage: u2888.04 s4912.49 cu47912300 cs11727800 - 367000% CPU load 8.68 requests/sec - 48.6 kB/second - 5.6 kB/request - 1299.06 ms/request 6 requests currently being processed, 10 idle workers R_RW___R___R..__W_................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1645315220/52/8614R 31.7700111867330.00.3344.75 168.61.158.165http/1.1www.pokaorganize.com:443 1-1645316940/5/8543_ 2.6700109641270.00.0341.10 138.197.88.136http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1645315960/37/8369R 20.2012109104590.00.1342.22 172.71.166.58http/1.1 3-1645314440/87/8327W 51.2300108016710.00.4943.57 138.197.88.136http/1.1localhost:80GET /server-status HTTP/1.0 4-1645316670/10/8196_ 5.980825105894770.00.0441.58 23.101.112.233http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 5-1645315480/56/8098_ 31.440735105891770.00.2042.29 162.158.175.185http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 6-1645314810/68/7950_ 42.970400105493450.00.3846.19 143.198.72.96http/1.1 7-1645314890/69/8072R 40.651518105928860.00.2753.92 45.183.247.160http/1.1www.ozonepluswater.net:443 8-1645314610/73/7687_ 46.210614100269110.00.3845.85 172.71.170.116http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 9-1645314970/65/7584_ 38.77052798754220.00.3539.89 172.68.18.62http/1.1www.99accountant.com:80POST /xmlrpc.php HTTP/1.0 10-1645314000/91/7387_ 55.96074394436700.00.4534.91 162.158.174.24http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 11-1645315500/51/7485R 31.430098160030.00.2338.10 45.183.247.160http/1.1www.ozonepluswater.net:80GET /wp-login.php HTTP/1.0 12-1645-0/0/7163. 0.003093287740.00.0033.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1645-0/0/6580. 0.0010156785550870.00.0033.09 172.68.234.138http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 14-1645316610/9/6426_ 5.55079183883750.00.0547.53 172.69.67.37http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 15-1645315610/54/5729_ 30.16047473373040.00.2129.75 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 16-1645314070/85/5665W 52.570074108200.00.3332.63 172.69.67.37http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 17-1645316730/9/4497_ 5.08036157977170.00.0224.70 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 18-1645-0/0/3270. 0.00595042842320.00.0031.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1645-0/0/1774. 0.0040142222918720.00.007.62 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 20-1645-0/0/1376. 0.00443019108410.00.007.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1645-0/0/706. 0.0018133958516460.00.002.94 172.70.246.80http/1.1www.orderaccounting.com:80POST /xmlrpc.php HTTP/1.0 22-1645-0/0/219. 0.00198502540100.00.001.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1645-0/0/103. 0.00131454951163660.00.000.39 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 24-1645-0/0/7. 0.00132910110080.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/103. 0.001329301131130.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/103. 0.001329201145400.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/12. 0.00132960168310.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/100. 0.00136013741092050.00.000.30 172.70.135.134http/1.1www.biz9nar.com:80POST //xmlrpc.php HTTP/1.0 29-1645-0/0/80. 0.00136240922500.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1645-0/0/99. 0.00136054351029120.00.000.26 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 31-1645-0/0/3. 0.0013753023440.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1645-0/0/1. 0.0013758000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00135994221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00136014021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00136063661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00136003821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0013752011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0013748018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0013756030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00137340118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0013739054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0013736072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00136053841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00136044171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 82subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 131 seconds, (range: 1...280)index usage: 2%, cache usage: 3%total entries stored since starting: 5413total entries replaced since starting: 0total entries expired since starting: 5331total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 18 hit, 24607 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 01:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e81c649a1aApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 28-Aug-2023 03:23:12 +07 Restart Time: Monday, 28-Aug-2023 00:23:33 +07 Parent Server Config. Generation: 1632 Parent Server MPM Generation: 1631 Server uptime: 2 hours 59 minutes 39 seconds Server load: 3.83 3.32 3.96 Total accesses: 68222 - Total Traffic: 497.2 MB - Total Duration: 83517493 CPU Usage: u2739.35 s4815.09 cu47165300 cs11537800 - 545000% CPU load 6.33 requests/sec - 47.2 kB/second - 7.5 kB/request - 1224.2 ms/request 7 requests currently being processed, 10 idle workers __W.WW_W___W_W___W................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1631295070/80/4824_ 48.370107959897670.00.3431.30 172.70.85.140http/1.1www.smetast.com:80POST //xmlrpc.php HTTP/1.0 1-1631297260/4/4559_ 3.12071255628860.00.0232.14 172.71.182.153http/1.1www.report.business.co.th:443GET /wp-login.php HTTP/1.1 2-1631296970/24/4715W 13.001055864030.00.1445.30 172.69.67.7http/1.1www.torrong.com:80POST //wp-login.php HTTP/1.0 3-1631-0/0/4449. 0.00368053969580.00.0027.80 172.71.154.44http/1.1www.accprogress.com:80GET /wp-login.php HTTP/1.0 4-1631294790/89/4483W 48.814055342150.00.4630.46 172.68.234.223http/1.1www.accsmile.com:80POST /wp-cron.php?doing_wp_cron=1693167787.93400502204895019531 5-1631295570/59/4536W 31.666056029670.00.2530.43 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693167786.09611392021179199218 6-1631297340/4/4314_ 2.82084651944980.00.0126.88 74.249.250.179http/1.1www.thefixup333.com:443POST //xmlrpc.php HTTP/1.1 7-1631297400/3/4295W 1.950052769870.00.0232.22 164.90.191.138http/1.1www.hotlineservicethailand.com:GET /wp-login.php HTTP/1.1 8-1631297520/3/4210_ 1.700051332310.00.0126.02 134.122.34.144http/1.1 9-1631297540/2/3871_ 0.740046074520.00.0124.02 134.122.34.144http/1.1 10-1631295880/51/3827_ 28.800048859950.00.1868.07 104.131.1.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1631294850/94/3677W 49.911044643410.00.3725.58 172.68.234.205http/1.1www.accgoing.com:80GET /category/type-b/ HTTP/1.0 12-1631296050/44/3480_ 23.94080043007330.00.2523.42 162.158.175.118http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 13-1631297640/3/3076W 1.910036915860.00.0217.35 104.131.1.32http/1.1localhost:80GET /server-status HTTP/1.0 14-1631296130/41/2583_ 22.610124132913200.00.1914.74 134.122.34.144http/1.1 15-1631296240/45/2596_ 26.00065231837810.00.1617.02 162.158.174.72http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 16-1631297700/3/1321_ 1.52063816132970.00.006.97 172.69.134.123http/1.1www.accprogress.com:80GET /xmlrpc.php HTTP/1.0 17-1631296270/42/1118W 23.890013619930.00.226.00 172.70.46.227http/1.1www.report.business.co.th:443POST /wp-login.php HTTP/1.1 18-1631-0/0/933. 0.0083011401990.00.004.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1631-0/0/1145. 0.00557014323920.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1631-0/0/105. 0.0073701177060.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1631-0/0/5. 0.0024420165940.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1631-0/0/100. 0.0023093991321810.00.000.34 172.71.166.229http/1.1www.mgacccount.com:80POST //wp-login.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 103subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 87 seconds, (range: 1...256)index usage: 3%, cache usage: 4%total entries stored since starting: 5836total entries replaced since starting: 0total entries expired since starting: 5733total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 16 hit, 10470 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-27 20:22 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e82acad9bfApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 26-Aug-2023 21:23:32 +07 Restart Time: Saturday, 26-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1627 Parent Server MPM Generation: 1626 Server uptime: 17 hours 21 minutes 20 seconds Server load: 1.02 1.05 0.98 Total accesses: 138892 - Total Traffic: 1.8 GB - Total Duration: 195686580 CPU Usage: u2678.41 s4779.67 cu46995100 cs11498600 - 93600% CPU load 2.22 requests/sec - 29.7 kB/second - 13.4 kB/request - 1408.91 ms/request 5 requests currently being processed, 5 idle workers W_W__.._WRW_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1626255400/18/11593W 7.99250157967140.00.25141.98 172.71.210.156http/1.1www.dr-rpi.com:443GET /wp-content/uploads/2020/09/01.gif HTTP/1.1 1-1626252820/84/11438_ 36.261577163265330.01.09109.86 167.94.146.56http/1.1 2-1626252970/79/11542W 35.1900155759220.00.84165.94 159.223.102.13http/1.1localhost:80GET /server-status HTTP/1.0 3-1626254940/49/10796_ 16.8620154167800.00.46125.66 167.94.146.56http/1.1localhost:443GET / HTTP/1.1 4-1626255560/16/10951_ 6.2418156254010.00.26122.25 159.223.102.13http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1626-0/0/10224. 0.0090580144801440.00.00155.32 173.212.203.32http/1.1www.tafa.or.th:443POST /xmlrpc.php HTTP/1.1 6-1626-0/0/9946. 0.001690141373330.00.0093.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1626252120/88/9878_ 40.481727139537910.00.82100.81 172.68.118.32http/1.1www.siamerp.com:443POST //xmlrpc.php HTTP/1.1 8-1626252190/94/9107W 41.5100127515430.01.10109.34 172.68.118.32http/1.1www.siamerp.com:443POST //xmlrpc.php HTTP/1.1 9-1626252200/93/8584R 40.342607123402640.01.14141.78 172.68.118.32http/1.1www.siamerp.com:443POST //xmlrpc.php HTTP/1.1 10-1626254370/62/7790W 18.8700105619280.01.5086.01 172.71.134.215http/1.1www.khlangkaew.com:443POST /wp-login.php HTTP/1.1 11-1626254650/49/6752_ 17.040096027930.00.60135.98 167.94.146.56http/1.1localhost:443GET /favicon.ico HTTP/1.1 12-1626-0/0/5525. 0.0019749976922160.00.0051.50 178.128.184.226http/1.1www.importantaccount.com:443POST /xmlrpc.php HTTP/1.1 13-1626-0/0/3962. 0.0040739857498830.00.0048.52 172.70.92.132http/1.1www.jbbgarment.com:80POST /wp-login.php HTTP/1.0 14-1626-0/0/3520. 0.00685051722800.00.0047.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1626-0/0/2272. 0.00683030749320.00.0084.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1626-0/0/982. 0.002531017642680.00.0053.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1626-0/0/1039. 0.002222013444110.00.0014.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1626-0/0/379. 0.00253605761810.00.003.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1626-0/0/307. 0.00205210894191120.00.003.67 5.188.62.76http/1.1www.chonlateenextbiz.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 20-1626-0/0/431. 0.00251806021020.00.004.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1626-0/0/176. 0.00594302516930.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1626-0/0/271. 0.0053414293548110.00.001.99 8.210.247.187http/1.1www.importantaccount.com:443POST /xmlrpc.php HTTP/1.1 23-1626-0/0/274. 0.00535004235470.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1626-0/0/13. 0.0090620174970.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1626-0/0/71. 0.0089990929490.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1626-0/0/153. 0.002389902080320.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1626-0/0/7. 0.0024119091830.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1626-0/0/192. 0.00236744373482740.00.001.48 162.158.74.96http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 29-1626-0/0/101. 0.00237143371333070.00.000.94 193.106.249.135http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 30-1626-0/0/4. 0.0024136044850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1626-0/0/100. 0.002412901357680.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1626-0/0/100. 0.002411101364570.00.000.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1626-0/0/25. 0.00240350387720.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1626-0/0/100. 0.002414101554710.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1626-0/0/4. 0.0024140042980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1626-0/0/100. 0.002412801590540.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1626-0/0/5. 0.0024133015270.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1626-0/0/99. 0.002412701387810.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1626-0/0/15. 0.00240770291650.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1626-0/0/3. 0.0024126038430.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1626-0/0/57. 0.00238820711000.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1626-0/0/4. 0.0024121040110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 77subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 78 seconds, (range: 0...258)index usage: 2%, cache usage: 3%total entries stored since starting: 23678total entries replaced since starting: 0total entries expired since starting: 23601total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 173 hit, 37172 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-26 14:22 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e86045109aApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 25-Aug-2023 16:13:19 +07 Restart Time: Friday, 25-Aug-2023 04:02:14 +07 Parent Server Config. Generation: 1624 Parent Server MPM Generation: 1623 Server uptime: 12 hours 11 minutes 5 seconds Server load: 7.61 8.14 6.89 Total accesses: 133323 - Total Traffic: 1.6 GB - Total Duration: 201876978 CPU Usage: u3013.38 s4885.82 cu46879200 cs11471300 - 133000% CPU load 3.04 requests/sec - 39.2 kB/second - 12.9 kB/request - 1514.19 ms/request 14 requests currently being processed, 4 idle workers WC_C_WR_.WCW_WWW.......WCR........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1623130760/54/9973W 40.9110148175930.00.25104.57 172.71.102.97http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 1-1623132131/15/9898C 10.8910146299901.40.07178.33 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1623130310/63/9788_ 52.2801021144857740.00.36118.35 52.176.98.184http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 3-1623130411/63/9381C 49.4107391411112016.60.44160.04 52.176.98.184http/1.1www.nakindogtraining.com:443POST //wp-login.php HTTP/1.1 4-1623128970/90/9057_ 76.2100137539960.00.73107.73 139.144.150.23http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1623131670/31/9334W 26.3900139516820.00.26100.68 139.144.150.23http/1.1localhost:80GET /server-status HTTP/1.0 6-1623129430/68/9148R 55.4301133102770.00.3489.97 139.144.150.23http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-1623130470/61/8885_ 52.320973135173010.00.4182.42 85.217.144.141http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 8-1623-0/0/8550. 0.00210127128950.00.0093.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1623131120/47/8012W 37.6500117208770.00.2974.33 172.71.182.172http/1.1www.chonlateeplus.com:443POST //xmlrpc.php HTTP/1.1 10-1623131821/23/7596C 20.080980113628173.70.1595.50 172.71.98.147http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 11-1623131910/20/6852W 14.9700106970680.00.1770.48 107.189.1.46http/1.1www.chonlateevip.com:443POST /wp-login.php HTTP/1.1 12-1623132020/16/5561_ 12.82066384992070.00.0758.88 172.71.182.25http/1.1www.chonlateebranding.com:443POST //xmlrpc.php HTTP/1.1 13-1623131270/42/4883W 37.200073269920.00.2051.18 85.217.144.141http/1.1www.chonlateevip.com:443POST //xmlrpc.php HTTP/1.1 14-1623129500/72/3717W 58.130052521240.00.3944.81 172.71.98.186http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 15-1623132240/14/2815W 10.930044169200.00.0932.01 172.70.46.82http/1.1www.chorsiam.com:80POST //xmlrpc.php HTTP/1.0 16-1623-0/0/2709. 0.0053113441096970.00.0040.38 172.71.182.26http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 17-1623-0/0/1918. 0.00105130230843780.00.0034.85 85.217.144.141http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 18-1623-0/0/937. 0.00117013865950.00.0011.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1623-0/0/449. 0.0012807590900.00.003.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1623-0/0/704. 0.005083211390890.00.005.64 162.158.251.119http/1.1www.torrong.co.th:80POST /wp-login.php HTTP/1.0 21-1623-0/0/637. 0.00146010528970.00.005.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1623-0/0/394. 0.00149013998140.00.0048.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1623129780/69/326W 54.80004143410.00.422.28 172.71.182.26http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 24-1623129841/74/167C 57.01013252124.50.390.90 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 25-1623129900/69/412R 53.2327387039050.00.393.53 199.195.253.110http/1.1www.eecbusiness.com:443 26-1623-0/0/196. 0.0011504535980.00.001.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1623-0/0/168. 0.0039803928710.00.001.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1623-0/0/19. 0.0010440279030.00.000.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1623-0/0/198. 0.008459393377860.00.001.46 85.217.144.141http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 30-1623-0/0/10. 0.001059077450.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1623-0/0/169. 0.0088002522630.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1623-0/0/87. 0.0088201593340.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1623-0/0/99. 0.001477412671338230.00.000.72 162.158.204.201http/1.1www.khlangkaew.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 34-1623-0/0/13. 0.00152380130570.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1623-0/0/101. 0.00147887431493350.00.001.39 172.70.243.123http/1.1www.proplustech.co.th:443POST //xmlrpc.php HTTP/1.1 36-1623-0/0/7. 0.0015251056410.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1623-0/0/5. 0.0015245012380.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1623-0/0/4. 0.0015271016770.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1623-0/0/7. 0.0015256060070.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1623-0/0/5. 0.001524606570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1623-0/0/99. 0.00147512422099250.00.001.65 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 42-1623-0/0/4. 0.0015239079130.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1623-0/0/2. 0.0015265017500.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1623-0/0/4. 0.0015240052890.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1623-0/0/4. 0.0015241056260.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1623-0/0/9. 0.001487807476510.00.0045.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1623-0/0/3. 0.0015247044010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1623-0/0/5. 0.0015236073100.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1623-0/0/2. 0.0015264024990.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all reque
Found on 2023-08-25 09:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e880bf6965Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 24-Aug-2023 14:04:59 +07 Restart Time: Thursday, 24-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1621 Parent Server MPM Generation: 1620 Server uptime: 10 hours 2 minutes 48 seconds Server load: 3.82 3.68 3.48 Total accesses: 108403 - Total Traffic: 1.2 GB - Total Duration: 158584270 CPU Usage: u2603.17 s4730.19 cu46742100 cs11439500 - 161000% CPU load 3 requests/sec - 33.7 kB/second - 11.2 kB/request - 1462.91 ms/request 4 requests currently being processed, 7 idle workers WW__W_W___.._..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1620278150/49/8550W 56.8600122720790.00.3579.89 172.70.38.211http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 1-1620280560/14/8370W 9.0800125244470.00.0788.10 172.68.210.93http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 2-1620281220/2/8215_ 0.4510120230360.00.0089.44 161.35.27.144http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 3-1620281310/1/8301_ 0.861881118758990.00.0095.76 172.68.210.39http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 4-1620277790/87/8017W 45.2000117243780.01.9283.69 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 5-1620279370/28/7837_ 14.951708115873930.00.45132.07 172.70.38.211http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 6-1620279600/36/7104W 13.4200103170070.00.3473.52 66.249.79.64http/1.1www.yougame.in.th:443GET /post_tag-sitemap3.xml HTTP/1.1 7-1620279810/15/7052_ 12.1113046100839970.00.1077.36 162.158.174.135http/1.1www.business.co.th:443GET /tag/%E0%B8%9B%E0%B8%B4%E0%B8%94%E0%B8%87%E0%B8%9A%E0%B8%81 8-1620279980/20/6995_ 14.251099320530.00.2365.23 161.35.27.144http/1.1localhost:80GET /about HTTP/1.0 9-1620281370/2/6788_ 0.000098203220.00.0059.60 161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1620-0/0/6269. 0.000093669870.00.00112.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1620-0/0/5190. 0.0048077835690.00.0051.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1620280330/12/4706_ 7.930072817940.00.0647.68 161.35.27.144http/1.1localhost:80GET /v2/_catalog HTTP/1.0 13-1620-0/0/3326. 0.00332048350750.00.0030.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1620-0/0/3119. 0.00355041976800.00.0025.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1620-0/0/2180. 0.00277033859240.00.0026.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1620-0/0/1574. 0.00347022499980.00.0014.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1620-0/0/1188. 0.00338017421030.00.009.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1620-0/0/402. 0.0026905254970.00.003.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1620-0/0/476. 0.0033107659510.00.002.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1620-0/0/252. 0.0033903921970.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1620-0/0/84. 0.0033601164030.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1620-0/0/242. 0.0015404360660.00.001.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1620-0/0/24. 0.003430391990.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1620-0/0/203. 0.00256342228100.00.001.39 172.70.38.211http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 25-1620-0/0/28. 0.003520523060.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1620-0/0/12. 0.003540269350.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1620-0/0/109. 0.00737771691900.00.000.56 172.68.210.39http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 28-1620-0/0/230. 0.0034203272110.00.002.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1620-0/0/14. 0.003300279800.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1620-0/0/14. 0.003410449370.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1620-0/0/109. 0.00835601531490.00.000.65 45.200.120.231http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 32-1620-0/0/11. 0.003440223530.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1620-0/0/167. 0.00187933189870.00.001.45 172.68.210.38http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 34-1620-0/0/110. 0.006711261625100.00.000.67 172.68.210.38http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 35-1620-0/0/10. 0.003510216840.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1620-0/0/11. 0.003460237060.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1620-0/0/112. 0.0036001455190.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1620-0/0/138. 0.0035901816120.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1620-0/0/193. 0.007378192668110.00.001.24 172.68.234.196http/1.1www.orderaccounting.com:80POST /wp-cron.php?doing_wp_cron=1692860617.13653206825256347656 40-1620-0/0/33. 0.002810615420.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1620-0/0/207. 0.0038633599810.00.001.35 172.68.210.93http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 42-1620-0/0/86. 0.0031701234680.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1620-0/0/94. 0.003802164080.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1620-0/0/97. 0.0035801237890.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1620-0/0/5. 0.003500147010.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1620-0/0/34. 0.002700638490.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1620-0/0/5. 0.00101460136260.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1620-0/0/6. 0.00101450166320.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1620-0/0/104. 0.0099104321434970.00.000.66 49.0.247.100http/1.1www.ss-cool.com:443POST /xmlrpc.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred th
Found on 2023-08-24 07:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8f6d69d5fApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 23-Aug-2023 10:05:01 +07 Restart Time: Wednesday, 23-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1618 Parent Server MPM Generation: 1617 Server uptime: 6 hours 2 minutes 49 seconds Server load: 1.49 3.26 3.70 Total accesses: 80207 - Total Traffic: 856.1 MB - Total Duration: 116967432 CPU Usage: u2669.91 s4734.94 cu46545200 cs11392200 - 266000% CPU load 3.68 requests/sec - 40.3 kB/second - 10.9 kB/request - 1458.32 ms/request 4 requests currently being processed, 6 idle workers CR_._W_.W......_..._......................._...... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1617198181/15/6362C 7.140091690101.40.1457.28 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1617196600/45/6028R 24.311087744420.00.43102.39 172.105.37.32http/1.1www.partymanagementthailand.com 2-1617192980/66/6115_ 40.550087795880.00.5659.06 139.144.150.23http/1.1localhost:443GET /about HTTP/1.1 3-1617-0/0/5874. 0.0041086388560.00.0056.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1617196810/40/6026_ 22.400082368410.00.3360.02 159.223.102.13http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1617198300/8/5803W 3.660084035310.00.0950.61 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 6-1617197460/30/5522_ 19.24084179684010.00.3050.93 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-1617-0/0/5283. 0.0040077509420.00.0093.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1617196890/43/4947W 21.480071020710.00.4749.58 159.223.102.13http/1.1localhost:80GET /server-status HTTP/1.0 9-1617-0/0/4827. 0.00229069285930.00.0043.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1617-0/0/4428. 0.00245062780460.00.0049.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1617-0/0/3903. 0.00231055511230.00.0037.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1617-0/0/3810. 0.00239053995590.00.0036.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1617-0/0/2553. 0.00242038651330.00.0022.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1617-0/0/2329. 0.002883534261220.00.0021.32 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 15-1617193180/68/1550_ 66.02060724165080.00.6518.03 172.70.207.77http/1.1www.chonlateetravel.com:80GET /wp-login.php HTTP/1.0 16-1617-0/0/1376. 0.00207022451220.00.0014.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1617-0/0/1030. 0.00243015326980.00.0013.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1617-0/0/464. 0.0023606779260.00.003.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1617193440/64/426_ 32.05005859660.00.495.32 139.144.150.23http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 20-1617-0/0/246. 0.0012003307760.00.001.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1617-0/0/204. 0.0022803317460.00.001.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1617-0/0/104. 0.0024801793310.00.000.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1617-0/0/17. 0.002250624760.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1617-0/0/16. 0.002320574500.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1617-0/0/12. 0.002440553910.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1617-0/0/13. 0.00234922636180.00.000.08 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1617-0/0/18. 0.002500557940.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1617-0/0/13. 0.002380653490.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1617-0/0/100. 0.0022202348110.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1617-0/0/43. 0.0020401005350.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1617-0/0/16. 0.002510494790.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1617-0/0/43. 0.002300902980.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1617-0/0/10. 0.002190574480.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1617-0/0/51. 0.0021701032050.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1617-0/0/13. 0.002200613070.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1617-0/0/109. 0.0018601913260.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1617-0/0/16. 0.002160627710.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1617-0/0/10. 0.002330555360.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1617-0/0/100. 0.0024001692860.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1617-0/0/102. 0.0023701581630.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1617-0/0/46. 0.001460849010.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1617-0/0/15. 0.002060651820.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1617195100/60/70_ 36.73001252820.00.510.55 139.144.150.23http/1.1localhost:443GET /v2/_catalog HTTP/1.1 44-1617-0/0/10. 0.002490525770.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1617-0/0/17. 0.002240521030.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1617-0/0/103. 0.0022301612410.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1617-0/0/10. 0.002350482090.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1617-0/0/13. 0.002180549400.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1617-0/0/11. 0.002460564000.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status:
Found on 2023-08-23 03:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e85d9c952bApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 21-Aug-2023 17:58:50 +07 Restart Time: Monday, 21-Aug-2023 14:17:12 +07 Parent Server Config. Generation: 1612 Parent Server MPM Generation: 1611 Server uptime: 3 hours 41 minutes 37 seconds Server load: 3.20 3.47 3.65 Total accesses: 84995 - Total Traffic: 953.7 MB - Total Duration: 105884034 CPU Usage: u2739.82 s4734.48 cu46271600 cs11323500 - 433000% CPU load 6.39 requests/sec - 73.4 kB/second - 11.5 kB/request - 1245.77 ms/request 7 requests currently being processed, 6 idle workers W__WWRW____WC..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1611282470/19/5957W 11.400074348070.00.1364.35 172.69.65.252http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 1-1611282560/18/5778_ 12.39074172861220.00.1155.84 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 2-1611280590/82/5840_ 56.090171971847650.00.6361.98 172.70.211.97http/1.1www.jrajar.com:80POST /xmlrpc.php HTTP/1.0 3-1611282700/15/5577W 8.850069941670.00.1061.66 172.71.175.56http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 4-1611281690/38/5534W 24.270070816550.00.2648.24 72.167.44.8http/1.1www.ozonepluswater.net:443POST /xmlrpc.php HTTP/1.1 5-1611280130/94/5379R 56.70146566374420.01.0961.37 40.77.28.77http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1 6-1611280460/97/5330W 52.160066975170.00.8877.65 159.203.182.222http/1.1localhost:80GET /server-status HTTP/1.0 7-1611280200/90/5183_ 61.36086365747790.00.7556.01 172.69.65.16http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 8-1611282780/13/4970_ 8.20080462067420.00.1061.21 172.68.234.213http/1.1www.jrajar.com:80POST /wp-cron.php?doing_wp_cron=1692615528.55254507064819335937 9-1611282180/31/4745_ 18.460159291850.00.1853.19 159.203.182.222http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1611281310/56/4888_ 36.47047562402260.00.4049.66 172.71.175.56http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 11-1611282990/10/4495W 6.270056069260.00.0438.75 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 12-1611281771/42/4070C 27.32043150895927.20.2961.62 40.77.28.77http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1 13-1611-0/0/3749. 0.0014352746297620.00.0037.34 40.77.28.77http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1 14-1611-0/0/3246. 0.0011562142366750.00.0031.44 107.182.187.82http/1.1www.krongthongsecurity.com:443POST /xmlrpc.php HTTP/1.1 15-1611-0/0/2369. 0.009847431272490.00.0022.76 172.71.175.56http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 16-1611-0/0/1573. 0.00139020174740.00.0030.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1611-0/0/1103. 0.00897014677130.00.0013.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1611-0/0/1065. 0.00915013557360.00.0010.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1611-0/0/492. 0.008705345268810.00.005.29 172.71.175.28http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 20-1611-0/0/260. 0.0088302413800.00.004.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1611-0/0/285. 0.0091202199220.00.002.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1611-0/0/463. 0.0090805039920.00.005.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1611-0/0/164. 0.0088401634280.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1611-0/0/286. 0.0090902473310.00.003.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1611-0/0/60. 0.008900385400.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1611-0/0/184. 0.007167501938180.00.001.73 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1611-0/0/327. 0.0089403713160.00.003.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1611-0/0/243. 0.0090502394040.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1611-0/0/36. 0.009180174380.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1611-0/0/251. 0.007052922872120.00.002.67 106.15.38.206http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 31-1611-0/0/111. 0.007328321091780.00.000.90 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 32-1611-0/0/126. 0.007308751335930.00.001.19 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 33-1611-0/0/147. 0.0088901685170.00.005.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1611-0/0/151. 0.0071201888970.00.002.70 185.196.220.26http/1.1www.dinocoffees.com:80GET /wp-content/plugins/profilegrid-user-profiles-groups-and-co 35-1611-0/0/17. 0.0091421761850.00.000.32 35.89.64.107http/1.1www.cnb.co.th:443GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3 H 36-1611-0/0/99. 0.00787822966620.00.001.00 172.71.166.230http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 37-1611-0/0/53. 0.008880227080.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1611-0/0/39. 0.009060262840.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1611-0/0/68. 0.008150823640.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1611-0/0/29. 0.008980213080.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1611-0/0/23. 0.008990134650.00.000.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1611-0/0/39. 0.009040253090.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1611-0/0/41. 0.008920305830.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1611-0/0/27. 0.009170221680.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1611-0/0/44. 0.008860435880.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1611-0/0/43. 0.009010293110.00.001.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1611-0/0/24. 0.00903089750.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1611-0/0/11. 0.00910057130.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1611-0/0/1. 0.00922240.00.000.00 34.220.208.149http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests</
Found on 2023-08-21 10:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8e254cb36Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 19-Aug-2023 21:32:10 +07 Restart Time: Saturday, 19-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1601 Parent Server MPM Generation: 1600 Server uptime: 17 hours 29 minutes 56 seconds Server load: 4.27 4.78 4.81 Total accesses: 445171 - Total Traffic: 4.6 GB - Total Duration: 686041100 CPU Usage: u2679.25 s4684.56 cu45708700 cs11167400 - 90300% CPU load 7.07 requests/sec - 76.5 kB/second - 10.8 kB/request - 1541.07 ms/request 7 requests currently being processed, 7 idle workers ._.W__W__WW.W.RW__................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1600-0/0/26847. 0.00150406802190.00.00274.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1600151720/24/26748_ 14.2000401907280.00.20275.89 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1600-0/0/26085. 0.0011423401216440.00.00311.59 172.70.135.31http/1.1www.rooffurnish.com:443POST //wp-login.php HTTP/1.1 3-1600152170/16/25834W 8.2400389445820.00.09295.31 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1600152270/14/25204_ 8.720716377584810.00.14240.51 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 5-1600151150/40/25081_ 23.010502380501680.00.30262.87 162.158.2.33http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 6-1600150240/68/25469W 36.2700387926950.00.70263.42 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 7-1600149790/85/24527_ 40.640411375796510.00.56247.41 172.70.189.81http/1.1www.jbbgarment.com:80POST //wp-login.php HTTP/1.0 8-1600150710/55/24288_ 29.260633372107590.00.52293.73 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 9-1600152410/12/23407W 7.2400359404130.00.10269.46 87.249.132.118http/1.1www.ltclevelup.com:443GET /wp-content/plugins/google-document-embedder/libs/pdf.php?f 10-1600150860/54/22522W 24.9360345818850.00.86222.74 172.68.234.141http/1.1www.yuritrading.com:80POST /wp-cron.php?doing_wp_cron=1692455524.25290298461914062500 11-1600-0/0/21886. 0.008766334270810.00.00219.18 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 12-1600149850/69/21209W 41.3600329556030.00.57220.65 172.70.189.81http/1.1www.jbbgarment.com:80POST //wp-login.php HTTP/1.0 13-1600-0/0/20215. 0.00140305116770.00.00202.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1600152570/8/18825R 4.350375294205370.00.06181.04 46.101.103.192http/1.1 15-1600149910/72/17849W 38.4800277489400.00.53170.68 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 16-1600149970/82/15020_ 44.540402235359390.00.90193.41 46.101.103.192http/1.1 17-1600152630/9/12593_ 5.350459194540100.00.05122.08 172.70.134.109http/1.1www.rooffurnish.com:443POST //wp-login.php HTTP/1.1 18-1600-0/0/10103. 0.0024526157342550.00.00121.97 162.158.2.33http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 19-1600-0/0/7545. 0.006440120251470.00.0068.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1600-0/0/5914. 0.0063951293272130.00.0059.47 154.0.166.29http/1.1www.xn--42c8cgagcy5cl7czh6azje.POST /xmlrpc.php HTTP/1.1 21-1600-0/0/4186. 0.00472640668491660.00.0042.51 172.68.234.175http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1692455051.05860900878906250000 22-1600-0/0/3487. 0.0047354956828240.00.0037.04 172.71.166.240http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 23-1600-0/0/2993. 0.00648050581900.00.0026.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1600-0/0/1950. 0.0046759433022470.00.0019.43 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 25-1600-0/0/1550. 0.00647027431110.00.0017.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1600-0/0/1024. 0.004058018020390.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1600-0/0/573. 0.004066010916890.00.005.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1600-0/0/253. 0.00404705349510.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1600-0/0/203. 0.00404904335330.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1600-0/0/193. 0.00406804186880.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1600-0/0/329. 0.00395105730970.00.007.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1600-0/0/137. 0.00405603147530.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1600-0/0/91. 0.00390401967430.00.003.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1600-0/0/141. 0.00405503233850.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1600-0/0/130. 0.00403202747280.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1600-0/0/27. 0.00406701364630.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1600-0/0/86. 0.00406102641510.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1600-0/0/40. 0.00405901572150.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1600-0/0/37. 0.00406001523990.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1600-0/0/113. 0.00395302530290.00.004.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1600-0/0/57. 0.00395401733960.00.004.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1600-0/0/37. 0.004678301431370.00.000.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1600-0/0/39. 0.004676901613950.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1600-0/0/29. 0.004681401232370.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1600-0/0/100. 0.00466569842442900.00.000.72 108.162.242.104http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 46-1600-0/0/37. 0.004675901507310.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1600-0/0/110. 0.00466217602580430.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 48-1600-0/0/23. 0.004682201163420.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1600-0/0/25. 0.004677701164760.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 < SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request Dur
Found on 2023-08-19 14:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8101f0969Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 18-Aug-2023 19:49:28 +07 Restart Time: Friday, 18-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1598 Parent Server MPM Generation: 1597 Server uptime: 15 hours 47 minutes 16 seconds Server load: 3.56 3.53 3.89 Total accesses: 401193 - Total Traffic: 4.1 GB - Total Duration: 617738011 CPU Usage: u2611.1 s4639.96 cu45368900 cs11073900 - 99300% CPU load 7.06 requests/sec - 75.6 kB/second - 10.7 kB/request - 1539.75 ms/request 5 requests currently being processed, 9 idle workers _.__W_W___RWC..__................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1597301290/14/24465_ 9.880717365841040.00.14222.35 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 1-1597-0/0/24221. 0.0010368938940.00.00219.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1597301360/14/23565_ 8.7000360366330.00.10292.63 47.100.31.151http/1.1www.ozonepluswater.net:80POST /xmlrpc.php HTTP/1.0 3-1597299550/75/23673_ 40.580731356793340.00.68241.56 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1597299660/70/23055W 39.8400347611090.00.47249.64 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 5-1597299990/57/22913_ 34.9300346493880.00.49225.02 92.204.236.195http/1.1www.ozonepluswater.net:80POST /xmlrpc.php HTTP/1.0 6-1597299790/52/22951W 32.0200349127310.00.44228.26 104.43.248.26http/1.1www.seasabithailand.com:80POST //xmlrpc.php HTTP/1.0 7-1597301430/15/22242_ 6.880432341379010.00.05236.34 165.232.180.139http/1.1www.emba35.com:443POST /xmlrpc.php HTTP/1.1 8-1597301560/12/21931_ 7.560530331686840.00.10212.73 104.43.248.26http/1.1www.seasabithailand.com:80POST //xmlrpc.php HTTP/1.0 9-1597300600/45/20969_ 22.5901319593140.00.37266.08 46.101.103.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 10-1597301770/4/20498R 2.341715309276860.00.04203.47 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 11-1597301850/4/19388W 2.1600292405660.00.01179.81 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 12-1597301871/1/18043C 0.621613275579876.50.01219.51 129.211.124.173http/1.1www.thaiquickservice.net:443POST /xmlrpc.php HTTP/1.1 13-1597-0/0/17656. 0.00214268887610.00.00179.56 27.254.96.168http/1.1www.thaicarsale.com:80GET /wp-content/themes/flatsome/assets/libs/ie-flexibility.js H 14-1597-0/0/14699. 0.00670227114540.00.00156.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1597300820/38/13407_ 21.710537214615540.00.23182.39 172.71.123.148http/1.1www.bizproceed.com:80GET /wp-content/plugins/essential-addons-for-elementor-lite/rea 16-1597300830/37/11863_ 16.4801187750220.00.36130.19 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1597-0/0/11084. 0.001934584173514870.00.00115.68 162.158.175.211http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 18-1597-0/0/8685. 0.001935942139960420.00.0078.89 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 19-1597-0/0/7593. 0.0024220126146740.00.0081.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1597-0/0/6381. 0.0027260105147990.00.0075.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1597-0/0/5651. 0.00269573387423460.00.0046.10 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 22-1597-0/0/3789. 0.003489063389020.00.0048.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1597-0/0/3180. 0.003492054035320.00.0028.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1597-0/0/1803. 0.006672029651410.00.0013.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1597-0/0/1555. 0.00650438924982810.00.0012.79 172.71.175.63http/1.1www.smebkk.com:80POST //wp-login.php HTTP/1.0 26-1597-0/0/1097. 0.006488019925950.00.007.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1597-0/0/787. 0.0013983012193140.00.009.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1597-0/0/255. 0.001399005767560.00.003.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1597-0/0/465. 0.001399507225710.00.004.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1597-0/0/66. 0.001398201440290.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1597-0/0/204. 0.001398104431160.00.003.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1597-0/0/179. 0.00137967073471420.00.001.38 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 33-1597-0/0/142. 0.001390103393190.00.002.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1597-0/0/225. 0.001381410833823130.00.001.95 172.71.102.133http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 35-1597-0/0/242. 0.001393904827130.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1597-0/0/238. 0.001390003802240.00.001.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1597-0/0/383. 0.00137898457124660.00.002.69 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 38-1597-0/0/123. 0.001398602072300.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1597-0/0/195. 0.001399904003330.00.001.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1597-0/0/324. 0.001391306324120.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1597-0/0/49. 0.00215390768360.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1597-0/0/99. 0.002154102852760.00.000.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1597-0/0/145. 0.002146302622090.00.001.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1597-0/0/83. 0.002153201868880.00.000.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1597-0/0/49. 0.002149501238590.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1597-0/0/117. 0.002137802130830.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1597-0/0/274. 0.002137504655670.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1597-0/0/67. 0.002152701232200.00.000.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1597-0/0/125. 0.002153502471910.00.001.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of millisecond
Found on 2023-08-18 12:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e853b91fc0Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 17-Aug-2023 19:59:15 +07 Restart Time: Thursday, 17-Aug-2023 16:36:02 +07 Parent Server Config. Generation: 1595 Parent Server MPM Generation: 1594 Server uptime: 3 hours 23 minutes 12 seconds Server load: 5.95 5.96 5.73 Total accesses: 95703 - Total Traffic: 833.4 MB - Total Duration: 127480421 CPU Usage: u2729.9 s4644.62 cu45065400 cs10993900 - 460000% CPU load 7.85 requests/sec - 70.0 kB/second - 8.9 kB/request - 1332.04 ms/request 10 requests currently being processed, 3 idle workers _WW_WRW._..WWW...WW............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1594176390/99/6117_ 50.650080299120.00.3450.71 165.22.108.223http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1594178100/28/5896W 16.780079035020.00.1351.49 202.95.9.31http/1.1www.emba35.com:443POST /wp-login.php HTTP/1.1 2-1594176480/96/5953W 50.770079013810.00.4050.39 172.70.46.230http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 3-1594178170/30/5844_ 14.990077556550.00.0951.77 165.22.108.223http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-1594178190/27/5850W 16.440076301530.00.1157.17 172.70.250.123http/1.1www.torrong.co.th:80POST /wp-login.php HTTP/1.0 5-1594178560/12/5541R 8.08056374014970.00.0645.15 172.71.166.217http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 6-1594178970/2/5397W 1.380071279740.00.0046.57 172.71.170.146http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 7-1594-0/0/5365. 0.0031070810100.00.0041.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1594177050/70/5246_ 39.360070119490.00.3846.27 165.22.108.223http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1594-0/0/5065. 0.006244466512240.00.0045.56 172.71.166.217http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 10-1594-0/0/5290. 0.002747469798100.00.0045.96 172.69.67.14http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 11-1594177120/68/4868W 38.620064445900.00.3944.27 172.69.65.149http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 12-1594177180/66/4465W 36.310058985940.00.3135.92 165.22.108.223http/1.1localhost:80GET /server-status HTTP/1.0 13-1594174950/95/4193W 54.940057275740.01.7541.31 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 14-1594-0/0/3989. 0.0095054102920.00.0032.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1594-0/0/3817. 0.006936550582810.00.0029.64 172.69.67.15http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 16-1594-0/0/3233. 0.009112743222190.00.0028.30 172.70.46.230http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 17-1594177310/66/2101W 36.130027495270.00.2321.43 172.71.166.217http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 18-1594177370/64/1708W 35.830022391950.00.3215.51 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 19-1594-0/0/1240. 0.0016340616928300.00.0010.36 172.69.67.14http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 20-1594-0/0/812. 0.001141310589350.00.008.78 172.69.65.149http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 21-1594-0/0/541. 0.0016306903680.00.005.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1594-0/0/248. 0.0086003032380.00.003.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1594-0/0/157. 0.0085802739080.00.001.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1594-0/0/194. 0.0085402951300.00.004.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1594-0/0/266. 0.0082603898200.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1594-0/0/413. 0.00109505671010.00.002.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1594-0/0/182. 0.00109302213000.00.001.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1594-0/0/26. 0.0010791496510.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1594-0/0/134. 0.00110401945570.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1594-0/0/108. 0.009413611689490.00.000.70 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 31-1594-0/0/41. 0.0010600811290.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1594-0/0/24. 0.0011000559100.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1594-0/0/113. 0.00108701843630.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1594-0/0/41. 0.0010450793140.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1594-0/0/125. 0.00110301920220.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1594-0/0/310. 0.009414094001210.00.002.08 172.71.166.218http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 37-1594-0/0/178. 0.00109602532360.00.001.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1594-0/0/12. 0.0010970372450.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1594-0/0/25. 0.0010940550670.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1594-0/0/113. 0.00110201752850.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1594-0/0/127. 0.00338801756830.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1594-0/0/114. 0.00343501776980.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1594-0/0/93. 0.00328501647580.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1594-0/0/19. 0.0034300421680.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1594-0/0/7. 0.0034450248140.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1594-0/0/99. 0.0032759041420550.00.000.51 162.158.162.246http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 47-1594-0/0/3. 0.003442094030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 154subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 77 seconds, (range: 21...279)index usage: 5%, cache usage: 7%total entri
Found on 2023-08-17 12:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e80b19794dApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 19:39:54 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 15 hours 37 minutes 40 seconds Server load: 6.54 5.30 4.96 Total accesses: 512686 - Total Traffic: 4.0 GB - Total Duration: 739867903 CPU Usage: u2653.22 s4601.53 cu44722100 cs1.09e+7 - 98900% CPU load 9.11 requests/sec - 75.1 kB/second - 8.2 kB/request - 1443.12 ms/request 10 requests currently being processed, 7 idle workers W__WWW__WW_W_.WW_R................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1588306270/8/28785W 4.6600406049590.00.09243.18 40.81.235.28http/1.1www.krongthongsecurity.com:443GET /?author=32 HTTP/1.1 1-1588305380/33/28768_ 21.510449401821610.00.28226.19 162.158.174.210http/1.1www.accsmile.com:80POST //xmlrpc.php HTTP/1.0 2-1588305970/15/28394_ 10.020655405935350.00.24219.96 40.81.235.28http/1.1www.krongthongsecurity.com:443GET /?author=31 HTTP/1.1 3-1588303610/98/27872W 59.1000402580660.00.87246.39 172.71.167.165http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 4-1588304350/74/27860W 41.6000397515920.00.40220.14 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 5-1588304560/20/27440W 13.2059785394384520.00.10194.45 150.60.157.163http/1.1www.krongthongsecurity.com:443GET /?author=2 HTTP/1.1 6-1588304890/63/27092_ 30.360552386736020.00.53203.51 172.71.166.150http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 7-1588305610/25/27124_ 13.8801383342970.00.22189.28 172.70.174.108http/1.1www.chonlateeit.com:443GET /wp-content/plugins/contact-form-7/includes/css/styles.css? 8-1588305210/45/25949W 26.8100369542910.00.34195.50 172.69.65.98http/1.1www.torrong.com:80POST //wp-login.php HTTP/1.0 9-1588305450/36/25726W 17.9800368432890.00.47187.82 172.71.167.205http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 10-1588305890/28/25075_ 11.1600359754570.00.18176.38 167.71.48.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1588305680/38/24376W 14.6100353421010.00.33187.77 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 12-1588306080/20/23979_ 5.310528341992000.00.16193.96 74.207.237.46http/1.1 13-1588-0/0/23018. 0.0013716327688200.00.00177.08 172.71.167.18http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 14-1588306140/12/22346W 5.8800324922520.00.07243.50 172.71.167.84http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 15-1588305510/43/19977W 19.5700288144920.00.40160.37 162.158.174.62http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 16-1588305690/28/18821_ 14.5600269357500.00.25141.57 46.101.103.192http/1.1 17-1588306150/9/16649R 5.230405245579580.00.06220.76 172.71.166.211http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 18-1588-0/0/14598. 0.00794879215630480.00.00105.58 162.158.174.62http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 19-1588-0/0/11774. 0.001172903173354360.00.0098.01 162.158.175.213http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 20-1588-0/0/9270. 0.002559690141187680.00.0067.53 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 21-1588-0/0/6881. 0.0026430104101000.00.0054.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1588-0/0/5447. 0.00314284183403370.00.0049.42 172.69.67.141http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 23-1588-0/0/3881. 0.00328549260819430.00.0031.86 172.71.167.160http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 24-1588-0/0/3464. 0.00312240654889270.00.0024.62 172.70.55.119http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 25-1588-0/0/2603. 0.003271043115360.00.0018.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1588-0/0/1503. 0.003138022439080.00.0013.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1588-0/0/1034. 0.0010476015503660.00.007.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1588-0/0/806. 0.0012300013495190.00.006.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1588-0/0/580. 0.0012709110009260.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1588-0/0/319. 0.001265705306840.00.006.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1588-0/0/392. 0.001247206441090.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1588-0/0/83. 0.003445301652280.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1588-0/0/112. 0.003444602871870.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1588-0/0/101. 0.003441801881510.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1588-0/0/129. 0.003441902345130.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1588-0/0/18. 0.00344510652620.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1588-0/0/109. 0.00342328242613860.00.000.66 172.70.189.100http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 38-1588-0/0/100. 0.00456778141804300.00.000.65 172.70.135.128http/1.1www.chonlateefarm.com:443POST //wp-login.php HTTP/1.1 39-1588-0/0/90. 0.004570501630980.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1588-0/0/16. 0.00458540679680.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1588-0/0/14. 0.00458700608390.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1588-0/0/12. 0.00458660649130.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1588-0/0/12. 0.00458760608070.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1588-0/0/25. 0.00458330787580.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1588-0/0/17. 0.00458640616270.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1588-0/0/12. 0.00458790602590.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1588-0/0/10. 0.00458740621060.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1588-0/0/11. 0.00458830570430.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1588-0/0/12. 0.00458810584220.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 < SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests
Found on 2023-08-16 12:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e827487eb4Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 04:07:29 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 5 minutes 15 seconds Server load: 5.72 8.96 12.91 Total accesses: 2150 - Total Traffic: 16.8 MB - Total Duration: 3693052 CPU Usage: u2881.97 s4651.29 cu44471200 cs10832800 - 1.76e+7% CPU load 6.83 requests/sec - 54.7 kB/second - 8.0 kB/request - 1717.7 ms/request 11 requests currently being processed, 8 idle workers __W_RRWWW_W__W_WWC_............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-158815650/41/141_ 33.2504612352350.00.310.98 20.169.206.229http/1.1www.bannongsaischool.com:443POST //wp-login.php HTTP/1.1 1-158815430/48/142_ 39.81002396190.00.461.18 137.184.150.232http/1.1 2-158813840/75/128W 60.37002368290.00.560.96 128.199.62.55http/1.1localhost:80GET /server-status HTTP/1.0 3-158812910/96/106_ 78.39010401901850.00.830.87 162.158.175.204http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 4-158815830/38/138R 29.0906122458100.00.241.08 20.169.206.229http/1.1www.bannongsaischool.com:443 5-158817560/4/85R 3.90010291303150.00.030.64 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 6-158816010/33/133W 27.39002166410.00.241.06 40.78.153.9http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 7-158814740/58/112W 43.06001968730.00.470.82 125.212.214.217http/1.1www.wealneosupply.com:443GET /?author=11 HTTP/1.1 8-158817670/2/70W 1.06001109230.00.020.58 172.69.65.122http/1.1www.jrajar.com:80POST //wp-login.php HTTP/1.0 9-158816210/27/127_ 22.21002117910.00.221.03 128.199.62.55http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-158817180/13/117W 12.30101939470.00.170.94 40.78.158.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 11-158813270/84/88_ 71.91012351790770.00.770.79 108.162.241.177http/1.1www.orderaccounting.com:80POST /xmlrpc.php HTTP/1.0 12-158813340/90/93_ 69.7508491611910.00.640.66 172.71.167.17http/1.1www.smetast.com:80POST //wp-login.php HTTP/1.0 13-158813400/91/102W 72.24001790390.00.650.70 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-158816460/24/94_ 19.82001676260.00.340.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-158817780/3/106W 1.71001877530.00.030.73 172.71.167.17http/1.1www.smetast.com:80POST //wp-login.php HTTP/1.0 16-158816630/27/127W 19.38002219960.00.191.01 162.158.175.204http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 17-158817360/15/67C 11.0301069972240.00.110.53 161.35.155.246http/1.1 18-158817900/0/54_ 0.0000833070.00.000.39 139.144.150.23http/1.1 19-1588-0/0/53. 0.002020827660.00.000.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1588-0/0/67. 0.005301248970.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 174subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 48 seconds, (range: 1...284)index usage: 6%, cache usage: 7%total entries stored since starting: 186total entries replaced since starting: 0total entries expired since starting: 12total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 115 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-15 21:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e80b66cde8Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 04-Aug-2023 00:25:11 +07 Restart Time: Friday, 04-Aug-2023 00:23:33 +07 Parent Server Config. Generation: 1542 Parent Server MPM Generation: 1541 Server uptime: 1 minute 37 seconds Server load: 2.88 4.46 4.08 Total accesses: 444 - Total Traffic: 4.7 MB - Total Duration: 593773 CPU Usage: u2501.56 s4279.37 cu41089100 cs9932030 - 5.26e+7% CPU load 4.58 requests/sec - 49.6 kB/second - 10.8 kB/request - 1337.33 ms/request 12 requests currently being processed, 5 idle workers RR_RRRRRWWWR___W_................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-154127170/37/37R 22.1101496740.00.420.42 164.90.205.35http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-154129480/2/31R 0.860860450240.00.010.28 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 2-154128670/14/30_ 8.2500418180.00.170.35 134.122.89.242http/1.1 3-154127470/39/39R 22.7200460960.00.460.46 134.122.89.242http/1.1 4-154127530/37/37R 24.3200526510.00.510.51 87.249.134.19http/1.1www.nadapool.com:443 5-154127630/35/35R 22.0100455670.00.380.38 165.22.74.203http/1.1 6-154127710/28/28R 17.8200381160.00.330.33 142.93.153.3http/1.1 7-154127730/33/33R 23.3202459530710.00.320.32 87.249.134.19http/1.1www.nadapool.com:443 8-154128950/11/28W 6.6100361770.00.090.23 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 9-154127880/39/39W 19.3100426640.00.320.32 172.70.82.140http/1.1www.chonlateeauto.com:443POST /xmlrpc.php HTTP/1.1 10-154127920/30/30W 19.1600401150.00.280.28 164.90.205.35http/1.1localhost:80GET /server-status HTTP/1.0 11-154128000/33/33R 21.550440436810.00.420.42 47.116.130.121http/1.1www.hotlineservicethailand.com:POST /xmlrpc.php HTTP/1.1 12-154128350/22/22_ 14.5300385350.00.210.21 146.190.160.11http/1.1www.nadapool.com:80GET /v2/_catalog HTTP/1.0 13-154129060/9/9_ 6.1900125040.00.100.10 137.184.106.30http/1.1localhost:80GET /v2/_catalog HTTP/1.0 14-154129400/3/5_ 0.070022820.00.000.04 134.122.89.242http/1.1www.nadapool.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-154129260/7/7W 2.890057900.00.040.04 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 16-154129540/1/1_ 0.050120.00.000.00 139.144.150.45http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 63subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 229 seconds, (range: 202...284)index usage: 2%, cache usage: 2%total entries stored since starting: 63total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 153 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-03 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e811ad3c4dApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 04-Jun-2023 00:25:36 +07 Restart Time: Sunday, 04-Jun-2023 00:24:21 +07 Parent Server Config. Generation: 1298 Parent Server MPM Generation: 1297 Server uptime: 1 minute 14 seconds Server load: 2.00 2.43 2.16 Total accesses: 182 - Total Traffic: 1.3 MB - Total Duration: 254537 CPU Usage: u2003 s3444.3 cu32418900 cs7755610 - 5.43e+7% CPU load 2.46 requests/sec - 18.1 kB/second - 7.4 kB/request - 1398.55 ms/request 5 requests currently being processed, 10 idle workers R__RWC__.._W__.___................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1297278570/16/16R 9.342402226950.00.190.19 114.119.128.44http/1.1 1-1297278750/17/17_ 8.700836299410.00.180.18 172.70.247.84http/1.1www.chonlateefarm.com:443POST /wp-login.php HTTP/1.1 2-1297280450/6/20_ 0.7600172370.00.010.12 142.93.158.96http/1.1 3-1297278790/5/5R 3.90423170156210.00.040.04 49.7.20.69http/1.1www.thai-pack.com:443 4-1297278810/16/16W 6.2600340730.00.110.11 167.172.20.95http/1.1localhost:80GET /server-status HTTP/1.0 5-1297280981/3/13C 0.0001154651.40.000.06 45.79.116.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1297279120/14/14_ 7.1901189920.00.120.12 134.122.34.144http/1.1 7-1297279180/16/16_ 8.0700250410.00.100.10 162.243.184.251http/1.1localhost:80GET / HTTP/1.0 8-1297-0/0/8. 0.00130161000.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1297-0/0/7. 0.00140202130.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1297279870/7/7_ 2.54039454260.00.040.04 142.93.153.3http/1.1 11-1297279930/7/7W 2.590058860.00.060.06 104.236.193.132http/1.1www.nadapool.com:443GET / HTTP/1.1 12-1297280030/8/8_ 1.750053440.00.020.02 159.203.63.67http/1.1localhost:80GET / HTTP/1.0 13-1297280090/7/7_ 1.420031060.00.030.03 142.93.158.96http/1.1 14-1297-0/0/1. 0.0017000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1297280210/7/7_ 1.860047280.00.030.03 167.99.184.41http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 16-1297280270/6/6_ 3.02056188540.00.040.04 144.91.113.229http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 17-1297280330/7/7_ 2.640058060.00.030.03 143.110.218.229http/1.1www.nadapool.com:80GET /.vscode/sftp.json HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 46subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 264 seconds, (range: 225...298)index usage: 1%, cache usage: 2%total entries stored since starting: 46total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 111 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-03 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8455cb2f8Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 04-Apr-2023 00:23:36 +07 Restart Time: Tuesday, 04-Apr-2023 00:22:53 +07 Parent Server Config. Generation: 1088 Parent Server MPM Generation: 1087 Server uptime: 43 seconds Server load: 1.43 1.71 1.47 Total accesses: 94 - Total Traffic: 679 kB - Total Duration: 60118 CPU Usage: u1622.07 s2828.4 cu26748100 cs6425280 - 7.72e+7% CPU load 2.19 requests/sec - 15.8 kB/second - 7.2 kB/request - 639.553 ms/request 9 requests currently being processed, 1 idle workers R_RWWWRWWR........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1087320590/13/13R 3.660274540.00.230.23 104.248.140.11http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 1-1087320750/17/17_ 4.050183510.00.070.07 164.92.192.165http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 2-1087320830/11/11R 3.230184510.00.040.04 146.190.98.165http/1.1 3-1087320891/12/12L 2.250062980.70.040.04 164.92.192.165http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-1087320950/6/6W 1.771057570.00.050.05 172.71.135.107http/1.1www.business.co.th:443GET /tag/%E0%B9%82%E0%B8%97%E0%B8%A3%E0%B8%9B%E0%B8%A3%E0%B8%B6 5-1087321051/14/14L 4.350094820.70.060.06 164.92.192.165http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 6-1087321110/6/6R 3.190172920.00.100.10 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 7-1087321280/5/5W 1.740036410.00.050.05 165.227.146.2http/1.1www.nadapool.com:443GET / HTTP/1.1 8-1087321360/9/9W 1.630033820.00.020.02 164.92.192.165http/1.1localhost:80GET /server-status HTTP/1.0 9-1087321480/3/3R 0.020170.00.000.00 104.248.140.11http/1.1localhost:80GET /.DS_Store HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 21subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 277 seconds, (range: 256...299)index usage: 0%, cache usage: 0%total entries stored since starting: 21total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 47 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-03 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e803eb49a9Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 29-Oct-2022 00:19:35 +07 Restart Time: Saturday, 29-Oct-2022 00:19:02 +07 Parent Server Config. Generation: 498 Parent Server MPM Generation: 497 Server uptime: 32 seconds Server load: 1.72 1.76 1.74 Total accesses: 73 - Total Traffic: 589 kB - Total Duration: 87581 CPU Usage: u707.95 s1315.19 cu13254600 cs3190640 - 5.14e+7% CPU load 2.28 requests/sec - 18.4 kB/second - 8.1 kB/request - 1199.74 ms/request 7 requests currently being processed, 3 idle workers ._.R_RRWR_WW...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-497-0/0/3. 0.0022032140.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-497307160/10/10_ 4.050098750.00.050.05 212.71.255.156http/1.1localhost:80GET /telescope/requests HTTP/1.0 2-497-0/0/3. 0.0023044620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-497307300/7/7R 4.260801114600.00.070.07 45.79.148.46http/1.1www.nadapool.com:443 4-497307370/11/11_ 3.2300105370.00.060.06 212.71.255.156http/1.1localhost:80GET /info.php HTTP/1.0 5-497307630/6/6R 3.690903102350.00.050.05 172.70.175.147http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 6-497307730/6/6R 3.140164680.00.090.09 212.71.255.156http/1.1localhost:80GET / HTTP/1.0 7-497307750/6/6W 3.200067050.00.060.06 212.71.255.156http/1.1localhost:80GET /server-status HTTP/1.0 8-497307860/5/5R 2.80127775890.00.030.03 172.70.135.12http/1.1www.simsmes.com:443GET /wp-login.php HTTP/1.1 9-497307880/8/8_ 3.030161330.00.010.01 212.71.255.156http/1.1localhost:80GET / HTTP/1.0 10-497307940/4/4W 2.490049460.00.050.05 172.71.130.93http/1.1www.siamerp.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%82%E0%B8%B2 11-497308000/4/4W 2.900059520.00.050.05 159.223.170.253http/1.1www.nadapool.com:443GET / HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 277 seconds, (range: 266...298)index usage: 0%, cache usage: 0%total entries stored since starting: 10total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 38 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-28 17:18 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8a6e1a443Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 29-Aug-2022 10:42:00 +07 Restart Time: Monday, 29-Aug-2022 10:41:02 +07 Parent Server Config. Generation: 235 Parent Server MPM Generation: 234 Server uptime: 58 seconds Server load: 1.64 1.86 2.45 Total accesses: 180 - Total Traffic: 807 kB - Total Duration: 295050 CPU Usage: u397.55 s690.56 cu6915360 cs1650040 - 1.48e+7% CPU load 3.1 requests/sec - 13.9 kB/second - 4590 B/request - 1639.17 ms/request 6 requests currently being processed, 4 idle workers WW..._._.R.R_.W..W_............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-234281830/12/12W 4.9000254500.00.050.05 123.31.12.18http/1.1www.chonlateeinternational.com:POST /xmlrpc.php HTTP/1.1 1-234281840/13/13W 4.1200383230.00.040.04 188.166.247.165http/1.1localhost:80GET /server-status HTTP/1.0 2-234-0/0/5. 0.0046040190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-234-0/0/8. 0.0044066760.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-234-0/0/8. 0.0051068260.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-234282300/19/19_ 7.3801160890.00.090.09 188.166.247.165http/1.1localhost:80GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass 6-234-0/0/7. 0.00190202930.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-234282410/14/14_ 30.0301640680.00.040.04 188.166.247.165http/1.1localhost:80GET /telescope/requests HTTP/1.0 8-234-0/0/4. 0.0042036550.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-234282570/14/14R 6.3132659193370.00.100.10 172.70.38.103http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 10-234-0/0/5. 0.0049060.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-234282730/13/13R 7.344436187610.00.060.06 165.22.210.184http/1.1 12-234282820/13/13_ 5.9901153620.00.060.06 188.166.247.165http/1.1localhost:80GET /info.php HTTP/1.0 13-234-0/0/4. 0.0045016220.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-234282940/10/10W 5.3200171850.00.040.04 188.114.102.19http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 15-234-0/0/1. 0.0052000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-234-0/0/4. 0.0041035780.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-234283030/9/9W 4.4100117700.00.040.04 172.71.102.105http/1.1www.business.co.th:443POST /xmlrpc.php HTTP/1.1 18-234283090/14/14_ 5.7701152330.00.090.09 188.166.247.165http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-234-0/0/3. 0.0040067880.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 18subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 263 seconds, (range: 241...299)index usage: 0%, cache usage: 0%total entries stored since starting: 18total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 36 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-08-29 03:41
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-08-29 03:41
Last seen 2024-02-02 17:25
Open for 522 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb00e6157aApache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 00:25:27 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 94 Parent Server MPM Generation: 93 Server uptime: 28 days 14 hours 24 minutes 6 seconds Server load: 3.10 3.06 2.67 Total accesses: 1850494 - Total Traffic: 23.8 GB - Total Duration: 2141120830 CPU Usage: u172.2 s105.5 cu32158.1 cs2231.61 - 1.4% CPU load .749 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.05 ms/request 4 requests currently being processed, 124 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 025364no0yes032000 225369no0yes230000 325368no0yes032000 525366no0yes230000 Sum400 4124000 ________________________________................................ ___________________RR___________________________________________ ................................_______RW_______________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-93253640/3/14805_ 0.2741160261010.00.02193.82 159.203.182.222http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/0/15295_ 0.0030139013530.00.00198.97 159.203.182.222http/1.1localhost:443GET /.env HTTP/1.1 0-93253640/2/14867_ 0.2730150309570.00.00192.75 64.227.126.135http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-93253640/0/15047_ 0.0030145875140.00.00186.02 138.197.88.136h2localhost:443[0/0] Software caused connection abort 0-93253640/1/14950_ 0.2320147711740.00.00185.46 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-93253640/0/15172_ 0.0038156649250.00.00188.55 161.35.190.56http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/2/14846_ 0.2910145588910.00.02200.31 138.197.88.136http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-93253640/2/15155_ 0.2920150182090.00.00187.60 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 0-93253640/1/15114_ 0.1610145226990.00.00229.90 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-93253640/1/15248_ 0.2320148853450.00.00194.92 159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-93253640/1/14812_ 0.2410154393440.00.02200.74 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/1/14823_ 0.1617147156440.00.00195.46 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/2/14692_ 0.3000137182780.00.00185.56 164.90.205.35http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-93253640/2/14845_ 0.3010169086640.00.00186.04 164.90.205.35http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-93253640/1/15799_ 0.2910141615400.00.00187.81 146.190.64.200http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-93253640/3/14849_ 0.3000165341270.00.01182.52 162.243.184.251http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-93253640/0/14899_ 0.0000143405110.00.00206.39 142.93.158.96http/1.1 0-93253640/1/14959_ 0.3000144940050.00.00189.33 138.197.88.136http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-93253640/2/14780_ 0.3000160388390.00.00200.58 146.190.64.200http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-93253640/1/15001_ 0.1700144639410.00.00193.85 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-93253640/1/14991_ 0.2550181496040.00.00193.46 159.203.182.222http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-93253640/1/15016_ 0.2550147053800.00.00204.12 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.1 0-93253640/1/15472_ 0.1850150756110.00.00188.31 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x0c\x01 0-93253640/1/14676_ 0.1949138765420.00.00190.21 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/1/14987_ 0.2730162205960.00.00186.91 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-93253640/2/14661_ 0.2540135981680.00.00197.05 164.90.222.93http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-93253640/0/15158_ 0.0046144713590.00.00194.53 159.203.182.222http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/0/14941_ 0.0040159195750.00.00213.32 164.90.205.35h2localhost:443[0/0] Software caused connection abort 0-93253640/0/14742_ 0.0040152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-93253640/1/15189_ 0.2740135139150.00.02225.17 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-93253640/0/14677_ 0.0040155573090.00.00199.15 138.197.88.136h2localhost:443[0/0] Software caused connection abort 0-93253640/1/14939_ 0.2030145815220.00.00185.19 162.243.184.251h2localhost:443[0/0] Software caused connection abort 1-93-0/0/15731. 0.007830138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-93-0/0/15813. 0.007830136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-93-0/0/15602. 0.007830174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-93-0/0/15318. 0.007830150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-93-0/0/15276. 0.007830146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-93-0/0/15655. 0.007830134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-93-0/0/15351. 0.007830172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-93-0/0/15185. 0.007830165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-93-0/0/15335. 0.007830127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-93-0/0/14956. 0.007830152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-93-0/0/15041. 0.007830148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-93-0/0/15506. 0.007830159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-93-0/0/15329. 0.007830159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-93-0/0/15189. 0.007830137016410.00.00183.04 159.223.102.13
Found on 2024-02-02 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0ebee7be947Apache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 18:35:09 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 8 hours 33 minutes 48 seconds Server load: 2.66 2.74 2.72 Total accesses: 938190 - Total Traffic: 12.6 GB - Total Duration: 1140766942 CPU Usage: u314.46 s22.8 cu15734.7 cs827.39 - 8.3% CPU load 4.61 requests/sec - 64.6 kB/second - 14.0 kB/request - 1215.92 ms/request 5 requests currently being processed, 59 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 128172no15yes2300013 232702no5yes329001 Sum2020 5590014 ................................__WW____________________________ ________________W_____R__R______................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/7491. 0.00369563598326540.00.00107.52 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ocdxhvp-10531qitems/etidm HTTP/1.1 0-7-0/0/7997. 0.00369563376283270.00.00109.31 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/7552. 0.00369583882954630.00.00106.80 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-21596fitems/etidm3.html HTTP/1.1 0-7-0/0/7977. 0.003695079870500.00.00100.07 54.186.174.90http/1.1www.chonlateekeyman.com:80GET /vendor/.git/config HTTP/1.1 0-7-0/0/7820. 0.00369563180228580.00.0097.38 85.208.96.203http/1.1www.chonlateeboi.com:443GET /32346yytxetid.htm HTTP/1.1 0-7-0/0/7945. 0.00369538492820970.00.00103.92 66.249.73.128http/1.1www.twinbuilt.co.th:443GET /?e=claudio-valentino-watch-cheap-off-58%-10-ii-91mVN1T9 HT 0-7-0/0/7751. 0.00369572876982120.00.00116.50 85.208.96.205http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 0-7-0/0/7744. 0.00369563785766580.00.00100.00 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /uujxhvp-10537witems/eti HTTP/1.1 0-7-0/0/7941. 0.00369541879902650.00.00150.52 173.201.180.210http/1.1www.nadapool.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7828. 0.00369584482475300.00.0098.26 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zkoxhvp-14156bitems/etidm7.html HTTP/1.1 0-7-0/0/7717. 0.00369584690869310.00.00120.03 52.70.240.171http/1.1www.chonlateeboi.com:443GET /12284sabfitems/etidm2.html HTTP/1.1 0-7-0/0/7353. 0.00369563488696230.00.0094.39 3.224.220.101http/1.1www.chonlateeboi.com:443GET /3328eslwetidm1aep0 HTTP/1.1 0-7-0/0/7441. 0.003695205967886060.00.0098.26 158.220.124.129http/1.1www.chonlateeboi.com:443GET /%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%95%E0%B9%88%E0%B8%AD/ HT 0-7-0/0/7637. 0.003695637102146600.00.00103.73 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /biqxhvp-21646detidm25o HTTP/1.1 0-7-0/0/8309. 0.003695351676006020.00.00103.58 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=godfather-trilogy-i-i%EF%BC%A9-iii-%E3%82%AB%E3%83%A9%E 0-7-0/0/7485. 0.003695104297978530.00.0095.31 103.154.184.42http/1.1www.xn--72cztbd4dxek5iqd.com:44GET /wp-login.php HTTP/1.1 0-7-0/0/7646. 0.0036951663779286410.00.0097.21 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=1906-new-highs-fast-acting-precision-edibles-leafly-9-i 0-7-0/0/7679. 0.00369584477601570.00.00101.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /44576eslwitems/etidm31meb.html HTTP/1.1 0-7-0/0/7728. 0.00369564096209810.00.0096.20 23.22.35.162http/1.1www.chonlateeboi.com:443GET /18447eslwitems/etidm86nw.htm HTTP/1.1 0-7-0/0/7810. 0.00369563579141840.00.00103.23 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /kczxhvp-10527mitems/etidm62xp.htm HTTP/1.1 0-7-0/0/7791. 0.003695375119150970.00.00106.94 184.168.99.253http/1.1www.plastandtrans.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7461. 0.003695202982744190.00.0099.22 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/8210. 0.00369563690213850.00.00106.76 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-25912fetidm59qxf HTTP/1.1 0-7-0/0/7600. 0.00369584875263560.00.00105.28 3.224.220.101http/1.1www.chonlateeboi.com:443GET /15240bzlnetidm71ebt.htm HTTP/1.1 0-7-0/0/7639. 0.00369534698577400.00.0096.02 66.249.71.202http/1.1www.twinbuilt.co.th:443GET /?e=bundesliga-dortmund-giovanni-reyna-injured-8-ii-y3GKO2i 0-7-0/0/7756. 0.00369563767494950.00.0097.99 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lkaxhvp-14116netidm6 HTTP/1.1 0-7-0/0/7624. 0.00369585483401880.00.00106.30 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /byqlgro-3472detidm94old HTTP/1.1 0-7-0/0/7698. 0.00369584193126660.00.00127.64 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2836bzlnetidm7 HTTP/1.1 0-7-0/0/7504. 0.00369564981009190.00.0093.37 81.70.248.169http/1.1www.nakindogtraining.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7720. 0.00369551486170310.00.00131.95 173.201.191.207http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4GET /wp-login.php HTTP/1.1 0-7-0/0/7415. 0.00369587289899570.00.00105.91 97.74.211.129http/1.1www.dinocoffees.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7754. 0.00369563380644190.00.0098.18 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wclxhvp-10227yitems/etidm.htm HTTP/1.1 1-7281720/317/7767_ 180.511088930970.03.37127.40 162.243.184.251http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-7281720/296/7573_ 180.450084047690.03.2894.87 164.90.205.35http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7281721/309/7664W 180.3500110752640.03.2599.88 3.224.220.101http/1.1www.chonlateeboi.com:443GET /24545zvqceti.html HTTP/1.1 1-7281721/332/7282W 180.470089426690.03.6693.96 128.199.61.251http/1.1localhost:443GET /server-status HTTP/1.1 1-7281720/309/7367_ 180.470095686630.03.69107.01 162.243.184.251http/1.1localhost:80GET /.env HTTP/1.1 1-7281720/319/7532_ 180.540084770140.04.67100.18 162.243.184.251http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7281720/329/7593_ 180.4910102376480.04.2997.58 144.126.202.105http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-7281720/316/7602_ 180.181095656940.03.48101.50 143.42.118.5http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-7281720/336/7635_ 180.53064078895670.03.9596.28 52.70.240.171http/1.1www.chonlateeboi.com:443GET /24564zvqcetidm2.htm HTTP/1.1 1-7281720/294/7413_ 180.470093760180.03.33101.40 143.42.118.5http/1.1localhost:80GET /.git/config HTTP/1.1 1-7281720/299/7191_ 180.471096107890.03.3799.16 159.89.83.196http/1.1localhost:443GET / HTTP/1.1 1-7281720/324/7750_ 180.48108780116
Found on 2024-01-07 11:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb70abe112Apache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 01:15:49 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 15 hours 14 minutes 28 seconds Server load: 3.08 3.17 2.91 Total accesses: 272912 - Total Traffic: 3.9 GB - Total Duration: 229472187 CPU Usage: u287.84 s16.61 cu4282.28 cs230.01 - 8.78% CPU load 4.97 requests/sec - 74.7 kB/second - 15.0 kB/request - 840.828 ms/request 11 requests currently being processed, 117 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 019907no1yes230000 419908no1yes230000 719927no1yes131000 919931no7yes626005 Sum4010 11117005 ______W______W__________________................................ ................................................................ ______RW________________________................................ ................................_______________________________R ................................W____RW__________R_W______W_____ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2199070/96/2939_ 60.871024491090.01.1344.16 159.65.58.104http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-2199070/93/3188_ 59.1901023054430.01.1442.09 167.99.184.41http/1.1localhost:443GET /server-status HTTP/1.1 0-2199070/95/2888_ 60.90084535880660.01.2850.93 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?ujysvcw-81647letidm62hwl HTTP/1.1 0-2199070/82/3112_ 60.172105025719630.01.1539.62 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?fpesvcw-243066retidm52s.htm HTTP/1.1 0-2199070/97/3021_ 60.781023697130.01.0437.86 134.122.34.144http/1.1localhost:80GET /config.json HTTP/1.1 0-2199070/103/3256_ 60.78144324042370.01.3441.03 198.98.52.94http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /wp-login.php HTTP/1.1 0-2199071/90/3012W 60.780023651650.01.0952.65 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?vuzhsbr-154240mitems/eti.htm HTTP/1.1 0-2199070/109/3029_ 60.621024499760.01.2039.60 178.62.73.12http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-2199070/105/3080_ 60.812024419710.01.1781.96 159.65.58.104http/1.1localhost:443GET /login.action HTTP/1.1 0-2199070/89/3010_ 60.60189023508860.01.1038.93 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?jqmggdh-341402zetid.htm HTTP/1.1 0-2199070/101/2948_ 60.731027127830.01.2936.29 31.184.236.19http/1.1 0-2199070/105/2882_ 60.87084123707750.01.2337.28 66.249.71.170http/1.1www.chonlateeadmin.com:443GET /trust.php?yfchlzs-325271petidm31lsp HTTP/1.1 0-2199070/86/2853_ 60.08184123677170.01.0139.23 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?epaecaw-103809netid.htm HTTP/1.1 0-2199071/91/3143W 56.05204024405620.01.3843.04 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-2199070/90/3185_ 60.812026976790.00.9342.92 46.101.103.192http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-2199070/79/2928_ 60.32184823417990.00.8938.05 167.99.184.41h2localhost:443[0/0] Software caused connection abort 0-2199070/81/2868_ 60.731027616540.00.9937.29 46.101.103.192http/1.1localhost:443GET /about HTTP/1.1 0-2199070/89/3168_ 60.810023195990.00.9842.15 46.101.103.192http/1.1localhost:443GET /login.action HTTP/1.1 0-2199070/95/3069_ 60.871023089340.01.2040.21 165.22.74.203http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-2199070/96/2917_ 60.84184825299250.01.0743.40 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /xwmjupk-1752zetidm54kjz.htm HTTP/1.1 0-2199070/96/2961_ 60.49084223168830.01.2642.29 159.65.58.104h2localhost:443[0/0] Software caused connection abort 0-2199070/101/3027_ 60.661025514980.01.3443.52 134.122.34.144http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/91/3336_ 60.79084923252180.01.0342.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /47871gzgqitems/etidm24fq.htm HTTP/1.1 0-2199070/76/2849_ 60.59194523157750.00.8937.69 40.77.167.101http/1.1www.chonlateeaa.com:443GET /robots.txt HTTP/2.0 0-2199070/102/2911_ 60.841023542630.01.2337.23 159.65.58.104http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-2199070/96/2896_ 60.780023331840.01.1637.59 159.203.63.67http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-2199070/84/2976_ 60.841026437590.00.9948.08 165.22.74.203http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-2199070/81/2957_ 60.712027552100.01.0168.23 134.122.34.144http/1.1localhost:80GET /login.action HTTP/1.1 0-2199070/95/2860_ 60.721023464290.01.1036.07 178.62.73.12http/1.1localhost:80GET /config.json HTTP/1.1 0-2199070/86/3195_ 60.712105522174810.01.1076.67 23.22.35.162http/1.1www.chonlateeboi.com:443GET /32665gcmpitems/eti HTTP/1.1 0-2199070/95/2904_ 60.49384623539350.01.1145.20 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /igxrtxd-29557kitems/etidm70 HTTP/1.1 0-2199070/89/3252_ 60.32185726180090.01.0039.63 159.203.63.67h2localhost:443[0/0] Software caused connection abort 1-1-0/0/2323. 0.00303986617630010.00.0030.27 207.46.13.154http/1.1www.thaidaoherb.com:443GET /9i7h/dyv42461ryyhc053875235.html HTTP/2.0 1-1-0/0/2100. 0.003039173417390000.00.0027.02 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /db.php?g3192039.shtml HTTP/1.1 1-1-0/0/2227. 0.003039107117630050.00.0030.69 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rngadej-26472tetidm80eat.htm HTTP/1.1 1-1-0/0/2089. 0.003039211517285130.00.0027.89 66.249.69.229http/1.1www.chonlateenextbiz.com:443GET /db.php?g335424.shtml HTTP/1.1 1-1-0/0/2129. 0.00303985117106500.00.0032.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /48835biwxitems/etidm HTTP/1.1 1-1-0/0/2185. 0.00303985816794840.00.0028.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jryadej-23266letid HTTP/1.1 1-1-0/0/2135. 0.00303997217421340.00.0026.37 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22684biwxetidm7 HTTP/1.1 1-1-0/0/2185. 0.0030391717237790.00.0029.46 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?papaw99.xml HTTP/1.1 1-1-0/0/2163. 0.00303984617365570.00.0029.98 23.22.35.162http/1.1www.chonlateeboi.com:443GET /42349biwxitems/etidm52 HTTP/1.1 1-1-0/0/2112. 0.00303989516912400.00.0027.55 185.191.171.3http/1.1www.chonlateefood.com:443GET /geti/cer43578htewitems.htm HTTP/1.1 1-1-0/0/2118. 0.003039102016733450.00.0031.98 157.55.39.202h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /tviipbe-49432vetidm29giv 1-1-0/0/2249. 0.003039105217993880.00.0031.23 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2
Found on 2024-01-05 18:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb7aeb82ebApache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 05:44:17 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 44 Parent Server MPM Generation: 43 Server uptime: 11 days 5 hours 21 minutes 19 seconds Server load: 0.60 0.73 0.85 Total accesses: 4447612 - Total Traffic: 57.0 GB - Total Duration: 4186301635 CPU Usage: u612.57 s69.54 cu79757.4 cs4172.6 - 8.73% CPU load 4.59 requests/sec - 61.7 kB/second - 13.4 kB/request - 941.247 ms/request 9 requests currently being processed, 119 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031012no2yes230001 131030no0yes329000 431190no0yes329000 531192no3yes131000 Sum405 9119001 _________W________R______________R__________________R_________W_ ................................................................ W_______R___W_________________________________________R_________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43310120/250/39947_ 148.1220362518760.02.83505.13 137.184.222.107http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-43310120/241/39339_ 147.350863368421390.02.77496.69 134.122.89.242h2localhost:443[0/0] Software caused connection abort 0-43310120/229/39790_ 148.0400403847010.02.63513.40 104.131.1.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-43310120/257/39771_ 148.180861392128160.02.70518.20 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?fxykqbs-41280letidm77s HTTP/1.1 0-43310120/227/40271_ 148.141675374208740.02.51571.98 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?cmvszzn-41173ietidm.html HTTP/1.1 0-43310120/280/39379_ 147.341883401508090.04.75499.84 139.144.150.8h2localhost:443[0/0] Software caused connection abort 0-43310120/235/39651_ 147.8810405795820.03.01498.95 159.65.138.217http/1.1localhost:80GET /.env HTTP/1.1 0-43310120/313/40514_ 148.1700370103390.02.71506.63 159.89.83.196http/1.1localhost:443GET /about HTTP/1.1 0-43310120/232/39415_ 147.8810382795650.02.69514.95 134.122.89.242h2localhost:443[0/0] Software caused connection abort 0-43310121/234/39788W 147.9400370607750.02.60507.31 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?cbvooqo-37091iitems/eti.htm HTTP/1.1 0-43310120/244/39415_ 147.793920387054500.09.89486.17 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?jzoqbmb-50826betidm20w.htm HTTP/1.1 0-43310120/229/39424_ 148.1610371614560.02.68528.06 134.122.89.242http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-43310120/246/39369_ 148.1020378346550.04.17481.84 139.144.150.8http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-43310120/240/39540_ 147.963877411034830.02.67508.79 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?qrrtrge-14511eetidm87de.html HTTP/1.1 0-43310120/243/39715_ 147.4330382774350.02.77498.22 40.77.167.152h2www.thesungolden.com:443[1/1] done: stream 1, GET /g1441008.shtml 0-43310120/229/39383_ 148.2000376188870.02.56552.74 74.207.237.114http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-43310120/243/40367_ 148.0530377620500.02.97532.61 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-43310120/227/39869_ 147.651685369294820.02.59490.57 198.199.121.22h2localhost:443[0/0] Software caused connection abort 0-43310120/206/39901R 147.954672372266190.03.46515.69 3.224.220.101http/1.1 0-43310120/234/40150_ 148.1610387214040.02.62551.39 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-43310120/232/39594_ 148.1610367443640.02.69520.62 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /juquqhe52490detid.htm HTTP/1.1 0-43310120/241/39737_ 148.0920390944440.02.73512.10 159.89.83.196http/1.1localhost:443GET / HTTP/1.1 0-43310120/247/39499_ 148.0920411083730.02.88521.89 198.199.121.22http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-43310120/259/38919_ 148.0500364359980.021.45501.07 137.184.222.107http/1.1localhost:80GET /.env HTTP/1.1 0-43310120/227/39886_ 148.2001349374658630.02.95527.80 198.98.58.184http/1.1www.dinocoffees.com:443GET /wp-login.php HTTP/1.1 0-43310120/243/39167_ 147.963766390982150.03.30479.06 159.89.83.196h2localhost:443[0/0] Software caused connection abort 0-43310120/225/39847_ 148.0310375941290.02.52592.29 137.184.222.107http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-43310120/253/39086_ 148.0630373080960.08.45523.19 139.144.150.8http/1.1localhost:443GET /about HTTP/1.1 0-43310120/258/39675_ 147.8620414634690.02.91530.93 159.65.138.217http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-43310120/246/39639_ 146.630866377648110.03.00511.94 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?wylhlzs-48629yetidm86.html HTTP/1.1 0-43310120/221/39612_ 147.9720372437310.02.65500.77 161.35.27.144http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-43310120/209/39336_ 148.1220380711500.02.28545.15 104.131.1.32http/1.1localhost:80GET /.env HTTP/1.1 1-43310300/185/40722_ 117.560847378069580.02.28513.57 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?afphlzs-107471cetidm19ns.html HTTP/1.1 1-43310300/188/40642R 117.3850386671560.02.03556.39 23.22.35.162http/1.1www.krongthongsecurity.com:443 1-43310300/178/40424_ 117.600858388450940.02.25563.59 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xnqagyn-12620detid.htm HTTP/1.1 1-43310300/198/40674_ 117.5110396026910.02.30571.30 159.89.83.196http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-43310300/158/41491_ 117.150865367703290.01.83631.30 137.184.222.107http/1.1localhost:80\x16\x03\x01\x01\x12\x01 1-43310300/185/40224_ 117.453860365036480.02.43577.59 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?252505rvjfitems/eti HTTP/1.1 1-43310300/187/40349_ 117.5600367505190.02.10538.14 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /nuuuqhe192270hetidm13a HTTP/1.1 1-43310300/175/40875_ 117.5110391596910.01.96519.96 104.131.1.32http/1.1localhost:80GET /.git/config HTTP/1.1 1-43310300/191/40518_ 117.2320380106310.02.35509.38 137.184.222.107http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-43310300/181/40596_ 117.3941080372544280.02.03518.41 221.120.103.135http/1.1www.leadingservice.co.th:443POST /wp-login.php HTTP/1.1 1-43310300/186/41146_ 116.121699368862910.02.08542.25 198.199.121.22h2localhost:443[0/0] Software caused connection abort 1-43310300/170/40967_ 117.50203739291
Found on 2023-12-11 22:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31f97bb0ebf97bb0eb96c7861cApache Status Apache Server Status for pop.nadapool.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:25:19 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 2 minutes 20 seconds Server load: 1.08 1.74 1.55 Total accesses: 693988 - Total Traffic: 9.6 GB - Total Duration: 516888642 CPU Usage: u57.53 s10.6 cu12013 cs653.85 - 7.36% CPU load 4.01 requests/sec - 58.4 kB/second - 14.6 kB/request - 744.809 ms/request 8 requests currently being processed, 120 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no1yes329000 330151no8yes131006 630155no5yes428004 730156no9yes032008 Sum4023 81200018 ................................................................ __R__W_R______________________________________R_________________ ................................................................ ________W_____R_________W_____R_________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0049389745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0049396045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0049380245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0049395746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00493167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0049394846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00493145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0049392346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00493107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00493104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0049370146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0049389947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0049372146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00493104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00493108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0049346846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0049370945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0049384445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0049371246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0049370946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00493046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0049349045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0049393646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0049386945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.004934146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0049373844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00493722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0049396345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00493107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00493146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00493778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0049396044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0049386344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0049347946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00493150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0049367645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0049345143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00493044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00493232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0049358244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00493183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00493822744746080.00.0079.16 45.1
Found on 2023-12-02 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e81777a30fApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 10:51:25 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 6 hours 49 minutes 14 seconds Server load: 1.04 0.84 0.77 Total accesses: 39796 - Total Traffic: 592.2 MB - Total Duration: 53832151 CPU Usage: u2833 s5186.82 cu51103300 cs12502600 - 259000% CPU load 1.62 requests/sec - 24.7 kB/second - 15.2 kB/request - 1352.7 ms/request 2 requests currently being processed, 7 idle workers C___.__W__........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-176220781/34/3258C 40.150141689531.40.2157.31 134.122.89.242http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-176216680/90/3124_ 30.174042532840.00.7759.94 134.122.89.242http/1.1 2-176221370/26/3252_ 8.981143007180.00.4340.36 134.122.89.242http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-176222590/10/2954_ 32.240039358280.00.0540.07 134.122.89.242http/1.1localhost:443GET /about HTTP/1.1 4-1762-0/0/3173. 0.0038039726240.00.0053.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-176217110/84/3006_ 25.401143969310.00.9336.10 134.122.89.242http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-176217560/85/2856_ 32.013038447410.02.0836.89 134.122.89.242http/1.1localhost:443GET / HTTP/1.1 7-176223140/15/2611W 1.840035526610.00.0837.25 134.122.89.242http/1.1localhost:443GET /server-status HTTP/1.1 8-176217010/93/2401_ 32.631132755010.00.7930.40 134.122.89.242http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 9-176223300/11/2304_ 0.9743130912690.00.1630.88 134.122.89.242http/1.1 10-1762-0/0/2263. 0.00110129604060.00.0028.58 139.59.182.142http/1.1 11-1762-0/0/2039. 0.00554029964430.00.0029.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1762-0/0/1498. 0.00205021156720.00.0030.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/1342. 0.0021019740480.00.0018.41 194.169.175.26http/1.1www.mkandptfoods.com:80GET /wp-includes/widgets/include.php HTTP/1.0 14-1762-0/0/1131. 0.00551016367270.00.0020.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/974. 0.00550012116160.00.0013.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1762-0/0/725. 0.0024609287690.00.009.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/196. 0.003402391480.00.003.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/230. 0.0054904522590.00.004.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/193. 0.00277402580020.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1762-0/0/119. 0.00276601371060.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/97. 0.00227501093080.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/13. 0.002757069640.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/23. 0.002767092140.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/13. 0.002771039470.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/1. 0.005145000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 70subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 96 seconds, (range: 19...195)index usage: 2%, cache usage: 3%total entries stored since starting: 5680total entries replaced since starting: 0total entries expired since starting: 5610total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 218 hit, 13497 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 03:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e89445d183Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 12:00:21 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 7 hours 58 minutes 8 seconds Server load: 1.33 1.12 1.21 Total accesses: 53007 - Total Traffic: 1.0 GB - Total Duration: 76742791 CPU Usage: u2708.18 s5140.26 cu50876600 cs12454100 - 221000% CPU load 1.85 requests/sec - 37.0 kB/second - 20.0 kB/request - 1447.79 ms/request 3 requests currently being processed, 8 idle workers __W._......._..._......C...._..C._.._............. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743283600/13/4310_ 2.870063056710.00.2790.62 139.144.150.8http/1.1localhost:443GET /about HTTP/1.1 1-1743284200/2/4204_ 0.470060674690.00.00104.02 139.144.150.8http/1.1localhost:443GET /v2/_catalog HTTP/1.1 2-1743284360/0/4322W 0.000062250950.00.0081.97 139.144.150.8http/1.1localhost:443GET /server-status HTTP/1.1 3-1743-0/0/4177. 0.0083057657320.00.0082.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1743278360/85/4062_ 37.21281455478090.01.6664.49 172.68.146.83http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST /wp-login.php HTTP/1.0 5-1743-0/0/3977. 0.0082058898580.00.00105.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1743-0/0/3815. 0.0080052814530.00.0071.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1743-0/0/3680. 0.0086052330400.00.0067.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1743-0/0/3538. 0.004275954980340.00.0056.95 139.144.150.8http/1.1 9-1743-0/0/3059. 0.0092046424650.00.0047.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1743-0/0/2731. 0.0090040523910.00.0050.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/2307. 0.0094037246060.00.0042.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743281400/23/2053_ 7.701539328971890.00.2941.82 172.68.234.202http/1.1www.lawbizeasy.com:80POST /wp-cron.php?doing_wp_cron=1695099614.06598997116088867187 13-1743-0/0/1767. 0.0076027645060.00.0033.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743-0/0/1295. 0.0085017908110.00.0023.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/830. 0.0084011464950.00.0018.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743281680/22/881_ 8.821012601560.00.3417.37 139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 17-1743-0/0/348. 0.006904090950.00.006.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/327. 0.0010403222800.00.004.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/104. 0.008101808520.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/88. 0.001030622090.00.002.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/37. 0.001050505240.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/110. 0.009101868340.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743282091/16/39C 8.7300623901.40.270.77 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 24-1743-0/0/139. 0.0010201688780.00.001.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1743-0/0/41. 0.00990648490.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/43. 0.001000740610.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/12. 0.00790286800.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743282470/19/92_ 5.4911450840960.00.451.83 172.71.223.24http/1.1www.business.co.th:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 29-1743-0/0/13. 0.00890440100.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/12. 0.00880325260.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743282661/10/114C 6.5901958158805111.80.254.28 54.88.179.33http/1.1www.summer-techthai.com:443GET / HTTP/1.1 32-1743-0/0/80. 0.009601026530.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743282820/23/34_ 8.3700776840.00.300.35 168.61.156.173http/1.1www.chonlateevip.com:80GET /admin.php HTTP/1.0 34-1743-0/0/14. 0.00770415030.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/20. 0.00780499850.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743283000/21/28_ 6.5010439590.00.950.98 139.144.150.8http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 37-1743-0/0/14. 0.00970314670.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/13. 0.00950388600.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/119. 0.006801026510.00.002.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743-0/0/99. 0.008701279860.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1743-0/0/2. 0.005640078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.005645041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.0056160128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.0054440756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.005653000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.005615080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.005628050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.005651010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.005627025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache
Found on 2023-09-19 04:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e82d586148Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 16-Sep-2023 23:54:46 +07 Restart Time: Saturday, 16-Sep-2023 04:02:13 +07 Parent Server Config. Generation: 1732 Parent Server MPM Generation: 1731 Server uptime: 19 hours 52 minutes 33 seconds Server load: 1.03 0.74 0.61 Total accesses: 129213 - Total Traffic: 1.9 GB - Total Duration: 235570663 CPU Usage: u2781.67 s5138.61 cu50708400 cs12418000 - 88200% CPU load 1.81 requests/sec - 27.7 kB/second - 15.3 kB/request - 1823.12 ms/request 3 requests currently being processed, 7 idle workers .W__C.R_____...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1731-0/0/10352. 0.00660184318890.00.00175.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1731264550/55/10468W 22.1600179116350.00.56166.96 159.203.182.222http/1.1localhost:443GET /server-status HTTP/1.1 2-1731262330/78/9798_ 43.450767199793250.00.84131.39 172.70.54.230http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /wp-admin.php HTTP/1.0 3-1731263170/69/9686_ 35.0410173230940.00.60120.93 159.203.182.222http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-1731264691/50/9170C 25.9200193635471.40.36151.49 159.203.182.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1731-0/0/9598. 0.00680166016140.00.00142.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1731263300/68/9279R 37.593837153279330.00.61125.68 162.158.103.236http/1.1www.dr-rpi.com:443 7-1731267010/24/8984_ 13.7010153949610.00.15129.08 159.203.182.222http/1.1localhost:443GET /about HTTP/1.1 8-1731267460/12/8387_ 8.001809143117980.00.10142.35 172.70.54.230http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /100.php HTTP/1.0 9-1731267550/9/7424_ 6.0121121623600.00.06102.03 159.203.182.222http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 10-1731267620/10/7011_ 6.4810117011450.00.08117.50 159.203.182.222http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 11-1731267640/11/6633_ 7.522795144510100.00.10102.89 172.70.54.230http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /1.php HTTP/1.0 12-1731-0/0/5557. 0.008480103695680.00.0067.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1731-0/0/4115. 0.003197077891170.00.0094.24 162.158.86.176http/1.1www.mgacccount.com:80POST /xmlrpc.php HTTP/1.0 14-1731-0/0/3000. 0.006427060318540.00.0042.68 104.197.209.149http/1.1www.chonlateeadmin.com:443POST /xmlrpc.php HTTP/1.1 15-1731-0/0/2249. 0.007146043213970.00.0026.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1731-0/0/1413. 0.006432032973810.00.0018.10 104.199.1.238http/1.1www.ozonepluswater.net:443POST /xmlrpc.php HTTP/1.1 17-1731-0/0/873. 0.008382014076680.00.0011.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1731-0/0/906. 0.007542102414633540.00.0012.38 117.18.13.234http/1.1www.chonlateebusiness.com:443GET /?author=43 HTTP/1.1 19-1731-0/0/651. 0.00741592310930420.00.008.58 31.14.123.176http/1.1www.tkadvicesystem.com:443GET /?author=16 HTTP/1.1 20-1731-0/0/429. 0.00835005748350.00.005.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1731-0/0/529. 0.00751422818268060.00.006.22 81.70.157.183http/1.1www.tkadvicesystem.com:443GET /?author=16 HTTP/1.1 22-1731-0/0/205. 0.00838503994600.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1731-0/0/503. 0.00828409870970.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1731-0/0/230. 0.00837604121130.00.003.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1731-0/0/215. 0.00762303830620.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1731-0/0/46. 0.00836501498040.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1731-0/0/127. 0.00835702650280.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1731-0/0/27. 0.0083900598370.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1731-0/0/67. 0.00838101499110.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1731-0/0/237. 0.00755804038520.00.002.89 67.215.2.86http/1.1www.chonlateebusiness.com:80GET /?author=21 HTTP/1.0 31-1731-0/0/57. 0.00812901107810.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1731-0/0/18. 0.0083890177310.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1731-0/0/48. 0.0083670539560.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1731-0/0/126. 0.00837403187600.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1731-0/0/155. 0.00837302624890.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1731-0/0/33. 0.0083780666060.00.000.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1731-0/0/136. 0.00836803697660.00.001.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1731-0/0/51. 0.0083560653380.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1731-0/0/24. 0.0083880459740.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1731-0/0/120. 0.00753811051982980.00.001.48 117.18.13.234http/1.1www.chonlateebusiness.com:443GET /?author=46 HTTP/1.1 41-1731-0/0/12. 0.00568770248910.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1731-0/0/105. 0.00563383942319840.00.001.87 23.97.205.210http/1.1www.ss-cool.com:443POST /wp-login.php HTTP/1.1 43-1731-0/0/10. 0.0056905362040.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1731-0/0/15. 0.00568760357110.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1731-0/0/99. 0.005624516283147040.00.001.20 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 46-1731-0/0/9. 0.00568570303520.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1731-0/0/8. 0.00568810271660.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1731-0/0/7. 0.00568780237160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1731-0/0/11. 0.00568697207120.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred t
Found on 2023-09-16 16:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8bd00f7cdApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 08:18:10 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 4 hours 15 minutes 58 seconds Server load: 1.66 1.27 0.86 Total accesses: 19362 - Total Traffic: 258.4 MB - Total Duration: 21084178 CPU Usage: u2827.36 s5118.94 cu50519500 cs12377200 - 410000% CPU load 1.26 requests/sec - 17.2 kB/second - 13.7 kB/request - 1088.95 ms/request 7 requests currently being processed, 4 idle workers __WRWW_....WCC_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720259140/45/1625_ 25.52060418432680.00.4923.52 172.71.166.203http/1.1www.accgoing.com:80GET //rxr.php HTTP/1.0 1-1720263900/1/1665_ 0.001217579140.00.0022.15 147.182.130.98http/1.1localhost:443GET /v2/_catalog HTTP/1.1 2-1720260810/25/1538W 13.640016778770.00.2719.28 172.71.242.75http/1.1www.tun36.com:80GET /s/33e27393e2431313e2838313/_/;/META-INF/maven/com.atlassia 3-1720261200/14/1497R 12.46166616346100.00.1117.23 184.75.221.59http/1.1www.spamechanicssystem.com:443 4-1720258350/95/1647W 37.990018735950.01.6030.90 147.182.130.98http/1.1localhost:443GET /server-status HTTP/1.1 5-1720261930/13/1338W 6.4829014628160.00.1614.64 27.254.96.168http/1.1www.chonlateemeet.com:443POST /wp-cron.php?doing_wp_cron=1694654261.20681500434875488281 6-1720258560/68/1327_ 33.47040914567870.00.6515.90 141.101.98.4http/1.1www.tun36.com:80GET /.git/config HTTP/1.0 7-1720-0/0/1363. 0.00237014628810.00.0018.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1720-0/0/1187. 0.0091013814280.00.0018.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1720-0/0/1300. 0.0037114368590.00.0016.09 27.254.96.168http/1.1www.1smestartup.com:443GET /wp-content/themes/sydney/js/functions.min.js?ver=20210823 10-1720-0/0/1015. 0.00238010462960.00.0012.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1720258660/58/919W 38.77009898440.00.5813.38 172.71.166.203http/1.1www.accgoing.com:80GET /rxr.php HTTP/1.0 12-1720258721/43/440C 36.27005026246.70.464.92 46.105.39.227http/1.1www.ltclevelup.com:443POST /xmlrpc.php HTTP/1.1 13-1720258741/71/404C 32.06004253611.40.843.56 147.182.130.98http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1720258800/55/351_ 34.02114011250.00.773.67 147.182.130.98http/1.1localhost:443GET /about HTTP/1.1 15-1720-0/0/270. 0.0013894072948720.00.003.13 172.173.68.5http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 16-1720-0/0/328. 0.00204804264010.00.003.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1720-0/0/269. 0.00206202175030.00.005.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/108. 0.00206101329770.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/43. 0.0020550450530.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/133. 0.0020650881410.00.001.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1720-0/0/43. 0.0020460433750.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/5. 0.002047031690.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/99. 0.0020660586780.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1720-0/0/4. 0.002056025950.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1720-0/0/86. 0.001352960937090.00.001.42 172.71.161.143http/1.1www.chorsiam.com:80GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.0 26-1720-0/0/2. 0.002060018900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1720-0/0/2. 0.002058025180.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1720-0/0/89. 0.0013620750470.00.002.47 139.144.150.45http/1.1localhost:80GET /.DS_Store HTTP/1.0 29-1720-0/0/2. 0.002054026770.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1720-0/0/86. 0.00137610547560.00.000.88 223.205.223.205http/1.1www.hotlineservicethailand.com:GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1 31-1720-0/0/7. 0.001930097730.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1720-0/0/82. 0.001379347788700.00.000.52 172.173.68.5http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 33-1720-0/0/2. 0.002071030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1720-0/0/80. 0.0013772988590.00.000.68 223.205.223.205http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-fc29 35-1720-0/0/1. 0.002073000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1720-0/0/1. 0.002070000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1720-0/0/1. 0.002072010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1720-0/0/1. 0.002069000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1720-0/0/2. 0.002049060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 35subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 207 seconds, (range: 66...294)index usage: 1%, cache usage: 1%total entries stored since starting: 3250total entries replaced since starting: 0total entries expired since starting: 3215total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 14 hit, 7336 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-14 01:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8cc5e6ed7Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 06:02:33 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 2 hours 21 seconds Server load: 1.56 1.29 1.08 Total accesses: 10301 - Total Traffic: 143.7 MB - Total Duration: 12295676 CPU Usage: u2795.02 s5111.98 cu50460900 cs12364800 - 870000% CPU load 1.43 requests/sec - 20.4 kB/second - 14.3 kB/request - 1193.64 ms/request 4 requests currently being processed, 7 idle workers _WC_._R___._C..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716165430/68/910_ 35.351010803450.00.518.10 161.35.176.95http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-1716165910/53/983W 34.310011304260.00.518.35 161.35.176.95http/1.1localhost:443GET /server-status HTTP/1.1 2-1716169161/1/971C 0.000111589501.40.008.52 161.35.176.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1716167380/35/868_ 21.721111195410.00.3216.48 161.35.176.95http/1.1localhost:443GET /about HTTP/1.1 4-1716-0/0/833. 0.008453410462510.00.007.17 172.71.167.42http/1.1www.business.co.th:443POST //shop//wp-login.php HTTP/1.1 5-1716166810/42/840_ 27.7416698754160.00.359.76 172.71.167.42http/1.1www.business.co.th:443POST //shop//wp-login.php HTTP/1.1 6-1716167730/26/709R 10.96208194440.00.268.23 172.71.160.15http/1.1www.siamerp.com:443 7-1716167000/42/850_ 20.6318079664310.00.348.88 221.194.152.193http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2016/07/web_design.jpg HTTP/1.1 8-1716165590/64/755_ 33.70108592670.08.6814.05 161.35.176.95http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1716165610/70/754_ 38.8917348879850.00.6612.44 198.41.242.155http/1.1www.siamautomation.com:443GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B9%82%E0%B8%99%E0%B9%8A 10-1716-0/0/735. 0.0012109359530.00.0017.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716167830/28/471_ 13.31205674020.00.263.46 161.35.176.95http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 12-1716167891/18/216C 10.7506303410936.213.3815.94 172.71.167.42http/1.1www.business.co.th:443POST //shop//wp-login.php HTTP/1.1 13-1716-0/0/183. 0.0068512206600.00.001.34 110.169.68.219http/1.1www.focusfilmthailand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-image-default-05 14-1716-0/0/25. 0.0039720170190.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/5. 0.003982030270.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/100. 0.00310917061447800.00.001.05 54.36.148.29http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%9B%E0%B8%B4%E0%B8%94 17-1716-0/0/93. 0.00311301216780.00.000.69 162.243.161.105http/1.1localhost:443GET /login.action HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 41subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 148 seconds, (range: 11...294)index usage: 1%, cache usage: 1%total entries stored since starting: 1528total entries replaced since starting: 0total entries expired since starting: 1487total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 88 hit, 3870 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 23:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8d4baf8e2Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 18:49:47 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 14 hours 47 minutes 33 seconds Server load: 0.69 0.97 1.03 Total accesses: 74681 - Total Traffic: 1.0 GB - Total Duration: 107224403 CPU Usage: u2890.49 s5095.1 cu50284100 cs12325900 - 118000% CPU load 1.4 requests/sec - 20.4 kB/second - 14.6 kB/request - 1435.77 ms/request 3 requests currently being processed, 7 idle workers _C___._W_..C._.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702238350/44/6335_ 52.561139387928640.00.5989.57 66.249.71.67http/1.1www.nptpropertythailand.com:443GET /robots.txt HTTP/1.1 1-1702238521/49/6316C 17.590088116291.40.8795.84 144.126.202.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1702235500/93/6116_ 62.760090134650.01.4595.11 144.126.202.105http/1.1localhost:443GET /about HTTP/1.1 3-1702240510/18/6066_ 5.620087869810.00.1685.41 66.249.79.196http/1.1www.nptpropertythailand.com:80GET / HTTP/1.0 4-1702241490/1/5638_ 0.83188481179380.00.0183.74 172.70.135.14http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 5-1702-0/0/6004. 0.000082169180.00.0079.45 144.126.202.105http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-1702236730/75/5474_ 55.350084352610.01.1073.13 144.126.202.105http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-1702236000/89/5618W 29.470083369230.01.0582.56 144.126.202.105http/1.1localhost:443GET /server-status HTTP/1.1 8-1702235680/83/5212_ 61.51168073091970.01.5464.50 27.254.96.168http/1.1www.nptpropertythailand.com:443POST /wp-cron.php?doing_wp_cron=1694346586.06377410888671875000 9-1702-0/0/4746. 0.00302066307740.00.0062.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1702-0/0/4224. 0.00510059156950.00.0069.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1702236811/81/3594C 27.761048245806.40.8262.71 39.103.225.8http/1.1www.siamsolarrooftop.com:443POST /xmlrpc.php HTTP/1.1 12-1702-0/0/3408. 0.00189246550950270.00.0044.88 172.69.70.23http/1.1www.chonlateefarm.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 13-1702236910/71/1651_ 56.431022991250.00.8921.20 144.126.202.105http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 14-1702-0/0/1275. 0.00512017820210.00.0018.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1702-0/0/936. 0.00511012137680.00.0011.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/421. 0.0029708412010.00.006.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/352. 0.0046004099350.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/67. 0.00150376888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.001385001655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001503901344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0015034037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.001382904933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00150540733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0015043036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0015053086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0015026068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0015052010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.00138235501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0015036074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0015051010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.001415501144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0015050010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.00137777261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.001384802967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.001360703934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0015049041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0015023095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.00136086982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0043270000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0043256060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 58subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 115 seconds, (range: 8...285)index usage: 2%, cache usage: 2%total entries stored since starting: 13668total entries replaced since starting: 0total entries expired since starting: 13610total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 173 hit, 29137 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 11:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e82ac192c1Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 05:51:37 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 1 hour 49 minutes 26 seconds Server load: 0.64 0.60 0.50 Total accesses: 8070 - Total Traffic: 105.8 MB - Total Duration: 9191082 CPU Usage: u2652.06 s5030.45 cu50047300 cs12275200 - 949000% CPU load 1.23 requests/sec - 16.5 kB/second - 13.4 kB/request - 1138.92 ms/request 2 requests currently being processed, 8 idle workers W.__C____.__...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685118000/84/750W 30.45009562380.00.8310.19 134.122.63.192http/1.1localhost:443GET /server-status HTTP/1.1 1-1685-0/0/689. 0.003607614600.00.008.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1685119710/53/616_ 16.99106626160.00.356.99 134.122.63.192http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 3-1685122010/11/575_ 3.65017256084640.00.078.34 37.187.135.45http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 4-1685118611/72/533C 24.52006465781.41.447.08 134.122.63.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1685121160/20/422_ 4.01004049440.00.075.96 134.122.63.192http/1.1localhost:443GET /about HTTP/1.1 6-1685119780/52/615_ 19.9208526532800.00.537.28 27.254.96.168http/1.1www.chonlateedesign.com:443POST /wp-cron.php?doing_wp_cron=1694040695.64347410202026367187 7-1685122080/10/598_ 0.99007538920.00.075.64 134.122.63.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-1685119800/55/491_ 13.97005371950.00.244.51 134.122.63.192http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-1685-0/0/610. 0.003506785420.00.0012.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1685121280/20/418_ 7.2015205188450.00.155.20 27.254.96.168http/1.1www.importantaccount.com:443POST /wp-cron.php?doing_wp_cron=1694040695.15626001358032226562 11-1685122140/8/362_ 1.99110874214120.00.084.86 209.141.53.194http/1.1www.importantaccount.com:443GET /wp-login.php HTTP/1.1 12-1685-0/0/275. 0.0034203352490.00.003.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1685-0/0/200. 0.00188902528990.00.004.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1685-0/0/213. 0.0012767182234470.00.002.81 40.77.29.203http/1.1www.siamsolarrooftop.com:443GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1 15-1685-0/0/198. 0.00187602044560.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1685-0/0/98. 0.00189101043150.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/95. 0.0034060882430.00.001.33 172.172.3.127http/1.1www.chonlateebusiness.com:80GET /test HTTP/1.0 18-1685-0/0/3. 0.004078019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.00338511391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.004064015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.00335410331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.00337431185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.00407108790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.004073010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.004070030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.004081010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.004068011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.004069012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.00406609920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.004080010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 74subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 112 seconds, (range: 7...258)index usage: 2%, cache usage: 3%total entries stored since starting: 1460total entries replaced since starting: 0total entries expired since starting: 1386total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 20 hit, 3295 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-06 22:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8237fc843Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 05:21:54 +07 Restart Time: Monday, 04-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1676 Parent Server MPM Generation: 1675 Server uptime: 1 hour 19 minutes 42 seconds Server load: 0.45 0.52 0.64 Total accesses: 8724 - Total Traffic: 90.7 MB - Total Duration: 12139046 CPU Usage: u2666.81 s5000.35 cu49774800 cs12213900 - 1.3e+6% CPU load 1.82 requests/sec - 19.4 kB/second - 10.6 kB/request - 1391.45 ms/request 2 requests currently being processed, 7 idle workers _CW._____._....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1675286180/46/746_ 22.04009659560.00.478.12 122.201.124.10http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.0 1-1675286641/43/666C 16.390010123591.40.4116.95 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1675284760/76/730W 36.36009124860.00.806.23 139.144.150.8http/1.1localhost:443GET /server-status HTTP/1.1 3-1675-0/0/677. 0.0016119041100.00.005.33 52.167.144.56http/1.1www.dtacbusiness.com:443GET /robots.txt HTTP/1.1 4-1675286020/46/653_ 21.1916288516430.00.306.09 51.254.199.11http/1.1www.ddkserviceandtransport.com:GET / HTTP/1.1 5-1675285580/64/629_ 21.70009093010.00.534.57 139.144.150.8http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-1675288900/14/516_ 6.12106711950.00.094.28 139.144.150.8http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 7-1675286710/41/516_ 19.88017003660.00.574.44 139.144.150.8http/1.1localhost:443GET /about HTTP/1.1 8-1675287510/32/446_ 12.59006207460.00.213.65 139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1675-0/0/421. 0.0018115188670.00.004.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1675288980/14/265_ 6.67024062736420.00.072.06 5.252.118.211http/1.1www.chonlateevip.com:443GET /register HTTP/1.1 11-1675-0/0/404. 0.0042106509960.00.004.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1675-0/0/425. 0.0022514711750.00.003.43 206.81.1.88http/1.1localhost:443GET / HTTP/1.1 13-1675-0/0/136. 0.00172002601070.00.001.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1675-0/0/264. 0.0012005134076130.00.002.48 167.172.232.142http/1.1 15-1675-0/0/198. 0.00172403373530.00.001.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1675-0/0/118. 0.00187102239370.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1675-0/0/142. 0.00190002642740.00.001.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1675-0/0/113. 0.00189402380790.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1675-0/0/108. 0.00189201729480.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1675-0/0/41. 0.0018370448690.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1675-0/0/101. 0.00189501277660.00.000.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1675-0/0/182. 0.00126702230500.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1675-0/0/10. 0.001868054720.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1675-0/0/3. 0.003405042940.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1675-0/0/8. 0.0033800139350.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1675-0/0/4. 0.003400045140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1675-0/0/3. 0.003406052020.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1675-0/0/2. 0.003409027020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1675-0/0/42. 0.0031780838020.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1675-0/0/97. 0.00272701481940.00.002.06 74.207.237.46http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 31-1675-0/0/7. 0.0033900102580.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1675-0/0/31. 0.0032280667250.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1675-0/0/2. 0.003412010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1675-0/0/3. 0.003395087350.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1675-0/0/3. 0.003398051520.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1675-0/0/5. 0.003392081210.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1675-0/0/5. 0.003399044850.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1675-0/0/2. 0.003404045990.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 42subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 130 seconds, (range: 15...291)index usage: 1%, cache usage: 1%total entries stored since starting: 1844total entries replaced since starting: 0total entries expired since starting: 1802total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 3056 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 22:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e81bf628c4Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 23:38:07 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 5 hours 50 minutes 7 seconds Server load: 7.64 7.74 7.28 Total accesses: 150771 - Total Traffic: 1.1 GB - Total Duration: 192639275 CPU Usage: u2855.81 s4969.31 cu48729600 cs11946700 - 289000% CPU load 7.18 requests/sec - 52.6 kB/second - 7.3 kB/request - 1277.69 ms/request 14 requests currently being processed, 2 idle workers CRRCW_WR.W_R..C...WW...WW......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1652304981/81/9419C 50.1400117914902.60.3665.73 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1652306480/40/9217R 23.2900116836800.00.3273.17 139.59.230.191http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-1652305970/66/9124R 36.770469113450770.00.5566.00 172.173.110.210http/1.1www.leadingservice.co.th:443 3-1652308011/7/8896C 3.3100113425101.30.0475.01 139.59.230.191http/1.1localhost:443GET /about HTTP/1.1 4-1652306370/45/8966W 28.0000111828830.00.2661.49 172.70.134.15http/1.1www.chonlateefarm.com:443POST //wp-login.php HTTP/1.1 5-1652305150/87/8732_ 50.450760109752010.00.4859.13 172.173.90.228http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 6-1652306540/35/8594W 22.9600108222150.00.2757.80 139.59.230.191http/1.1localhost:443GET /server-status HTTP/1.1 7-1652308070/5/8753R 2.6200110361520.00.0257.60 81.209.177.145http/1.1 8-1652-0/0/8417. 0.00280105411150.00.0061.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1652307380/22/8006W 13.2600102893440.00.1159.62 162.158.174.246http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 10-1652306700/44/7802_ 22.86021199928870.00.3267.97 172.173.110.165http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 11-1652305280/79/7343R 47.82084390899830.00.4953.83 172.71.167.5http/1.1 12-1652-0/0/7226. 0.0013091291770.00.0049.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1652-0/0/6751. 0.009086917170.00.0044.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1652307531/21/6762C 14.390086582891.40.1049.72 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1652-0/0/5367. 0.0011068742000.00.0036.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1652-0/0/5041. 0.0025063685230.00.0032.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1652-0/0/4367. 0.0031055616090.00.0028.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1652307620/18/3230W 11.950042642040.00.0921.59 172.71.174.193http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 19-1652305400/71/2000W 42.710026785580.00.6714.61 167.71.196.133http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 20-1652-0/0/1810. 0.0024025864750.00.0011.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1652-0/0/1043. 0.00271615887770.00.007.27 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 22-1652-0/0/746. 0.002105311919480.00.004.67 172.71.160.85http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 23-1652305460/77/602W 48.96009523230.00.433.54 20.213.240.186http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 24-1652306780/42/380W 19.97005891040.00.191.98 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 25-1652-0/0/341. 0.00173305475730.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1652-0/0/288. 0.0015556334754470.00.001.56 162.158.174.247http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 27-1652-0/0/187. 0.00314302941630.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/48. 0.00315601000030.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/122. 0.00314102091980.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1652-0/0/103. 0.00294810451980970.00.000.44 167.71.196.133http/1.1www.nakindogtraining.com:443POST //xmlrpc.php HTTP/1.1 31-1652-0/0/108. 0.00296214931708720.00.000.51 172.70.188.83http/1.1www.chonlateeit.com:443GET /about.php HTTP/1.1 32-1652-0/0/136. 0.0029648612273450.00.000.63 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 33-1652-0/0/60. 0.00182330565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.00182310696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.00182270719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.00182820349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.00180844061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.00183027143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.00182580530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.00182840257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.00182900208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.00182960142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.00182610543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.00181224221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.00182720415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.00180817931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.001809410251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.00180729421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.00183010109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 </ SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection
Found on 2023-08-31 16:37 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8533a7dedApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 08:06:25 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 4 hours 4 minutes 7 seconds Server load: 5.56 5.13 4.72 Total accesses: 128359 - Total Traffic: 694.3 MB - Total Duration: 166904543 CPU Usage: u2890.8 s4913.47 cu47906700 cs11726400 - 407000% CPU load 8.76 requests/sec - 48.5 kB/second - 5.5 kB/request - 1300.29 ms/request 7 requests currently being processed, 9 idle workers R_WC_.W__C__W_W_._................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1645289920/87/7878R 55.811564101590450.00.4740.57 23.101.112.233http/1.1 1-1645289690/74/7772_ 50.6411042100076510.00.3836.88 172.71.167.5http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 2-1645292450/1/7588W 0.000098783970.00.0037.63 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 3-1645289771/93/7566C 60.940516987181213.00.6839.30 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 4-1645291100/49/7459_ 27.961096880900.00.7936.90 167.71.185.75http/1.1localhost:443GET /about HTTP/1.1 5-1645-0/0/7341. 0.008096388840.00.0038.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1645290370/56/7228W 44.200095954630.00.3141.53 167.71.185.75http/1.1localhost:443GET /server-status HTTP/1.1 7-1645291350/35/7339_ 23.53069996655280.00.1949.98 172.71.166.242http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 8-1645291000/55/6984_ 36.961149490901800.01.2141.90 165.232.167.28http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 9-1645292131/17/6931C 11.360090086601.40.0635.63 167.71.185.75http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1645291480/38/6656_ 24.14076685900080.00.2129.94 23.101.112.233http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 11-1645291540/32/6779_ 21.86061288897790.00.2033.82 172.69.67.135http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 12-1645291160/45/6445W 31.131083645640.00.8928.93 165.232.167.28http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 13-1645290760/60/6051_ 38.48045778365710.00.7329.46 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 14-1645291220/45/5870W 28.490076527920.00.2244.13 172.71.167.5http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 15-1645291730/32/5167_ 23.93039666513420.00.1626.34 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 16-1645-0/0/5195. 0.0021068353680.00.0030.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1645291990/26/4007_ 17.50080251546380.00.1421.68 172.71.170.121http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 18-1645-0/0/2970. 0.0011744539428840.00.0028.63 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 19-1645-0/0/1674. 0.00284021364360.00.007.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1645-0/0/1301. 0.00297017946340.00.006.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1645-0/0/706. 0.002263958516460.00.002.94 172.70.246.80http/1.1www.orderaccounting.com:80POST /xmlrpc.php HTTP/1.0 22-1645-0/0/219. 0.0039902540100.00.001.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1645-0/0/103. 0.00115594951163660.00.000.39 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 24-1645-0/0/7. 0.00117040110080.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/103. 0.001170601131130.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/103. 0.001170501145400.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/12. 0.00117090168310.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/100. 0.00120153741092050.00.000.30 172.70.135.134http/1.1www.biz9nar.com:80POST //xmlrpc.php HTTP/1.0 29-1645-0/0/80. 0.00120380922500.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1645-0/0/99. 0.00120194351029120.00.000.26 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 31-1645-0/0/3. 0.0012167023440.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1645-0/0/1. 0.0012172000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00120134221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00120154021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00120203661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00120143821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0012166011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0012162018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0012170030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00121480118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0012153054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0012150072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00120193841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00120184171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 129subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 42 seconds, (range: 1...173)index usage: 4%, cache usage: 5%total entries stored since starting: 4891total entries replaced since starting: 0total entries expired since starting: 4762total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 18 hit, 21127 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 01:05 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e870fb996cApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 29-Aug-2023 03:45:34 +07 Restart Time: Tuesday, 29-Aug-2023 00:23:46 +07 Parent Server Config. Generation: 1637 Parent Server MPM Generation: 1636 Server uptime: 3 hours 21 minutes 48 seconds Server load: 5.00 5.00 4.39 Total accesses: 78828 - Total Traffic: 709.8 MB - Total Duration: 86132534 CPU Usage: u2852.82 s4879.04 cu47498200 cs11620700 - 488000% CPU load 6.51 requests/sec - 60.0 kB/second - 9.2 kB/request - 1092.66 ms/request 9 requests currently being processed, 6 idle workers WWWCCC_.W_C___._..R............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1636125230/76/5744W 41.570064285420.00.3085.51 161.35.176.95http/1.1localhost:443GET /server-status HTTP/1.1 1-1636124740/91/5629W 54.810059626480.00.3984.49 104.43.165.99http/1.1www.siam2job.com:80POST //xmlrpc.php HTTP/1.0 2-1636125330/68/5576W 38.590059460610.00.2135.79 104.43.165.99http/1.1www.siamgassaver.com:80POST /xmlrpc.php HTTP/1.0 3-1636125751/63/5592C 32.61065859713273.80.2434.68 162.158.175.64http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 4-1636127151/10/5376C 5.86053056378713.80.0434.97 172.71.167.37http/1.1www.siamerp.com:443POST //xmlrpc.php HTTP/1.1 5-1636125691/58/5020C 35.58041356551396.30.2246.86 185.220.101.150http/1.1www.ss-cool.com:443POST /xmlrpc.php HTTP/1.1 6-1636126940/23/5091_ 14.86085554741920.00.1232.33 172.69.65.135http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 7-1636-0/0/4774. 0.00088853364290.00.0074.77 104.43.165.99http/1.1www.siamsolarrooftop.com:443POST //xmlrpc.php HTTP/1.1 8-1636125390/64/4724W 37.030053356840.00.2473.11 104.43.165.99http/1.1www.siamsolarrooftop.com:443POST //xmlrpc.php HTTP/1.1 9-1636127210/11/4781_ 5.15044950283170.00.0329.84 172.71.167.149http/1.1www.rooffurnish.com:443POST //wp-login.php HTTP/1.1 10-1636124891/97/4370C 53.860046111901.40.4026.88 161.35.176.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1636125470/59/4080_ 37.740144238930.00.2324.74 161.35.176.95http/1.1localhost:443GET /about HTTP/1.1 12-1636126060/48/4000_ 27.46037944818900.00.1624.67 104.43.165.99http/1.1www.siam2job.com:80POST //xmlrpc.php HTTP/1.0 13-1636126120/48/3973_ 30.71081042396870.00.1924.52 40.122.173.134http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 14-1636-0/0/2386. 0.004242727443560.00.0028.93 104.43.165.99http/1.1www.siam2job.com:80POST //xmlrpc.php HTTP/1.0 15-1636126320/48/1890_ 29.26063020553500.00.1611.60 104.43.165.99http/1.1www.siamgassaver.com:80POST /xmlrpc.php HTTP/1.0 16-1636-0/0/1767. 0.008573820113110.00.0011.42 172.68.234.200http/1.1www.jbbgarment.com:80GET /hello-world/ HTTP/1.0 17-1636-0/0/1073. 0.0079011880670.00.005.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1636126410/42/808R 25.8716239231990.00.184.47 172.69.65.135http/1.1 19-1636-0/0/443. 0.0010103684768580.00.002.65 104.43.165.99http/1.1www.siam2job.com:80POST //xmlrpc.php HTTP/1.0 20-1636-0/0/13. 0.0011500262130.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1636-0/0/132. 0.00254801621940.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1636-0/0/337. 0.00249803632460.00.002.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1636-0/0/52. 0.002590276622030.00.000.35 168.61.171.139http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 24-1636-0/0/202. 0.00259902329840.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1636-0/0/108. 0.00258001260300.00.001.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1636-0/0/104. 0.00258601260970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1636-0/0/14. 0.0025970200220.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1636-0/0/23. 0.0025750420710.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1636-0/0/10. 0.0025960208870.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1636-0/0/12. 0.0025880230430.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1636-0/0/121. 0.0023372541417240.00.001.23 168.61.171.139http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 32-1636-0/0/9. 0.0025940203700.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1636-0/0/34. 0.0026040549540.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1636-0/0/109. 0.0022882161457900.00.000.47 168.61.171.139http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 35-1636-0/0/104. 0.00258301277700.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1636-0/0/105. 0.00257801331630.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1636-0/0/5. 0.0025950169400.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1636-0/0/11. 0.0025770215900.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1636-0/0/10. 0.0025920205330.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1636-0/0/3. 0.0026030115260.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1636-0/0/11. 0.0025820209830.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1636-0/0/69. 0.0061160861350.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1636-0/0/3. 0.0062420104660.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1636-0/0/3. 0.0062460109160.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1636-0/0/11. 0.006224460181080.00.000.06 23.101.118.21http/1.1www.pennungmarket.com:80POST /wp-login.php HTTP/1.0 46-1636-0/0/2. 0.006252084310.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1636-0/0/5. 0.0062390133840.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1636-0/0/100. 0.0060597841182210.00.000.68 138.197.68.232http/1.1www.dreamhightravel.com:443POST /xmlrpc.php HTTP/1.1 49-1636-0/0/9. 0.0062300145050.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes tr
Found on 2023-08-28 20:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8f0411a89Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 28-Aug-2023 03:25:36 +07 Restart Time: Monday, 28-Aug-2023 00:23:33 +07 Parent Server Config. Generation: 1632 Parent Server MPM Generation: 1631 Server uptime: 3 hours 2 minutes 2 seconds Server load: 3.79 3.51 3.94 Total accesses: 69098 - Total Traffic: 501.3 MB - Total Duration: 84700790 CPU Usage: u2678.09 s4797.52 cu47165800 cs11537900 - 538000% CPU load 6.33 requests/sec - 47.0 kB/second - 7.4 kB/request - 1225.81 ms/request 7 requests currently being processed, 6 idle workers _WC_W_CWW...._W_.._............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1631299310/15/4871_ 8.661060417530.00.0531.44 162.243.186.177http/1.1localhost:443GET /about HTTP/1.1 1-1631297260/71/4626W 42.180056450830.00.2732.39 172.69.67.6http/1.1www.torrong.com:80POST //wp-login.php HTTP/1.0 2-1631298481/31/4778C 18.79055256789573.00.1345.57 172.71.131.149http/1.1www.report.business.co.th:443GET /xmlrpc.php HTTP/1.1 3-1631298550/31/4483_ 21.19083754505560.00.1427.95 172.70.110.110http/1.1www.biz9nar.com:80GET /.vscode/sftp.json HTTP/1.0 4-1631298300/35/4520W 19.910056010620.00.3230.78 162.158.159.148http/1.1www.biz9nar.com:80GET /about HTTP/1.0 5-1631299510/8/4577_ 4.11069556694580.00.0230.58 74.249.250.179http/1.1www.thefixup333.com:443POST //xmlrpc.php HTTP/1.1 6-1631299591/4/4356C 1.260052432241.40.0127.06 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1631297400/63/4355W 35.540053623490.00.5032.70 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 8-1631299770/2/4275W 0.420052008240.00.0026.39 162.158.174.72http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 9-1631-0/0/3911. 0.0053046609250.00.0024.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1631-0/0/3866. 0.0052049488920.00.0068.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1631-0/0/3691. 0.0064044821300.00.0025.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1631-0/0/3533. 0.0037043601780.00.0023.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1631297640/70/3143_ 43.81054337868560.00.2817.62 162.158.174.91http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 14-1631298730/32/2631W 18.340033523460.00.1414.93 162.158.174.91http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 15-1631298830/33/2631_ 19.36041332295020.00.1117.13 162.158.174.72http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 16-1631-0/0/1358. 0.0066016561360.00.007.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1631-0/0/1174. 0.001337914531190.00.006.27 162.158.174.72http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 18-1631298890/31/964_ 18.28079411785550.00.114.84 172.69.67.6http/1.1www.torrong.com:80POST //wp-login.php HTTP/1.0 19-1631-0/0/1145. 0.00701014323920.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1631-0/0/105. 0.0088101177060.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1631-0/0/5. 0.0025860165940.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1631-0/0/100. 0.0024533991321810.00.000.34 172.71.166.229http/1.1www.mgacccount.com:80POST //wp-login.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 124subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 74 seconds, (range: 11...238)index usage: 4%, cache usage: 5%total entries stored since starting: 5907total entries replaced since starting: 0total entries expired since starting: 5783total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 16 hit, 10595 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-27 20:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e800ced067Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 26-Aug-2023 22:29:41 +07 Restart Time: Saturday, 26-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1627 Parent Server MPM Generation: 1626 Server uptime: 18 hours 27 minutes 29 seconds Server load: 0.78 0.68 0.78 Total accesses: 146917 - Total Traffic: 1.9 GB - Total Duration: 205752674 CPU Usage: u2626.6 s4766.99 cu46998300 cs11499300 - 88000% CPU load 2.21 requests/sec - 29.2 kB/second - 13.2 kB/request - 1400.47 ms/request 5 requests currently being processed, 8 idle workers __W__CW___W_R..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1626294110/37/12271_ 11.4001166814930.00.43161.90 162.158.175.132http/1.1www.chorsiam.com:80GET /wp-content/uploads/2021/12/feature_Home-06.jpg HTTP/1.0 1-1626293030/52/12083_ 21.1801037171800670.00.55114.78 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 2-1626290950/89/12281W 28.1200164703710.01.11171.70 139.144.150.8http/1.1localhost:443GET /server-status HTTP/1.1 3-1626294550/41/11518_ 8.1601163043140.00.35130.84 162.158.175.130http/1.1www.chorsiam.com:80GET /wp-content/uploads/2021/12/feature_Home-03.jpg HTTP/1.0 4-1626295310/19/11657_ 2.8101165300190.00.10128.07 162.158.174.248http/1.1www.chorsiam.com:80GET /wp-content/uploads/2021/12/feature_Home-05.jpg HTTP/1.0 5-1626293141/53/10896C 17.7001153163211.40.54163.81 139.144.150.8http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1626294250/30/10491W 15.3340148306200.00.1798.25 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1693063776.98495006561279296875 7-1626295640/2/10455_ 0.0101147219260.00.00105.32 162.158.174.157http/1.1www.chorsiam.com:80GET /wp-content/uploads/2021/12/feature_Home-07.jpg HTTP/1.0 8-1626290060/91/9766_ 37.3600135301530.01.08115.37 139.144.150.8http/1.1localhost:443GET /about HTTP/1.1 9-1626295710/1/9016_ 0.0002128472630.00.00145.25 162.158.174.178http/1.1www.chorsiam.com:80GET /wp-content/uploads/2022/02/7795.jpg HTTP/1.0 10-1626295730/0/8241W 0.0000111190600.00.0089.70 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 11-1626291470/69/7271_ 28.5300102633240.00.64139.72 162.158.175.142http/1.1www.chorsiam.com:80GET /wp-content/uploads/2021/12/feature_Home-04.jpg HTTP/1.0 12-1626291530/60/5873R 25.1610180886390.00.3454.03 167.248.133.188http/1.1localhost:80GET / HTTP/1.0 13-1626-0/0/4090. 0.001588059424850.00.0049.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1626-0/0/3628. 0.00259458853203900.00.0047.96 77.222.61.114http/1.1www.ltclevelup.com:443POST /xmlrpc.php HTTP/1.1 15-1626-0/0/2347. 0.002831031577690.00.0085.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1626-0/0/1003. 0.003148017846050.00.0053.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1626-0/0/1039. 0.006191013444110.00.0014.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1626-0/0/379. 0.00650505761810.00.003.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1626-0/0/307. 0.00602110894191120.00.003.67 5.188.62.76http/1.1www.chonlateenextbiz.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 20-1626-0/0/431. 0.00648706021020.00.004.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1626-0/0/176. 0.00991202516930.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1626-0/0/271. 0.0093104293548110.00.001.99 8.210.247.187http/1.1www.importantaccount.com:443POST /xmlrpc.php HTTP/1.1 23-1626-0/0/274. 0.00931904235470.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1626-0/0/13. 0.00130310174970.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1626-0/0/71. 0.00129680929490.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1626-0/0/153. 0.002786802080320.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1626-0/0/7. 0.0028088091830.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1626-0/0/192. 0.00276444373482740.00.001.48 162.158.74.96http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 29-1626-0/0/101. 0.00276843371333070.00.000.94 193.106.249.135http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 30-1626-0/0/4. 0.0028105044850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1626-0/0/100. 0.002809801357680.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1626-0/0/100. 0.002808001364570.00.000.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1626-0/0/25. 0.00280040387720.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1626-0/0/100. 0.002811001554710.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1626-0/0/4. 0.0028109042980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1626-0/0/100. 0.002809701590540.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1626-0/0/5. 0.0028102015270.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1626-0/0/99. 0.002809601387810.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1626-0/0/15. 0.00280460291650.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1626-0/0/3. 0.0028095038430.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1626-0/0/57. 0.00278510711000.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1626-0/0/4. 0.0028090040110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 103subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 93 seconds, (range: 1...267)index usage: 3%, cache usage: 4%total entries stored since starting: 25996total entries replaced since starting: 0total entries expired since starting: 25893total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 193 hit, 40223 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-26 15:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8818a889cApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 25-Aug-2023 19:03:18 +07 Restart Time: Friday, 25-Aug-2023 04:02:14 +07 Parent Server Config. Generation: 1624 Parent Server MPM Generation: 1623 Server uptime: 15 hours 1 minute 4 seconds Server load: 1.05 1.01 1.10 Total accesses: 172487 - Total Traffic: 2.0 GB - Total Duration: 252363672 CPU Usage: u2575.82 s4745.04 cu46897200 cs11475900 - 108000% CPU load 3.19 requests/sec - 39.5 kB/second - 12.4 kB/request - 1463.09 ms/request 6 requests currently being processed, 4 idle workers __WCWW_RW._....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1623249150/7/13007_ 3.5601185702630.00.05138.09 139.144.150.45http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1623248140/34/12720_ 11.8601183231040.00.52208.56 139.144.150.45http/1.1localhost:443GET /v2/_catalog HTTP/1.1 2-1623249040/10/12559W 3.9930181003330.00.08148.35 27.254.96.168http/1.1www.siamsolarrooftop.com:443POST /wp-cron.php?doing_wp_cron=1692964994.75701594352722167968 3-1623247821/40/12188C 16.9500176448701.40.56187.89 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1623248200/28/11802W 14.1600171409050.00.28130.47 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 5-1623248260/32/12128W 15.5900175450980.00.37127.60 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 6-1623247130/70/11603_ 30.2100165034870.00.52116.10 139.144.150.45http/1.1localhost:443GET /about HTTP/1.1 7-1623249360/3/11451R 1.7712470167911440.00.05106.75 212.107.29.86http/1.1 8-1623249490/0/10867W 0.0000156276110.00.00116.79 212.107.29.86http/1.1www.smtts.co.th:443GET /%e0%b8%88%e0%b8%ad%e0%b8%a1%e0%b8%ad%e0%b8%99%e0%b8%b4%e0% 9-1623-0/0/10368. 0.0043558146118350.00.0096.80 137.135.68.200http/1.1www.ddkserviceandtransport.com:POST /xmlrpc.php HTTP/1.1 10-1623245860/92/9842_ 42.1901242141778830.04.69128.71 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 11-1623-0/0/9065. 0.001112135938890.00.0094.44 212.107.29.86http/1.1www.smtts.co.th:443GET /wp-content/uploads/2019/10/Feature_Home-10.jpg HTTP/1.1 12-1623-0/0/7562. 0.006340111312600.00.0077.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1623-0/0/6520. 0.0038845095588350.00.0065.65 64.227.5.164http/1.1www.xn--m3cbp0adb4cva5bee03a.coGET /wp-login.php HTTP/1.1 14-1623-0/0/4918. 0.00636067844180.00.0055.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1623-0/0/3628. 0.00273055060760.00.0053.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1623-0/0/3051. 0.00704045946770.00.0043.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1623-0/0/2466. 0.001467038077840.00.0040.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1623-0/0/1201. 0.001663017289900.00.0013.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1623-0/0/627. 0.001720010404580.00.004.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1623-0/0/871. 0.001703013688380.00.007.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1623-0/0/926. 0.001714014930670.00.007.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1623-0/0/601. 0.001716017217620.00.0049.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1623-0/0/454. 0.00172106359900.00.003.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1623-0/0/384. 0.00144366496670.00.002.28 103.10.230.43http/1.1www.siamsolarrooftop.com:443GET /wp-content/uploads/2019/08/edit-product-Ads-02.jpg HTTP/1. 25-1623-0/0/458. 0.00996107761030.00.003.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1623-0/0/196. 0.001031304535980.00.001.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1623-0/0/168. 0.001059703928710.00.001.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1623-0/0/19. 0.00112430279030.00.000.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1623-0/0/198. 0.00110449393377860.00.001.46 85.217.144.141http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 30-1623-0/0/10. 0.0011258077450.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1623-0/0/169. 0.001107902522630.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1623-0/0/87. 0.001108101593340.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1623-0/0/99. 0.002497312671338230.00.000.72 162.158.204.201http/1.1www.khlangkaew.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 34-1623-0/0/13. 0.00254360130570.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1623-0/0/101. 0.00249877431493350.00.001.39 172.70.243.123http/1.1www.proplustech.co.th:443POST //xmlrpc.php HTTP/1.1 36-1623-0/0/7. 0.0025449056410.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1623-0/0/5. 0.0025443012380.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1623-0/0/4. 0.0025469016770.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1623-0/0/7. 0.0025454060070.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1623-0/0/5. 0.002544406570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1623-0/0/99. 0.00249502422099250.00.001.65 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 42-1623-0/0/4. 0.0025437079130.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1623-0/0/2. 0.0025463017500.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1623-0/0/4. 0.0025438052890.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1623-0/0/4. 0.0025439056260.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1623-0/0/9. 0.002507707476510.00.0045.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1623-0/0/3. 0.0025445044010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1623-0/0/5. 0.0025434073100.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1623-0/0/2. 0.0025462024990.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process
Found on 2023-08-25 12:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8233d3b23Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 24-Aug-2023 17:10:38 +07 Restart Time: Thursday, 24-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1621 Parent Server MPM Generation: 1620 Server uptime: 13 hours 8 minutes 26 seconds Server load: 1.60 2.18 1.98 Total accesses: 150595 - Total Traffic: 2.0 GB - Total Duration: 218314649 CPU Usage: u2676.61 s4752.1 cu46761200 cs11444000 - 123000% CPU load 3.18 requests/sec - 43.5 kB/second - 13.7 kB/request - 1449.68 ms/request 10 requests currently being processed, 1 idle workers WCRWRWC_C.C....W.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1620106230/34/11713W 17.3100168640790.00.54126.31 139.59.230.191http/1.1localhost:443GET /server-status HTTP/1.1 1-1620103421/71/11451C 55.5600169266322.63.14136.12 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-1620107600/12/11225R 7.751657162319270.00.17128.57 35.88.146.117http/1.1 3-1620103730/70/11220W 53.4920159373610.02.75143.92 124.120.218.205http/1.1www.cnb.co.th:443POST /wp-admin/post.php HTTP/1.1 4-1620105510/47/10871R 30.41101416157770360.02.14145.37 124.120.218.205http/1.1 5-1620106090/42/10860W 19.3700156743700.00.56188.49 74.81.38.26http/1.1www.krongthongsecurity.com:443POST /wp-login.php HTTP/1.1 6-1620107821/10/9754C 5.1001142264341.30.53145.68 139.59.230.191http/1.1localhost:443GET /about HTTP/1.1 7-1620108200/3/9492_ 0.5502135180400.00.09162.22 139.59.230.191http/1.1localhost:443GET /v2/_catalog HTTP/1.1 8-1620108291/1/9717C 0.0001136753531.40.00161.25 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1620-0/0/9190. 0.001070136095160.00.0091.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1620101671/87/8386C 60.3101625122307456.61.98140.72 205.236.155.137http/1.1www.summer-techthai.com:443POST /xmlrpc.php HTTP/1.1 11-1620-0/0/7235. 0.00990105775430.00.0082.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1620-0/0/6870. 0.001090103735520.00.0082.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1620-0/0/5155. 0.005073780450.00.0062.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1620-0/0/4188. 0.0034056111550.00.0040.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1620106710/28/3762W 17.730056106100.00.7849.16 27.254.96.168http/1.1www.summer-techthai.com:443POST /wp-cron.php?doing_wp_cron=1692871836.91294693946838378906 16-1620-0/0/2416. 0.00108033958780.00.0040.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1620-0/0/1877. 0.00304027595270.00.0017.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1620-0/0/763. 0.00336010007120.00.009.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1620-0/0/851. 0.00200013704590.00.009.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1620-0/0/483. 0.0034816995170.00.007.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1620-0/0/208. 0.0035102983270.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1620-0/0/254. 0.0033304630240.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1620-0/0/59. 0.0040960869440.00.004.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1620-0/0/217. 0.00407102370240.00.001.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1620-0/0/41. 0.0040910677220.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1620-0/0/45. 0.0070670741510.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1620-0/0/143. 0.00706602091270.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1620-0/0/295. 0.00693304403930.00.003.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1620-0/0/21. 0.0071510416100.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1620-0/0/21. 0.0071790486250.00.001.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1620-0/0/124. 0.00712901787180.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1620-0/0/17. 0.0071520346470.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1620-0/0/170. 0.00717203280050.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1620-0/0/113. 0.00717101720760.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1620-0/0/20. 0.0071470347420.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1620-0/0/16. 0.0071560370370.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1620-0/0/115. 0.00717401534960.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1620-0/0/156. 0.00712602050370.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1620-0/0/209. 0.00713202869090.00.001.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1620-0/0/36. 0.0071700698300.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1620-0/0/213. 0.00715403712390.00.001.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1620-0/0/90. 0.00715801340380.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1620-0/0/106. 0.00713602337720.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1620-0/0/100. 0.00716901321280.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1620-0/0/100. 0.00680910011620700.00.002.18 172.177.232.193http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 46-1620-0/0/40. 0.0071590721870.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1620-0/0/67. 0.00693801161070.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1620-0/0/13. 0.0071500259300.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1620-0/0/107. 0.00717801512200.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-08-24 10:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8fdf2c5d8Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 23-Aug-2023 09:06:05 +07 Restart Time: Wednesday, 23-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1618 Parent Server MPM Generation: 1617 Server uptime: 5 hours 3 minutes 52 seconds Server load: 4.71 3.34 3.14 Total accesses: 63104 - Total Traffic: 663.6 MB - Total Duration: 89624506 CPU Usage: u2854.32 s4774.95 cu46536200 cs11390000 - 318000% CPU load 3.46 requests/sec - 37.3 kB/second - 10.8 kB/request - 1420.27 ms/request 5 requests currently being processed, 11 idle workers W_.__.___WW.____CW..._............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1617142630/28/5185W 23.470073210540.00.2946.47 172.68.66.50http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 1-1617141970/63/4881_ 46.55088570479180.00.4592.22 172.68.146.33http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 2-1617-0/0/5026. 0.0013071561140.00.0047.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1617143180/27/4817_ 24.920068352530.00.3045.10 139.144.150.26http/1.1localhost:443GET /about HTTP/1.1 4-1617141540/74/4942_ 52.360066520070.00.6250.93 139.144.150.26http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1617-0/0/4756. 0.009069319700.00.0042.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1617143600/26/4612_ 21.49044065218330.00.2143.26 172.70.111.152http/1.1www.smebkk.com:80POST /wp-login.php HTTP/1.0 7-1617140990/90/4308_ 56.611148061315450.00.6842.48 172.70.111.138http/1.1www.smebkk.com:80GET /wp-login.php HTTP/1.0 8-1617143950/18/4126_ 17.60096757610720.00.3042.78 172.68.234.191http/1.1www.smebkk.com:80GET /category/type-b/ HTTP/1.0 9-1617141250/75/3917W 50.7427054103040.00.5137.29 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 10-1617141310/75/3643W 79.080051107420.00.5842.99 172.68.146.32http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 11-1617-0/0/3236. 0.0012044159900.00.0030.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1617144590/7/2920_ 5.740042336370.00.0429.98 139.144.150.26http/1.1localhost:443GET /v2/_catalog HTTP/1.1 13-1617144040/19/1965_ 13.51078828573040.00.2217.14 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-1617144240/6/1709_ 33.690150124514490.00.0314.91 172.68.234.176http/1.1www.smebkk.com:80POST /wp-cron.php?doing_wp_cron=1692756362.94704890251159667968 15-1617140500/93/1081_ 57.51094317320220.00.7813.04 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 16-1617144711/7/788C 5.810012563731.40.0610.71 139.144.150.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1617144830/7/678W 5.320010663360.00.059.73 139.144.150.26http/1.1localhost:443GET /server-status HTTP/1.1 18-1617-0/0/301. 0.00404371580.00.002.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1617-0/0/103. 0.001601467000.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1617-0/0/7. 0.0010112760.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1617145040/6/87_ 4.56001211600.00.020.57 192.42.116.13http/1.1www.eecbusiness.com:80GET /wp-json/wp/v2/users/4 HTTP/1.0 22-1617-0/0/7. 0.008091090.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1617-0/0/3. 0.0014133020200.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1617-0/0/1. 0.0014139000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1617-0/0/2. 0.0014135011730.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1617-0/0/3. 0.0014131029740.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 166subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 54 seconds, (range: 9...289)index usage: 5%, cache usage: 7%total entries stored since starting: 6407total entries replaced since starting: 0total entries expired since starting: 6241total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 7 hit, 16995 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-23 02:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8dbb927cfApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 21-Aug-2023 19:05:07 +07 Restart Time: Monday, 21-Aug-2023 14:17:12 +07 Parent Server Config. Generation: 1612 Parent Server MPM Generation: 1611 Server uptime: 4 hours 47 minutes 55 seconds Server load: 5.80 5.11 4.62 Total accesses: 119884 - Total Traffic: 1.1 GB - Total Duration: 140827707 CPU Usage: u2745.57 s4727.26 cu46284300 cs11326400 - 334000% CPU load 6.94 requests/sec - 69.1 kB/second - 10.0 kB/request - 1174.7 ms/request 10 requests currently being processed, 5 idle workers CR_WWWC_..._W..._WWW_............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-161119661/69/8451C 37.290098982221.40.4480.92 167.99.182.39http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-161121080/30/8129R 16.79128695928290.00.1869.18 66.249.71.39http/1.1 2-161121410/23/8190_ 11.55028094653000.00.1376.17 40.122.165.81http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 3-161119230/94/7878W 51.041093881970.00.6076.02 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 4-161119950/68/7803W 34.662092863550.00.3461.82 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1692619505.75123691558837890625 5-161121580/12/7559W 6.470087843150.00.0574.96 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 6-161121751/1/7590C 0.62069989686867.20.0190.65 40.77.28.77http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1 7-161121820/0/7305_ 0.00062086646640.00.0067.78 172.68.10.113http/1.1www.smebkk.com:80POST /xmlrpc.php HTTP/1.0 8-1611-0/0/7023. 0.004630383299500.00.0073.53 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 9-1611-0/0/6731. 0.003197279317070.00.0064.96 172.68.10.253http/1.1www.smetast.com:80POST /xmlrpc.php HTTP/1.0 10-1611-0/0/6959. 0.001827983227040.00.0062.27 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 11-161120150/54/6242_ 30.58030973799500.00.3549.54 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 12-161120030/56/5741W 29.990067282810.00.2971.41 167.99.182.39http/1.1localhost:443GET /server-status HTTP/1.1 13-1611-0/0/5344. 0.0074062751150.00.0049.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1611-0/0/4477. 0.00081954541480.00.0039.53 202.28.32.5http/1.1www.summer-techthai.com:443POST //xmlrpc.php HTTP/1.1 15-1611-0/0/3478. 0.0052043090050.00.0029.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-161119470/91/2515_ 50.40030930207630.00.5234.82 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 17-161120390/54/1923W 28.990022660470.00.2618.09 172.68.10.166http/1.1www.smetast.com:80POST /xmlrpc.php HTTP/1.0 18-161120540/46/1708W 28.601020184250.00.2614.89 108.162.227.71http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 19-161120660/47/552W 25.78005968280.00.275.61 202.28.32.5http/1.1www.summer-techthai.com:443POST //xmlrpc.php HTTP/1.1 20-161120670/40/485_ 24.2602804507300.00.245.84 40.122.165.81http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 21-1611-0/0/393. 0.00136703267450.00.003.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1611-0/0/562. 0.0012467545916270.00.005.61 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 23-1611-0/0/264. 0.0012432352517760.00.002.73 40.122.165.81http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 24-1611-0/0/288. 0.00137802479420.00.003.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1611-0/0/160. 0.0012363801333720.00.001.19 194.233.72.90http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 26-1611-0/0/184. 0.0046947501938180.00.001.73 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1611-0/0/327. 0.00487203713160.00.003.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1611-0/0/243. 0.00488302394040.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1611-0/0/36. 0.0048960174380.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1611-0/0/251. 0.0046832922872120.00.002.67 106.15.38.206http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 31-1611-0/0/111. 0.0047108321091780.00.000.90 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 32-1611-0/0/126. 0.0047088751335930.00.001.19 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 33-1611-0/0/147. 0.00486701685170.00.005.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1611-0/0/151. 0.00469001888970.00.002.70 185.196.220.26http/1.1www.dinocoffees.com:80GET /wp-content/plugins/profilegrid-user-profiles-groups-and-co 35-1611-0/0/17. 0.00489221761850.00.000.32 35.89.64.107http/1.1www.cnb.co.th:443GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3 H 36-1611-0/0/99. 0.004765822966620.00.001.00 172.71.166.230http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 37-1611-0/0/53. 0.0048660227080.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1611-0/0/39. 0.0048840262840.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1611-0/0/68. 0.0047930823640.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1611-0/0/29. 0.0048760213080.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1611-0/0/23. 0.0048770134650.00.000.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1611-0/0/39. 0.0048820253090.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1611-0/0/41. 0.0048700305830.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1611-0/0/27. 0.0048950221680.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1611-0/0/44. 0.0048640435880.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1611-0/0/43. 0.0048790293110.00.001.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1611-0/0/24. 0.004881089750.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1611-0/0/11. 0.004888057130.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1611-0/0/1. 0.004900240.00.000.00 34.220.208.149http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of m
Found on 2023-08-21 12:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e84e59c6b1Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 19-Aug-2023 23:38:37 +07 Restart Time: Saturday, 19-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1601 Parent Server MPM Generation: 1600 Server uptime: 19 hours 36 minutes 23 seconds Server load: 4.85 4.84 4.76 Total accesses: 495039 - Total Traffic: 5.1 GB - Total Duration: 754320632 CPU Usage: u2819.95 s4725.1 cu45733700 cs11174000 - 80600% CPU load 7.01 requests/sec - 75.1 kB/second - 10.7 kB/request - 1523.76 ms/request 7 requests currently being processed, 7 idle workers C_WWWR_C_.W.____.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1600284851/70/30120C 42.520487452248543.70.48305.60 162.158.2.45http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 1-1600285180/61/30138_ 36.760668447782770.00.33307.97 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 2-1600286820/7/29305W 3.9400444513480.00.03340.53 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 3-1600285100/65/29024W 39.6900432878190.00.46325.30 137.184.150.232http/1.1localhost:443GET /server-status HTTP/1.1 4-1600285410/55/28332W 35.1100420321660.00.41270.69 162.158.162.73http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 5-1600284030/97/28267R 56.250431423774310.00.59294.68 159.65.135.96http/1.1www.12gobiz.com:443 6-1600284310/90/28549_ 52.460547429796710.00.50291.93 172.71.170.157http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 7-1600285751/36/27750C 22.2711419966581.40.21280.50 137.184.150.232http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1600286210/26/27216_ 17.100449412534030.00.18319.98 172.71.167.37http/1.1www.acumaticathailand.com:80POST //xmlrpc.php HTTP/1.0 9-1600-0/0/26384. 0.0018942400052340.00.00299.36 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 10-1600284110/94/25409W 57.0500385206480.00.56252.92 172.69.64.229http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 11-1600-0/0/24649. 0.001602372834860.00.00242.70 162.158.162.72http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 12-1600284570/88/23889_ 49.830578366210970.00.45243.28 162.158.162.73http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 13-1600284420/88/22602_ 55.220596337592140.00.61225.29 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 14-1600286340/25/20634_ 15.060701318676170.00.14198.78 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 15-1600285860/36/19455_ 22.460640299590430.00.23186.99 108.162.227.140http/1.1www.proplustech.co.th:443GET /xmlrpc.php HTTP/1.1 16-1600-0/0/16452. 0.00161423255479680.00.00205.26 172.71.166.120http/1.1www.acumaticathailand.com:80POST //xmlrpc.php HTTP/1.0 17-1600-0/0/13560. 0.003350208070880.00.00130.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1600-0/0/10724. 0.003520166031020.00.00127.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1600-0/0/8039. 0.00154676127015150.00.0072.50 162.158.2.44http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 20-1600-0/0/6258. 0.00249098162300.00.0062.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1600-0/0/4325. 0.00177070524030.00.0043.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1600-0/0/3492. 0.00351056867850.00.0037.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1600-0/0/3019. 0.00295050981470.00.0026.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1600-0/0/1964. 0.00330033191180.00.0019.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1600-0/0/1649. 0.0015656428763760.00.0018.01 162.158.2.246http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 26-1600-0/0/1024. 0.0011645018020390.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1600-0/0/573. 0.0011653010916890.00.005.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1600-0/0/253. 0.001163405349510.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1600-0/0/203. 0.001163604335330.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1600-0/0/193. 0.001165504186880.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1600-0/0/329. 0.001153805730970.00.007.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1600-0/0/137. 0.001164303147530.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1600-0/0/91. 0.001149101967430.00.003.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1600-0/0/141. 0.001164203233850.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1600-0/0/130. 0.001161902747280.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1600-0/0/27. 0.001165401364630.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1600-0/0/86. 0.001164802641510.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1600-0/0/40. 0.001164601572150.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1600-0/0/37. 0.001164701523990.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1600-0/0/113. 0.001154002530290.00.004.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1600-0/0/57. 0.001154101733960.00.004.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1600-0/0/37. 0.005437001431370.00.000.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1600-0/0/39. 0.005435601613950.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1600-0/0/29. 0.005440101232370.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1600-0/0/100. 0.00542439842442900.00.000.72 108.162.242.104http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 46-1600-0/0/37. 0.005434601507310.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1600-0/0/110. 0.00542087602580430.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 48-1600-0/0/23. 0.005440901163420.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1600-0/0/25. 0.005436401164760.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to proces
Found on 2023-08-19 16:37 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e83ca8d4f9Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 18-Aug-2023 22:38:01 +07 Restart Time: Friday, 18-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1598 Parent Server MPM Generation: 1597 Server uptime: 18 hours 35 minutes 49 seconds Server load: 5.16 5.34 5.13 Total accesses: 465815 - Total Traffic: 4.8 GB - Total Duration: 710030697 CPU Usage: u2926.74 s4736.15 cu45402000 cs11083200 - 84400% CPU load 6.96 requests/sec - 75.6 kB/second - 10.9 kB/request - 1524.28 ms/request 8 requests currently being processed, 7 idle workers CWWWW____WWW___................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1597154691/96/28726C 60.5401426477931.40.72270.77 64.227.126.135http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1597154400/91/28280W 60.1500426951210.01.07266.08 40.83.19.170http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 2-1597154490/92/27632W 62.7900417771950.00.75336.35 64.227.126.135http/1.1localhost:443GET /server-status HTTP/1.1 3-1597156590/36/27818W 21.1000415948180.00.45282.94 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1597156360/21/27197W 13.47280406789960.00.41294.60 172.71.146.33http/1.1www.singkansard.com:443GET /wp-content/uploads/2019/12/52.jpg?gid=1 HTTP/1.1 5-1597155980/54/27027_ 35.170822404184510.00.45274.22 193.106.196.237http/1.1www.npaccounting.co.th:443POST //wp-login.php HTTP/1.1 6-1597155170/74/26757_ 54.991739403209940.00.79268.70 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-1597155240/78/25999_ 53.210418395360060.00.61279.02 137.135.68.200http/1.1www.nadapool.com:443POST /xmlrpc.php HTTP/1.1 8-1597156460/41/25425_ 27.890683381549090.00.33248.44 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 9-1597155320/70/24310W 51.7000367092000.00.68299.72 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 10-1597156710/28/23873W 17.3600358105710.00.22240.35 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 11-1597156980/17/22443W 11.0700336888840.00.13228.70 172.172.40.192http/1.1www.xn--12cacvb1pma4c0b3jmdh.coGET / HTTP/1.0 12-1597153980/93/21308_ 67.7701321925500.01.05270.80 64.227.126.135http/1.1localhost:443GET /about HTTP/1.1 13-1597154550/90/20715_ 62.280375311718260.01.09214.62 40.113.240.70http/1.1www.bannongsaischool.com:443POST //xmlrpc.php HTTP/1.1 14-1597155380/71/17518_ 55.610698267646110.00.70189.69 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 15-1597-0/0/15983. 0.0070251048440.00.00213.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1597-0/0/13632. 0.002040213276950.00.00154.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1597-0/0/12475. 0.0022406194005470.00.00129.27 162.158.174.73http/1.1www.altaccount.com:80POST /xmlrpc.php HTTP/1.0 18-1597-0/0/9748. 0.002980154768270.00.0089.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1597-0/0/8275. 0.00284506136042710.00.0088.33 172.70.134.62http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 20-1597-0/0/6706. 0.0010340109601690.00.0078.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1597-0/0/5747. 0.003361088509290.00.0046.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1597-0/0/3932. 0.003380065454250.00.0050.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1597-0/0/3353. 0.003371056000710.00.0029.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1597-0/0/1846. 0.003284030340330.00.0013.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1597-0/0/1699. 0.00309884227133200.00.0014.48 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 26-1597-0/0/1234. 0.00311253821922830.00.009.25 172.70.162.212http/1.1www.tun36.com:80GET /login.action HTTP/1.0 27-1597-0/0/898. 0.003360013529880.00.0010.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1597-0/0/297. 0.00335206390320.00.003.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1597-0/0/499. 0.00338207830690.00.004.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1597-0/0/109. 0.00336302128540.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1597-0/0/209. 0.00337904569110.00.003.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1597-0/0/282. 0.00337205194930.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1597-0/0/167. 0.00332303815640.00.002.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1597-0/0/234. 0.00337804030640.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1597-0/0/345. 0.00310911076581550.00.002.59 193.106.196.237http/1.1www.npaccounting.co.th:443POST //xmlrpc.php HTTP/1.1 36-1597-0/0/345. 0.00335605461800.00.002.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1597-0/0/416. 0.00333507639390.00.002.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1597-0/0/225. 0.00338403677610.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1597-0/0/392. 0.0031018307072230.00.003.28 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 40-1597-0/0/428. 0.0031105158000860.00.003.07 172.71.178.136http/1.1www.tun36.com:80GET /.DS_Store HTTP/1.0 41-1597-0/0/61. 0.0033670990680.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1597-0/0/111. 0.00336403138350.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1597-0/0/281. 0.00328004729580.00.002.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1597-0/0/100. 0.00336202206820.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1597-0/0/152. 0.0031135412815910.00.001.79 172.70.91.11http/1.1www.tun36.com:80GET /server-status HTTP/1.0 46-1597-0/0/121. 0.00338702158600.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1597-0/0/283. 0.00336504804790.00.001.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1597-0/0/71. 0.00338601318470.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1597-0/0/131. 0.00337002496950.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all request
Found on 2023-08-18 15:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e80e353f22Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 17-Aug-2023 20:27:55 +07 Restart Time: Thursday, 17-Aug-2023 16:36:02 +07 Parent Server Config. Generation: 1595 Parent Server MPM Generation: 1594 Server uptime: 3 hours 51 minutes 52 seconds Server load: 6.08 6.27 6.06 Total accesses: 112697 - Total Traffic: 946.9 MB - Total Duration: 148643881 CPU Usage: u2788.33 s4663.08 cu45072900 cs10995800 - 403000% CPU load 8.1 requests/sec - 69.7 kB/second - 8.6 kB/request - 1318.97 ms/request 15 requests currently being processed, 4 idle workers W_WWRRC___WWWW.........C.C.....W....W...W......... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1594212270/68/7141W 39.880092793430.00.4059.65 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 1-1594212350/64/6934_ 39.78050492109840.00.3858.22 162.158.174.215http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 2-1594212500/59/6866W 36.220090277660.00.3055.86 172.69.64.193http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 3-1594212590/56/6780W 33.561089298080.00.2757.85 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1594212870/55/6811R 29.901088123320.00.2562.69 103.130.219.197http/1.1 5-1594213390/22/6464R 12.23163985651020.00.0955.80 92.205.107.64http/1.1 6-1594213681/8/6301C 2.990082471090.20.0251.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1594213780/3/6264_ 1.99079482306430.00.0148.41 172.71.223.170http/1.1www.torrong.co.th:80GET /wp-login.php HTTP/1.0 8-1594213840/2/6079_ 1.77095181076230.00.0151.44 172.70.174.89http/1.1www.smetast.com:80GET /media-admin.php HTTP/1.0 9-1594213900/3/5836_ 1.37045476016650.00.0050.38 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 10-1594213960/1/6187W 0.000080758560.00.0051.20 172.71.166.226http/1.1www.singkansard.com:443POST //wp-login.php HTTP/1.1 11-1594213970/1/5664W 1.000074190060.00.0149.56 27.254.96.168http/1.1www.wecanfixtrading.com:443POST /wp-cron.php?doing_wp_cron=1692278874.77568101882934570312 12-1594213980/1/5244W 0.880068372710.00.0041.18 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 13-1594214040/1/4940W 0.780066702420.00.0145.81 172.70.174.89http/1.1www.smetast.com:80GET //ups.php HTTP/1.0 14-1594-0/0/4646. 0.00159062462040.00.0036.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1594-0/0/4632. 0.00144060771490.00.0034.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1594-0/0/3797. 0.00157050004330.00.0031.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1594-0/0/2543. 0.00136032552250.00.0025.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1594-0/0/2027. 0.001444726316530.00.0017.47 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 19-1594-0/0/1557. 0.00147020802190.00.0011.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1594-0/0/1053. 0.00158013577270.00.0010.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1594-0/0/550. 0.0015607045290.00.005.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1594-0/0/295. 0.0013403657920.00.003.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1594210011/92/343C 56.05005226381.40.532.32 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 24-1594-0/0/295. 0.0014004283520.00.005.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1594210121/98/410C 55.0907885672193.70.572.74 172.64.238.151http/1.1www.khlangkaew.com:443POST /xmlrpc.php HTTP/1.1 26-1594-0/0/522. 0.0013207196560.00.003.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1594-0/0/192. 0.0013302327050.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1594-0/0/30. 0.001480569700.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1594-0/0/138. 0.0014902003460.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1594-0/0/111. 0.0015301735890.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1594210480/89/130W 53.87102026460.00.540.84 3.110.90.168http/1.1www.wecanfixtrading.com:443GET /wp-login.php HTTP/1.1 32-1594-0/0/26. 0.001550582210.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1594-0/0/116. 0.0015101872040.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1594-0/0/48. 0.001380886960.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1594-0/0/131. 0.0014101993710.00.000.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1594210870/93/403W 54.34005171990.00.442.51 162.158.175.122http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 37-1594-0/0/179. 0.0016002532370.00.001.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1594-0/0/86. 0.003201292940.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1594-0/0/32. 0.001370653490.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1594211160/91/204W 54.71002953050.00.531.15 172.71.182.66http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 41-1594-0/0/222. 0.0024582950370.00.001.71 162.158.174.215http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 42-1594-0/0/125. 0.0013101884010.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1594-0/0/97. 0.0014601685310.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1594-0/0/34. 0.001220574460.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1594-0/0/102. 0.0044351447290.00.000.56 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 46-1594-0/0/102. 0.0015001445090.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1594-0/0/8. 0.001430135290.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 118subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 67 seconds, (range: 0...252)index usage: 4%, cache usage: 5%total entries sto
Found on 2023-08-17 13:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8629b619fApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 18:51:35 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 14 hours 49 minutes 21 seconds Server load: 6.08 5.41 5.24 Total accesses: 490403 - Total Traffic: 3.9 GB - Total Duration: 711134718 CPU Usage: u2747.52 s4622.55 cu44711800 cs10897300 - 104000% CPU load 9.19 requests/sec - 76.5 kB/second - 8.3 kB/request - 1450.1 ms/request 10 requests currently being processed, 6 idle workers .W_._W_RW.WW.___WWC.W............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1588-0/0/27300. 0.00100386915450.00.00231.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1588255970/40/27301W 28.7500383287620.00.16218.38 172.71.167.160http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 2-1588257690/6/26895_ 3.800745385847760.00.02212.37 172.71.167.178http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 3-1588-0/0/26410. 0.00250383937260.00.00238.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1588256890/16/26436_ 12.530547379314120.00.09211.87 172.71.118.70http/1.1www.altaccount.com:80POST /xmlrpc.php HTTP/1.0 5-1588255190/53/26017W 35.9600376100280.00.25186.57 172.70.55.119http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 6-1588255320/49/25672_ 33.9801507369017060.00.19194.67 185.220.101.54http/1.1www.1smestartup.com:443GET /?author=2 HTTP/1.1 7-1588256300/31/25832R 22.330597365901600.00.27175.31 148.72.40.90http/1.1www.hotlineservicethailand.com: 8-1588256400/30/24618W 19.9900352212750.00.16187.31 162.158.175.214http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 9-1588-0/0/24470. 0.00320352218240.00.00180.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1588253950/91/23709W 56.8300342463600.00.94168.01 144.126.198.24http/1.1localhost:443GET /server-status HTTP/1.1 11-1588254120/85/23163W 52.4500336724010.00.40180.27 172.69.65.142http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 12-1588-0/0/22882. 0.00360328884270.00.00186.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1588255470/49/21890_ 34.350519313507550.00.18171.08 172.70.55.119http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 14-1588255560/48/21181_ 33.290638310099660.00.21237.77 66.249.79.173http/1.1www.smtts.co.th:443GET /comments/feed/ HTTP/1.1 15-1588255620/45/19219_ 31.8100278465150.00.24154.96 144.126.198.24http/1.1localhost:443GET /about HTTP/1.1 16-1588257030/19/18169W 11.9400261305360.00.07137.88 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 17-1588255740/43/16290W 28.7800240715160.00.30218.99 172.69.67.141http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 18-1588257091/19/14375C 12.6400213029251.40.09104.44 144.126.198.24http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-1588-0/0/11713. 0.00380172672600.00.0097.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1588257210/18/9161W 12.1500139855690.00.0666.89 172.71.166.246http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 21-1588-0/0/6788. 0.00277590101669960.00.0053.76 172.69.65.119http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 22-1588-0/0/5447. 0.0024284183403370.00.0049.42 172.69.67.141http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 23-1588-0/0/3881. 0.0038649260819430.00.0031.86 172.71.167.160http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 24-1588-0/0/3464. 0.0022340654889270.00.0024.62 172.70.55.119http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 25-1588-0/0/2603. 0.00372043115360.00.0018.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1588-0/0/1503. 0.00238022439080.00.0013.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1588-0/0/1034. 0.007577015503660.00.007.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1588-0/0/806. 0.009401013495190.00.006.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1588-0/0/580. 0.009810110009260.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1588-0/0/319. 0.00975805306840.00.006.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1588-0/0/392. 0.00957306441090.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1588-0/0/83. 0.003155401652280.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1588-0/0/112. 0.003154702871870.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1588-0/0/101. 0.003151901881510.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1588-0/0/129. 0.003152002345130.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1588-0/0/18. 0.00315520652620.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1588-0/0/109. 0.00313338242613860.00.000.66 172.70.189.100http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 38-1588-0/0/100. 0.00427788141804300.00.000.65 172.70.135.128http/1.1www.chonlateefarm.com:443POST //wp-login.php HTTP/1.1 39-1588-0/0/90. 0.004280601630980.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1588-0/0/16. 0.00429550679680.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1588-0/0/14. 0.00429710608390.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1588-0/0/12. 0.00429670649130.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1588-0/0/12. 0.00429770608070.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1588-0/0/25. 0.00429340787580.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1588-0/0/17. 0.00429650616270.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1588-0/0/12. 0.00429800602590.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1588-0/0/10. 0.00429750621060.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1588-0/0/11. 0.00429840570430.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1588-0/0/12. 0.00429820584220.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this c
Found on 2023-08-16 11:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e807b99d41Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 02:56:40 +07 Restart Time: Wednesday, 16-Aug-2023 00:24:35 +07 Parent Server Config. Generation: 1588 Parent Server MPM Generation: 1587 Server uptime: 2 hours 32 minutes 5 seconds Server load: 20.02 17.66 16.47 Total accesses: 115475 - Total Traffic: 666.8 MB - Total Duration: 225644800 CPU Usage: u3014.66 s4697.35 cu44439500 cs10823500 - 606000% CPU load 12.7 requests/sec - 74.8 kB/second - 5.9 kB/request - 1954.06 ms/request 27 requests currently being processed, 10 idle workers W.WC_WWW.W.WCC__._WCWCW__WWWWWW_R_W_W..W_WW....... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1587209790/8/4732W 6.820089697330.00.0528.37 172.71.175.35http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 1-1587-0/0/4729. 0.006089538820.00.0026.03 178.62.73.12http/1.1 2-1587207060/34/4668W 26.580087921650.00.1826.98 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 3-1587202781/82/4592C 64.460085975580.20.4026.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1587210010/8/4574_ 6.18085286345790.00.0227.84 162.158.174.20http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 5-1587202970/78/4650W 58.230087544480.00.4127.41 40.83.35.186http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 6-1587208380/17/4638W 14.370086353040.00.1725.66 51.178.146.199http/1.1www.summer-techthai.com:443GET /?author=50 HTTP/1.1 7-1587207130/31/4369W 22.602123583775420.00.2225.72 51.178.146.199http/1.1www.summer-techthai.com:443GET /?author=49 HTTP/1.1 8-1587-0/0/4566. 0.002086833530.00.0028.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1587210340/4/4483W 3.310085522340.00.0125.17 172.70.86.47http/1.1www.chonlateetravel.com:80GET /?author=19 HTTP/1.0 10-1587-0/0/4465. 0.001083476140.00.0023.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1587207760/25/4496W 19.880083585440.00.2126.22 178.62.73.12http/1.1www.nadapool.com:443GET /debug/default/view?panel=config HTTP/1.1 12-1587207921/28/4212C 21.93086479036857.20.1222.88 20.169.206.229http/1.1www.bannongsaischool.com:443POST //xmlrpc.php HTTP/1.1 13-1587210521/3/4216C 2.32088880481043.80.0123.98 172.71.170.117http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 14-1587203800/65/4127_ 46.400133378042380.00.2922.78 40.83.35.60http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 15-1587207990/30/4104_ 20.87095377720010.00.1025.50 172.70.247.66http/1.1www.chonlateetravel.com:80GET /?author=10 HTTP/1.0 16-1587-0/0/4064. 0.003191377702210.00.0022.03 172.173.116.204http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 17-1587208460/21/4006_ 15.83098877716790.00.1225.03 172.70.174.227http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 18-1587208570/18/3803W 12.391073296720.00.1422.28 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 19-1587209851/8/3710C 5.5201290714474613.90.0521.75 40.78.158.54http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 20-1587204090/43/3482W 30.6539186768693900.00.1720.34 51.178.146.199http/1.1www.summer-techthai.com:443GET /?author=41 HTTP/1.1 21-1587208761/16/3178C 13.380065096841.40.0818.14 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 22-1587209910/9/2822W 5.530057006040.00.0315.41 172.69.65.151http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 23-1587208820/17/2833_ 12.340126158931170.00.1315.66 162.158.174.176http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 24-1587204530/58/2645_ 42.790054670650.00.3713.95 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 25-1587208880/16/2322W 14.160048980080.00.2112.75 162.158.174.160http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 26-1587210020/7/2208W 5.270046700490.00.0512.52 40.83.42.130http/1.1www.chonlateebusiness.com:443POST //xmlrpc.php HTTP/1.1 27-1587210030/8/2029W 3.790043308740.00.0410.72 162.158.174.197http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 28-1587204900/57/1676W 43.620037223460.00.3411.96 195.161.41.70http/1.1www.summer-techthai.com:443GET /?author=6 HTTP/1.1 29-1587210040/7/1238W 4.570028954210.00.016.65 172.71.166.59http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 30-1587210640/2/1095W 1.681025188100.00.017.50 172.71.167.49http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 31-1587206150/43/847_ 32.32093520091120.00.254.65 172.69.65.151http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 32-1587210650/3/528R 1.661013357620.00.013.78 40.78.153.9http/1.1 33-1587205730/47/423W 36.930011124740.00.372.70 172.71.174.124http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 34-1587210660/3/149W 1.71003847790.00.010.88 172.71.175.29http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 35-1587205750/46/298_ 33.63011267918110.00.241.55 172.71.174.124http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 36-1587205810/41/280W 34.06107018430.00.291.56 172.69.64.249http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 37-1587-0/0/24. 0.0042673000.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1587-0/0/25. 0.00360815430.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1587206330/43/43W 32.62101155420.00.250.25 20.127.78.238http/1.1www.tafa.or.th:443POST //wp-login.php HTTP/1.1 40-1587206340/39/39_ 31.34010491188810.00.320.32 162.158.175.155http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 41-1587206410/44/44W 33.99001257130.00.280.28 172.173.116.204http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 42-1587206460/43/43W 35.18001233520.00.250.25 162.158.175.155http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 190subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 52 seconds, (range: 4...146)index usage: 6%, cache usage: 8%total entries stored since starting: 5808total entries replaced since starting: 0total entries expired since starting: 5618total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 64 hit, 23632 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-15 19:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e850f1180eApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 04-Aug-2023 00:25:21 +07 Restart Time: Friday, 04-Aug-2023 00:23:33 +07 Parent Server Config. Generation: 1542 Parent Server MPM Generation: 1541 Server uptime: 1 minute 47 seconds Server load: 3.36 4.48 4.10 Total accesses: 609 - Total Traffic: 5.4 MB - Total Duration: 680869 CPU Usage: u2533.27 s4287.85 cu41089100 cs9932030 - 4.77e+7% CPU load 5.69 requests/sec - 51.7 kB/second - 9.1 kB/request - 1118.01 ms/request 17 requests currently being processed, 4 idle workers CCCRW_WCWC_CCCRCWC__R............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-154127171/49/49C 23.000356513251.20.440.44 161.35.27.144http/1.1www.nadapool.com:443GET /server-status HTTP/1.1 1-154129481/12/41C 3.2611498541.30.050.32 139.144.150.45http/1.1localhost:443GET /config.json HTTP/1.1 2-154128671/24/40C 11.7811501481.30.310.49 134.122.89.242http/1.1localhost:443GET /.env HTTP/1.1 3-154127470/47/47R 23.583888478810.00.480.48 41.225.18.210http/1.1www.chonlateevip.com:443 4-154127530/47/47W 26.1400561200.00.550.55 142.93.153.3http/1.1localhost:443GET /server-status HTTP/1.1 5-154127630/42/42_ 23.3900482930.00.410.41 139.144.150.45http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 6-154127710/39/39W 20.1200426840.00.360.36 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 7-154127731/45/45C 24.3510551511.30.370.37 139.144.150.45http/1.1localhost:443GET /telescope/requests HTTP/1.1 8-154128950/16/33W 8.9500408430.00.120.26 172.68.138.172http/1.1www.chonlateefarm.com:443POST /xmlrpc.php HTTP/1.1 9-154127881/48/48C 21.6904594745910.20.360.36 165.22.74.203http/1.1www.nadapool.com:443GET /v2/_catalog HTTP/1.1 10-154127920/36/36_ 21.6400452300.00.300.30 139.144.150.45http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-154128001/39/39C 23.9810488931.30.440.44 134.122.89.242http/1.1localhost:443GET /.git/config HTTP/1.1 12-154128351/27/27C 16.0200435181.40.220.22 142.93.153.3http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-154129061/19/19C 9.1401189151.40.170.17 134.122.89.242http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 14-154129400/12/14R 3.3901112800.00.030.06 139.144.150.45http/1.1localhost:443GET /.git/config HTTP/1.1 15-154129261/18/18C 6.3310127421.30.090.09 134.122.89.242http/1.1localhost:443GET /.env HTTP/1.1 16-154129540/12/12W 2.120041830.00.030.03 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 17-154129841/6/6C 1.060123331.30.020.02 134.122.89.242http/1.1localhost:443GET /.git/config HTTP/1.1 18-154129900/3/3_ 0.76075915260.00.020.02 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 19-154129960/3/3_ 1.24076924790.00.020.02 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 20-154130030/1/1R 0.001240.00.000.00 43.154.17.104http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 77subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 229 seconds, (range: 192...293)index usage: 2%, cache usage: 3%total entries stored since starting: 77total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 213 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-03 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e833cf806dApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 04-Jun-2023 00:25:44 +07 Restart Time: Sunday, 04-Jun-2023 00:24:21 +07 Parent Server Config. Generation: 1298 Parent Server MPM Generation: 1297 Server uptime: 1 minute 22 seconds Server load: 1.85 2.38 2.15 Total accesses: 303 - Total Traffic: 1.7 MB - Total Duration: 283290 CPU Usage: u2012.5 s3446.5 cu32418900 cs7755610 - 4.9e+7% CPU load 3.7 requests/sec - 21.5 kB/second - 5.8 kB/request - 934.951 ms/request 13 requests currently being processed, 4 idle workers _CWRRRCWW_C_C_.CRC................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1297278570/25/25_ 11.950488286640.00.250.25 77.81.225.158http/1.1www.pokaorganize.com:443POST /xmlrpc.php HTTP/1.1 1-1297278751/24/24C 9.9401354354266.50.190.19 88.135.68.73http/1.1www.thefixup333.com:443POST /xmlrpc.php HTTP/1.1 2-1297280450/13/27W 1.8400193970.00.030.15 172.71.160.63http/1.1www.makeregist.com:80POST /xmlrpc.php HTTP/1.0 3-1297278790/5/5R 3.90503170156210.00.040.04 49.7.20.69http/1.1www.thai-pack.com:443 4-1297278810/28/28R 6.8301351600.00.130.13 142.93.153.3http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 5-1297280980/9/19R 1.0200173760.00.020.07 142.93.158.96http/1.1www.nadapool.com:443 6-1297279121/22/22C 7.7100199541.30.140.14 134.122.34.144http/1.1localhost:443GET /login.action HTTP/1.1 7-1297279180/24/24W 8.6500266090.00.110.11 172.68.234.226http/1.1www.makeregist.com:80POST /wp-cron.php?doing_wp_cron=1685813144.29058504104614257812 8-1297281290/4/12W 0.4500169770.00.000.09 142.93.64.15http/1.1localhost:443GET /server-status HTTP/1.1 9-1297281570/2/9_ 0.0000202170.00.000.04 162.243.184.251http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 10-1297279871/16/16C 2.580054431.40.060.06 142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1297279930/17/17_ 4.230628107210.00.210.21 27.254.96.168http/1.1www.thefixup333.com:443POST /wp-cron.php?doing_wp_cron=1685813143.82257199287414550781 12-1297280031/16/16C 2.511072471.30.050.05 45.79.116.95http/1.1localhost:443GET /telescope/requests HTTP/1.1 13-1297280090/12/12_ 2.510150420.00.050.05 142.93.153.3http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 14-1297-0/0/1. 0.0025000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1297280211/16/16C 1.881047371.40.040.04 134.122.34.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1297280270/14/14R 3.060088710.00.060.06 104.236.193.132http/1.1www.nadapool.com:443 17-1297280331/16/16C 2.671058201.30.040.04 142.93.153.3http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 62subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 257 seconds, (range: 217...293)index usage: 2%, cache usage: 2%total entries stored since starting: 62total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 151 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-03 17:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e80d6d91c1Apache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 04-Apr-2023 00:23:42 +07 Restart Time: Tuesday, 04-Apr-2023 00:22:53 +07 Parent Server Config. Generation: 1088 Parent Server MPM Generation: 1087 Server uptime: 49 seconds Server load: 1.40 1.70 1.46 Total accesses: 216 - Total Traffic: 1.1 MB - Total Duration: 89195 CPU Usage: u1628.08 s2829.85 cu26748100 cs6425280 - 6.77e+7% CPU load 4.41 requests/sec - 22.0 kB/second - 5105 B/request - 412.94 ms/request 18 requests currently being processed, 0 idle workers CCCCRCCCCCCWCCRCRR................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1087320591/18/18C 4.670293372.60.250.25 164.90.222.93http/1.1localhost:443GET /info.php HTTP/1.1 1-1087320751/30/30C 5.0401102542.60.090.09 164.90.222.93http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-1087320831/26/26C 4.2611123562.60.050.05 46.101.103.192http/1.1localhost:443GET /.git/config HTTP/1.1 3-1087320891/22/22C 2.851173122.60.060.06 46.101.103.192http/1.1localhost:443GET /info.php HTTP/1.1 4-1087320950/7/7R 3.6822249100770.00.070.07 37.187.94.3http/1.1www.1smestartup.com:443 5-1087321961/2/30C 0.0201118662.60.000.09 164.90.222.93http/1.1localhost:443GET /.DS_Store HTTP/1.1 6-1087321111/12/12C 4.441097542.70.110.11 46.101.103.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1087321281/8/8C 2.711168622.60.190.19 46.101.103.192http/1.1localhost:443GET /telescope/requests HTTP/1.1 8-1087321361/23/23C 3.390174602.60.080.08 164.90.222.93http/1.1localhost:443GET /telescope/requests HTTP/1.1 9-1087321481/26/26C 0.680111162.60.030.03 164.90.222.93http/1.1localhost:443GET /.git/config HTTP/1.1 10-1087321551/4/4C 0.931118252.70.010.01 46.101.103.192http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-1087321610/3/3W 0.55009440.00.010.01 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 12-1087321721/1/1C 0.021122.60.000.00 46.101.103.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 13-1087321741/3/3C 0.030192.60.010.01 164.90.222.93http/1.1localhost:443GET /.env HTTP/1.1 14-1087321820/2/2R 0.030290.00.010.01 207.154.240.169http/1.1 15-1087321861/1/1C 0.021242.60.000.00 46.101.103.192http/1.1localhost:443GET /.env HTTP/1.1 16-1087322020/0/0R 0.000000.00.000.00 207.154.240.169http/1.1 17-1087322040/0/0R 0.000000.00.000.00 164.90.222.93http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 26subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 274 seconds, (range: 250...298)index usage: 0%, cache usage: 1%total entries stored since starting: 26total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 129 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-04-03 17:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e85b83fcecApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 29-Oct-2022 00:19:47 +07 Restart Time: Saturday, 29-Oct-2022 00:19:02 +07 Parent Server Config. Generation: 498 Parent Server MPM Generation: 497 Server uptime: 44 seconds Server load: 1.62 1.73 1.73 Total accesses: 265 - Total Traffic: 1.2 MB - Total Duration: 117433 CPU Usage: u716.43 s1318.12 cu13254600 cs3190640 - 3.74e+7% CPU load 6.02 requests/sec - 28.4 kB/second - 4826 B/request - 443.143 ms/request 24 requests currently being processed, 4 idle workers RCWWWC.WC_WWC_WW_WWCCWWCCCRC_..................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-497308530/8/11R 1.070051760.00.030.05 69.164.213.24http/1.1 1-497307161/30/30C 4.5600107532.30.090.09 69.164.213.24http/1.1localhost:443GET / HTTP/1.1 2-497308600/4/7W 0.580054880.00.010.04 45.79.148.46http/1.1www.nadapool.com:443GET /info.php HTTP/1.1 3-497307300/13/13W 5.9000166740.00.220.22 45.79.148.46http/1.1www.nadapool.com:443GET /server-status HTTP/1.1 4-497307370/23/23W 3.3300107780.00.210.21 45.79.148.46http/1.1www.nadapool.com:443GET /telescope/requests HTTP/1.1 5-497307631/13/13C 4.2200111032.60.060.06 69.164.213.24http/1.1localhost:443GET /info.php HTTP/1.1 6-497-0/0/17. 0.000073590.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-497307750/16/16W 3.730075770.00.080.08 45.79.148.46http/1.1www.nadapool.com:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 8-497307861/18/18C 4.100098642.70.060.06 69.164.213.24http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 9-497307880/21/21_ 3.130161560.00.030.03 68.183.197.190http/1.1localhost:443GET /config.json HTTP/1.1 10-497307940/11/11W 3.230065140.00.080.08 69.164.213.24http/1.1localhost:443GET /server-status HTTP/1.1 11-497308000/52/52W 4.550090760.00.090.09 45.79.148.46http/1.1www.nadapool.com:443GET /debug/default/view?panel=config HTTP/1.1 12-497308621/11/11C 1.480025482.70.020.02 69.164.213.24http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 13-497308770/4/4_ 0.46018450.00.010.01 68.183.197.190http/1.1localhost:443GET /login.action HTTP/1.1 14-497308850/1/1W 0.010040.00.000.00 45.79.148.46http/1.1www.nadapool.com:443GET /.git/config HTTP/1.1 15-497308870/1/1W 0.000040.00.000.00 45.79.148.46http/1.1www.nadapool.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-497308990/2/2_ 0.47018880.00.010.01 45.79.148.46http/1.1www.nadapool.com:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 17-497309000/1/1W 0.49009600.00.010.01 45.79.148.46http/1.1www.nadapool.com:443GET /.DS_Store HTTP/1.1 18-497309020/1/1W 0.510010200.00.010.01 45.79.148.46http/1.1www.nadapool.com:443GET / HTTP/1.1 19-497309051/2/2C 0.020052.50.000.00 69.164.213.24http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 20-497309251/1/1C 0.001131.30.000.00 68.183.197.190http/1.1localhost:443GET /about HTTP/1.1 21-497309270/0/0W 0.000000.00.000.00 45.79.148.46http/1.1www.nadapool.com:443GET /.env HTTP/1.1 22-497309330/0/0W 0.000000.00.000.00 45.79.148.46http/1.1www.nadapool.com:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 23-497309391/2/2C 0.49009462.60.010.01 69.164.213.24http/1.1localhost:443GET /.git/config HTTP/1.1 24-497309491/2/2C 0.47009402.60.000.00 69.164.213.24http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 25-497309551/2/2C 0.46009332.60.000.00 69.164.213.24http/1.1localhost:443GET /.DS_Store HTTP/1.1 26-497309610/1/1R 0.4504629230.00.000.00 69.164.213.24http/1.1 27-497309671/2/2C 0.44008852.60.000.00 69.164.213.24http/1.1localhost:443GET /telescope/requests HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 24subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 275 seconds, (range: 254...295)index usage: 0%, cache usage: 1%total entries stored since starting: 24total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 168 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-28 17:18 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3114de68e814de68e8eaa22dabApache Status Apache Server Status for pop.nadapool.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 29-Aug-2022 10:42:08 +07 Restart Time: Monday, 29-Aug-2022 10:41:02 +07 Parent Server Config. Generation: 235 Parent Server MPM Generation: 234 Server uptime: 1 minute 5 seconds Server load: 1.47 1.81 2.43 Total accesses: 362 - Total Traffic: 1.1 MB - Total Duration: 308773 CPU Usage: u404.1 s692.31 cu6915360 cs1650040 - 1.32e+7% CPU load 5.57 requests/sec - 18.0 kB/second - 3315 B/request - 852.964 ms/request 25 requests currently being processed, 1 idle workers CRRCCWCCRCCCCRCCCCLCCCCC_C........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-234281831/24/24C 6.1402275412.60.080.08 137.184.35.147http/1.1localhost:443GET /info.php HTTP/1.1 1-234281840/24/24R 4.2601383770.00.060.06 137.184.35.147http/1.1 2-234284100/7/12R 1.650172090.00.030.04 104.200.20.186http/1.1 3-234284161/3/11C 0.030166842.70.010.04 137.184.35.147http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-234284181/4/12C 0.040168382.70.010.02 45.79.228.101http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-234282300/25/25W 7.7600168100.00.100.10 137.184.35.147http/1.1localhost:443GET /server-status HTTP/1.1 6-234284281/3/10C 0.0501203011.30.010.03 45.79.228.101http/1.1localhost:443GET /login.action HTTP/1.1 7-234282411/23/23C 30.1201640832.60.060.06 137.184.35.147http/1.1localhost:443GET /.DS_Store HTTP/1.1 8-234284300/2/6R 0.050036590.00.010.03 113.161.197.197http/1.1www.chonlateeinternational.com: 9-234282571/25/25C 6.3801193592.60.120.12 45.79.228.101http/1.1localhost:443GET /.env HTTP/1.1 10-234284361/2/7C 0.0201122.60.000.01 137.184.35.147http/1.1localhost:443GET /.env HTTP/1.1 11-234282731/41/41C 7.6301188172.60.100.10 45.79.228.101http/1.1localhost:443GET /.git/config HTTP/1.1 12-234282821/36/36C 6.1201154152.70.080.08 45.79.228.101http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass 13-234284420/2/6R 0.020316320.00.010.01 137.184.35.147http/1.1 14-234282941/24/24C 6.5401195082.60.070.07 45.79.228.101http/1.1localhost:443GET /info.php HTTP/1.1 15-234284531/2/3C 0.020181.30.010.01 45.79.228.101http/1.1localhost:443GET /v2/_catalog HTTP/1.1 16-234284551/2/6C 0.020135861.30.010.03 45.79.228.101http/1.1localhost:443GET /config.json HTTP/1.1 17-234283031/32/32C 5.0701128432.60.080.08 137.184.35.147http/1.1localhost:443GET /telescope/requests HTTP/1.1 18-234283091/23/23L 6.6600169362.60.110.11 137.184.35.147http/1.1localhost:443GET /.git/config HTTP/1.1 19-234284561/1/4C 0.010167901.30.000.03 139.162.88.134http/1.1www.nadapool.com:443GET /login.action HTTP/1.1 20-234284621/2/2C 0.030171.30.010.01 45.79.228.101http/1.1localhost:443GET /about HTTP/1.1 21-234284641/1/1C 0.58056211249.50.010.01 46.101.150.34http/1.1www.chonlateeinternational.com:POST /wp-login.php HTTP/1.1 22-234284701/2/2C 0.630012102.60.010.01 137.184.35.147http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 23-234284771/1/1C 0.010242.60.000.00 45.79.228.101http/1.1localhost:443GET /telescope/requests HTTP/1.1 24-234284820/1/1_ 0.000120.00.000.00 139.162.88.134http/1.1www.nadapool.com:443GET /config.json HTTP/1.1 25-234285011/1/1C 0.000122.70.000.00 137.184.35.147http/1.1localhost:443GET /s/32372e3235342e39362e313638/_/;/META-INF/maven/com.atlass SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 30subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 265 seconds, (range: 233...297)index usage: 1%, cache usage: 1%total entries stored since starting: 30total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 150 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-08-29 03:41
-