Domain pop.partymanagementthailand.com
Thailand
CS LOXINFO Public Company Limited.
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: pop.partymanagementthailand.com
Port: 80
URL: http://pop.partymanagementthailand.comFirst seen 2023-08-03 07:51
Last seen 2024-02-02 15:38
Open for 183 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e7d9c0406bApache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 22:38:31 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 12 hours 37 minutes 10 seconds Server load: 2.00 2.00 2.00 Total accesses: 1850174 - Total Traffic: 23.8 GB - Total Duration: 2141120505 CPU Usage: u235.14 s124.65 cu32089.3 cs2210.25 - 1.41% CPU load .751 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.25 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes032000 329394no0yes131000 529374no0yes032000 Sum400 1127000 ________________________________................................ ____________________________________________________W___________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/53/14801_ 19.011010160260990.00.17193.80 162.243.161.105http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/50/15293_ 19.01100139013530.00.12198.97 138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-92293730/52/14865_ 19.2290150309560.00.18192.75 139.59.65.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/51/15044_ 19.5710145875130.00.11185.98 164.92.84.255http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/50/14948_ 19.5900147711740.00.18185.45 128.199.195.68http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/44/15171_ 19.49120156649170.00.13188.55 139.144.96.150http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/42/14842_ 19.5570145588720.00.18200.28 161.35.190.56http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-92293730/44/15151_ 19.3940150182070.00.10187.60 178.62.3.65http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/46/15113_ 19.50100145226990.00.11229.90 139.144.96.150http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/52/15246_ 19.5660148853440.00.20194.92 161.35.190.56http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/50/14810_ 19.4700154393440.00.12200.72 143.110.156.182http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/47/14820_ 19.3960147156350.00.10195.46 128.199.195.68h2localhost:443[0/0] Software caused connection abort 0-92293730/58/14689_ 18.82130137182770.00.19185.55 146.190.98.165http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/51/14842_ 19.5710169086550.00.11186.04 128.199.195.68http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/50/15796_ 19.5710141615390.00.15187.81 161.35.190.56http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/53/14845_ 19.5710165341250.00.12182.52 128.199.195.68http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/58/14897_ 18.9920143405110.00.13206.39 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-92293730/51/14958_ 19.0610144940050.00.15189.33 161.35.176.95http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/48/14776_ 19.5570160388370.00.08200.56 139.144.96.150http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/53/14998_ 19.5800144639400.00.17193.85 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/52/14989_ 19.0570181496030.00.20193.46 161.35.176.95http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/49/15014_ 19.5640147053790.00.14204.12 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/53/15471_ 19.3930150756110.00.19188.31 178.62.3.65http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/44/14675_ 19.0570138765330.00.16190.21 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-92293730/61/14985_ 19.5800162205900.00.13186.91 128.199.195.68http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/54/14657_ 19.49130135981670.00.20197.05 139.144.96.150http/1.1localhost:80\x16\x03\x01\x01\v\x01 0-92293730/50/15157_ 19.5630144713520.00.09194.53 128.199.195.68http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/54/14939_ 19.5700159195740.00.08213.32 161.35.190.56http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/55/14742_ 19.5720152174680.00.13175.94 128.199.195.68http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/38/15186_ 19.4700135139140.00.11225.16 178.62.3.65http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/56/14675_ 19.0520155573080.00.07199.15 143.110.156.182http/1.1 0-92293730/47/14937_ 19.2270145815210.00.20185.19 128.199.195.68http/1.1 1-92-0/0/15731. 0.00662960138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00662960136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00662960174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00662960150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00662960146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00662960134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00662960172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00662960165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00662960127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00662960152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00662960148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00662960159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00662960159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1
Found on 2024-02-02 15:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e7da05f0dcApache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 15:54:05 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 5 hours 52 minutes 44 seconds Server load: 2.78 2.72 2.66 Total accesses: 898538 - Total Traffic: 12.1 GB - Total Duration: 1115647480 CPU Usage: u163.48 s14.83 cu15234.7 cs801.3 - 8.36% CPU load 4.63 requests/sec - 65.4 kB/second - 14.1 kB/request - 1241.63 ms/request 11 requests currently being processed, 53 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 117271no3yes626000 28466no10yes527005 Sum2013 1153005 ................................_W___R_R______W_________R_R_____ __________W______W_________W_W_W................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/7167. 0.0062384796399500.00.00103.89 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /extwaok-38055gitems/etidm24rk.htm HTTP/1.1 0-7-0/0/7661. 0.00623167974317210.00.00105.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /pubcategorylrvy/15 HTTP/1.1 0-7-0/0/7237. 0.0062356080858040.00.00103.28 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=menu-zique-s-10-ii-49rREWcE HTTP/1.1 0-7-0/0/7514. 0.0062333877957780.00.0095.99 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=frank-abagnale-hi-res-stock-photography-and-images-alam 0-7-0/0/7455. 0.0062384778255570.00.0093.05 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /unjwaok-49849witems/eti HTTP/1.1 0-7-0/0/7595. 0.0062336190980650.00.0099.78 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=gbu-24-b-bomb-pcs-a-6-a-10-10-ii-JD6NPgTJ HTTP/1.1 0-7-0/0/7400. 0.0062335175032210.00.00109.85 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=progressive-era-muckrakers-magazine-project-digital-gui 0-7-0/0/7427. 0.0062384183872870.00.0096.49 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vjkwaok-4844xitems/etidm9.html HTTP/1.1 0-7-0/0/7611. 0.006231278002670.00.00146.71 203.170.192.183http/1.1www.chonlateepro.com:443POST /wp-cron.php?doing_wp_cron=1704617013.15975308418273925781 0-7-0/0/7505. 0.0062383680535250.00.0094.01 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /hnwarie-16192jetidm65uaj HTTP/1.1 0-7-0/0/7278. 0.0062387688910850.00.00115.57 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cxrwaok-27003eitems/etidm.htm HTTP/1.1 0-7-0/0/7043. 0.0062334586353890.00.0091.13 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=%E3%82%AC%E3%83%B3%E3%83%80%E3%83%A0%E3%80%91zz-gr-%E3% 0-7-0/0/7119. 0.0062384665871440.00.0094.49 185.191.171.10http/1.1www.chonlateeboi.com:443GET /5236biwxetidm3 HTTP/1.1 0-7-0/0/7312. 0.00623837100230430.00.0099.70 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /gnvwaok-27501iitems/etidm13.htm HTTP/1.1 0-7-0/0/7996. 0.0062384374013760.00.00100.10 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /krzarie-8811mitems/etidm.htm HTTP/1.1 0-7-0/0/7178. 0.00623212796074550.00.0091.55 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vjkwaok-4844xitems/etidm9.html HTTP/1.1 0-7-0/0/7320. 0.0062334377181700.00.0093.58 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=the-physician-in-the-19th-century-jane-austen-s-11-ii-5 0-7-0/0/7385. 0.0062334975796170.00.0098.22 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=gmt-00-country-i-Q7vEg2f1 HTTP/1.1 0-7-0/0/7422. 0.0062335094232130.00.0092.45 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=nullen-hi-res-stock-photography-and-images-alamy-5-ii-8 0-7-0/0/7501. 0.0062334977249130.00.0099.73 47.128.45.245http/1.1www.chonlateenextbiz.com:443GET /uftriw/download-spotify-songs-free-mp3.html HTTP/2.0 0-7-0/0/7468. 0.00623841117223870.00.00102.84 3.224.220.101http/1.1www.chonlateeboi.com:443GET /11160mywgetidm45gmv.htm HTTP/1.1 0-7-0/0/7140. 0.0062335780924830.00.0095.18 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=bank-holiday-dates-for-2022-off-72%-0-ii-LoJ029UJ HTTP/ 0-7-0/0/7711. 0.0062384788437430.00.00101.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /pubcategorylrvy/15 HTTP/1.1 0-7-0/0/7250. 0.0062384073203010.00.00101.58 23.22.35.162http/1.1www.chonlateeboi.com:443GET /28540khrretidm7 HTTP/1.1 0-7-0/0/7288. 0.0062327396572770.00.0091.59 173.201.180.210http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 0-7-0/0/7459. 0.0062389165630130.00.0094.77 3.224.220.101http/1.1www.chonlateeboi.com:443GET /33309bzlnitems/etidm77.htm HTTP/1.1 0-7-0/0/7316. 0.0062385281577470.00.00102.50 47.128.45.245h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /uftriw/download-spotify-songs-free-m 0-7-0/0/7378. 0.0062385191014610.00.00123.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /12687bzlnitems/etidm26zn.htm HTTP/1.1 0-7-0/0/7151. 0.0062383878912650.00.0089.18 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ljawaok-47656netidm45ywn HTTP/1.1 0-7-0/0/7428. 0.0062384084343360.00.00128.64 3.224.220.101http/1.1www.chonlateeboi.com:443GET /27539unwsetidm.html HTTP/1.1 0-7-0/0/7074. 0.0062338587824790.00.00101.64 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=napoli-ea7-football-s-most-expensive-jersey-is-not-4-ii 0-7-0/0/7444. 0.0062384578655030.00.0094.63 3.224.220.101http/1.1www.chonlateeboi.com:443GET /4879tbrmitems/etidm75rm HTTP/1.1 1-7172710/227/7397_ 133.86063786699210.02.79123.32 3.224.220.101http/1.1www.chonlateeboi.com:443GET /29501hevyetidm81.html HTTP/1.1 1-7172711/264/7178W 134.150081738930.03.0190.77 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=photos-at-louis-joliet-mall-16-tips-from-2303-11-ii-1Po 1-7172710/273/7309_ 134.38013108474670.02.9296.10 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 1-7172710/259/6892_ 134.430086957770.02.8789.66 139.59.230.191http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7172710/185/7006_ 134.370093560010.02.13102.29 139.59.230.191http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-7172710/243/7154R 134.03084182324400.02.5594.83 139.144.150.45http/1.1 1-7172710/276/7203_ 134.250761100055110.02.9792.52 164.90.222.93http/1.1 1-7172710/266/7238R 133.49090693274030.02.6197.53 23.22.35.162http/1.1www.chonlateeadmin.com:443 1-7172710/253/7232_ 134.350076566270.02.8891.68 139.59.230.191http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-7172710/239/7076_ 133.57084691476830.02.5197.61 52.167.144.187h2www.chonlateefood.com:443[0/0] init 1-7172710/259/6848_ 134.390093826820.02.7395.29 139.59.230.191http/1.1localhost:80GET /.env HTTP/1.1 1-7172710/249/7377_ 134.420085543550.02.68104.72 139.59.230.191
Found on 2024-01-07 08:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e7fc7a10c7Apache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 02:23:19 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 16 hours 21 minutes 58 seconds Server load: 2.43 2.65 2.70 Total accesses: 294281 - Total Traffic: 4.2 GB - Total Duration: 257216072 CPU Usage: u668.64 s36.3 cu4282.28 cs230.01 - 8.86% CPU load 4.99 requests/sec - 74.1 kB/second - 14.8 kB/request - 874.049 ms/request 13 requests currently being processed, 83 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 019907no6yes428004 419908no10yes230016 719927no7yes725001 919931yes2no00000 Sum4125 13830111 ____R_______W____W____W_________................................ ................................................................ __W_R___________________________................................ ................................WW_____W__W______W_WR___________ ..............................................G...........G..... ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2199070/241/3084_ 142.883130125540500.02.7045.73 47.128.25.103h2www.seasabithailand.com:443[1/1] done: stream 1, GET /8aj1/walk-in-interview-in-bur-dubai- 0-2199070/232/3327_ 143.141024096960.02.9343.89 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/227/3020_ 142.952115536838980.02.8252.46 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ifnhlzs-134727aitems/eti.htm HTTP/1.1 0-2199070/228/3258_ 142.86386326680160.02.9341.40 85.208.96.201http/1.1www.chonlateeadmin.com:443GET /lmauzzo-35566netidm62y HTTP/1.1 0-2199070/217/3141R 143.075108524661030.02.4339.25 3.224.220.101http/1.1 0-2199070/231/3384_ 143.103100927301060.03.1042.78 161.35.155.246http/1.1localhost:80\x16\x03\x01\x01\x12\x01 0-2199070/233/3155_ 141.74290024680890.02.8554.42 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?wfahlzs-189575netidm69jsn HTTP/1.1 0-2199070/251/3171_ 143.141025559940.02.6441.03 161.35.155.246http/1.1localhost:80GET /about HTTP/1.1 0-2199070/242/3217_ 143.160025452850.02.5883.37 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-2199070/226/3147_ 143.123195624639580.02.9140.73 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /ergaebb-32101tetidm2 HTTP/1.1 0-2199070/235/3082_ 143.07086028127600.02.8437.85 139.59.182.142http/1.1localhost:80\x16\x03\x01\x01\b\x01 0-2199070/253/3030_ 142.751107624783870.02.9338.99 66.249.77.72http/1.1 0-2199071/217/2984W 142.090024703370.02.5740.79 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 0-2199070/214/3266_ 141.73399835997380.02.6244.27 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /wzbqmyr-16649oetidm.html HTTP/1.1 0-2199070/233/3328_ 142.470120528147130.02.5944.58 139.59.182.142http/1.1 0-2199070/207/3056_ 142.943107525646000.02.4139.57 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?iiksvcw-15933xetidm4.htm HTTP/1.1 0-2199070/217/3004_ 143.061103228676220.02.6938.99 3.224.220.101http/1.1www.chonlateeboi.com:443GET /7862qbkeitems/etidm11k.html HTTP/1.1 0-2199071/223/3302W 142.853024284820.02.5443.71 66.249.71.9http/1.1www.chonlateenextbiz.com:443GET /sitemap76.xml HTTP/1.1 0-2199070/226/3200_ 143.160024061190.02.6541.67 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-2199070/220/3041_ 142.461108928608510.02.5444.87 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?afbhlzs-402467oitems/eti HTTP/1.1 0-2199070/231/3096_ 143.123117124136090.02.9243.96 47.128.25.103h2www.seasabithailand.com:443GET /8aj1/walk-in-interview-in-bur-dubai-today-for-female.html 0-2199070/222/3148_ 143.103026545810.02.7744.95 139.59.182.142http/1.1localhost:443GET / HTTP/1.1 0-2199071/243/3488W 143.070024450970.02.8244.30 66.249.71.9http/1.1www.chonlateenextbiz.com:443GET /sitemap93.xml HTTP/1.1 0-2199070/204/2977_ 142.19384924221970.02.3139.11 23.22.35.162http/1.1www.chonlateeboi.com:443GET /12668hupbitems/etidm9.html HTTP/1.1 0-2199070/236/3045_ 142.523107024489280.02.8638.86 47.128.25.103h2www.seasabithailand.com:443[0/0] init 0-2199070/224/3024_ 143.103024275130.02.8339.27 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 0-2199070/216/3108_ 143.141027476360.02.8549.94 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-2199070/212/3088_ 142.962140028545920.02.8370.04 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-2199070/228/2993_ 143.04195424589860.02.6837.65 85.208.96.194http/1.1www.chonlateeadmin.com:443GET /teirfru-41164vetidm2 HTTP/1.1 0-2199070/239/3348_ 143.123023246470.02.8178.37 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 0-2199070/234/3043_ 143.170324441370.02.9347.03 139.59.182.142http/1.1localhost:80GET /server-status HTTP/1.1 0-2199070/234/3397_ 143.160107027260510.02.8841.51 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22191tobeitems/etidm25ne.htm HTTP/1.1 1-1-0/0/2323. 0.00709086617630010.00.0030.27 207.46.13.154http/1.1www.thaidaoherb.com:443GET /9i7h/dyv42461ryyhc053875235.html HTTP/2.0 1-1-0/0/2100. 0.007090173417390000.00.0027.02 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /db.php?g3192039.shtml HTTP/1.1 1-1-0/0/2227. 0.007090107117630050.00.0030.69 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rngadej-26472tetidm80eat.htm HTTP/1.1 1-1-0/0/2089. 0.007090211517285130.00.0027.89 66.249.69.229http/1.1www.chonlateenextbiz.com:443GET /db.php?g335424.shtml HTTP/1.1 1-1-0/0/2129. 0.00709085117106500.00.0032.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /48835biwxitems/etidm HTTP/1.1 1-1-0/0/2185. 0.00709085816794840.00.0028.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jryadej-23266letid HTTP/1.1 1-1-0/0/2135. 0.00709097217421340.00.0026.37 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22684biwxetidm7 HTTP/1.1 1-1-0/0/2185. 0.0070901717237790.00.0029.46 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?papaw99.xml HTTP/1.1 1-1-0/0/2163. 0.00709084617365570.00.0029.98 23.22.35.162http/1.1www.chonlateeboi.com:443GET /42349biwxitems/etidm52 HTTP/1.1 1-1-0/0/2112. 0.00709089516912400.00.0027.55 185.191.171.3http/1.1www.chonlateefood.com:443GET /geti/cer43578htewitems.htm HTTP/1.1 1-1-0/0/2118. 0.007090102016733450.00.0031.98 157.55.39.202h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /tviipbe-49432vetidm29giv 1-1-0/0/2249. 0.007090105217993880.00.00
Found on 2024-01-05 19:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e73b9d3210Apache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 23:31:32 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 23 hours 8 minutes 33 seconds Server load: 0.71 0.70 0.75 Total accesses: 4341035 - Total Traffic: 55.7 GB - Total Duration: 4106319230 CPU Usage: u223.87 s46.75 cu78156.7 cs4090.87 - 8.71% CPU load 4.58 requests/sec - 61.7 kB/second - 13.5 kB/request - 945.931 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 023735no4yes329000 217351no2yes527001 Sum206 856001 ______R___R____________________R................................ W___________W______R______W__W__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-40237350/50/39216_ 38.233916356615200.00.62496.97 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mtfwptg-39883seti.html HTTP/1.1 0-40237350/55/38578_ 38.6400363452420.00.66487.05 128.199.195.68http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-40237350/46/38965_ 38.630852398540860.00.62499.50 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?fqydpkr-21572letid.htm HTTP/1.1 0-40237350/51/38996_ 38.5131224387014180.00.63509.81 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rfgvrsm-264554titems/etid.html HTTP/1.1 0-40237350/54/39507_ 37.1641035367399490.00.69563.35 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?yenvrsm-261701aetidm64.html HTTP/1.1 0-40237350/57/38580_ 38.5620396510690.00.67487.87 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /mxtcktp44277gxffygdd/6d7aa4e HTTP/1.1 0-40237350/50/38905R 38.425905400383820.00.71490.20 206.81.1.88http/1.1 0-40237350/56/39661_ 38.5722245365287700.00.68497.73 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bfudvsc-11090hetidm50osh.htm HTTP/1.1 0-40237350/47/38641_ 37.150857377475580.00.57505.97 31.184.236.33http/1.1 0-40237350/49/39054_ 37.7200365813750.00.60498.99 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ymfgzna139657seti.html HTTP/1.1 0-40237350/45/38617R 38.5041207381574320.00.58469.71 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?kbdfooj-38425qetidm20xo.html HTTP/1.1 0-40237350/56/38694_ 38.6301008366722760.00.63519.61 128.199.195.68http/1.1localhost:80\x16\x03\x01\x01\x12\x01 0-40237350/52/38568_ 37.564867372535000.00.66471.28 31.184.236.34http/1.1 0-40237350/51/38759_ 37.141846401826540.00.73499.61 31.184.236.33http/1.1 0-40237350/46/38963_ 38.2811079377703230.00.57489.69 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?kndoazi-5041qetidm70xa.html HTTP/1.1 0-40237350/56/38650_ 38.5721238369683190.00.71544.01 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?150834rxiletid.htm HTTP/1.1 0-40237350/54/39620_ 37.8931492372619180.00.69524.08 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?zmslbze-40910fetidm9.htm HTTP/1.1 0-40237350/60/39133_ 38.5631263364032370.00.69482.41 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?umngazz-40307aitems/eti.htm HTTP/1.1 0-40237350/52/39159_ 38.341904365308090.00.68505.96 66.249.64.228http/1.1www.chonlateefood.com:443GET /mds.php?items/uyj13670xryetidm2710.html HTTP/1.1 0-40237350/50/39424_ 38.6211305381210420.00.66542.71 67.225.161.14http/1.1www.12gobiz.com:443POST /wp-login.php HTTP/1.1 0-40237350/44/38790_ 38.4900360767960.00.54511.23 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /vgccktp27022pz2rtoumi/ada0a5ba.html HTTP/1.1 0-40237350/56/38987_ 37.800866385861700.00.94503.66 31.184.236.33http/1.1 0-40237350/57/38747_ 37.5921144404638330.00.64513.15 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?183404rxilitems/etidm9.html HTTP/1.1 0-40237350/61/38050_ 38.2241148359229500.00.69473.14 66.249.71.67http/1.1www.chonlateefood.com:443GET /mds.php?item/ozd51884zzmatidm41.html HTTP/1.1 0-40237350/57/39099_ 38.5141801368737960.00.77518.90 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?zfsdvsc-28898fetidm97msf.htm HTTP/1.1 0-40237350/59/38383_ 38.6301174385863900.00.64469.53 162.243.186.177http/1.1localhost:80\x16\x03\x01\x01\b\x01 0-40237350/54/39096_ 38.6310370559780.00.66582.38 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /jgqcktp29766db5add9ed HTTP/1.1 0-40237350/52/38314_ 38.62112367911590.00.63509.00 203.170.192.183http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1702312290.15606808662414550781 0-40237350/50/38927_ 38.2321058409222710.00.67522.31 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?pkixner-46256vetidm50c.htm HTTP/1.1 0-40237350/49/38782_ 37.150926372787540.00.57501.93 31.184.236.34http/1.1 0-40237350/51/38892_ 38.6300367738560.00.60492.37 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-40237350/44/38589R 37.4649375828790.00.51536.04 52.70.240.171http/1.1www.chonlateeboi.com:443 1-40-0/0/39863. 0.006871280371902530.00.00504.02 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?trmxner-1046zetidm1.htm HTTP/1.1 1-40-0/0/39765. 0.00687874380127490.00.00546.16 66.249.71.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ilbniby-31403oitems/eti.htm HTTP/1.1 1-40-0/0/39525. 0.00687870381914500.00.00549.22 31.184.236.33http/1.1 1-40-0/0/39803. 0.00687898390298180.00.00561.17 85.208.96.198http/1.1www.chonlateeadmin.com:443GET /prectef-24910retidm49c HTTP/1.1 1-40-0/0/40573. 0.00687878361558090.00.00616.11 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?nvgiejy-54340titems/etid.html HTTP/1.1 1-40-0/0/39366. 0.00687909359294140.00.00562.61 31.184.236.34http/1.1 1-40-0/0/39457. 0.006871102361949180.00.00528.07 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-303475sitems/etidm HTTP/1.1 1-40-0/0/39903. 0.00687901385661260.00.00509.12 31.184.236.34http/1.1 1-40-0/0/39662. 0.006870374360440.00.00500.02 185.191.171.3http/1.1www.chonlateenextbiz.com:443GET /robots.txt HTTP/1.1 1-40-0/0/39722. 0.00687889366565020.00.00508.59 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?397537himsitems/eti HTTP/1.1 1-40-0/0/40309. 0.006871082362266380.00.00532.57 31.184.236.33http/1.1 1-40-0/0/40079. 0.00687911366480050.00.00499.33 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?397447himsitems/etidm22ls HTTP/1.1 1-40-0/0/40004. 0.00
Found on 2023-12-11 16:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e7ae95be3bApache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:27:43 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 4 minutes 45 seconds Server load: 2.25 1.89 1.63 Total accesses: 695863 - Total Traffic: 9.7 GB - Total Duration: 517436968 CPU Usage: u75.17 s11.82 cu12013 cs653.85 - 7.37% CPU load 4.02 requests/sec - 58.5 kB/second - 14.6 kB/request - 743.59 ms/request 17 requests currently being processed, 111 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no4yes626001 330151no4yes329003 630155no5yes329001 730156no14yes527007 Sum4027 171110012 ................................................................ ______W__R_____W_R___R_______R_______R_R________W_______________ ................................................................ _________L____R_____R______________W_____R__L____W_____________L ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0063889745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0063896045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0063880245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0063895746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00638167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0063894846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00638145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0063892346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00638107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00638104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0063870146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0063889947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0063872146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00638104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00638108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0063846846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0063870945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0063884445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0063871246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0063870946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00638046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0063849045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0063893646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0063886945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006384146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0063873844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00638722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0063896345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00638107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00638146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00638778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0063896044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0063886344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0063847946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00638150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0063867645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0063845143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00638044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00638232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0063858244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00638183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00638822744746080.00.007
Found on 2023-12-02 17:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734bc4adea0Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 04:01:44 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 3 hours 37 minutes 59 seconds Server load: 0.81 1.05 1.05 Total accesses: 18400 - Total Traffic: 236.9 MB - Total Duration: 32331490 CPU Usage: u3287.5 s5863.68 cu55532900 cs13589100 - 529000% CPU load 1.41 requests/sec - 18.5 kB/second - 13.2 kB/request - 1757.15 ms/request 4 requests currently being processed, 6 idle workers W.___CWC___....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964150900/86/1664W 40.481029056450.01.0016.63 159.65.58.104http/1.1www.pokaorganize.com:443GET / HTTP/1.1 1-1964-0/0/1514. 0.0017636028024640.00.0017.13 162.158.186.8http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 2-1964150370/94/1463_ 46.340026779320.00.5715.89 137.184.150.232http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1964150980/85/1559_ 42.662125915470.00.4421.32 137.184.150.232http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-1964151000/78/1314_ 37.681023182260.00.3813.87 137.184.150.232http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-1964151321/75/1366C 40.290124704961.31.4215.72 144.126.198.24http/1.1localhost:443GET /about HTTP/1.1 6-1964151380/70/1479W 34.510026588700.00.4017.13 137.184.150.232http/1.1localhost:80GET /server-status HTTP/1.0 7-1964151481/75/1276C 36.260123819352.60.4313.95 144.126.198.24http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-1964151660/70/1252_ 33.501023090300.00.6313.43 144.126.198.24http/1.1localhost:443GET / HTTP/1.1 9-1964152100/58/1108_ 31.902018373200.00.6711.48 159.65.58.104http/1.1 10-1964153200/35/882_ 17.182145612509500.00.738.53 159.65.58.104http/1.1 11-1964-0/0/792. 0.0052548415130490.00.009.53 172.70.207.195http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 12-1964-0/0/384. 0.00176406649170.00.006.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1964-0/0/419. 0.00138610329410750.00.007.17 162.158.238.44http/1.1www.chonlateecoffee.com:80GET /wp-includes/wp-atom.php HTTP/1.0 14-1964-0/0/357. 0.0013894465471570.00.002.78 172.70.207.131http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 15-1964-0/0/265. 0.0024234084629690.00.002.72 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 16-1964-0/0/250. 0.0024333333322960.00.003.45 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 17-1964-0/0/196. 0.0024245582350890.00.003.51 162.158.154.143http/1.1www.altaccount.com:80GET /images/class.api.php HTTP/1.0 18-1964-0/0/156. 0.0024186882234690.00.002.37 162.158.154.143http/1.1www.altaccount.com:80GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.0 19-1964-0/0/117. 0.00274502013170.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1964-0/0/193. 0.0024153612853630.00.003.34 162.158.186.73http/1.1www.bizproceed.com:80POST //wp-login.php HTTP/1.0 21-1964-0/0/102. 0.00274301476840.00.007.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964-0/0/193. 0.00286513213903990.00.0019.39 172.68.234.185http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 23-1964-0/0/99. 0.00429601822810.00.002.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 290...297)index usage: 0%, cache usage: 0%total entries stored since starting: 138total entries replaced since starting: 0total entries expired since starting: 134total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 6224 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 20:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734e9c5250eApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 10:33:26 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 6 hours 31 minutes 13 seconds Server load: 0.53 0.40 0.33 Total accesses: 36757 - Total Traffic: 545.3 MB - Total Duration: 72109495 CPU Usage: u3031.8 s5768.37 cu55149600 cs13501600 - 293000% CPU load 1.57 requests/sec - 23.8 kB/second - 15.2 kB/request - 1961.79 ms/request 3 requests currently being processed, 8 idle workers WR____._._W__..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932291590/21/3076W 8.090060418930.00.1937.30 159.203.182.222http/1.1www.pokaorganize.com:443GET / HTTP/1.1 1-1932293050/3/3037R 0.062160443470.00.0237.43 165.22.74.203http/1.1localhost:443GET / HTTP/1.1 2-1932285480/91/3051_ 19.940160278520.01.0540.61 178.62.3.65http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1932292520/8/2985_ 2.94082759822580.00.0947.30 165.22.74.203http/1.1 4-1932290090/37/2978_ 8.25181459296240.00.5049.36 165.22.74.203http/1.1 5-1932287320/72/2770_ 20.92083152909840.00.7734.85 172.69.195.56http/1.1www.chorsiam.com:80GET /server-status HTTP/1.0 6-1932-0/0/2733. 0.00246055680230.00.0033.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1932290710/33/2670_ 7.370151215890.00.3029.69 178.62.3.65http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1932-0/0/2500. 0.00184051784190.00.0032.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1932290790/30/2320_ 9.29197944687840.00.5629.03 172.69.194.132http/1.1www.chorsiam.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1932288520/61/1999W 17.180039368880.00.7335.82 178.62.3.65http/1.1localhost:80GET /server-status HTTP/1.0 11-1932290180/39/1600_ 12.521132416440.00.4224.57 178.62.3.65http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 12-1932290810/33/1396_ 11.511126519710.00.4329.94 162.158.189.5http/1.1www.chonlateecamping.com:80POST /xmlrpc.php HTTP/1.0 13-1932-0/0/1226. 0.003617024568690.00.0055.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/695. 0.00290689213575090.00.008.23 172.71.167.200http/1.1www.proplustech.co.th:443GET /?page_id=E1142248 HTTP/1.1 15-1932-0/0/302. 0.00361604453990.00.003.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/299. 0.00360004808140.00.002.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/163. 0.00361302138780.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/257. 0.00292104374050.00.002.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/163. 0.00357602780690.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/262. 0.00362204486550.00.003.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/31. 0.0035990550010.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/175. 0.00292202692490.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/3. 0.003627028600.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1932-0/0/3. 0.003611060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/40. 0.00317001125780.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/17. 0.0034120560250.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/2. 0.003620020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.0036210140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.0036100108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 7subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 118 seconds, (range: 41...298)index usage: 0%, cache usage: 0%total entries stored since starting: 232total entries replaced since starting: 0total entries expired since starting: 225total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 22379 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 03:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734f8883b8aApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 26-Oct-2023 23:59:19 +07 Restart Time: Thursday, 26-Oct-2023 15:16:50 +07 Parent Server Config. Generation: 1894 Parent Server MPM Generation: 1893 Server uptime: 8 hours 42 minutes 29 seconds Server load: 6.45 5.70 4.92 Total accesses: 139485 - Total Traffic: 1.9 GB - Total Duration: 552500530 CPU Usage: u3324.71 s5681.73 cu53809500 cs13122400 - 214000% CPU load 4.45 requests/sec - 65.0 kB/second - 14.6 kB/request - 3961 ms/request 16 requests currently being processed, 10 idle workers .WR_WWWWW_W_RWW__C_W_.___W..WW.................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1893-0/0/6908. 0.0011424250401440.00.0087.52 162.158.222.42http/1.1www.siamerp.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%82%E0%B8%B2 1-189311640/21/6823W 11.1210248870580.00.2681.32 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=thermostat-installation-honeywell-focuspro-5000-mm-w6VV 2-189312410/10/6707R 6.3916413253005040.00.10104.54 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-bali-frozen-concoction-maker-with-self-d 3-18939260/54/6797_ 32.1900242363210.00.47129.42 137.184.106.30http/1.1localhost:80GET /.DS_Store HTTP/1.0 4-189312600/10/6579W 3.7800244443830.00.2289.16 74.207.237.114http/1.1localhost:80GET /server-status HTTP/1.0 5-18936850/86/6518W 57.3000236020140.00.86105.19 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=honeywell-focuspro-th5000-series-user-manual-24-pages-a 6-189310150/54/6397W 22.5520238251570.00.6481.54 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=wiring-guide-conventional-systems-honeywell-focuspro-th 7-189310770/28/6528W 13.5600240693290.00.3680.21 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-bahamas-home-frozen-margarita-machine-wi 8-18937100/61/6286W 41.7720226294980.00.6181.88 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-frozen-concoction-maker-travel-bag-ad120 9-18938170/79/6328_ 28.060230221827480.00.8979.44 13.81.13.15http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 10-18937960/58/6145W 34.6310223588570.00.7282.74 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=best-margarita-makers-in-2023-hgtv-top-picks-hgtv-mm-zA 11-18939350/42/5830_ 33.3904551217641150.00.4773.79 192.53.126.23http/1.1 12-189312800/6/5763R 2.6410209456950.00.0369.19 162.158.222.42http/1.1 13-189390280/1/3895W 1.94104480142196370.00.0161.57 147.78.47.38http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /?ARRAY=5o313639383333323631352p22687474703n5p2s5p2s3632367 14-189312880/7/5562W 1.7540202768710.00.15101.19 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=honeywell-home-t2-guide-basic-manual-digital-thermostat 15-189313170/2/5331_ 0.500523192657470.00.0067.06 172.71.150.58http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 16-189311980/25/5552_ 11.8400195193490.00.1969.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-189313251/2/4720C 0.540577184401453.10.0070.03 172.71.150.58http/1.1www.99accountant.com:80POST //wp-login.php HTTP/1.0 18-189311080/37/4753_ 21.480203175850940.00.3259.11 13.81.13.15http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 19-18938410/48/3807W 36.1120140099730.00.6561.97 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=5-pack-honeywell-th5220d1029-focuspro-5000-non-programm 20-18936240/81/3990_ 48.7100153324460.00.9051.10 74.207.237.114http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 21-1893-0/0/3661. 0.0000137425110.00.0046.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-18939410/60/2698_ 35.610097506210.00.6636.40 137.184.106.30http/1.1localhost:80GET /.env HTTP/1.0 23-18936610/85/2227_ 60.730082973110.00.7928.12 192.53.126.23http/1.1 24-189313310/3/1944_ 0.050124966876580.00.0537.27 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848315125169.html HTTP/1.1 25-18939420/56/1274W 33.780049613670.00.7430.60 13.81.13.15http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 26-1893-0/0/977. 0.0035036934930.00.0012.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1893-0/0/716. 0.0067025987200.00.008.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-18939920/33/591W 19.5513024625080.00.486.43 52.167.144.214http/1.1www.nakindogtraining.com:443GET /wzy.php?oriented-GRINDER.xml HTTP/1.1 29-189311140/37/765W 21.360441231089470.00.3020.52 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=margaritaville-bahamas-frozen-concoction-maker-for-sale 30-1893-0/0/522. 0.00146019887940.00.006.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1893-0/0/393. 0.0065103914688810.00.008.23 185.191.171.11http/1.1www.mkandptfoods.com:443GET /m4278688397.html HTTP/1.1 32-1893-0/0/73. 0.006880394348100.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1893-0/0/336. 0.00741015828790.00.0021.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1893-0/0/398. 0.0051144815126190.00.003.79 172.71.151.138http/1.1www.acumaticathailand.com:80POST //wp-login.php HTTP/1.0 35-1893-0/0/199. 0.0069009608120.00.003.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1893-0/0/85. 0.0069603264420.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1893-0/0/105. 0.00769305388650.00.0012.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1893-0/0/131. 0.00762808682640.00.001.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1893-0/0/170. 0.00772506825550.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1893-0/0/104. 0.00772203681930.00.001.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1893-0/0/81. 0.00774702794690.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1893-0/0/97. 0.00774403568650.00.001.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1893-0/0/128. 0.00762604280980.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1893-0/0/155. 0.00773604730310.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1893-0/0/24. 0.0077430835200.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1893-0/0/163. 0.00759407682970.00.001.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1893-0/0/117. 0.00763904262870.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1893-0/0/59. 0.00772401923210.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1893-0/0/73. 0.00734005212840.00.000.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber
Found on 2023-10-26 16:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073445d7be02Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 07:06:02 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 3 hours 3 minutes 50 seconds Server load: 0.78 0.88 0.63 Total accesses: 11873 - Total Traffic: 156.0 MB - Total Duration: 13048467 CPU Usage: u2893.47 s5354.52 cu52299300 cs12765200 - 590000% CPU load 1.08 requests/sec - 14.5 kB/second - 13.5 kB/request - 1099 ms/request 4 requests currently being processed, 6 idle workers _WR.W.____W_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182329750/33/1076_ 14.841010688810.00.3012.21 142.93.153.3http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-182331350/14/1112W 3.561011452880.00.1612.97 159.203.94.228http/1.1www.pokaorganize.com:443GET / HTTP/1.1 2-182328710/45/1138R 25.102113021200.00.4114.71 146.70.115.139http/1.1www.chonlateemeet.com:443 3-1823-0/0/985. 0.0067010894820.00.0016.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-182329820/31/974W 12.650012454560.00.3410.66 104.43.236.85http/1.1www.mkandptfoods.com:443GET /anon.php HTTP/1.1 5-1823-0/0/768. 0.006509215300.00.009.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-182331430/14/999_ 4.631011885850.00.0912.57 142.93.153.3http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-182327220/63/937_ 31.260010534040.00.6313.17 142.93.153.3http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-182329880/31/787_ 14.3116117749760.00.2315.44 207.154.240.169http/1.1 9-182327410/65/751_ 30.86113287595550.00.838.22 104.43.236.85http/1.1www.mkandptfoods.com:443GET /mad.php HTTP/1.1 10-182331450/13/564W 4.17005504290.00.0811.74 142.93.153.3http/1.1localhost:80GET /server-status HTTP/1.0 11-182329580/36/395_ 17.15013928290.00.383.77 207.154.240.169http/1.1 12-1823-0/0/385. 0.0019404878350.00.004.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1823-0/0/24. 0.007730121150.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1823-0/0/246. 0.0044802628190.00.002.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1823-0/0/104. 0.007491007900.00.001.82 52.24.67.13http/1.1www.thaidaoherb.com:443GET /wp-content/uploads/elementor/css/post-15.css?ver=169115922 16-1823-0/0/201. 0.0077502531130.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1823-0/0/101. 0.0089490991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0082095051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.0088790144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0081857821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.0089500300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.0089530210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.008963050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.00896201095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 152subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 79 seconds, (range: 0...286)index usage: 5%, cache usage: 6%total entries stored since starting: 3082total entries replaced since starting: 0total entries expired since starting: 2930total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 75 hit, 4289 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 00:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07346156f29bApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 04-Oct-2023 00:29:54 +07 Restart Time: Wednesday, 04-Oct-2023 00:22:45 +07 Parent Server Config. Generation: 1801 Parent Server MPM Generation: 1800 Server uptime: 7 minutes 9 seconds Server load: 1.62 1.69 1.68 Total accesses: 1231 - Total Traffic: 9.5 MB - Total Duration: 1367003 CPU Usage: u2781.43 s5268.78 cu51831200 cs12663400 - 1.5e+7% CPU load 2.87 requests/sec - 22.7 kB/second - 7.9 kB/request - 1110.48 ms/request 12 requests currently being processed, 3 idle workers R_W_RW_RCWCRCCR................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1800141530/4/102R 4.371140451461080.00.050.81 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1696354179.21389889717102050781 1-1800141290/14/111_ 8.3500995320.00.120.81 172.105.37.32http/1.1localhost:443GET /.env HTTP/1.1 2-1800141940/4/104W 1.39001421660.00.020.91 161.97.145.103http/1.1www.chonlateemeet.com:443GET /%E0%B8%95%E0%B8%B3%E0%B8%9A%E0%B8%A5%E0%B8%9A%E0%B8%B2%E0% 3-1800142010/4/102_ 1.12011438130.00.020.97 146.190.64.200http/1.1 4-1800141620/9/101R 2.9010840290.00.140.73 172.71.182.97http/1.1 5-1800140980/21/95W 15.29001319150.00.180.81 85.208.96.207http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 6-1800141690/13/102_ 5.89011086710.00.130.71 172.105.37.32http/1.1localhost:443GET /login.action HTTP/1.1 7-1800141130/15/78R 6.1970868590.00.110.73 159.89.83.196http/1.1www.partymanagementthailand.com 8-1800141711/8/104C 3.25101117411.30.050.84 172.105.37.32http/1.1localhost:443GET /.git/config HTTP/1.1 9-1800142040/9/106W 1.87001150250.00.060.80 159.203.182.222http/1.1localhost:80GET /server-status HTTP/1.0 10-1800142311/8/37C 2.8210287131.40.030.21 172.105.37.32http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-1800142400/7/106R 0.03001073250.00.010.68 172.71.222.101http/1.1www.singkansard.com:443 12-1800142461/4/37C 1.2312276221.30.020.23 172.105.37.32http/1.1localhost:443GET /telescope/requests HTTP/1.1 13-1800140261/42/42C 15.7011334701.30.300.30 172.105.37.32http/1.1localhost:443GET /config.json HTTP/1.1 14-1800142560/4/4R 0.010170.00.010.01 65.109.181.229http/1.1www.tafa.or.th:443 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 228subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 37 seconds, (range: 0...144)index usage: 8%, cache usage: 10%total entries stored since starting: 348total entries replaced since starting: 0total entries expired since starting: 120total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 425 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-03 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073425e657f3Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:29:59 +07 Restart Time: Tuesday, 03-Oct-2023 00:11:21 +07 Parent Server Config. Generation: 1797 Parent Server MPM Generation: 1796 Server uptime: 18 minutes 38 seconds Server load: 1.00 1.41 1.37 Total accesses: 1908 - Total Traffic: 20.3 MB - Total Duration: 2772061 CPU Usage: u2774.24 s5260.03 cu51774400 cs12651700 - 5760000% CPU load 1.71 requests/sec - 18.6 kB/second - 10.9 kB/request - 1452.86 ms/request 8 requests currently being processed, 5 idle workers _RR___RCR...W_.W.R................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1796271060/3/142_ 2.08022842448220.00.211.73 46.101.103.192http/1.1www.partymanagementthailand.comGET / HTTP/1.1 1-1796234840/28/148R 10.56003946910.00.271.76 164.92.192.25http/1.1www.partymanagementthailand.comGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1796226760/40/118R 8.32001499300.00.531.12 164.90.222.93http/1.1 3-1796245170/9/144_ 2.67002793730.00.082.09 68.183.64.176http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 4-1796246190/21/144_ 7.61002942610.00.271.89 144.126.198.24http/1.1 5-1796272620/2/139_ 0.00012163760.00.001.89 164.90.222.93http/1.1 6-1796253610/24/119R 6.29011884310.00.241.34 68.183.64.176http/1.1localhost:80GET / HTTP/1.0 7-1796203650/71/169C 18.00212105570.00.391.47 194.127.167.79http/1.1 8-1796261210/9/148R 3.71021867620.00.191.77 134.122.89.242http/1.1 9-1796-0/0/172. 0.00211559330.00.001.98 139.144.150.23http/1.1 10-1796-0/0/53. 0.00360659610.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1796-0/0/119. 0.003301141040.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1796224900/41/45W 7.5200180800.00.150.16 104.244.77.96http/1.1www.chonlateebusiness.com:443POST /wp-login.php HTTP/1.1 13-1796261440/3/98_ 0.07011777240.00.010.87 167.71.48.191http/1.1localhost:80GET /about HTTP/1.0 14-1796-0/0/28. 0.00430192560.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1796261470/14/40W 1.4500186210.00.050.15 178.62.3.65http/1.1localhost:80GET /server-status HTTP/1.0 16-1796-0/0/48. 0.00420321710.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1796261490/13/27R 0.740133410.00.140.19 178.62.3.65http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1796-0/0/7. 0.00209016570.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 141subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 49 seconds, (range: 3...134)index usage: 5%, cache usage: 6%total entries stored since starting: 402total entries replaced since starting: 0total entries expired since starting: 261total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1027 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734f475a2fcApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 06:53:45 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 2 hours 51 minutes 34 seconds Server load: 0.70 0.98 0.79 Total accesses: 14780 - Total Traffic: 166.9 MB - Total Duration: 18115542 CPU Usage: u2821.74 s5193.36 cu51092900 cs12500400 - 618000% CPU load 1.44 requests/sec - 16.6 kB/second - 11.6 kB/request - 1225.68 ms/request 3 requests currently being processed, 7 idle workers W___R..W..__..._.._............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762172280/24/1287W 12.260016044870.00.2012.32 5.62.34.21http/1.1www.chonlateepr.com:443POST //wp-login.php HTTP/1.1 1-1762172340/26/1200_ 9.481014152030.00.2524.03 167.99.182.39http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-1762172360/25/1315_ 13.410015826840.00.3712.49 167.99.182.39http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1762172560/20/1144_ 11.48169713840770.00.1713.26 162.158.239.40http/1.1www.dr-rpi.com:443GET /wp-admin/post-new.php HTTP/1.1 4-1762168860/89/1296R 39.70246915044550.01.1012.80 172.70.114.90http/1.1www.siamautomation.com:443 5-1762-0/0/1252. 0.00124016009610.00.0012.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1762-0/0/1061. 0.00114013237860.00.009.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1762172640/19/1046W 11.700012362620.00.2010.11 167.99.182.39http/1.1localhost:80GET /server-status HTTP/1.0 8-1762-0/0/867. 0.00123010726830.00.009.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1762-0/0/722. 0.0027309069250.00.008.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1762169710/68/1000_ 26.021012275590.00.658.53 167.99.182.39http/1.1localhost:80GET /v2/_catalog HTTP/1.0 11-1762169480/73/630_ 28.5514017968060.00.636.54 23.99.229.218http/1.1www.ltclevelup.com:443POST /wp-login.php HTTP/1.1 12-1762-0/0/352. 0.0027003825480.00.004.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/431. 0.0011105864820.00.004.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/547. 0.008907548530.00.008.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762170000/62/393_ 20.16111094253570.01.035.66 5.62.34.21http/1.1www.chonlateepr.com:443POST //wp-login.php HTTP/1.1 16-1762-0/0/140. 0.0027202184360.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/25. 0.002640188410.00.001.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762170050/64/72_ 28.9801731280.01.081.14 172.69.65.250http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 86subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 80 seconds, (range: 4...205)index usage: 3%, cache usage: 3%total entries stored since starting: 1819total entries replaced since starting: 0total entries expired since starting: 1733total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 33 hit, 4669 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-22 23:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734ac403dc7Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 06:51:55 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 2 hours 49 minutes 43 seconds Server load: 0.44 0.45 0.60 Total accesses: 11021 - Total Traffic: 167.1 MB - Total Duration: 15408720 CPU Usage: u2734.54 s5142.99 cu50857600 cs12450600 - 622000% CPU load 1.08 requests/sec - 16.8 kB/second - 15.5 kB/request - 1398.12 ms/request 2 requests currently being processed, 8 idle workers W_____._W_..._.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-174345100/18/976W 7.390013388330.00.1010.71 139.59.182.142http/1.1localhost:80GET /server-status HTTP/1.0 1-174345190/19/1015_ 9.872114421840.00.1314.13 139.59.182.142http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 2-174342080/51/1056_ 16.211114627590.00.7825.25 139.59.182.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 3-174345210/18/986_ 10.570012972120.00.1927.90 139.59.182.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-174345460/16/910_ 9.722112969510.00.1711.17 139.59.182.142http/1.1localhost:80GET /about HTTP/1.0 5-174341980/53/925_ 19.17163812784210.01.1512.75 34.219.89.177http/1.1 6-1743-0/0/780. 0.0046010342770.00.0011.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-174342160/55/878_ 16.653111907670.00.9010.08 139.59.182.142http/1.1localhost:80GET / HTTP/1.0 8-174342420/48/879W 18.530013645960.01.1210.46 45.61.184.148http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /wp-login.php HTTP/1.1 9-174347530/4/699_ 1.2915169064030.00.058.11 172.70.46.55http/1.1www.99accountant.com:80GET /wp-admin/includes/xmrlpc.php HTTP/1.0 10-1743-0/0/593. 0.0057708236560.00.008.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/372. 0.0057305925810.00.004.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/483. 0.001965906367000.00.005.64 138.68.133.118http/1.1 13-174342510/43/351_ 15.76015868170.00.825.55 139.59.182.142http/1.1localhost:80GET /v2/_catalog HTTP/1.0 14-1743-0/0/13. 0.0010310161960.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/5. 0.001038036090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/100. 0.00103701367490.00.001.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 40subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 152 seconds, (range: 6...290)index usage: 1%, cache usage: 1%total entries stored since starting: 1597total entries replaced since starting: 0total entries expired since starting: 1557total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 74 hit, 3989 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-18 23:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734e5f20861Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 05:13:01 +07 Restart Time: Sunday, 17-Sep-2023 04:02:10 +07 Parent Server Config. Generation: 1735 Parent Server MPM Generation: 1734 Server uptime: 1 hour 10 minutes 51 seconds Server load: 3.30 3.31 3.14 Total accesses: 12183 - Total Traffic: 162.8 MB - Total Duration: 19349156 CPU Usage: u2862.98 s5158.31 cu50722300 cs12421400 - 1490000% CPU load 2.87 requests/sec - 39.2 kB/second - 13.7 kB/request - 1588.21 ms/request 7 requests currently being processed, 7 idle workers W_WW_W_..W.._.W.R__..._........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1734232850/64/893W 43.420013685560.00.6710.05 37.46.122.91http/1.1www.ss-cool.com:443POST /contact/ HTTP/1.0 1-1734233550/43/909_ 25.250186713401230.00.4312.28 37.57.218.243http/1.1www.12gobiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%9A 2-1734233640/37/884W 13.380013950950.00.8710.65 65.108.100.146http/1.1www.1smestartup.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 3-1734235200/0/853W 0.001012960570.00.0010.26 103.145.163.219http/1.1www.chonlateeboi.com:80POST /wp-login.php HTTP/1.0 4-1734234550/30/818_ 13.500124912991510.00.289.41 172.71.223.115http/1.1www.chonlateecoffee.com:80GET /dropdown.php HTTP/1.0 5-1734235260/0/829W 0.000012511010.00.009.34 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 6-1734235320/1/624_ 0.00019953970.00.007.30 147.182.168.210http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1734-0/0/698. 0.0064010231920.00.008.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1734-0/0/818. 0.007520112298980.00.008.14 216.251.130.74http/1.1www.chonlateeaa.com:443GET /wp-content/themes/sydney/js/scripts.js?ver=6.3.1 HTTP/1.1 9-1734232490/72/644W 58.25009866100.01.268.20 172.71.223.115http/1.1www.chonlateecoffee.com:80GET //wp-includes/Text/about.php HTTP/1.0 10-1734-0/0/722. 0.0051137410702170.00.0010.55 103.145.163.219http/1.1www.chonlateeboi.com:80POST /wp-login.php HTTP/1.0 11-1734-0/0/522. 0.006508207800.00.005.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1734233760/38/479_ 23.68067979580.00.666.65 172.71.222.253http/1.1www.mgacccount.com:80GET / HTTP/1.0 13-1734-0/0/276. 0.006605040040.00.003.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1734232620/73/341W 43.70005860240.01.134.50 147.182.168.210http/1.1localhost:80GET /server-status HTTP/1.0 15-1734-0/0/190. 0.003802822670.00.003.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1734233890/35/118R 23.46322971637420.00.442.00 185.194.216.151http/1.1 17-1734233950/38/226_ 22.92016973800560.00.463.29 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 18-1734234010/40/80_ 17.8507411223900.00.611.68 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 19-1734-0/0/38. 0.00600736180.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1734-0/0/118. 0.002202431540.00.004.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1734-0/0/50. 0.00160932580.00.001.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1734234420/31/144_ 16.0007732053490.00.302.10 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 23-1734-0/0/109. 0.00112301568280.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1734-0/0/112. 0.00111901456840.00.002.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1734-0/0/17. 0.0011250456850.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1734-0/0/109. 0.0082111995270.00.001.23 172.71.170.131http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%9B 27-1734-0/0/75. 0.00111101227050.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1734-0/0/17. 0.0011120497010.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1734-0/0/21. 0.0010950514410.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1734-0/0/28. 0.0010640608020.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1734-0/0/10. 0.0011050518690.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1734-0/0/12. 0.0011100369880.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1734-0/0/9. 0.0011240362040.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1734-0/0/16. 0.0010890523820.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1734-0/0/12. 0.0011040518170.00.000.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1734-0/0/100. 0.008315091946610.00.001.57 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 37-1734-0/0/13. 0.0011081391670.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1734-0/0/12. 0.0011010399180.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1734-0/0/13. 0.0011090234020.00.000.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1734-0/0/6. 0.0011370213110.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1734-0/0/99. 0.008305071957600.00.001.35 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 42-1734-0/0/6. 0.0011400161690.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1734-0/0/100. 0.008206241879370.00.001.00 172.69.64.158http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET //wp_filemanager.php HTTP/1.1 44-1734-0/0/5. 0.0011220207660.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1734-0/0/7. 0.0011180204110.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1734-0/0/1. 0.001141000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 40subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 104 seconds, (range: 11...271)index usage: 1%, cache usage: 1%total entries stored since starting: 1033total entries replaced since starting: 0total entries expired since starting: 993total (pre-expiry) entries scrolled out of the cache:
Found on 2023-09-16 22:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07349e89855fApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 10:47:48 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 6 hours 45 minutes 36 seconds Server load: 1.07 1.01 0.76 Total accesses: 31815 - Total Traffic: 695.9 MB - Total Duration: 38075532 CPU Usage: u2926.69 s5139.88 cu50523900 cs12378000 - 259000% CPU load 1.31 requests/sec - 29.3 kB/second - 22.4 kB/request - 1196.78 ms/request 3 requests currently being processed, 7 idle workers .__W____.WW_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720-0/0/2627. 0.0058034878890.00.0090.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-172050320/56/2659_ 50.18038931661810.01.4796.70 172.68.234.4http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-fb78 2-172050850/47/2464_ 71.720140627354780.00.5338.55 172.68.234.147http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 3-172053720/9/2541W 11.280029715800.00.1256.56 172.68.234.176http/1.1www.makeregist.com:80POST /wp-cron.php?doing_wp_cron=1694663267.95325803756713867187 4-172049130/89/2674_ 62.271031119610.02.5556.92 161.35.190.56http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-172053200/22/2143_ 18.400025856110.00.5737.67 161.35.190.56http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-172053260/20/2149_ 11.6612227049150.00.1539.20 172.70.134.222http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B9%80%E0%B8%A1%E0%B8%A5 7-172049450/82/2128_ 82.67146125368150.02.7636.66 172.68.234.201http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-234b 8-1720-0/0/1945. 0.0062023063940.00.0043.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-172051010/49/1977W 41.450023872640.00.8930.39 172.68.150.10http/1.1www.makeregist.com:80GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 10-172051070/35/1786W 35.630022167910.00.9431.95 161.35.190.56http/1.1localhost:80GET /server-status HTTP/1.0 11-172054180/6/1498_ 4.55047018502700.00.1022.49 172.68.234.209http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-c25a 12-1720-0/0/1108. 0.00666011790120.00.0017.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1720-0/0/805. 0.00428010917310.00.0029.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/838. 0.00404012165350.00.0030.77 185.56.83.83http/1.1www.chonlateeseal.com:443POST /xmlrpc.php HTTP/1.1 15-1720-0/0/404. 0.00295444493570.00.005.77 184.22.232.72http/1.1www.chonlateepr.com:443GET /wp-content/uploads/essential-addons-elementor/eael.css?ver 16-1720-0/0/344. 0.00358404342970.00.004.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1720-0/0/296. 0.00346402680570.00.006.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/215. 0.00348102060380.00.003.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/101. 0.0035960892110.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/140. 0.0036120919000.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1720-0/0/65. 0.0036020549540.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/10. 0.003581068810.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/189. 0.0027446452198090.00.003.51 162.158.175.8http/1.1www.siamerp.com:443GET //test/wp-includes/wlwmanifest.xml HTTP/1.1 24-1720-0/0/128. 0.0035860708380.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1720-0/0/87. 0.0036130937100.00.001.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1720-0/0/3. 0.003614018910.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1720-0/0/3. 0.003616025190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1720-0/0/91. 0.0035830750500.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1720-0/0/4. 0.003582026810.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1720-0/0/88. 0.0036050547580.00.000.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1720-0/0/9. 0.003580097780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1720-0/0/83. 0.0036100788710.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1720-0/0/3. 0.003609040.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1720-0/0/82. 0.0036010988600.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1720-0/0/2. 0.003603010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1720-0/0/3. 0.003578017380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1720-0/0/3. 0.003606020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1720-0/0/3. 0.003579030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1720-0/0/4. 0.003604070.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1720-0/0/1. 0.003608110.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1720-0/0/1. 0.003588010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1720-0/0/90. 0.00277695172126480.00.002.70 172.68.234.130http/1.1www.chonlateebranding.com:443POST /wp-cron.php?doing_wp_cron=1694660481.29693388938903808593 43-1720-0/0/1. 0.003592010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1720-0/0/1. 0.003591010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1720-0/0/1. 0.003589010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1720-0/0/1. 0.003595010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1720-0/0/1. 0.003593010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1720-0/0/15. 0.003466032140.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1720-0/0/1. 0.003590000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connecti
Found on 2023-09-14 03:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073455c1ea57Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 10:49:23 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 6 hours 47 minutes 11 seconds Server load: 0.41 0.62 0.85 Total accesses: 37720 - Total Traffic: 667.9 MB - Total Duration: 52718844 CPU Usage: u2707.94 s5088.85 cu50472500 cs12367000 - 257000% CPU load 1.54 requests/sec - 28.0 kB/second - 18.1 kB/request - 1397.64 ms/request 3 requests currently being processed, 7 idle workers W.._._...__C__W_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-171640840/3/3223W 2.250045417160.00.0654.25 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.0 1-1716-0/0/3263. 0.00219044470910.00.0043.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1716-0/0/3281. 0.00212042597490.00.0066.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-171637840/51/3105_ 15.43256642972080.00.5955.47 162.158.239.7http/1.1www.singkansard.com:443GET /page/contact.php HTTP/1.1 4-1716-0/0/3038. 0.00218041604610.00.0042.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-171639030/40/2977_ 7.162039187670.00.3445.56 146.190.64.200http/1.1localhost:80GET /about HTTP/1.0 6-1716-0/0/2715. 0.00202036972150.00.0056.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1716-0/0/2682. 0.00216037006560.00.0035.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1716-0/0/2438. 0.0032035746270.00.0053.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-171635310/94/2431_ 59.250035222280.01.0947.04 146.190.64.200http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-171638840/44/2239_ 9.74050731378020.00.7642.09 27.254.96.168http/1.1www.focusfilmthailand.com:443POST /wp-cron.php?doing_wp_cron=1694576963.22321200370788574218 11-171638911/38/1999C 6.92098531700086.20.5422.54 198.98.57.49http/1.1www.focusfilmthailand.com:443GET /wp-login.php HTTP/1.1 12-171638930/37/1343_ 6.951024487260.00.3838.86 146.190.64.200http/1.1localhost:80GET /v2/_catalog HTTP/1.0 13-171639090/38/817_ 7.242012397740.00.6515.47 146.190.64.200http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 14-171639150/34/471W 10.16005891000.00.307.20 162.158.239.42http/1.1www.singkansard.com:443GET /page/contact.php HTTP/1.1 15-171639210/37/177_ 9.79101781950.00.503.01 146.190.64.200http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 16-1716-0/0/543. 0.0021708287850.00.007.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1716-0/0/121. 0.00542001234130.00.000.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/31. 0.005422054890.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/173. 0.00496011965670.00.0016.27 172.68.4.148http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-c25a 20-1716-0/0/110. 0.0054210853700.00.001.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1716-0/0/117. 0.0053630766370.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/113. 0.0070490855510.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1716-0/0/18. 0.0070230109850.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1716-0/0/21. 0.007028037670.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1716-0/0/9. 0.007026063280.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1716-0/0/76. 0.00653201550070.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1716-0/0/3. 0.007036033330.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1716-0/0/3. 0.0070450700.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1716-0/0/3. 0.0070440510.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1716-0/0/9. 0.00702704950.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1716-0/0/4. 0.0070390390.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1716-0/0/3. 0.00703802160.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1716-0/0/15. 0.0069990149050.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1716-0/0/4. 0.00703701040.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1716-0/0/6. 0.007031036240.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1716-0/0/6. 0.007012053100.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1716-0/0/61. 0.0067050977890.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1716-0/0/69. 0.00662301316420.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1716-0/0/3. 0.0070470250.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 207subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 69 seconds, (range: 5...115)index usage: 7%, cache usage: 9%total entries stored since starting: 6231total entries replaced since starting: 0total entries expired since starting: 6024total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 278 hit, 13514 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 03:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07341aadd701Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 17:39:20 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 13 hours 37 minutes 6 seconds Server load: 1.23 1.13 1.11 Total accesses: 68234 - Total Traffic: 972.3 MB - Total Duration: 98407353 CPU Usage: u2668.94 s5063.83 cu50281700 cs12325400 - 128000% CPU load 1.39 requests/sec - 20.3 kB/second - 14.6 kB/request - 1442.2 ms/request 4 requests currently being processed, 5 idle workers C_R._.W__.R_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702203991/13/5746C 4.080080343903.40.1082.49 172.70.135.193http/1.1www.chonlateefarm.com:443GET /wp-content/uploads/siteorigin-widgets/sow-image-default-d6 1-1702204700/1/5802_ 0.72074280354210.00.0188.97 54.174.222.129http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /wp-login.php HTTP/1.0 2-1702200500/71/5528R 41.2421381650780.00.8286.55 172.68.11.158http/1.1 3-1702-0/0/5566. 0.003181210950.00.0078.16 172.70.134.44http/1.1www.chonlateefarm.com:443GET /wp-content/uploads/siteorigin-widgets/sow-image-default-17 4-1702200930/68/5103_ 33.791074343240.00.6876.85 147.182.168.210http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 5-1702-0/0/5453. 0.0010173750150.00.0071.56 172.70.179.56http/1.1www.tun36.com:80GET /wp-content/uploads/2019/05/tun36-Icon_Home-230x230.png HTT 6-1702204210/10/4885W 3.060076422740.00.0764.14 147.182.168.210http/1.1localhost:80GET /server-status HTTP/1.0 7-1702203640/18/5091_ 5.091077371920.00.1275.36 147.182.168.210http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1702202630/31/4738_ 14.110065313720.00.3158.19 147.182.168.210http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1702-0/0/4274. 0.0061161620840.00.0057.22 172.70.42.197http/1.1www.chonlateefarm.com:443GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-c 10-1702203710/16/3826R 8.092126353490310.00.2261.70 87.121.221.251http/1.1www.siamsolarrooftop.com:443 11-1702203770/16/3266_ 7.210144893930.00.1558.29 172.70.134.91http/1.1www.chonlateefarm.com:443GET /wp-content/uploads/siteorigin-widgets/sow-social-media-but 12-1702-0/0/3174. 0.0093046669520.00.0040.73 39.106.23.26http/1.1www.ozonepluswater.net:443POST /xmlrpc.php HTTP/1.1 13-1702-0/0/1574. 0.00556021457430.00.0020.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702-0/0/1266. 0.00926017785330.00.0018.42 93.107.1.136http/1.1www.pokaorganize.com:443POST /xmlrpc.php HTTP/1.1 15-1702-0/0/914. 0.001325011320260.00.0011.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/393. 0.00144408121870.00.005.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/340. 0.001013864041420.00.003.28 172.71.210.2http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 18-1702-0/0/67. 0.00108106888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.00962301655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001081201344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0010807037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.00960204933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00108270733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0010816036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0010826086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0010799068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0010825010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.0095965501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0010809074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0010824010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.00992801144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0010823010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.0095507261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.00962102967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.00938003934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0010822041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0010796095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.0093816982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0039043000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0039029060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 82subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 98 seconds, (range: 4...288)index usage: 2%, cache usage: 3%total entries stored since starting: 12767total entries replaced since starting: 0total entries expired since starting: 12685total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 173 hit, 26150 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 10:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07349c9a7b0dApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 11:05:59 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 7 hours 3 minutes 48 seconds Server load: 1.91 2.24 2.33 Total accesses: 56967 - Total Traffic: 822.2 MB - Total Duration: 86904223 CPU Usage: u2766 s5060.36 cu50072700 cs12280800 - 245000% CPU load 2.24 requests/sec - 33.1 kB/second - 14.8 kB/request - 1525.52 ms/request 3 requests currently being processed, 7 idle workers .___.W_._W__W..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685-0/0/4631. 0.006069018790.00.0065.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1685317460/57/4536_ 38.231069268360.00.4866.69 167.172.232.142http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-1685316220/87/4399_ 54.112067399880.00.9252.49 167.172.232.142http/1.1localhost:80GET /about HTTP/1.0 3-1685316400/84/4212_ 56.14260864859880.01.0855.91 172.71.174.248http/1.1www.jbbgarment.com:80GET /w.php HTTP/1.0 4-1685-0/0/4143. 0.001060996680.00.0054.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1685317330/57/3830W 37.300057032220.00.4452.78 172.70.175.182http/1.1www.time2hand.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 6-1685318080/46/3940_ 28.150056337300.00.3253.41 167.172.232.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1685-0/0/4083. 0.004063074840.00.0069.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1685317550/56/3853_ 35.811132461850020.00.4057.08 103.233.1.246http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-login.php HTTP/1.1 9-1685319410/11/3921W 6.000057601850.00.0561.21 167.172.232.142http/1.1localhost:80GET /server-status HTTP/1.0 10-1685319480/9/3002_ 4.151046516560.00.0458.95 167.172.232.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 11-1685319610/5/2721_ 3.52048440008580.00.0240.66 172.69.65.224http/1.1www.jbbgarment.com:80GET /alfa.php HTTP/1.0 12-1685319800/2/2539W 1.000037502250.00.0032.50 103.233.1.246http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /wp-login.php HTTP/1.1 13-1685-0/0/2279. 0.0018856036562230.00.0031.64 46.161.15.14http/1.1www.ltclevelup.com:443GET /wp-login.php?registration=disabled HTTP/1.1 14-1685-0/0/1841. 0.00338032297870.00.0026.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685-0/0/1364. 0.001118023000610.00.0019.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1685-0/0/448. 0.00117106889750.00.005.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/343. 0.0083420544824860.00.005.00 51.159.105.232http/1.1www.chonlateefood.com:443GET /wp-login.php HTTP/1.1 18-1685-0/0/130. 0.00705802267410.00.001.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/111. 0.00705901550090.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1685-0/0/103. 0.00684813311644320.00.001.01 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 21-1685-0/0/185. 0.00687203156980.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/194. 0.0068036583469950.00.002.36 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 23-1685-0/0/100. 0.00675811431318330.00.001.61 172.68.234.148http/1.1www.accprogress.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 24-1685-0/0/39. 0.0069480480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/5. 0.00706002860.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/8. 0.007046074820.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0022930011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0022931012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.002292809920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0022942010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 103subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 52 seconds, (range: 0...197)index usage: 3%, cache usage: 4%total entries stored since starting: 7974total entries replaced since starting: 0total entries expired since starting: 7871total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 173 hit, 12737 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 04:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07349e03c9edApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 03-Sep-2023 23:28:18 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 8 hours 5 minutes 4 seconds Server load: 2.07 2.40 2.66 Total accesses: 88758 - Total Traffic: 870.9 MB - Total Duration: 148109133 CPU Usage: u2797.49 s5039.31 cu49702100 cs12196400 - 213000% CPU load 3.05 requests/sec - 30.6 kB/second - 10.0 kB/request - 1668.68 ms/request 7 requests currently being processed, 6 idle workers _CW___W_C_..W.CR.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674277500/83/6563_ 41.570095882350.00.5566.09 172.71.123.204http/1.1www.yuritrading.com:80GET /xmlrpc.php HTTP/1.0 1-1674281361/34/6478C 24.4602837943743216.00.2569.42 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 2-1674280330/55/6529W 24.700093850840.00.3962.71 172.68.234.135http/1.1www.dealaccounting.com:80POST /wp-cron.php?doing_wp_cron=1693758498.39402794837951660156 3-1674282040/31/6344_ 17.150088572590.00.1965.32 139.144.150.23http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1674282510/24/6164_ 15.230105190767550.00.1671.25 172.71.134.230http/1.1www.yuritrading.com:80POST /wp-login.php HTTP/1.0 5-1674283260/18/5992_ 10.13151786339190.00.0862.73 172.68.234.140http/1.1www.yuritrading.com:80POST /wp-cron.php?doing_wp_cron=1693758497.01937103271484375000 6-1674277640/63/5690W 44.830082435750.00.6257.39 139.144.150.23http/1.1localhost:80GET /server-status HTTP/1.0 7-1674283900/10/5534_ 6.360136180342090.00.0852.26 18.185.103.38http/1.1www.thaidaoherb.com:443GET /?author=5 HTTP/1.1 8-1674281571/26/5322C 18.9502780783528016.00.3450.29 172.105.121.117http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 9-1674284180/8/5298_ 3.330179321620.00.0568.99 139.144.150.23http/1.1localhost:80GET /v2/_catalog HTTP/1.0 10-1674-0/0/4928. 0.001762671806200.00.0060.69 172.68.234.176http/1.1www.dealaccounting.com:80POST /wp-cron.php?doing_wp_cron=1693758479.65613293647766113281 11-1674-0/0/4374. 0.00178065318090.00.0037.40 139.59.182.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1674278920/74/4065W 34.560064189330.00.4937.26 172.70.38.182http/1.1www.dealaccounting.com:80GET //wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog. 13-1674-0/0/2647. 0.00249045076040.00.0020.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1674275701/100/2604C 52.62062047012556.20.7937.90 27.254.96.168http/1.1www.thaidaoherb.com:443POST /wp-cron.php?doing_wp_cron=1693758497.61610102653503417968 15-1674277700/72/1783R 46.531130833785490.00.4914.36 162.158.19.100http/1.1 16-1674-0/0/1078. 0.00586024876820.00.006.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1674-0/0/986. 0.0036536424835230.00.005.48 27.254.96.168http/1.1www.focusfilmthailand.com:80POST /wp-cron.php?doing_wp_cron=1693758132.45789694786071777343 18-1674-0/0/635. 0.001502166317862710.00.003.25 172.68.234.5http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693756994.1644 HTTP/1.0 19-1674-0/0/704. 0.001516170320736250.00.002.93 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693756979.81427311897277832031 20-1674-0/0/321. 0.001712011518230.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/405. 0.001456172213660820.00.001.50 172.71.98.163http/1.1www.dr-rpi.com:443GET /wp-admin/css/colors/blue/blue.php?wall=ZWNobyAnQmxhY2sgQm9 22-1674-0/0/425. 0.001466179513439450.00.001.35 172.68.234.202http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693757029.8466 HTTP/1.0 23-1674-0/0/322. 0.001587011846910.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1674-0/0/279. 0.003609010773600.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/294. 0.003674010098660.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1674-0/0/319. 0.003671012162920.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/397. 0.0033661213491190.00.002.01 172.68.234.196http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 28-1674-0/0/225. 0.00364309096500.00.001.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/232. 0.00371909000050.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/218. 0.00421618710130.00.001.00 167.99.8.63http/1.1localhost:443GET /v2/_catalog HTTP/1.1 31-1674-0/0/190. 0.00416316337715740.00.000.53 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754332.79655790328979492187 32-1674-0/0/191. 0.00426317917633200.00.000.44 134.122.63.192http/1.1 33-1674-0/0/200. 0.00427526428295680.00.000.41 198.41.230.115http/1.1www.smetast.com:80GET / HTTP/1.0 34-1674-0/0/105. 0.00437404216670.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/100. 0.00451518455189810.00.000.20 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753980.5489 HTTP/1.0 36-1674-0/0/88. 0.00443604308510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/118. 0.00438204782180.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1674-0/0/46. 0.00465802531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.00452027385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.00458703865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.00456604242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.00451604803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.00442915754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.00441319884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 275subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 32 seconds, (range: 0...147)index usage: 9%, cache usage: 12%total entries stored since starting: 14110total entries replaced since starting: 0total entries expired since starting: 13835total (pre-expiry) entries scrolled out
Found on 2023-09-03 16:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734ba638c98Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 22:46:09 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 4 hours 58 minutes 9 seconds Server load: 6.12 5.29 4.61 Total accesses: 119706 - Total Traffic: 935.2 MB - Total Duration: 147627045 CPU Usage: u2846.37 s4972.33 cu48713900 cs11942700 - 339000% CPU load 6.69 requests/sec - 53.5 kB/second - 8.0 kB/request - 1233.25 ms/request 9 requests currently being processed, 9 idle workers WW__R._.._.._..R.WW_R.._.W....__W................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1652253520/26/7755W 18.040093908950.00.1658.71 206.189.34.250http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 1-1652252570/53/7584W 41.730093177450.00.3266.10 162.158.87.208http/1.1www.benz.chonlateeauto.com:443GET / HTTP/1.1 2-1652255670/8/7535_ 6.13080291279270.00.0258.91 146.190.87.238http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 3-1652253140/36/7295_ 28.89077590827040.00.2067.86 172.69.64.224http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 4-1652253300/30/7428R 22.06163489979580.00.1154.73 172.173.90.228http/1.1 5-1652-0/0/7143. 0.0035087037390.00.0052.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1652251700/81/7022_ 63.090086092630.00.3950.95 206.81.1.88http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1652-0/0/7157. 0.0021087382130.00.0050.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1652-0/0/6919. 0.0034083584790.00.0050.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1652251820/76/6552_ 56.41086881289010.00.6053.35 172.71.160.85http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 10-1652-0/0/6379. 0.0027079253000.00.0061.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1652-0/0/6080. 0.0025072800060.00.0048.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1652252160/69/5771_ 48.85050371027170.00.4543.03 172.173.110.210http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 13-1652-0/0/5488. 0.0022067370420.00.0038.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1652-0/0/5356. 0.001065705050.00.0043.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1652252890/47/4068R 33.33169649868180.00.2130.61 172.173.110.210http/1.1 16-1652-0/0/3943. 0.0023048117500.00.0028.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1652253860/21/3269W 15.230039915890.00.1423.96 206.81.1.88http/1.1localhost:80GET /server-status HTTP/1.0 18-1652254000/16/2157W 12.040027203700.00.0717.01 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 19-1652254150/17/1041_ 12.42077312936480.00.0610.09 206.189.34.250http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 20-1652254210/20/843R 13.341011495090.00.127.49 172.69.64.224http/1.1 21-1652-0/0/445. 0.003316943130.00.004.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1652-0/0/302. 0.003105221520.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1652254300/16/252_ 11.3705234017890.00.091.90 51.68.191.70http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1 24-1652-0/0/173. 0.003603111260.00.000.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1652254520/17/254W 12.07003886530.00.101.15 172.69.64.236http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 26-1652-0/0/188. 0.001103322300.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1652-0/0/187. 0.002602941630.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/48. 0.003901000030.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/122. 0.002402091980.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1652254720/18/21_ 13.090693372130.00.070.08 172.173.90.228http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 31-1652254740/19/30_ 11.890778356020.00.090.10 162.158.175.43http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 32-1652254850/18/55W 14.3400863930.00.090.34 146.190.87.238http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 33-1652-0/0/60. 0.00151150565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.00151130696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.00151090719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.00151640349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.00149674061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.00151847143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.00151400530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.00151660257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.00151720208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.00151780142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.00151430543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.00150044221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.00151540415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.00149647931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.001497610251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.00149559421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.00151830109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-08-31 15:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073439774aecApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 08:01:48 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 3 hours 59 minutes 30 seconds Server load: 4.99 4.49 4.44 Total accesses: 126195 - Total Traffic: 679.2 MB - Total Duration: 163877099 CPU Usage: u2711.31 s4870.88 cu47905800 cs11726200 - 415000% CPU load 8.78 requests/sec - 48.4 kB/second - 5.5 kB/request - 1298.6 ms/request 10 requests currently being processed, 6 idle workers _W.C_.WRW.R_WW__W._..W............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1645287070/46/7743_ 25.080112599720110.00.1839.87 27.254.96.168http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /wp-cron.php?doing_wp_cron=1693357306.47445511817932128906 1-1645287170/42/7669W 23.860098706300.00.2436.32 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 2-1645-0/0/7475. 0.00369897138230.00.0036.82 172.71.166.243http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 3-1645287411/36/7436C 24.240650970010015.30.2038.49 23.101.112.233http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 4-1645287600/34/7346_ 20.160236695224520.00.1635.80 165.232.167.28http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 5-1645-0/0/7233. 0.0014094729650.00.0037.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1645287730/29/7106W 16.050094179290.00.1440.97 172.69.67.135http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 7-1645288520/9/7214R 6.28035394868770.00.0549.27 172.69.104.134http/1.1www.chonlateefarm.com:443 8-1645287790/26/6848W 14.780089012680.00.1240.25 172.71.167.5http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 9-1645-0/0/6815. 0.009088382500.00.0034.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1645287950/2/6523R 1.421947984095790.00.0229.28 114.132.219.217http/1.1www.dinocoffees.com:443 11-1645288020/14/6663_ 8.04041786986080.00.0433.14 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 12-1645288080/10/6311W 7.010081772860.00.0827.55 172.70.210.163http/1.1www.mgacccount.com:80GET /wp-login.php HTTP/1.0 13-1645288140/11/5960W 4.900077138730.00.2128.56 45.79.116.95http/1.1localhost:80GET /server-status HTTP/1.0 14-1645288150/15/5741_ 8.16055074856110.00.0643.48 172.71.166.242http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 15-1645288210/12/5049_ 6.790064837870.00.0625.72 161.35.190.56http/1.1 16-1645285280/92/5089W 54.010067010030.00.5529.69 165.232.167.28http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 17-1645-0/0/3981. 0.00137351154400.00.0021.53 23.101.119.191http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 18-1645288280/12/2882_ 7.78068238390920.00.0628.23 172.71.175.53http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 19-1645-0/0/1674. 0.007021364360.00.007.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1645-0/0/1301. 0.0020017946340.00.006.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1645286320/75/684W 46.39008252750.00.432.83 172.71.175.53http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 22-1645-0/0/219. 0.0012102540100.00.001.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1645-0/0/103. 0.00112814951163660.00.000.39 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 24-1645-0/0/7. 0.00114260110080.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/103. 0.001142801131130.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/103. 0.001142701145400.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/12. 0.00114310168310.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/100. 0.00117373741092050.00.000.30 172.70.135.134http/1.1www.biz9nar.com:80POST //xmlrpc.php HTTP/1.0 29-1645-0/0/80. 0.00117600922500.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1645-0/0/99. 0.00117414351029120.00.000.26 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 31-1645-0/0/3. 0.0011889023440.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1645-0/0/1. 0.0011894000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00117354221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00117374021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00117423661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00117363821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0011888011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0011884018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0011892030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00118700118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0011875054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0011872072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00117413841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00117404171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 125subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 101 seconds, (range: 12...215)index usage: 4%, cache usage: 5%total entries stored since starting: 4778total entries replaced since starting: 0total entries expired since starting: 4653total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 18 hit, 20510 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 01:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734b9b61d06Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 28-Aug-2023 03:38:02 +07 Restart Time: Monday, 28-Aug-2023 00:23:33 +07 Parent Server Config. Generation: 1632 Parent Server MPM Generation: 1631 Server uptime: 3 hours 14 minutes 28 seconds Server load: 3.86 3.58 3.67 Total accesses: 73381 - Total Traffic: 520.0 MB - Total Duration: 89819083 CPU Usage: u2620.72 s4784.27 cu47167700 cs11538400 - 503000% CPU load 6.29 requests/sec - 45.6 kB/second - 7.3 kB/request - 1224.01 ms/request 4 requests currently being processed, 8 idle workers _..W.._W._WW____._................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1631307220/50/5225_ 23.950064772060.00.1733.57 51.68.230.210http/1.1www.hotlineservicethailand.com:POST /xmlrpc.php HTTP/1.0 1-1631-0/0/4947. 0.0025160242140.00.0033.70 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 2-1631-0/0/5101. 0.00158060512370.00.0046.75 74.249.250.179http/1.1www.thefixup333.com:443POST //xmlrpc.php HTTP/1.1 3-1631306570/71/4805W 43.240058620640.00.3029.25 172.69.65.195http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 4-1631-0/0/4813. 0.0023059615350.00.0032.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1631-0/0/4907. 0.00764960687780.00.0031.86 74.249.250.179http/1.1www.thefixup333.com:443POST //xmlrpc.php HTTP/1.1 6-1631307030/51/4697_ 24.63051256266920.00.1828.36 172.69.65.195http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 7-1631307110/54/4658W 27.640057210050.00.1834.26 172.71.174.157http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 8-1631-0/0/4477. 0.0021054373220.00.0027.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1631308110/16/4249_ 5.05065050843300.00.0425.77 74.249.250.179http/1.1www.thefixup333.com:443POST //xmlrpc.php HTTP/1.1 10-1631308180/14/4188W 5.040053109090.00.0469.49 74.249.250.179http/1.1www.thefixup333.com:443POST //xmlrpc.php HTTP/1.1 11-1631307610/30/3900W 12.730047117080.00.0926.68 137.184.162.65http/1.1localhost:80GET /server-status HTTP/1.0 12-1631307670/27/3658_ 13.07039145338330.00.1224.16 172.71.174.157http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 13-1631308190/12/3280_ 5.54058139545400.00.0518.18 170.64.137.144http/1.1www.nakindogtraining.com:443GET /xmlrpc.php HTTP/1.1 14-1631308310/14/2807_ 5.900035536140.00.0415.64 137.184.162.65http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1631308330/15/2797_ 6.130234319650.00.0517.89 172.70.246.95http/1.1www.thaidocuments.com:80GET / HTTP/1.0 16-1631-0/0/1359. 0.0024016561370.00.007.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1631308400/14/1188_ 8.13096714702930.00.066.33 162.158.174.55http/1.1www.torrong.com:80POST //wp-login.php HTTP/1.0 18-1631-0/0/970. 0.00731011828170.00.004.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1631-0/0/1145. 0.001446014323920.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1631-0/0/105. 0.00162601177060.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1631-0/0/5. 0.0033320165940.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1631-0/0/100. 0.0031983991321810.00.000.34 172.71.166.229http/1.1www.mgacccount.com:80POST //wp-login.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 131subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 76 seconds, (range: 6...208)index usage: 4%, cache usage: 6%total entries stored since starting: 6202total entries replaced since starting: 0total entries expired since starting: 6071total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 16 hit, 10971 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-27 20:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073414c75cbeApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 27-Aug-2023 01:58:54 +07 Restart Time: Sunday, 27-Aug-2023 00:24:30 +07 Parent Server Config. Generation: 1629 Parent Server MPM Generation: 1628 Server uptime: 1 hour 34 minutes 24 seconds Server load: 1.83 1.63 1.60 Total accesses: 14904 - Total Traffic: 95.1 MB - Total Duration: 19381743 CPU Usage: u2584.69 s4759.94 cu47011700 cs11502500 - 1030000% CPU load 2.63 requests/sec - 17.2 kB/second - 6.5 kB/request - 1300.44 ms/request 4 requests currently being processed, 7 idle workers WW_.____W_..W_.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1628141500/26/1303W 13.980016929190.00.178.54 172.71.246.18http/1.1www.chonlateeit.com:443POST /wp-login.php HTTP/1.1 1-1628140430/61/1261W 30.560016582930.00.318.73 192.53.126.23http/1.1localhost:80GET /server-status HTTP/1.0 2-1628141290/30/1250_ 13.230016451980.00.127.47 192.53.126.23http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1628-0/0/1213. 0.005015980630.00.007.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1628141390/31/1269_ 14.440116686530.00.148.11 192.53.126.23http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-1628142300/16/1301_ 8.55060316316440.00.088.67 162.158.189.230http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 6-1628142400/14/1200_ 7.19077715918820.00.077.85 172.70.39.28http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1 7-1628140200/65/1216_ 31.22163715709610.00.357.10 162.158.189.231http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 8-1628142040/19/1056W 9.620013619080.00.097.83 162.158.189.230http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 9-1628142820/3/922_ 2.07172811955710.00.015.41 172.71.246.19http/1.1www.chonlateeit.com:443GET /wp-login.php HTTP/1.1 10-1628-0/0/917. 0.0038012311500.00.005.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1628-0/0/785. 0.0041010304960.00.004.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1628142060/16/699W 7.16008725940.00.114.20 172.70.39.188http/1.1www.chonlateefarm.com:443GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1 13-1628142460/15/506_ 5.05116272890.00.102.79 192.53.126.23http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 14-1628-0/0/6. 0.004013051150.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 144subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 99 seconds, (range: 11...253)index usage: 5%, cache usage: 6%total entries stored since starting: 2303total entries replaced since starting: 0total entries expired since starting: 2159total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5161 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-26 18:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734d728a11dApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 25-Aug-2023 15:59:30 +07 Restart Time: Friday, 25-Aug-2023 04:02:14 +07 Parent Server Config. Generation: 1624 Parent Server MPM Generation: 1623 Server uptime: 11 hours 57 minutes 16 seconds Server load: 9.15 7.61 4.95 Total accesses: 125958 - Total Traffic: 1.6 GB - Total Duration: 187715955 CPU Usage: u2869.45 s4834.41 cu46874800 cs11470000 - 136000% CPU load 2.93 requests/sec - 38.7 kB/second - 13.2 kB/request - 1490.31 ms/request 12 requests currently being processed, 6 idle workers WW_W_W_CRWW_W_C_.W........C....................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1623114520/85/9621W 68.4100141568150.00.41101.62 137.184.106.30http/1.1localhost:80GET /server-status HTTP/1.0 1-1623116250/28/9535W 25.8800139425150.00.13176.12 27.254.96.168http/1.1www.chonlateepro.com:443POST /wp-cron.php?doing_wp_cron=1692953969.83375191688537597656 2-1623114610/81/9428_ 63.3401449138180400.00.31115.61 85.217.144.141http/1.1www.chonlateevip.com:443POST //xmlrpc.php HTTP/1.1 3-1623115220/63/9020W 51.7900134328900.00.41157.70 172.71.182.24http/1.1www.chonlateebranding.com:443POST //xmlrpc.php HTTP/1.1 4-1623117260/6/8702_ 5.640757130774800.00.03105.03 172.71.182.173http/1.1www.chonlateeplus.com:443POST //xmlrpc.php HTTP/1.1 5-1623116340/29/9000W 23.1920133161960.00.1597.98 85.217.144.141http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 6-1623115520/41/8824_ 32.0300126886400.00.4288.24 35.93.57.253http/1.1www.spamechanicssystem.com:80GET /favicon.ico HTTP/1.0 7-1623116351/31/8559C 25.99014901289613316.00.4180.25 52.176.98.184http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 8-1623116020/37/8215R 28.3511219120781170.00.1691.26 172.71.98.146http/1.1 9-1623116680/19/7685W 15.3100110776140.00.1072.06 52.176.98.184http/1.1www.nakindogtraining.com:443POST //xmlrpc.php HTTP/1.1 10-1623116760/19/7242W 18.3600106692310.00.1393.55 172.71.102.22http/1.1www.chonlateecamping.com:80POST //xmlrpc.php HTTP/1.0 11-1623116460/30/6515_ 22.7301152100190420.00.1268.29 172.71.130.159http/1.1www.chonlateecoffee.com:80POST /wp-login.php HTTP/1.0 12-1623116560/25/5211W 21.250078141480.00.2657.12 172.71.98.187http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 13-1623117400/1/4587_ 0.75094067550010.00.0049.29 141.101.77.45http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 14-1623116821/20/3366C 17.870107245752857.00.1041.35 85.217.144.141http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 15-1623116920/18/2516_ 16.100135338138600.00.0730.35 172.71.98.147http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 16-1623-0/0/2442. 0.002101035865540.00.0038.72 172.71.98.186http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 17-1623117340/4/1624W 1.480025137140.00.0133.08 172.71.182.26http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 18-1623-0/0/692. 0.009011229343620.00.009.21 172.71.182.26http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 19-1623-0/0/306. 0.00627764892210.00.002.54 172.71.102.22http/1.1www.chonlateecamping.com:80POST //xmlrpc.php HTTP/1.0 20-1623-0/0/483. 0.00717117585510.00.003.41 141.101.77.46http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 21-1623-0/0/433. 0.0020806558240.00.004.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1623-0/0/245. 0.001961711133520.00.0047.73 141.101.77.45http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 23-1623-0/0/253. 0.0022302841210.00.001.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1623-0/0/17. 0.002280107460.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1623-0/0/275. 0.0019404274760.00.002.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1623113701/98/150C 87.16012313544793.70.531.11 172.71.102.97http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 27-1623-0/0/156. 0.0027743676920.00.001.55 172.71.182.24http/1.1www.chonlateebranding.com:443POST //xmlrpc.php HTTP/1.1 28-1623-0/0/19. 0.002150279030.00.000.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1623-0/0/198. 0.00169393377860.00.001.46 85.217.144.141http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 30-1623-0/0/10. 0.00230077450.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1623-0/0/169. 0.005102522630.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1623-0/0/87. 0.005301593340.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1623-0/0/99. 0.001394512671338230.00.000.72 162.158.204.201http/1.1www.khlangkaew.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 34-1623-0/0/13. 0.00144090130570.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1623-0/0/101. 0.00139597431493350.00.001.39 172.70.243.123http/1.1www.proplustech.co.th:443POST //xmlrpc.php HTTP/1.1 36-1623-0/0/7. 0.0014422056410.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1623-0/0/5. 0.0014416012380.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1623-0/0/4. 0.0014442016770.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1623-0/0/7. 0.0014427060070.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1623-0/0/5. 0.001441706570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1623-0/0/99. 0.00139222422099250.00.001.65 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 42-1623-0/0/4. 0.0014410079130.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1623-0/0/2. 0.0014436017500.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1623-0/0/4. 0.0014411052890.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1623-0/0/4. 0.0014412056260.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1623-0/0/9. 0.001404907476510.00.0045.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1623-0/0/3. 0.0014418044010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1623-0/0/5. 0.0014407073100.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1623-0/0/2. 0.0014435024990.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurS
Found on 2023-08-25 08:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07342fd6f9e8Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 24-Aug-2023 14:55:46 +07 Restart Time: Thursday, 24-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1621 Parent Server MPM Generation: 1620 Server uptime: 10 hours 53 minutes 35 seconds Server load: 1.90 2.25 2.66 Total accesses: 121574 - Total Traffic: 1.3 GB - Total Duration: 178389524 CPU Usage: u2720.93 s4759.47 cu46748600 cs11440900 - 148000% CPU load 3.1 requests/sec - 34.3 kB/second - 11.1 kB/request - 1467.33 ms/request 7 requests currently being processed, 3 idle workers RW_RC_W._W.......R................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1620321250/81/9509R 41.2910138019220.00.3189.44 162.158.174.156http/1.1 1-1620321550/78/9311W 38.2800139001010.00.3597.48 172.70.143.25http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 2-1620321670/71/9095_ 40.220467133834230.00.3896.45 172.70.143.25http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 3-1620322110/58/9141R 24.9221129948300.00.34106.08 66.94.96.9http/1.1 4-1620323181/24/8868C 13.42022791299266424.30.1891.44 172.71.175.35http/1.1www.business.co.th:443GET /category/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0% 5-1620322250/52/8757_ 27.590383129722500.00.21139.07 172.70.143.25http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 6-1620322840/40/7991W 20.0600117253840.00.1383.50 137.184.150.232http/1.1localhost:80GET /server-status HTTP/1.0 7-1620-0/0/7879. 0.00106525112635170.00.0083.66 172.70.143.26http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 8-1620322370/51/7796_ 23.8211111223590.00.2172.19 137.184.150.232http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1620320660/93/7566W 48.1200109909200.00.4866.27 172.70.243.213http/1.1www.khlangkaew.com:443GET / HTTP/1.1 10-1620-0/0/6988. 0.002620103979330.00.00118.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1620-0/0/5769. 0.00266086421720.00.0058.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1620-0/0/5516. 0.004850285892930.00.0054.86 172.70.143.25http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 13-1620-0/0/3950. 0.00265057840470.00.0039.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1620-0/0/3493. 0.00263047156090.00.0029.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1620-0/0/2657. 0.00227041407160.00.0030.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1620-0/0/1888. 0.00255027568400.00.0015.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1620320980/92/1394R 43.63639020442370.00.7811.92 39.101.185.186http/1.1www.bannongsaischool.com:443 18-1620-0/0/548. 0.0092907190450.00.004.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1620-0/0/594. 0.00997010076800.00.003.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1620-0/0/372. 0.008127895476970.00.002.26 172.70.174.175http/1.1www.ptatun.or.th:80POST //xmlrpc.php HTTP/1.0 21-1620-0/0/84. 0.00338301164030.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1620-0/0/242. 0.00320204360660.00.001.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1620-0/0/24. 0.0033900391990.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1620-0/0/203. 0.0030726342228100.00.001.39 172.70.38.211http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 25-1620-0/0/28. 0.0033990523060.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1620-0/0/12. 0.0034010269350.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1620-0/0/109. 0.0031207771691900.00.000.56 172.68.210.39http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 28-1620-0/0/230. 0.00338903272110.00.002.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1620-0/0/14. 0.0033770279800.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1620-0/0/14. 0.0033880449370.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1620-0/0/109. 0.0031305601531490.00.000.65 45.200.120.231http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 32-1620-0/0/11. 0.0033910223530.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1620-0/0/167. 0.0030657933189870.00.001.45 172.68.210.38http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 34-1620-0/0/110. 0.00311411261625100.00.000.67 172.68.210.38http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 35-1620-0/0/10. 0.0033980216840.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1620-0/0/11. 0.0033930237060.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1620-0/0/112. 0.00340701455190.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1620-0/0/138. 0.00340601816120.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1620-0/0/193. 0.00312078192668110.00.001.24 172.68.234.196http/1.1www.orderaccounting.com:80POST /wp-cron.php?doing_wp_cron=1692860617.13653206825256347656 40-1620-0/0/33. 0.0033290615420.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1620-0/0/207. 0.0030508633599810.00.001.35 172.68.210.93http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 42-1620-0/0/86. 0.00336401234680.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1620-0/0/94. 0.00308502164080.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1620-0/0/97. 0.00340501237890.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1620-0/0/5. 0.0033970147010.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1620-0/0/34. 0.0033180638490.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1620-0/0/5. 0.00131940136260.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1620-0/0/6. 0.00131930166320.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1620-0/0/104. 0.00129574321434970.00.000.66 49.0.247.100http/1.1www.ss-cool.com:443POST /xmlrpc.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megab
Found on 2023-08-24 07:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734b264f50aApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 23-Aug-2023 08:29:16 +07 Restart Time: Wednesday, 23-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1618 Parent Server MPM Generation: 1617 Server uptime: 4 hours 27 minutes 4 seconds Server load: 2.64 2.62 2.48 Total accesses: 53127 - Total Traffic: 563.9 MB - Total Duration: 73475645 CPU Usage: u2707.57 s4749 cu46530800 cs11388700 - 362000% CPU load 3.32 requests/sec - 36.0 kB/second - 10.9 kB/request - 1383.02 ms/request 6 requests currently being processed, 5 idle workers W_WWR..W__._W._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1617116820/0/4490W 0.003061891750.00.0040.87 172.68.234.202http/1.1www.99accountant.com:80POST /wp-cron.php?doing_wp_cron=1692754152.65413689613342285156 1-1617116190/31/4217_ 16.73068659688580.00.3686.32 108.162.250.153http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 2-1617114750/64/4408W 37.530061338840.00.5142.14 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 3-1617113700/83/4189W 48.700058232410.00.6439.09 68.183.64.176http/1.1localhost:80GET /server-status HTTP/1.0 4-1617115400/48/4295R 25.941157688470.00.4245.13 172.69.62.41http/1.1www.dr-rpi.com:443 5-1617-0/0/4142. 0.003842357833970.00.0037.84 118.68.97.122http/1.1www.ozonepluswater.net:443POST /xmlrpc.php HTTP/1.1 6-1617-0/0/4032. 0.0011054665030.00.0034.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1617115750/44/3722W 21.840051828980.01.0335.81 108.162.250.154http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 8-1617115870/38/3501_ 22.880148527910.00.2936.35 68.183.64.176http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-1617116640/14/3275_ 8.830145469770.00.1331.68 68.183.64.176http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1617-0/0/3113. 0.00202042118510.00.0032.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1617113850/83/2724_ 49.58069836047440.00.6626.03 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 12-1617113970/79/2335W 48.621032511560.00.5424.05 172.68.234.202http/1.1www.99accountant.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 13-1617-0/0/1530. 0.0015769222569540.00.0013.55 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-1617114270/81/1223_ 46.25053016007910.00.6210.91 172.69.62.40http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 15-1617-0/0/766. 0.00796011663930.00.0010.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1617-0/0/335. 0.0080504671030.00.006.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1617-0/0/433. 0.009275436500890.00.007.03 108.162.250.167http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 18-1617-0/0/199. 0.0051305352798720.00.001.30 195.22.228.187http/1.1www.tkadvicesystem.com:443GET /wp-login.php HTTP/1.1 19-1617-0/0/102. 0.0051225431466990.00.000.55 172.68.146.24http/1.1www.accsmile.com:80POST //xmlrpc.php HTTP/1.0 20-1617-0/0/2. 0.0011928011320.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1617-0/0/81. 0.001168301115900.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1617-0/0/4. 0.0011919045200.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1617-0/0/3. 0.0011924020200.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1617-0/0/1. 0.0011930000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1617-0/0/2. 0.0011926011730.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1617-0/0/3. 0.0011922029740.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 89subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 71 seconds, (range: 8...251)index usage: 3%, cache usage: 4%total entries stored since starting: 5220total entries replaced since starting: 0total entries expired since starting: 5131total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 6 hit, 13361 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-23 01:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734de09f4cbApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 21-Aug-2023 18:53:42 +07 Restart Time: Monday, 21-Aug-2023 14:17:12 +07 Parent Server Config. Generation: 1612 Parent Server MPM Generation: 1611 Server uptime: 4 hours 36 minutes 30 seconds Server load: 4.17 4.51 4.40 Total accesses: 113656 - Total Traffic: 1.1 GB - Total Duration: 134187099 CPU Usage: u2692.36 s4718.17 cu46282000 cs11325900 - 347000% CPU load 6.85 requests/sec - 69.6 kB/second - 10.2 kB/request - 1180.64 ms/request 8 requests currently being processed, 7 idle workers __W_WW___C_WWWW................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-161110180/42/8025_ 17.80081394307830.00.2578.34 162.158.107.53http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 1-161110780/3/7721_ 0.210091804990.00.0166.71 164.92.192.25http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-161110300/31/7773W 13.963090191980.00.1673.60 27.254.96.168http/1.1www.thai-pack.com:80POST /wp-cron.php?doing_wp_cron=1692618819.28199601173400878906 3-16119670/66/7469_ 25.55046189644330.00.4373.20 172.71.98.154http/1.1www.singkansard.com:443GET /wp-login.php HTTP/1.1 4-16119140/90/7359W 38.510088229190.00.4859.18 51.15.228.58http/1.1www.shinsoko.co.th:443POST /wp-login.php HTTP/1.1 5-161110360/35/7132W 13.860083556920.00.1771.91 194.233.72.90http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 6-16119200/89/7199_ 40.47071185556580.00.5388.31 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-16119560/75/6920_ 29.90020482650550.00.3965.39 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 8-16119940/58/6686_ 25.29021579553550.00.3571.50 40.122.165.81http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 9-161110001/59/6362C 25.26010337532080244.50.5862.40 52.167.144.189http/1.1www.nptpropertythailand.com:443GET /wp-content/uploads/2022/07/487358-1024x683.jpg HTTP/1.1 10-16119220/89/6548_ 36.97040379000320.00.5859.79 40.77.28.77http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1 11-16119360/76/5952W 32.400070725740.00.4947.69 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.0 12-161110380/33/5410W 14.800063760380.00.1969.21 162.158.107.53http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 13-161110850/0/5069W 0.000059503850.00.0048.18 40.122.165.81http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 14-161110870/0/4198W 0.000051587610.00.0037.94 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 15-1611-0/0/3335. 0.00223041407420.00.0028.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1611-0/0/2416. 0.00222029040740.00.0034.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1611-0/0/1769. 0.008542621124470.00.0017.22 194.233.72.90http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 18-1611-0/0/1562. 0.00690018650590.00.0014.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1611-0/0/505. 0.0068905346890.00.005.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1611-0/0/445. 0.005552223951400.00.005.60 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 21-1611-0/0/393. 0.0068203267450.00.003.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1611-0/0/562. 0.005617545916270.00.005.61 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 23-1611-0/0/264. 0.005582352517760.00.002.73 40.122.165.81http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 24-1611-0/0/288. 0.0069302479420.00.003.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1611-0/0/160. 0.005513801333720.00.001.19 194.233.72.90http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 26-1611-0/0/184. 0.0040087501938180.00.001.73 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1611-0/0/327. 0.00418703713160.00.003.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1611-0/0/243. 0.00419802394040.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1611-0/0/36. 0.0042110174380.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1611-0/0/251. 0.0039972922872120.00.002.67 106.15.38.206http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 31-1611-0/0/111. 0.0040248321091780.00.000.90 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 32-1611-0/0/126. 0.0040228751335930.00.001.19 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 33-1611-0/0/147. 0.00418201685170.00.005.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1611-0/0/151. 0.00400401888970.00.002.70 185.196.220.26http/1.1www.dinocoffees.com:80GET /wp-content/plugins/profilegrid-user-profiles-groups-and-co 35-1611-0/0/17. 0.00420721761850.00.000.32 35.89.64.107http/1.1www.cnb.co.th:443GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3 H 36-1611-0/0/99. 0.004079822966620.00.001.00 172.71.166.230http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 37-1611-0/0/53. 0.0041810227080.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1611-0/0/39. 0.0041990262840.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1611-0/0/68. 0.0041070823640.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1611-0/0/29. 0.0041910213080.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1611-0/0/23. 0.0041920134650.00.000.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1611-0/0/39. 0.0041970253090.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1611-0/0/41. 0.0041850305830.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1611-0/0/27. 0.0042100221680.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1611-0/0/44. 0.0041790435880.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1611-0/0/43. 0.0041940293110.00.001.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1611-0/0/24. 0.004196089750.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1611-0/0/11. 0.004203057130.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1611-0/0/1. 0.004215240.00.000.00 34.220.208.149http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent
Found on 2023-08-21 11:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734ed264136Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 19-Aug-2023 23:36:13 +07 Restart Time: Saturday, 19-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1601 Parent Server MPM Generation: 1600 Server uptime: 19 hours 33 minutes 59 seconds Server load: 5.03 4.92 4.77 Total accesses: 493879 - Total Traffic: 5.0 GB - Total Duration: 752848285 CPU Usage: u2682.05 s4687.13 cu45733300 cs11173900 - 80800% CPU load 7.01 requests/sec - 75.2 kB/second - 10.7 kB/request - 1524.36 ms/request 6 requests currently being processed, 8 idle workers .WR_WW____R__W_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1600-0/0/30050. 0.0031574451360310.00.00305.12 172.71.223.157http/1.1www.business.co.th:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 1-1600281680/84/30061W 53.3700446697330.00.59307.50 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 2-1600282640/63/29237R 34.341436443725990.00.39340.17 172.71.170.29http/1.1 3-1600282060/80/28957_ 48.110505432050080.00.54324.83 172.71.170.156http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 4-1600282140/82/28260W 53.1900419401980.00.67270.16 172.71.167.37http/1.1www.acumaticathailand.com:80POST //xmlrpc.php HTTP/1.0 5-1600284030/15/28185W 8.9400422787580.00.11294.20 68.183.64.176http/1.1localhost:80GET /server-status HTTP/1.0 6-1600284310/9/28468_ 4.1600428775330.00.02291.45 68.183.64.176http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1600282160/84/27698_ 51.010480419323360.00.57280.17 162.158.2.44http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 8-1600283110/49/27139_ 30.900421411532850.00.30319.48 172.71.167.37http/1.1www.acumaticathailand.com:80POST //xmlrpc.php HTTP/1.0 9-1600283630/29/26314_ 18.360535399152310.00.20298.89 162.158.162.206http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 10-1600284110/13/25328R 7.650754384117140.00.07252.43 167.71.221.18http/1.1www.chonlateedesign.com:443 11-1600284120/15/24565_ 8.760603371735830.00.09242.14 162.158.162.72http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 12-1600284570/3/23804_ 1.980744365222180.00.02242.86 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 13-1600284420/7/22521W 4.0100336517460.00.03224.71 162.158.2.44http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 14-1600284480/7/20557_ 5.120708317732630.00.06198.29 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 15-1600-0/0/19419. 0.002040299123840.00.00186.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1600-0/0/16452. 0.0017423255479680.00.00205.26 172.71.166.120http/1.1www.acumaticathailand.com:80POST //xmlrpc.php HTTP/1.0 17-1600-0/0/13560. 0.001900208070880.00.00130.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1600-0/0/10724. 0.002070166031020.00.00127.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1600-0/0/8039. 0.0010676127015150.00.0072.50 162.158.2.44http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 20-1600-0/0/6258. 0.00105098162300.00.0062.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1600-0/0/4325. 0.0033070524030.00.0043.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1600-0/0/3492. 0.00206056867850.00.0037.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1600-0/0/3019. 0.00151050981470.00.0026.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1600-0/0/1964. 0.00186033191180.00.0019.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1600-0/0/1649. 0.001256428763760.00.0018.01 162.158.2.246http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 26-1600-0/0/1024. 0.0011501018020390.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1600-0/0/573. 0.0011509010916890.00.005.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1600-0/0/253. 0.001149005349510.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1600-0/0/203. 0.001149204335330.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1600-0/0/193. 0.001151104186880.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1600-0/0/329. 0.001139405730970.00.007.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1600-0/0/137. 0.001149903147530.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1600-0/0/91. 0.001134701967430.00.003.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1600-0/0/141. 0.001149803233850.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1600-0/0/130. 0.001147502747280.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1600-0/0/27. 0.001151001364630.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1600-0/0/86. 0.001150402641510.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1600-0/0/40. 0.001150201572150.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1600-0/0/37. 0.001150301523990.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1600-0/0/113. 0.001139602530290.00.004.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1600-0/0/57. 0.001139701733960.00.004.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1600-0/0/37. 0.005422601431370.00.000.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1600-0/0/39. 0.005421201613950.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1600-0/0/29. 0.005425701232370.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1600-0/0/100. 0.00540999842442900.00.000.72 108.162.242.104http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 46-1600-0/0/37. 0.005420201507310.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1600-0/0/110. 0.00540647602580430.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 48-1600-0/0/23. 0.005426501163420.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1600-0/0/25. 0.005422001164760.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests Conn</
Found on 2023-08-19 16:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734cfcecf81Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 18-Aug-2023 20:17:34 +07 Restart Time: Friday, 18-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1598 Parent Server MPM Generation: 1597 Server uptime: 16 hours 15 minutes 22 seconds Server load: 3.99 4.00 4.00 Total accesses: 411298 - Total Traffic: 4.2 GB - Total Duration: 631741932 CPU Usage: u2743.69 s4679.4 cu45373900 cs11075200 - 96500% CPU load 7.03 requests/sec - 74.8 kB/second - 10.6 kB/request - 1535.97 ms/request 11 requests currently being processed, 5 idle workers _CW_WC_CCW.W__RWW................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-15973650/89/25186_ 48.2301375930400.00.69227.76 45.55.193.222http/1.1 1-15973111/99/24930C 56.3800378745000.70.81225.03 68.183.64.176http/1.1localhost:80GET /.env HTTP/1.0 2-15975390/38/24277W 21.1600370103980.00.30297.83 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 3-15975780/37/24405_ 18.0001367058160.00.27247.24 139.144.150.45http/1.1localhost:80GET /config.json HTTP/1.0 4-15975940/26/23762W 11.3100357256170.00.18255.15 103.28.39.161http/1.1www.thaiquickservice.net:443POST /xmlrpc.php HTTP/1.1 5-15975211/43/23585C 23.0700355655992.30.38229.95 206.81.1.88http/1.1localhost:443GET / HTTP/1.1 6-15976020/24/23613_ 12.320892358428000.00.16233.14 165.22.108.223http/1.1www.chonlateepro.com:443GET /.vscode/sftp.json HTTP/1.1 7-15973761/80/22893C 48.700602350425615.90.63241.41 52.176.91.65http/1.1www.thefixup333.com:443GET /mar.php HTTP/1.1 8-15976351/11/22571C 4.7600340471102.60.11217.54 167.71.48.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-15976680/6/21521W 1.7800327409260.00.04271.05 104.43.248.26http/1.1www.seasabithailand.com:80POST //xmlrpc.php HTTP/1.0 10-1597-0/0/20966. 0.003892315902130.00.00206.90 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 11-15973960/85/19905W 51.1000299488400.00.71183.49 45.79.116.95http/1.1localhost:80GET /server-status HTTP/1.0 12-15973980/83/18558_ 47.7901282756660.00.57223.54 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 13-15976780/4/18024_ 0.7900274033480.00.01182.28 134.122.63.192http/1.1localhost:80GET /telescope/requests HTTP/1.0 14-15974200/82/15174R 46.1101233940150.00.55159.44 172.68.11.17http/1.1www.siamautomation.com:443 15-15974940/49/13847W 24.9300220445040.00.28185.63 165.22.108.223http/1.1www.chonlateepro.com:443GET /about HTTP/1.1 16-15976840/4/12218W 1.4300192592560.00.02132.94 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 17-1597-0/0/11187. 0.0011140174917450.00.00116.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1597-0/0/8791. 0.00888999141416180.00.0079.81 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 19-1597-0/0/7593. 0.0041080126146740.00.0081.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1597-0/0/6381. 0.0044120105147990.00.0075.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1597-0/0/5651. 0.00438173387423460.00.0046.10 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 22-1597-0/0/3789. 0.005175063389020.00.0048.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1597-0/0/3180. 0.005178054035320.00.0028.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1597-0/0/1803. 0.008358029651410.00.0013.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1597-0/0/1555. 0.00818938924982810.00.0012.79 172.71.175.63http/1.1www.smebkk.com:80POST //wp-login.php HTTP/1.0 26-1597-0/0/1097. 0.008173019925950.00.007.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1597-0/0/787. 0.0015669012193140.00.009.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1597-0/0/255. 0.001567605767560.00.003.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1597-0/0/465. 0.001568107225710.00.004.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1597-0/0/66. 0.001566801440290.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1597-0/0/204. 0.001566704431160.00.003.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1597-0/0/179. 0.00154827073471420.00.001.38 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 33-1597-0/0/142. 0.001558703393190.00.002.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1597-0/0/225. 0.001550010833823130.00.001.95 172.71.102.133http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 35-1597-0/0/242. 0.001562504827130.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1597-0/0/238. 0.001558603802240.00.001.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1597-0/0/383. 0.00154758457124660.00.002.69 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 38-1597-0/0/123. 0.001567202072300.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1597-0/0/195. 0.001568504003330.00.001.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1597-0/0/324. 0.001559906324120.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1597-0/0/49. 0.00232250768360.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1597-0/0/99. 0.002322702852760.00.000.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1597-0/0/145. 0.002314902622090.00.001.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1597-0/0/83. 0.002321801868880.00.000.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1597-0/0/49. 0.002318101238590.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1597-0/0/117. 0.002306402130830.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1597-0/0/274. 0.002306104655670.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1597-0/0/67. 0.002321301232200.00.000.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1597-0/0/125. 0.002322102471910.00.001.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotT
Found on 2023-08-18 13:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073405646d51Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 17-Aug-2023 19:10:44 +07 Restart Time: Thursday, 17-Aug-2023 16:36:02 +07 Parent Server Config. Generation: 1595 Parent Server MPM Generation: 1594 Server uptime: 2 hours 34 minutes 41 seconds Server load: 4.63 5.39 5.45 Total accesses: 69412 - Total Traffic: 655.4 MB - Total Duration: 94579878 CPU Usage: u2618.75 s4613.86 cu45053700 cs10990900 - 604000% CPU load 7.48 requests/sec - 72.3 kB/second - 9.7 kB/request - 1362.59 ms/request 7 requests currently being processed, 8 idle workers .__W_W_R_W__..RWW.._.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1594-0/0/4477. 0.00342560166190.00.0038.11 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 1-1594120810/50/4312_ 24.070163758011150.00.2637.29 51.254.199.11http/1.1www.nakindogtraining.com:443GET / HTTP/1.1 2-1594122750/6/4352_ 4.01072059048040.00.0440.88 162.158.107.27http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST /xmlrpc.php HTTP/1.1 3-1594122860/5/4288W 2.630058533520.00.0141.97 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1594122920/5/4259_ 4.00092256117940.00.0441.53 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 5-1594120870/46/4106W 23.270056516750.00.8737.35 172.71.166.214http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 6-1594123040/3/3932_ 1.35044753182470.00.0338.92 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 7-1594119910/63/3858R 33.72189652343660.00.7433.20 172.69.65.196http/1.1 8-1594120060/55/3885_ 31.51064152782670.02.3638.41 172.69.64.228http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 9-1594120120/66/3583W 34.180048165390.00.5334.24 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 10-1594121920/20/3955_ 11.38050353122890.00.3738.13 172.71.166.214http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 11-1594120280/65/3518_ 31.690047758190.00.3734.08 161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1594-0/0/3132. 0.0027042341410.00.0023.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1594-0/0/3129. 0.007042988780.00.0034.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1594121040/50/3183R 29.20343344310920.00.3527.81 120.24.108.217http/1.1www.wealneosupply.com:443 15-1594121990/19/2536W 9.640035152950.00.1521.51 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 16-1594122050/20/2234W 7.690031227640.00.3822.53 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 17-1594-0/0/1424. 0.0022018622320.00.0017.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1594-0/0/1086. 0.0025014295100.00.0011.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1594122180/20/807_ 11.17083511299620.00.148.02 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 20-1594-0/0/378. 0.00605035510.00.006.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1594-0/0/342. 0.0052004420180.00.004.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1594-0/0/206. 0.0050132554750.00.003.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1594-0/0/139. 0.0053702542710.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1594-0/0/184. 0.0052502802770.00.004.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1594-0/0/236. 0.003537623427320.00.001.75 172.68.234.164http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1692273888.91179299354553222656 26-1594-0/0/368. 0.0024610805124200.00.002.74 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1594-0/0/78. 0.005270929920.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1594-0/0/14. 0.005360339710.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1594-0/0/132. 0.003606391945310.00.000.65 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 30-1594-0/0/8. 0.005260405800.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1594-0/0/20. 0.005120470770.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1594-0/0/21. 0.005000535400.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1594-0/0/107. 0.003559661734180.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 34-1594-0/0/13. 0.005350388640.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1594-0/0/123. 0.0041001920040.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1594-0/0/210. 0.0051102782140.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1594-0/0/174. 0.0039802511550.00.001.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1594-0/0/9. 0.005290317150.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1594-0/0/21. 0.005150504390.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1594-0/0/111. 0.003565061752710.00.000.62 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 41-1594-0/0/127. 0.0047601756830.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1594-0/0/114. 0.0052301776980.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1594-0/0/93. 0.0037401647580.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1594-0/0/19. 0.005180421680.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1594-0/0/7. 0.005330248140.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1594-0/0/99. 0.003649041420550.00.000.51 162.158.162.246http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 47-1594-0/0/3. 0.00530094030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 173subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 50 seconds, (range: 1...160)index usage: 6%, cache usage: 8%total entries sto
Found on 2023-08-17 12:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073425268f86Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 18:53:51 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 14 hours 51 minutes 38 seconds Server load: 3.64 4.81 5.04 Total accesses: 491455 - Total Traffic: 3.9 GB - Total Duration: 712398173 CPU Usage: u2667.03 s4604.85 cu44712300 cs10897400 - 104000% CPU load 9.19 requests/sec - 76.4 kB/second - 8.3 kB/request - 1449.57 ms/request 11 requests currently being processed, 3 idle workers W_RR.WWRWW__W...R....W............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1588257880/65/27365W 38.4100387799640.00.27231.86 138.68.163.10http/1.1localhost:80GET /server-status HTTP/1.0 1-1588258780/47/27358_ 21.010721384075590.00.22218.65 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 2-1588257690/69/26958R 41.7800386648620.00.27212.63 64.227.126.135http/1.1 3-1588259880/0/26460R 0.0000384446610.00.00238.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1588-0/0/26493. 0.00360379949780.00.00212.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1588259110/28/26088W 15.9700376887580.00.10186.84 172.71.167.156http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 6-1588259180/31/25744W 16.3700369675470.00.13195.08 172.69.65.141http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 7-1588259240/25/25866R 14.047964366318780.00.08175.41 39.101.185.186http/1.1www.chonlateevip.com:443 8-1588259430/22/24648W 13.5200352579500.00.10187.46 172.71.167.204http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 9-1588259500/23/24503W 12.0300352674310.00.07180.20 172.69.67.141http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 10-1588258200/66/23776_ 36.370395343345990.00.36168.38 172.69.65.120http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 11-1588259520/22/23192_ 11.560394337088970.00.10180.39 172.70.55.120http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 12-1588258350/65/22947W 32.5100329647050.00.27186.79 173.236.176.15http/1.1www.siamsolarrooftop.com:443POST /wp-login.php HTTP/1.1 13-1588-0/0/21933. 0.0070505313866890.00.00171.22 172.69.65.120http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 14-1588-0/0/21226. 0.0046433310663090.00.00237.97 172.69.65.142http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 15-1588-0/0/19226. 0.001230278577200.00.00154.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1588257030/88/18238R 45.0900262221760.00.36138.17 162.158.175.213http/1.1www.chonlateefarm.com:443 17-1588-0/0/16339. 0.0046461241230320.00.00219.20 172.71.167.173http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 18-1588-0/0/14397. 0.00960213286690.00.00104.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1588-0/0/11768. 0.00110173302960.00.0097.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1588-0/0/9171. 0.001120140017370.00.0067.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1588258470/59/6847W 34.6900102474760.00.2654.02 172.69.59.169http/1.1www.dr-rpi.com:443POST /xmlrpc.php HTTP/1.1 22-1588-0/0/5447. 0.0037984183403370.00.0049.42 172.69.67.141http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 23-1588-0/0/3881. 0.0052249260819430.00.0031.86 172.71.167.160http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 24-1588-0/0/3464. 0.0036040654889270.00.0024.62 172.70.55.119http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 25-1588-0/0/2603. 0.00508043115360.00.0018.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1588-0/0/1503. 0.00375022439080.00.0013.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1588-0/0/1034. 0.007714015503660.00.007.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1588-0/0/806. 0.009538013495190.00.006.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1588-0/0/580. 0.009947110009260.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1588-0/0/319. 0.00989405306840.00.006.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1588-0/0/392. 0.00970906441090.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1588-0/0/83. 0.003169101652280.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1588-0/0/112. 0.003168402871870.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1588-0/0/101. 0.003165601881510.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1588-0/0/129. 0.003165702345130.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1588-0/0/18. 0.00316890652620.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1588-0/0/109. 0.00314698242613860.00.000.66 172.70.189.100http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 38-1588-0/0/100. 0.00429148141804300.00.000.65 172.70.135.128http/1.1www.chonlateefarm.com:443POST //wp-login.php HTTP/1.1 39-1588-0/0/90. 0.004294201630980.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1588-0/0/16. 0.00430920679680.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1588-0/0/14. 0.00431080608390.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1588-0/0/12. 0.00431040649130.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1588-0/0/12. 0.00431140608070.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1588-0/0/25. 0.00430710787580.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1588-0/0/17. 0.00431020616270.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1588-0/0/12. 0.00431170602590.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1588-0/0/10. 0.00431120621060.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1588-0/0/11. 0.00431210570430.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1588-0/0/12. 0.00431190584220.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child
Found on 2023-08-16 11:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07340b14f01dApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 01:58:27 +07 Restart Time: Wednesday, 16-Aug-2023 00:24:35 +07 Parent Server Config. Generation: 1588 Parent Server MPM Generation: 1587 Server uptime: 1 hour 33 minutes 51 seconds Server load: 10.39 11.53 11.21 Total accesses: 70972 - Total Traffic: 412.4 MB - Total Duration: 119763095 CPU Usage: u2954.86 s4678.27 cu44412600 cs10815600 - 981000% CPU load 12.6 requests/sec - 75.0 kB/second - 6.0 kB/request - 1687.47 ms/request 18 requests currently being processed, 5 idle workers CCWCWWRWCW_.WR_WW.WC__WC_......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-158792201/20/3160C 12.651051921971.40.2819.65 172.105.37.32http/1.1localhost:443GET /login.action HTTP/1.1 1-158789271/64/3162C 46.45093152422355.20.4717.73 172.173.116.204http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 2-158792640/6/3049W 4.280051179990.00.0317.88 172.71.170.102http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 3-158787861/94/3030C 68.651049544211.40.4517.62 172.105.37.32http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-158790580/39/2993W 26.290049565640.00.1517.17 162.158.174.185http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 5-158792710/8/3091W 5.320050853070.00.0318.65 162.158.174.121http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 6-158792770/7/3077R 5.42078250080580.00.0517.19 162.158.175.75http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 7-158792960/2/2861W 1.010047913570.00.0016.51 40.83.35.60http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 8-158789371/60/3036C 45.140150588201.30.3616.95 172.105.37.32http/1.1localhost:443GET /.env HTTP/1.1 9-158793020/0/2913W 0.000048994020.00.0016.57 74.207.237.46http/1.1localhost:80GET /server-status HTTP/1.0 10-158789880/44/2914_ 34.76048547970650.00.2715.67 162.158.174.77http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 11-1587-0/0/2999. 0.0013948629220.00.0018.01 172.68.234.175http/1.1www.mgacccount.com:80GET /category/type-b/ HTTP/1.0 12-158790690/37/2691W 25.570043816990.00.1614.60 172.69.67.98http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 13-158791860/25/2751R 18.41094445618430.00.1015.14 162.158.174.85http/1.1www.xn--42cl6b3aa6azd4ce4q.com: 14-158788370/80/2684_ 60.50056844073950.00.4114.99 74.207.237.114http/1.1 15-158791870/26/2609W 17.780042806980.00.1118.01 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 16-158788510/78/2654W 59.890043604970.00.4114.23 20.127.78.238http/1.1www.tafa.or.th:443POST //wp-login.php HTTP/1.1 17-1587-0/0/2539. 0.0021042569160.00.0017.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-158788630/81/2444W 56.880040814800.00.3814.33 172.69.67.108http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 19-158790011/48/2324C 35.220038623551.40.2813.25 172.105.37.32http/1.1localhost:443GET /.git/config HTTP/1.1 20-158790130/48/2053_ 36.76045335775860.00.2212.58 172.71.175.47http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 21-158788800/74/1819_ 58.31092332587730.00.4410.73 172.71.167.238http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 22-158790190/45/1539W 29.610027525710.00.458.40 213.152.162.165http/1.1www.seasabithailand.com:80POST /xmlrpc.php HTTP/1.0 23-158790251/51/1545C 37.020028392361.40.258.36 172.105.37.32http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 24-158790310/47/1458_ 36.24084526389120.00.277.74 40.78.158.54http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 25-1587-0/0/1250. 0.0016087723226330.00.006.91 172.71.166.59http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 26-1587-0/0/1130. 0.0014669420967860.00.006.04 172.69.67.99http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 27-1587-0/0/1057. 0.0015151420252600.00.005.24 162.158.174.76http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 28-1587-0/0/659. 0.00255012236870.00.005.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1587-0/0/517. 0.0015799910187430.00.002.92 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 30-1587-0/0/427. 0.00855997846010.00.003.73 162.158.174.185http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 31-1587-0/0/323. 0.00849286444450.00.001.65 40.83.35.60http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 32-1587-0/0/100. 0.00269202208290.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1587-0/0/9. 0.002697065350.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1587-0/0/4. 0.002700012500.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1587-0/0/1. 0.002702000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1587-0/0/100. 0.0025129581919990.00.000.50 172.71.175.14http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 229subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 37 seconds, (range: 0...102)index usage: 8%, cache usage: 10%total entries stored since starting: 3504total entries replaced since starting: 0total entries expired since starting: 3275total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 33 hit, 14968 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-15 18:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734e1e1e722Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 14:52:07 +07 Restart Time: Thursday, 03-Aug-2023 14:51:31 +07 Parent Server Config. Generation: 1539 Parent Server MPM Generation: 1538 Server uptime: 36 seconds Server load: 3.20 3.45 3.48 Total accesses: 280 - Total Traffic: 1.8 MB - Total Duration: 218776 CPU Usage: u2388.5 s4238.98 cu40999400 cs9907550 - 1.41e+8% CPU load 7.78 requests/sec - 52.6 kB/second - 6.8 kB/request - 781.343 ms/request 6 requests currently being processed, 9 idle workers ___W_.WW__._C._W_W................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-15385570/24/24_ 9.4001199230.00.130.13 167.172.232.142http/1.1 1-15385580/22/22_ 10.730689227570.00.180.18 172.70.143.59http/1.1www.ptatun.or.th:80GET /wp-login.php HTTP/1.0 2-15387080/14/21_ 3.280676145910.00.070.10 172.70.174.84http/1.1www.proplustech.co.th:443POST //wp-login.php HTTP/1.1 3-15387290/0/7W 0.000043590.00.000.04 143.42.118.5http/1.1localhost:80GET /server-status HTTP/1.0 4-15385800/16/16_ 8.4600169640.00.200.20 165.232.76.155http/1.1localhost:443GET / HTTP/1.1 5-1538-0/0/6. 0.0022062150.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-15386110/22/22W 7.5600173080.00.140.14 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-15386130/11/11W 5.8300114920.00.080.08 162.158.189.95http/1.1www.ptatun.or.th:80POST /wp-login.php HTTP/1.0 8-15386240/20/20_ 8.6900177760.00.190.19 164.90.222.93http/1.1www.partymanagementthailand.comGET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 9-15386260/23/23_ 6.8501134030.00.110.11 144.126.198.24http/1.1localhost:80GET /.git/config HTTP/1.0 10-1538-0/0/9. 0.0011078260.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-15386380/21/21_ 5.120399980.00.090.09 139.144.150.23http/1.1localhost:443GET / HTTP/1.1 12-15386521/22/22C 5.1600102702.40.130.13 139.144.150.23http/1.1localhost:443GET / HTTP/1.1 13-1538-0/0/3. 0.002008800.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-15386610/12/12_ 6.440649128430.00.100.10 138.68.163.10http/1.1 15-15386730/14/14W 2.940067400.00.100.10 207.154.240.169http/1.1www.partymanagementthailand.comGET / HTTP/1.1 16-15386750/10/10_ 4.690463104990.00.050.05 94.228.114.37http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1 17-15386760/11/11W 4.890096970.00.080.08 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 18-1538-0/0/6. 0.0010052250.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 42subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 280 seconds, (range: 268...299)index usage: 1%, cache usage: 1%total entries stored since starting: 42total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 168 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-03 07:51
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: pop.partymanagementthailand.com
Port: 443
URL: https://pop.partymanagementthailand.comFirst seen 2023-08-03 07:51
Last seen 2024-02-02 12:45
Open for 183 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e7203c49a8Apache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 19:45:44 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 9 hours 44 minutes 23 seconds Server load: 2.04 2.01 2.00 Total accesses: 1849442 - Total Traffic: 23.8 GB - Total Duration: 2141105980 CPU Usage: u226.29 s121.32 cu32089.3 cs2210.25 - 1.41% CPU load .754 requests/sec - 10.2 kB/second - 13.5 kB/request - 1157.7 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes131000 229661no0yes032000 329394no0yes032000 529374no0yes032000 Sum400 1127000 __________W_____________________................................ ________________________________________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/48/14796_ 16.8420160260970.00.17193.80 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/46/15289_ 15.3535139013510.00.11198.96 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/49/14862_ 16.8140150309550.00.17192.74 162.243.186.177http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/42/15035_ 16.7740145875100.00.09185.97 159.65.138.217http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/44/14942_ 15.8190147711710.00.18185.45 159.203.44.43http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/40/15167_ 15.0370156649150.00.13188.54 161.35.27.144http/1.1 0-92293730/38/14838_ 15.4250145588580.00.16200.26 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/37/15144_ 16.8150150182050.00.09187.59 104.236.193.132http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/39/15106_ 16.6880145226960.00.10229.90 162.243.186.177h2localhost:443[0/0] Software caused connection abort 0-92293730/47/15241_ 15.3450148853430.00.18194.90 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293731/45/14805W 16.7800154393260.00.10200.69 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/42/14815_ 15.4040147156150.00.09195.46 139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/54/14685_ 15.4290137182760.00.17185.53 167.99.184.41http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/46/14837_ 15.4040169086520.00.11186.03 162.243.186.177http/1.1 0-92293730/42/15788_ 16.8430141615190.00.14187.80 104.236.193.132http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/48/14840_ 16.8150165341230.00.12182.51 161.35.190.56http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/53/14892_ 15.4260143405090.00.13206.39 104.236.193.132http/1.1 0-92293730/45/14952_ 16.8050144939950.00.14189.32 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-92293730/41/14769_ 16.6860160388350.00.07200.55 128.199.62.55http/1.1localhost:80GET / HTTP/1.1 0-92293730/46/14991_ 15.3600144639370.00.14193.82 138.68.133.118http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/47/14984_ 14.7568181495960.00.19193.46 159.65.138.217h2localhost:443[0/0] Software caused connection abort 0-92293730/40/15005_ 15.4340147053760.00.11204.09 139.144.150.8http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/47/15465_ 16.8060150748880.00.18188.30 104.236.193.132http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/41/14672_ 15.7830138765320.00.14190.19 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/55/14979_ 15.8020162205880.00.13186.91 165.22.74.203http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/49/14652_ 16.8070135981660.00.18197.03 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/45/15152_ 16.7740144713490.00.08194.53 161.35.155.246http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/45/14930_ 16.8060159187530.00.07213.31 161.35.190.56http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/51/14738_ 16.77317152174570.00.13175.94 104.236.193.132http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/34/15182_ 15.8020135139130.00.11225.15 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-92293730/53/14672_ 16.7800155573070.00.07199.15 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/41/14931_ 16.7980145815130.00.19185.18 161.35.190.56http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15731. 0.00559290138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00559290136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00559290174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00559290150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00559290146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00559290134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00559290172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00559290165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00559290127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00559290152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00559290148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00559290159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00559290159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00559290137016410.00.00183.04
Found on 2024-02-02 12:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e78b791070Apache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:42:15 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 40 minutes 54 seconds Server load: 3.47 3.17 3.02 Total accesses: 865222 - Total Traffic: 11.7 GB - Total Duration: 1072926541 CPU Usage: u108.18 s12.4 cu14756 cs775.09 - 8.41% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1240.06 ms/request 14 requests currently being processed, 50 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 14311no13yes428008 215008no13yes1022007 Sum2026 14500015 ................................___R_________WW__________W______ WW_R_WRW__W_W___RW______________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/6891. 0.00265092123140.00.00101.02 203.170.192.183http/1.1www.chonlateeaa.com:443POST /wp-cron.php?doing_wp_cron=1704609224.54213690757751464843 0-7-0/0/7350. 0.00265112572282630.00.00102.14 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6939. 0.0026589178790990.00.00100.26 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7174. 0.00265214775847660.00.0092.54 85.208.96.210http/1.1www.chonlateeboi.com:443GET /47585lrvyeti.html HTTP/1.1 0-7-0/0/7138. 0.00265105876261220.00.0089.56 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /jwyfijs-12086litems/etidm52w.html HTTP/1.1 0-7-0/0/7275. 0.0026584188932560.00.0096.14 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7088. 0.0026583970622910.00.00106.56 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2017idtuitems/eti HTTP/1.1 0-7-0/0/7166. 0.0026584673910630.00.0093.68 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ivxfijs-30857keti.html HTTP/1.1 0-7-0/0/7317. 0.0026590575885040.00.00143.62 40.77.167.2h2www.chonlateefbc.com:443GET /?m=cma-dishmachines-180uc-high-temp-undercounter-dishwashe 0-7-0/0/7203. 0.0026588878309230.00.0090.77 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6992. 0.0026544528187048130.00.00111.98 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6758. 0.002651184189200.00.0087.93 66.249.71.36http/1.1www.mgrandstructure.com:443GET /ofpm/project-sekai-mod-apk.html HTTP/1.1 0-7-0/0/6811. 0.0026585063912670.00.0090.61 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2045idtuetidm25.html HTTP/1.1 0-7-0/0/7015. 0.0026584094751170.00.0095.78 47.128.57.61http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/logo_Home.png HTTP/2.0 0-7-0/0/7685. 0.0026576672332400.00.0096.84 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6875. 0.0026588994028910.00.0088.35 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7000. 0.0026584175194130.00.0090.50 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cfrfijs-30435eitems/etidm.htm HTTP/1.1 0-7-0/0/7105. 0.0026584871642070.00.0094.88 23.22.35.162http/1.1www.chonlateeboi.com:443GET /19415rbhsetidm36ts.html HTTP/1.1 0-7-0/0/7067. 0.0026591788661280.00.0088.94 185.191.171.19http/1.1www.chonlateefood.com:443GET /getid/zeo12115nheeitems HTTP/1.1 0-7-0/0/7136. 0.0026584774949870.00.0096.17 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B8%AD%E0% 0-7-0/0/7171. 0.00265845115334180.00.0099.43 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 0-7-0/0/6851. 0.00265105678741500.00.0091.77 185.191.171.19http/1.1www.chonlateeboi.com:443GET /6178zvqcetid HTTP/1.1 0-7-0/0/7407. 0.0026584486534200.00.0098.18 3.224.220.101http/1.1www.chonlateeboi.com:443GET /19448rbhsitems/etidm98arp.html HTTP/1.1 0-7-0/0/6945. 0.0026569070103160.00.0098.07 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6996. 0.0026544092090520.00.0088.48 208.109.224.138http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7163. 0.0026584463458100.00.0091.23 47.128.57.61h2www.xn--12cx2bef7bl0boq4ch6gugw[2/2] done: stream 3, GET /wp-content/uploads/2021/01/logo_Home 0-7-0/0/6983. 0.0026584177138920.00.0099.07 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qifivak-4293sitems/etidm68.htm HTTP/1.1 0-7-0/0/7033. 0.00265123687774620.00.00120.10 149.91.122.223http/1.1www.chonlateefood.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/6856. 0.0026584776147840.00.0086.02 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7160. 0.002651078931820.00.00125.06 203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704609224.08053588867187500000 0-7-0/0/6794. 0.0026584484918420.00.0098.44 3.224.220.101http/1.1www.chonlateeboi.com:443GET /30278lrvyitems/etidm57o.html HTTP/1.1 0-7-0/0/7169. 0.0026590676482950.00.0091.69 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 1-743110/177/6988_ 79.730078169580.01.7890.42 137.184.150.232http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/222/6765_ 79.68066378797380.02.6486.16 208.109.34.70http/1.1www.ozonepluswater.net:443GET /wp-login.php HTTP/1.1 1-743110/149/6709_ 79.7800105345740.01.4685.91 138.68.133.118http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-743110/175/6469R 79.571083859760.01.5785.05 52.70.240.171http/1.1 1-743110/159/6643_ 79.730080194240.01.6398.38 159.203.182.222http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/239/6754_ 79.701078210170.04.2390.55 159.203.182.222http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/225/6745_ 79.78092597153540.04.4187.83 203.170.192.183http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 1-743110/160/6779_ 79.730090618180.01.5289.93 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1 1-743110/222/6884_ 79.780060843660.01.7287.84 137.184.150.232http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/141/6698_ 79.72085083225900.01.4892.54 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /sfhfijs-45739uitems/etidm HTTP/1.1 1-743110/97/6419_ 79.430990968030.01.1290.68 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1
Found on 2024-01-07 06:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e7f8fef548Apache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 03:47:53 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 17 hours 46 minutes 32 seconds Server load: 2.52 2.61 2.65 Total accesses: 314377 - Total Traffic: 4.4 GB - Total Duration: 288967642 CPU Usage: u221.73 s13.87 cu5056.5 cs270.41 - 8.69% CPU load 4.91 requests/sec - 72.5 kB/second - 14.7 kB/request - 919.176 ms/request 10 requests currently being processed, 54 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 122317no19yes4280012 227923no2yes626000 Sum2021 10540012 ................................________W____W_________W___W____ RW_____W_____W_R________W_______................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2-0/0/3194. 0.00306842528768890.00.0047.11 194.58.121.229http/1.1www.rooffurnish.com:443POST /wp-login.php HTTP/1.1 0-2-0/0/3455. 0.003068107724901260.00.0045.28 85.208.96.202http/1.1www.krongthongsecurity.com:443GET /htygzna229132litems/etidm14ugl.html HTTP/1.1 0-2-0/0/3118. 0.00306883437593330.00.0053.55 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?mjiecaw-286155vetidm4.htm HTTP/1.1 0-2-0/0/3380. 0.00306863627408070.00.0042.71 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5341tbrmitems/etidm45 HTTP/1.1 0-2-0/0/3237. 0.00306884125511080.00.0040.44 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ufshsbr-320093fetidm39hsf HTTP/1.1 0-2-0/0/3477. 0.00306883932480400.00.0043.86 52.167.144.24h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3259. 0.00306884025454740.00.0055.68 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ajwecaw-316459jetidm8 HTTP/1.1 0-2-0/0/3286. 0.00306840226514000.00.0042.47 91.92.252.141http/1.1www.ltclevelup.com:443GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3334. 0.00306883926277530.00.0084.92 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uuqaonh-122935detidm92hhd HTTP/1.1 0-2-0/0/3256. 0.00306883825449070.00.0042.02 3.224.220.101http/1.1www.chonlateeboi.com:443GET /11370ztiaetid.htm HTTP/1.1 0-2-0/0/3173. 0.003068101128795120.00.0038.86 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?eetvrsm-293297geti.html HTTP/1.1 0-2-0/0/3146. 0.003068407425688950.00.0040.21 66.249.69.228http/1.1www.chonlateenextbiz.com:443GET /sitemap3.xml HTTP/1.1 0-2-0/0/3096. 0.00306884525479180.00.0042.08 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5335tbrmitems/etidm69fm HTTP/1.1 0-2-0/0/3367. 0.00306883736720350.00.0045.96 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?liavrsm-295332netidm4.htm HTTP/1.1 0-2-0/0/3430. 0.00306884328925500.00.0045.91 85.208.96.193http/1.1www.chonlateeadmin.com:443GET /mnbwaok-38297oeti.html HTTP/1.1 0-2-0/0/3138. 0.003068030630950.00.0040.43 195.211.77.142http/1.1localhost:443HEAD / HTTP/1.1 0-2-0/0/3141. 0.003068109829741030.00.0040.23 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?jiyvrsm-295304litems/etidm19wvl.html HTTP/1.1 0-2-0/0/3394. 0.003068122126703460.00.0044.77 52.167.144.18h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3301. 0.00306884324881610.00.0042.98 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?lmahlzs-466netid HTTP/1.1 0-2-0/0/3155. 0.003068240229467670.00.0046.16 40.77.167.255h2www.chonlateeaa.com:443[0/0] init 0-2-0/0/3247. 0.00306884224826040.00.0050.02 52.70.240.171http/1.1www.chonlateeboi.com:443GET /37327bzlnitems/etidm82rn HTTP/1.1 0-2-0/0/3261. 0.003068408127242670.00.0046.03 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /sitemap16.xml HTTP/1.1 0-2-0/0/3606. 0.00306883325294670.00.0045.78 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?vfkvrsm-295862xitems/etidm84i.html HTTP/1.1 0-2-0/0/3167. 0.00306884525092350.00.0040.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /38206ztiaetidm39m HTTP/1.1 0-2-0/0/3161. 0.00306884225364790.00.0040.26 52.70.240.171http/1.1www.chonlateeboi.com:443GET /13039ztiaitems/etidm67na HTTP/1.1 0-2-0/0/3165. 0.00306888326235840.00.0040.77 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?hiwvrsm-306404jitems/etidm1.html HTTP/1.1 0-2-0/0/3226. 0.00306889028272940.00.0051.28 40.77.167.8h2www.chonlateenextbiz.com:443GET /g2016469.shtml HTTP/2.0 0-2-0/0/3171. 0.00306883831863910.00.0070.95 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-295296detidm28ovd.htm HTTP/1.1 0-2-0/0/3109. 0.003068025398020.00.0039.01 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3454. 0.00306884824072460.00.0079.52 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ikfqxjd-247957setidm79vx.html HTTP/1.1 0-2-0/0/3133. 0.00306883727805250.00.0047.82 3.224.220.101http/1.1www.chonlateeboi.com:443GET /1944gcmpetidm89ugj.htm HTTP/1.1 0-2-0/0/3519. 0.003068028024720.00.0043.22 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/themes/include.php HTTP/1.1 1-2223170/234/2557_ 123.651019226020.02.9133.18 143.42.118.5http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2223170/202/2302_ 123.821021233420.02.6129.64 178.62.73.12http/1.1localhost:443GET /about HTTP/1.1 1-2223170/223/2450_ 123.600019309030.02.6433.32 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 1-2223170/201/2290_ 123.660365720092840.02.7430.63 81.94.150.189http/1.1www.krongthongsecurity.com:443GET /wp-content/plugins/wp-compress-image-optimizer/fixCss.php? 1-2223170/165/2294_ 123.770028078970.02.0534.56 178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/261/2446_ 123.860018350260.03.6532.04 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2223170/196/2331_ 122.951419020680.02.4428.81 162.243.186.177h2localhost:443[0/0] Software caused connection abort 1-2223170/222/2407_ 123.59084519501540.03.8533.31 23.22.35.162http/1.1www.chonlateeboi.com:443GET /28775biwxetidm98tx.html HTTP/1.1 1-2223171/221/2384W 123.220019275940.02.7832.76 217.113.194.213http/1.1www.mkandptfoods.com:443GET /etajrvhu/fat-girl-car-wash-nude.html HTTP/1.1 1-2223170/192/2304_ 123.821018353620.02.3929.93 134.122.89.242http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-2223170/228/2346_ 123.651018428910.02.6834.66 128.199.62.55http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/211/2460_ 123.411019918610.02.6433.86 143.42.118.5http/1.1localhost:80
Found on 2024-01-05 20:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e71229ba09Apache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 03:32:05 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 43 Parent Server MPM Generation: 42 Server uptime: 11 days 3 hours 9 minutes 7 seconds Server load: 0.19 0.35 0.45 Total accesses: 4408956 - Total Traffic: 56.5 GB - Total Duration: 4157815319 CPU Usage: u200.44 s46.88 cu79452.5 cs4157.09 - 8.72% CPU load 4.58 requests/sec - 61.6 kB/second - 13.4 kB/request - 943.039 ms/request 10 requests currently being processed, 54 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 017105no18yes4280015 117528no2yes626000 Sum2020 10540015 _________________R____RW______W__R___W________W______R_____W___R ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-42171050/108/39546_ 76.301917358822980.01.12500.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?122194himsetid HTTP/1.1 0-42171050/130/38954_ 76.4810366081380.02.49492.36 167.99.8.63http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-42171050/178/39374_ 76.511677400875150.06.08508.73 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?rikvbri-212xetid.htm HTTP/1.1 0-42171050/107/39346_ 76.5510389564470.01.07513.60 159.203.63.67http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-42171050/116/39867_ 76.580901371026040.01.24567.55 185.191.171.11http/1.1www.chonlateeadmin.com:443GET /xgmxktd-28194zetid.htm HTTP/1.1 0-42171050/126/38940_ 76.4810398977370.02.49493.22 128.199.62.55http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-42171050/123/39261_ 76.4200402720170.01.31494.35 104.131.1.32http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-42171050/121/40030_ 76.5510367696840.01.26502.12 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 0-42171050/121/38989_ 76.4200379853090.01.25510.15 178.128.151.41http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-42171050/117/39387_ 76.4610368028920.01.28502.75 167.99.8.63http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-42171050/130/39008_ 76.5800384736370.01.46474.61 128.199.62.55http/1.1localhost:443GET /config.json HTTP/1.1 0-42171050/113/39043_ 76.4610369080830.01.33523.71 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-42171050/128/38953_ 76.4410375198450.01.36475.71 159.203.63.67http/1.1localhost:443GET /about HTTP/1.1 0-42171050/134/39131_ 76.5010407551470.01.64504.33 104.131.1.32http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-42171050/120/39305_ 76.3400380322460.01.50493.76 66.249.71.170http/1.1www.thaidaoherb.com:443GET /godsend/godsend.php?getid/chf55460hvoritems.htm HTTP/1.1 0-42171050/119/38998_ 76.4310372037240.01.40548.52 167.99.8.63http/1.1localhost:80GET /config.json HTTP/1.1 0-42171050/121/39971_ 76.3400375077740.01.30528.10 167.99.8.63http/1.1localhost:80GET /.env HTTP/1.1 0-42171050/122/39489R 76.4920366756680.01.23486.36 161.35.27.144http/1.1 0-42171050/149/39537_ 76.4410367933590.01.54510.57 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-42171050/113/39770_ 76.4310384600140.01.56547.02 167.99.8.63http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-42171050/200/39200_ 76.5210364536760.02.37516.18 159.223.108.26http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-42171050/104/39325_ 76.420847388058320.01.06507.30 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?128842himsetid HTTP/1.1 0-42171050/113/39100R 76.271873408451170.01.22517.30 185.191.171.11http/1.1www.chonlateeadmin.com:443GET /kozmbwb-28649meti.html HTTP/1.1 0-42171051/203/38491W 76.4400361796910.01.52477.61 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?89571himsitems/etidm.htm HTTP/1.1 0-42171050/173/39502_ 76.4310371560930.01.56523.08 159.203.63.67http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-42171050/125/38748_ 76.4410388761000.01.67474.00 178.128.151.41http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-42171050/139/39471_ 76.5610373218420.02.96588.07 128.199.62.55http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-42171050/113/38670_ 76.5010370337930.01.23512.98 128.199.62.55http/1.1localhost:443GET /.git/config HTTP/1.1 0-42171050/106/39264_ 76.511867411889910.01.31526.29 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?jnyecaw-275518letidm67w HTTP/1.1 0-42171050/100/39237_ 76.140825375236920.01.19506.92 167.99.8.63http/1.1localhost:80GET /server-status HTTP/1.1 0-42171051/105/39231W 76.2400370183210.01.17496.23 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mzfqqkm-3171sitems/eti HTTP/1.1 0-42171050/114/38973_ 76.2910378134480.01.67541.02 167.99.8.63http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-42175280/99/40400_ 59.290926375889300.01.13509.81 128.199.62.55h2localhost:443[0/0] Software caused connection abort 1-42175280/124/40307R 59.9420384682000.01.61552.35 159.223.108.26http/1.1localhost:443GET / HTTP/1.1 1-42175280/91/40096_ 59.8510385604590.00.93559.71 178.128.151.41http/1.1localhost:80GET /login.action HTTP/1.1 1-42175280/90/40327_ 60.061851393775990.01.11567.24 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?89546himsitems/etid.html HTTP/1.1 1-42175280/100/41205_ 60.1000365683100.01.10628.09 104.131.1.32http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-42175281/105/39887W 60.0000362748990.02.18573.51 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?ijxecaw-260775kitems/etidm13vw.htm HTTP/1.1 1-42175280/81/40020_ 59.8511365433400.00.92534.52 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 1-42175280/94/40483_ 59.5320389411980.01.19515.97 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-42175280/87/40175_ 59.9420377987020.01.01505.44 128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1 1-42175280/100/40279_ 59.9000370377790.01.07514.90 104.131.1.32http/1.1localhost:443GET / HTTP/1.1 1-42175280/76/40815_ 59.9620366892630.00.92538.59 167.99.8.63http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-42175280/83/40649_ 59.38013371897700.00.96506.15 178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.1 1-42175280/100/40528_ 60.061
Found on 2023-12-11 20:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312deac0e72deac0e7522934f8Apache Status Apache Server Status for pop.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:27:52 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 4 minutes 53 seconds Server load: 2.58 1.98 1.66 Total accesses: 696170 - Total Traffic: 9.7 GB - Total Duration: 517484448 CPU Usage: u76.65 s11.99 cu12013 cs653.85 - 7.37% CPU load 4.02 requests/sec - 58.5 kB/second - 14.6 kB/request - 743.331 ms/request 13 requests currently being processed, 115 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no6yes131003 330151no4yes527003 630155no12yes230107 730156no11yes527005 Sum4033 131151018 ................................................................ ____________W_________________________R________R_W_R__________R_ ................................................................ ________________W___W____________W_W_____________R_R______R_____ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0064689745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0064696045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0064680245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0064695746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00646167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0064694846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00646145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0064692346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00646107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00646104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0064670146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0064689947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0064672146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00646104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00646108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0064646846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0064670945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0064684445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0064671246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0064670946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00646046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0064649045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0064693646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0064686945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006464146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0064673844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00646722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0064696345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00646107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00646146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00646778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0064696044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0064686344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0064647946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00646150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0064667645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0064645143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00646044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00646232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0064658244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00646183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00646822744746080.00.00
Found on 2023-12-02 17:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734713b17dfApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:49:48 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 2 hours 26 minutes 3 seconds Server load: 0.61 0.55 0.55 Total accesses: 10635 - Total Traffic: 162.2 MB - Total Duration: 23114377 CPU Usage: u3264.15 s5863.27 cu55530100 cs13588500 - 789000% CPU load 1.21 requests/sec - 19.0 kB/second - 15.6 kB/request - 2173.43 ms/request 14 requests currently being processed, 10 idle workers CCCCCCC_CW_R_W_CWW______.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964101611/52/941C 28.351120637761.40.4210.32 159.65.138.217http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 1-1964100331/69/901C 39.551120760341.31.2312.66 139.144.150.45http/1.1localhost:443GET /about HTTP/1.1 2-1964106991/4/866C 0.931118823132.70.0211.18 143.110.156.182http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1964101711/47/872C 30.541117899421.30.3614.02 159.65.138.217http/1.1localhost:443GET /config.json HTTP/1.1 4-1964107211/2/776C 0.000117035361.40.009.85 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1964107271/1/771C 0.001217348242.60.008.82 143.198.72.96http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-1964107401/1/914C 0.001219985531.30.0013.46 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 7-1964107330/1/707_ 0.000017196110.00.008.26 159.65.138.217http/1.1localhost:443GET /.git/config HTTP/1.1 8-1964107421/1/800C 0.000118022021.30.009.72 143.198.72.96http/1.1localhost:443GET /about HTTP/1.1 9-196498180/89/614W 50.450012810980.00.847.46 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 10-196498280/85/542_ 47.34008791300.00.925.90 139.144.150.45http/1.1localhost:443GET /v2/_catalog HTTP/1.1 11-196498370/74/568R 48.040582112416300.01.067.91 147.182.130.98http/1.1www.importantaccount.com:443GET / HTTP/1.1 12-196498430/82/281_ 51.08005765480.00.695.71 143.198.72.96http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 13-196498500/72/307W 41.29908089430.01.375.59 139.59.182.142http/1.1www.partymanagementthailand.comGET / HTTP/1.1 14-1964107520/3/158_ 0.01013406020.00.001.84 143.110.156.182http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 15-1964107541/1/167C 0.00013538441.30.002.34 143.110.156.182http/1.1localhost:443GET /about HTTP/1.1 16-1964107650/0/63W 0.00001069970.00.001.96 162.158.106.175http/1.1www.mgacccount.com:80POST /wp-login.php HTTP/1.0 17-1964107710/0/1W 0.000010.00.000.00 172.70.142.133http/1.1www.mgacccount.com:80POST /wp-login.php HTTP/1.0 18-1964107770/0/3_ 0.0000770.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1964107830/0/98_ 0.00018792012280.00.001.40 108.162.238.97http/1.1www.smetast.com:80GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 20-1964107890/0/89_ 0.0009421872310.00.002.90 172.68.234.187http/1.1www.chonlateefarm.com:443POST /wp-cron.php?doing_wp_cron=1700162091.11823105812072753906 21-1964107950/0/1_ 0.000010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964108010/0/100_ 0.0008731850270.00.0017.49 172.68.234.179http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1700162083.61266803741455078125 23-1964108070/0/95_ 0.0007141812190.00.002.03 172.69.214.81http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 292 seconds, (range: 289...296)index usage: 0%, cache usage: 0%total entries stored since starting: 82total entries replaced since starting: 0total entries expired since starting: 70total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5121 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734d9c747c3Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 06:30:51 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 2 hours 28 minutes 38 seconds Server load: 0.38 0.41 0.44 Total accesses: 13290 - Total Traffic: 196.1 MB - Total Duration: 31944317 CPU Usage: u2986.68 s5756.37 cu55143800 cs13500100 - 770000% CPU load 1.49 requests/sec - 22.5 kB/second - 15.1 kB/request - 2403.64 ms/request 10 requests currently being processed, 2 idle workers RRCWW_CC_R..RW.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932141730/16/1101R 3.090027303300.00.1511.34 144.126.198.24http/1.1 1-1932140150/41/1079R 5.330126638400.00.3614.97 128.199.195.68http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-1932141261/28/1129C 2.180127339691.40.2615.60 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1932139840/50/1121W 6.410027240800.01.4425.21 139.144.96.150http/1.1www.partymanagementthailand.comGET / HTTP/1.1 4-1932139950/49/1125W 4.711027128570.01.4515.79 172.69.64.205http/1.1www.proplustech.co.th:443GET /?page_id=I299918 HTTP/1.1 5-1932142530/2/1082_ 0.020124762630.00.0016.29 128.199.195.68http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-1932140731/33/1063C 2.690126413612.70.2916.07 128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-1932140031/41/1011C 11.830124407021.30.4711.50 128.199.195.68http/1.1localhost:443GET /about HTTP/1.1 8-1932142600/0/1037_ 0.000176324998820.00.0015.61 144.126.198.24http/1.1 9-1932142610/0/848R 0.00071318794530.00.0013.40 172.70.135.21http/1.1www.business.co.th:443POST //shop//wp-login.php HTTP/1.1 10-1932-0/0/780. 0.00184818376310.00.0011.76 143.110.156.182http/1.1 11-1932-0/0/618. 0.0091121915603880.00.009.69 172.70.130.138http/1.1www.chorsiam.com:80GET / HTTP/1.0 12-1932138130/88/631R 10.880014377400.02.898.28 162.158.174.59http/1.1 13-1932138220/91/403W 15.77008974800.04.517.57 128.199.195.68http/1.1localhost:443GET /server-status HTTP/1.1 14-1932-0/0/259. 0.0066907083130.00.003.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/3. 0.0020680210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 223 seconds, (range: 55...297)index usage: 0%, cache usage: 0%total entries stored since starting: 56total entries replaced since starting: 0total entries expired since starting: 44total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 9917 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-05 23:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734048a3c23Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 01:37:39 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 1 hour 13 minutes 44 seconds Server load: 4.31 3.39 3.31 Total accesses: 18635 - Total Traffic: 261.9 MB - Total Duration: 76811938 CPU Usage: u3354.22 s5702.86 cu53825200 cs13127100 - 1510000% CPU load 4.21 requests/sec - 60.6 kB/second - 14.4 kB/request - 4121.92 ms/request 19 requests currently being processed, 10 idle workers CRWWWWC___W_CW___CR_W_W_CWWWC..................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1895187231/89/933C 64.141136470541.31.1313.18 161.35.27.144http/1.1localhost:443GET /.env HTTP/1.1 1-1895188480/64/885R 57.640236643140.00.9613.95 52.70.240.171http/1.1www.chonlateefbc.com:443 2-1895187400/84/885W 68.970037907110.01.0113.26 139.59.182.142http/1.1www.importantaccount.com:443GET /debug/default/view?panel=config HTTP/1.1 3-1895194740/3/913W 0.970036975790.00.0213.38 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=40-easy-landscape-painting-ideas-for-beginners-easy-acr 4-1895192000/25/822W 25.930389437301660.00.4211.08 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gibson-eb-eb-1-bass-guitar-%3E%3E-flyguitars-mm-a9pRAyH 5-1895189390/63/893W 45.840035633560.00.9611.27 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 6-1895194801/4/841C 1.880035727471.40.0311.99 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1895192550/23/829_ 25.040123933357260.00.3111.63 144.126.202.105http/1.1 8-1895192190/31/762_ 16.920029381360.00.4910.40 161.35.155.246http/1.1localhost:443GET /about HTTP/1.1 9-1895194820/3/767_ 1.040031242620.00.0611.21 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /reune.php?ydfsqjs32485setidm66.html HTTP/1.1 10-1895192350/30/817W 21.841033742010.00.3711.06 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gibson-eb-1-1969-1972-reverb-bass-guitar-guitar-mm-KEOY 11-1895187680/80/799_ 58.55075431785330.01.0010.86 85.208.96.201http/1.1www.mkandptfoods.com:443GET /m7869579985.html HTTP/1.1 12-1895188671/70/755C 55.120031028540.20.8010.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1895188690/71/753W 51.550029909760.01.1110.65 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=kate-and-laurel-sylvie-coastal-coconut-palm-tree-beach- 14-1895194930/1/807_ 1.640380635198280.00.0110.78 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=colorful-palm-tree-canvas-painting-rainbow-colour-decor 15-1895194350/12/801_ 5.580031623140.00.0811.08 137.184.222.107http/1.1 16-1895190520/42/659_ 36.550351226280340.00.568.00 144.126.202.105http/1.1 17-1895193271/17/621C 16.481025825781.30.218.72 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 18-1895190840/33/664R 30.210209628058070.00.559.74 159.203.63.67http/1.1 19-1895192820/33/603_ 18.28039125895070.00.238.33 139.59.182.142http/1.1www.importantaccount.com:443GET /about HTTP/1.1 20-1895193420/15/520W 13.103022881720.00.188.40 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=custom-panels-palm-tree-picture-designs-art-painting-fo 21-1895194080/11/495_ 7.220017567520.00.456.90 159.203.63.67http/1.1 22-1895194950/1/289W 1.510012336270.00.204.38 3.224.220.101http/1.1www.thaidaoherb.com:443GET /43848319152161.html HTTP/1.1 23-1895195050/3/182_ 0.960110121140.00.002.37 138.197.88.136http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 24-1895195071/2/258C 0.840111972311.30.003.53 138.197.88.136http/1.1localhost:443GET /login.action HTTP/1.1 25-1895195220/0/141W 0.00306130220.00.001.82 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=sunset-painting-palm-tree-original-art-trees-wall-art-m 26-1895195300/1/111W 0.05005506180.00.051.62 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848319152433.html HTTP/1.1 27-1895195360/1/40W 0.00101857130.00.000.74 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=pin-by-becky-williams-art-on-my-art-palm-mm-ABkPQKHZ HT 28-1895195461/1/7C 0.0002353731.40.000.09 161.35.27.144http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 29-1895-0/0/101. 0.00305003336930.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/30. 0.0030000806520.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/13. 0.0030180494500.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1895-0/0/61. 0.00304902819260.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1895-0/0/44. 0.00292401303770.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/195. 0.0027009967390860.00.002.79 36.150.60.24http/1.1www.thaiquickservice.net:443GET / HTTP/1.1 35-1895-0/0/24. 0.00301401258990.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/5. 0.0030460127750.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/101. 0.00305104152930.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/21. 0.0029770718280.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/31. 0.00360901275910.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1895-0/0/5. 0.003725041080.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1895-0/0/97. 0.00323412584050640.00.001.68 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848319153023.html HTTP/1.1 42-1895-0/0/3. 0.003738017490.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/3. 0.0037300146420.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/49. 0.00356601464770.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 768subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 13 seconds, (range: 0...40)index usage: 27%, cache usage: 35%total entries stored since starting: 10189total entries replaced since starting: 0total entries expired since starting: 9421total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 9 hit, 2845 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-26 18:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734e329a44dApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 10:29:56 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 6 hours 27 minutes 43 seconds Server load: 0.74 0.68 0.84 Total accesses: 36615 - Total Traffic: 656.7 MB - Total Duration: 44125947 CPU Usage: u2879.48 s5353.23 cu52307900 cs12766900 - 280000% CPU load 1.57 requests/sec - 28.9 kB/second - 18.4 kB/request - 1205.13 ms/request 16 requests currently being processed, 2 idle workers RCCWWRCWCRRCCCR__R................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1823194430/81/3131R 33.71044635581390.01.2147.99 137.184.106.30http/1.1www.importantaccount.com:443GET / HTTP/1.1 1-1823194561/77/3034C 29.731035961312.71.1156.29 139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-1823194691/67/2976C 28.401036430801.41.1147.07 164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1823195830/57/2746W 16.801033311820.01.5144.46 162.158.107.4http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 4-1823200190/15/2803W 6.110034844050.00.1535.96 178.62.73.12http/1.1localhost:443GET /server-status HTTP/1.1 5-1823197210/45/2456R 16.680032717580.00.3850.99 162.243.186.177http/1.1 6-1823201121/10/2504C 3.910034284431.30.1055.87 164.92.192.25http/1.1localhost:443GET /login.action HTTP/1.1 7-1823200310/8/2454W 2.410028578920.00.1439.02 172.68.242.171http/1.1www.makeregist.com:80POST /xmlrpc.php HTTP/1.0 8-1823201861/1/2255C 0.010026493492.60.0048.92 142.93.153.3http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1823201380/4/2298R 0.160424535330.00.0235.15 139.144.150.205http/1.1 10-1823201930/0/1596R 0.000019147900.00.0037.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1823201441/1/1689C 1.4501712212818825.40.0235.27 85.208.96.208http/1.1www.chonlateevip.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%84 12-1823201501/3/1480C 0.730118742561.30.0127.16 139.144.150.8http/1.1localhost:443GET /about HTTP/1.1 13-1823201571/4/584C 0.03017598881.40.0133.40 178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1823201630/3/888R 0.040011744270.00.0011.42 159.203.94.228http/1.1 15-1823201690/2/772_ 0.07007788760.00.0012.66 178.62.73.12http/1.1localhost:443GET /about HTTP/1.1 16-1823201710/6/722_ 0.71018602460.00.0212.45 206.81.1.88http/1.1localhost:80GET /telescope/requests HTTP/1.0 17-1823201940/0/470R 0.00004971430.00.006.85 137.184.106.30http/1.1www.importantaccount.com:443 18-1823-0/0/496. 0.0073304979870.00.004.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1823-0/0/76. 0.007200650510.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/312. 0.0071504156420.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1823-0/0/235. 0.00624313028580.00.004.53 178.62.73.12http/1.1 22-1823-0/0/87. 0.005280750460.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/34. 0.007160271400.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/262. 0.0072702578000.00.002.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1823-0/0/26. 0.007260308520.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1823-0/0/8. 0.00717027750.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1823-0/0/42. 0.005260279830.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1823-0/0/2. 0.00713036190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1823-0/0/52. 0.004510299600.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1823-0/0/2. 0.00712038360.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1823-0/0/98. 0.002291236330.00.001.48 172.71.131.85http/1.1www.siamerp.com:443GET /wp-content/uploads/siteorigin-widgets/sow-button-flat-8d17 32-1823-0/0/3. 0.00731010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1823-0/0/2. 0.00724050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1823-0/0/2. 0.00736010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1823-0/0/2. 0.00732120.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1823-0/0/3. 0.00734030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1823-0/0/1. 0.00739000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1823-0/0/2. 0.00738010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1823-0/0/3. 0.00728010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1823-0/0/3. 0.00729010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1823-0/0/4. 0.00725020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 101subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 103 seconds, (range: 1...297)index usage: 3%, cache usage: 4%total entries stored since starting: 7860total entries replaced since starting: 0total entries expired since starting: 7759total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 250 hit, 13494 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 03:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07344124aeceApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 22:54:38 +07 Restart Time: Tuesday, 03-Oct-2023 04:02:11 +07 Parent Server Config. Generation: 1799 Parent Server MPM Generation: 1798 Server uptime: 18 hours 52 minutes 26 seconds Server load: 1.27 0.86 0.71 Total accesses: 99496 - Total Traffic: 2.4 GB - Total Duration: 158682835 CPU Usage: u2909.71 s5297.24 cu51826800 cs12662400 - 94900% CPU load 1.46 requests/sec - 36.5 kB/second - 24.9 kB/request - 1594.87 ms/request 13 requests currently being processed, 10 idle workers __CWCCCW__R_CCR__R.__W_R.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-17989590/46/8365_ 25.0210145696820.00.79244.38 137.184.106.30http/1.1 1-179813850/18/8334_ 12.4111130206090.00.28182.68 161.35.155.246http/1.1localhost:443GET /v2/_catalog HTTP/1.1 2-179814111/14/7909C 7.410427125793275.90.10172.38 142.93.153.3http/1.1www.importantaccount.com:443GET / HTTP/1.1 3-17985910/86/7818W 37.8800131290440.01.75222.97 137.184.106.30http/1.1www.partymanagementthailand.comGET / HTTP/1.1 4-17984101/82/7455C 40.0700116583130.20.95219.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-17989751/42/7444C 19.7811116313741.30.51174.07 165.232.76.155http/1.1localhost:443GET /login.action HTTP/1.1 6-17985991/85/7347C 35.5001114442211.41.17162.34 46.101.103.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-179815360/1/7173W 0.8700112426140.00.01147.69 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 8-179815450/4/6352_ 0.0901107840520.00.01147.61 165.232.76.155http/1.1localhost:443GET /_all_dbs HTTP/1.1 9-179815460/2/6336_ 1.371199969130.00.01128.63 144.126.198.24http/1.1localhost:443GET /login.action HTTP/1.1 10-179815610/2/5727R 0.121196859470.00.00179.68 167.71.48.191http/1.1localhost:443GET /login.action HTTP/1.1 11-179815630/2/4982_ 0.010076979570.00.00131.10 46.101.103.192http/1.1localhost:443GET /about HTTP/1.1 12-179815661/3/3692C 1.310059665101.40.0291.01 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-17989851/45/3038C 25.140345936234.60.7172.66 46.101.103.192http/1.1localhost:443GET /server-status HTTP/1.1 14-17989870/44/1957R 20.734129457050.00.6639.73 45.55.193.222http/1.1 15-179815750/1/1510_ 1.130150820009720.00.1033.14 164.92.192.25http/1.1www.importantaccount.com:443GET / HTTP/1.1 16-179815890/2/871_ 0.011111989260.00.0021.50 46.101.103.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 17-179815950/1/240R 0.00123349190.00.003.50 137.184.106.30http/1.1 18-1798-0/0/354. 0.00005526150.00.007.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-179815990/3/302_ 1.28015326610.00.017.40 167.71.48.191http/1.1localhost:443GET /.DS_Store HTTP/1.1 20-179816050/2/72_ 0.0514926290.00.010.68 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 21-179816150/2/88W 0.01001029650.00.010.70 164.92.192.25http/1.1www.importantaccount.com:443GET /.vscode/sftp.json HTTP/1.1 22-179816200/1/99_ 0.0101738540.00.000.73 137.184.106.30http/1.1 23-179816230/3/229R 0.00114776010.00.002.73 46.101.103.192http/1.1localhost:443GET /v2/_catalog HTTP/1.1 24-1798-0/0/211. 0.00405403012730.00.002.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1798-0/0/174. 0.00499902258600.00.002.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1798-0/0/12. 0.0049950132980.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1798-0/0/99. 0.00397321931778170.00.001.26 185.191.171.7http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 28-1798-0/0/103. 0.0049970940790.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1798-0/0/7. 0.005004099910.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1798-0/0/12. 0.0050050247870.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1798-0/0/189. 0.00400803328680.00.002.39 128.199.61.251http/1.1localhost:443GET /_all_dbs HTTP/1.1 32-1798-0/0/190. 0.00400002308920.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1798-0/0/99. 0.00400013381712710.00.001.19 149.202.65.189http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%99 34-1798-0/0/123. 0.00500801056340.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1798-0/0/125. 0.00499601403490.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1798-0/0/11. 0.0050070217480.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1798-0/0/57. 0.0050111573560.00.001.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1798-0/0/10. 0.0050100121730.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1798-0/0/9. 0.0050120129820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1798-0/0/44. 0.0050090551430.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1798-0/0/9. 0.00375820116370.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1798-0/0/12. 0.00375710172750.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1798-0/0/5. 0.0037585076270.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1798-0/0/76. 0.003757801477960.00.001.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1798-0/0/5. 0.0037591020710.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1798-0/0/104. 0.0037327547812450.00.001.54 159.192.136.230http/1.1www.importantaccount.com:443POST //xmlrpc.php HTTP/1.1 47-1798-0/0/10. 0.0037570051750.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1798-0/0/101. 0.00373152271071880.00.001.39 54.36.148.103http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2022/10/Chondesign_logo_-174-215x215.jp 49-1798-0/0/5. 0.0037589022460.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot <
Found on 2023-10-03 15:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734bd6ef7a5Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:30:06 +07 Restart Time: Tuesday, 03-Oct-2023 00:11:21 +07 Parent Server Config. Generation: 1797 Parent Server MPM Generation: 1796 Server uptime: 18 minutes 45 seconds Server load: 0.91 1.38 1.36 Total accesses: 2012 - Total Traffic: 20.5 MB - Total Duration: 2785424 CPU Usage: u2764.86 s5258.21 cu51774400 cs12651700 - 5730000% CPU load 1.79 requests/sec - 18.7 kB/second - 10.4 kB/request - 1384.41 ms/request 12 requests currently being processed, 3 idle workers CC_CWCRC_CR._W.C.C................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1796271061/7/146C 2.11102448281.40.211.74 134.122.89.242http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1796234841/34/154C 10.63003946991.40.271.77 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1796226760/51/129_ 8.44001499500.00.541.13 68.183.64.176http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 3-1796245171/17/152C 2.75002793843.60.092.10 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 4-1796246190/30/153W 8.53002960730.00.291.92 144.126.198.24http/1.1www.partymanagementthailand.comGET /debug/default/view?panel=config HTTP/1.1 5-1796272621/9/146C 1.04002183731.40.011.90 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1796253610/33/128R 6.33011884440.00.261.35 195.211.77.140http/1.1 7-1796273361/5/174C 0.80002121571.40.011.48 134.122.89.242http/1.1localhost:443GET /login.action HTTP/1.1 8-1796261210/17/156_ 5.05017201902140.00.281.86 46.101.103.192http/1.1www.partymanagementthailand.comGET / HTTP/1.1 9-1796273921/3/175C 0.01011559391.40.001.98 164.90.205.35http/1.1localhost:443GET /login.action HTTP/1.1 10-1796273980/5/58R 0.760777675210.00.000.38 144.126.198.24http/1.1www.partymanagementthailand.comGET /about HTTP/1.1 11-1796-0/0/119. 0.004001141040.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1796224900/45/49_ 8.3200196440.00.170.18 68.183.64.176http/1.1localhost:80GET /telescope/requests HTTP/1.0 13-1796261440/8/103W 0.11001777310.00.010.88 139.144.150.23http/1.1localhost:443GET /server-status HTTP/1.1 14-1796-0/0/28. 0.00500192560.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1796261471/22/48C 1.4910186331.40.060.16 164.90.205.35http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1796-0/0/48. 0.00490321710.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1796261491/25/39C 1.440046381.40.160.21 134.122.89.242http/1.1localhost:443GET /_all_dbs HTTP/1.1 18-1796-0/0/7. 0.00216016570.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 143subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 53 seconds, (range: 8...145)index usage: 5%, cache usage: 6%total entries stored since starting: 409total entries replaced since starting: 0total entries expired since starting: 266total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1066 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734af615cf1Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 12:13:46 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 8 hours 11 minutes 35 seconds Server load: 0.56 1.05 1.06 Total accesses: 49572 - Total Traffic: 877.9 MB - Total Duration: 67568405 CPU Usage: u2838.69 s5190.54 cu51107000 cs12503300 - 216000% CPU load 1.68 requests/sec - 30.5 kB/second - 18.1 kB/request - 1363.04 ms/request 6 requests currently being processed, 5 idle workers _WW.__R__C...R.R.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-176288100/24/4004_ 9.59061751517470.00.1777.00 167.71.185.75http/1.1 1-176289360/2/3882W 0.430053099930.00.0179.40 172.70.85.70http/1.1www.acumaticathailand.com:80GET /wp-login.php HTTP/1.0 2-176289700/0/4018W 0.000053972950.00.0057.85 178.62.3.65http/1.1localhost:443GET /server-status HTTP/1.1 3-1762-0/0/3711. 0.00602346799820.00.0055.19 163.172.179.55http/1.1www.yuttanaluckchonlatee.in.th:GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP 4-176289010/10/3830_ 4.560048307940.00.0872.52 5.189.191.254http/1.1www.xn--12cbt1cxdh6e8ac5x.com:8POST /xmlrpc.php HTTP/1.0 5-176283490/71/3645_ 59.170155564970.00.6151.36 178.62.3.65http/1.1localhost:443GET /about HTTP/1.1 6-176289030/9/3476R 4.741048715350.00.0872.55 66.249.79.35http/1.1www.thairuamthaiparty.com:443 7-176284910/40/3145_ 20.860043229650.00.3345.90 178.62.3.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-176282520/88/3094_ 42.88055341509080.00.8451.60 66.249.71.132http/1.1www.thairuamthaiparty.com:443GET /robots.txt HTTP/1.1 9-176286691/31/2927C 42.450141984091.40.1539.42 178.62.3.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1762-0/0/2602. 0.00113033812420.00.0037.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1762-0/0/2610. 0.00183038373680.00.0058.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1762-0/0/1966. 0.0055026350480.00.0040.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-176286910/32/1681R 13.557023813410.00.2826.29 139.196.136.166http/1.1www.chonlateepr.com:443 14-1762-0/0/1408. 0.00135020774440.00.0027.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-176287030/32/1309R 14.56166416868230.00.2325.29 172.71.158.191http/1.1www.chonlateecamping.com:80POST /wp-login.php HTTP/1.0 16-1762-0/0/927. 0.00699211756600.00.0013.94 172.71.223.2http/1.1www.anumotanaboon.com:443GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3. 17-1762-0/0/292. 0.00135903451920.00.006.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/295. 0.00179305840570.00.006.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/313. 0.00135404309780.00.005.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1762-0/0/127. 0.00179501405340.00.006.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/105. 0.00179201143890.00.005.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/61. 0.00150102400850.00.009.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/32. 0.0017910136140.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/21. 0.001788083010.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/26. 0.001778041630.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1762-0/0/2. 0.00179005290.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1762-0/0/1. 0.001805010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1762-0/0/2. 0.0017940100.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1762-0/0/43. 0.0016230333210.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1762-0/0/2. 0.001787015010.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1762-0/0/1. 0.001804000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1762-0/0/1. 0.001803000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1762-0/0/1. 0.001802010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1762-0/0/1. 0.001801000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1762-0/0/7. 0.001776058010.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1762-0/0/2. 0.00178608560.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1762-0/0/1. 0.001800010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1762-0/0/1. 0.001799000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 115subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 77 seconds, (range: 3...228)index usage: 4%, cache usage: 5%total entries stored since starting: 7691total entries replaced since starting: 0total entries expired since starting: 7576total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 339 hit, 16622 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 05:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734ae2bc6c7Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 06:46:52 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 2 hours 44 minutes 39 seconds Server load: 0.20 0.45 0.67 Total accesses: 10782 - Total Traffic: 164.7 MB - Total Duration: 15091996 CPU Usage: u2771.78 s5148.87 cu50857500 cs12450500 - 641000% CPU load 1.09 requests/sec - 17.1 kB/second - 15.6 kB/request - 1399.74 ms/request 5 requests currently being processed, 5 idle workers ._CC_CW_C...__.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743-0/0/958. 0.00260013212850.00.0010.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-174337270/90/991_ 33.762014156570.01.1913.98 147.182.130.98http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-174342081/27/1032C 6.470014345831.40.5525.03 147.182.130.98http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-174336651/87/963C 35.460012658156.71.9827.66 47.101.140.232http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 4-174336130/87/888_ 35.701012665160.01.1110.97 147.182.130.98http/1.1localhost:443GET /about HTTP/1.1 5-174341981/31/903C 6.670753124202682.01.0112.60 40.77.190.116http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/plugins/gallery-by-supsystic/app/assets/css/lib 6-174342140/31/761W 6.560010152960.00.6711.22 147.182.130.98http/1.1localhost:443GET /server-status HTTP/1.1 7-174342160/29/852_ 4.491011562800.00.619.78 147.182.130.98http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-174342421/24/855C 5.160527132124782.20.8610.20 40.77.189.168http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/plugins/so-widgets-bundle/icons/fontawesome/web 9-1743-0/0/695. 0.0027209032490.00.008.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1743-0/0/593. 0.0027308236560.00.008.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/372. 0.0026905925810.00.004.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-174337470/86/474_ 29.0205046238050.01.865.60 172.71.182.210http/1.1www.99accountant.com:80GET /css/xmrlpc.php?p= HTTP/1.0 13-174342510/19/327_ 5.10105534400.00.315.04 147.182.130.98http/1.1localhost:443GET /v2/_catalog HTTP/1.1 14-1743-0/0/13. 0.007270161960.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/5. 0.00734036090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/100. 0.0073301367490.00.001.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 30subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 104 seconds, (range: 4...239)index usage: 1%, cache usage: 1%total entries stored since starting: 1557total entries replaced since starting: 0total entries expired since starting: 1527total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 72 hit, 3865 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-18 23:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734b8c7174cApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:01:11 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 1 hour 33 minutes 13 seconds Server load: 0.80 0.74 0.77 Total accesses: 8005 - Total Traffic: 123.6 MB - Total Duration: 11011143 CPU Usage: u2734.12 s5126.62 cu50712500 cs12419100 - 1130000% CPU load 1.43 requests/sec - 22.6 kB/second - 15.8 kB/request - 1375.53 ms/request 4 requests currently being processed, 6 idle workers ___._..._...WC.C._R............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-173388230/35/652_ 15.7719348326660.01.919.91 172.68.234.225http/1.1www.jrajar.com:80POST /wp-cron.php?doing_wp_cron=1694890868.49984502792358398437 1-173385330/82/692_ 41.89119279525850.01.299.07 172.71.214.114http/1.1www.jrajar.com:80POST /wp-login.php HTTP/1.0 2-173386490/60/610_ 28.04009182230.01.257.77 139.144.150.45http/1.1localhost:443GET /about HTTP/1.1 3-1733-0/0/611. 0.004809285030.00.008.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-173389620/17/585_ 7.15107676460.00.217.91 139.144.150.45http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1733-0/0/593. 0.005207700220.00.008.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1733-0/0/547. 0.004209673670.00.009.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1733-0/0/508. 0.004607097710.00.009.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-173385550/79/591_ 33.74107403830.02.449.32 139.144.150.45http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-1733-0/0/464. 0.004706479170.00.006.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1733-0/0/428. 0.003404756130.00.005.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1733-0/0/318. 0.005004226050.00.004.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-173390010/12/257W 2.49003127890.00.123.12 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 13-173390031/14/203C 4.05002886551.40.2313.50 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1733-0/0/207. 0.003203071010.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-173390161/11/205C 3.53086027618420.10.192.50 66.249.79.199http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 16-1733-0/0/105. 0.004301740570.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-173390290/10/134_ 2.92002032540.00.142.15 66.55.68.176http/1.1www.pokaorganize.com:80GET /MxaXXXXXXXk-hxdxamx.php HTTP/1.0 18-173390410/11/15R 4.1310127590.00.230.24 66.55.68.176http/1.1www.pokaorganize.com:443 19-1733-0/0/9. 0.001729051440.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/20. 0.0017410165770.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1733-0/0/103. 0.0097901522820.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1733-0/0/13. 0.0017340106800.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/5. 0.001740026900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/2. 0.001749020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/3. 0.005582018690.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1733-0/0/86. 0.0048741959350.00.000.99 167.71.48.191http/1.1 27-1733-0/0/34. 0.0055020178140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/5. 0.0055730380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 65subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 116 seconds, (range: 7...289)index usage: 2%, cache usage: 2%total entries stored since starting: 1144total entries replaced since starting: 0total entries expired since starting: 1079total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3663 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 18:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734b2875cb5Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 04:36:06 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 33 minutes 54 seconds Server load: 0.52 0.47 0.47 Total accesses: 1982 - Total Traffic: 25.0 MB - Total Duration: 2480588 CPU Usage: u2709.64 s5100.12 cu50513800 cs12375900 - 3090000% CPU load .974 requests/sec - 12.6 kB/second - 12.9 kB/request - 1251.56 ms/request 2 requests currently being processed, 6 idle workers ....W._.C_._....___............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720-0/0/149. 0.00229142371300.00.001.96 216.251.130.74http/1.1www.chonlateeaa.com:443GET /wp-content/plugins/essential-addons-for-elementor-lite/ass 1-1720-0/0/191. 0.00954472554790.00.002.62 172.68.234.202http/1.1www.singkansard.com:443POST /wp-cron.php?doing_wp_cron=1694640869.96831202507019042968 2-1720-0/0/185. 0.0022002460170.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1720-0/0/193. 0.0014271977200.00.002.33 54.245.56.21http/1.1www.smtts.co.th:80GET / HTTP/1.0 4-1720151290/86/184W 29.79002869910.01.812.65 206.81.1.88http/1.1localhost:443GET /server-status HTTP/1.1 5-1720-0/0/148. 0.0022101739880.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1720151610/85/183_ 31.17212109240.01.151.85 206.81.1.88http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 7-1720-0/0/157. 0.0021701763510.00.001.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1720152541/74/173C 26.74012488431.41.562.46 206.81.1.88http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1720152680/76/174_ 25.4258842013120.00.911.67 206.81.1.88http/1.1 10-1720-0/0/112. 0.0022901321940.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1720156740/17/24_ 7.6540241400.00.330.35 206.81.1.88http/1.1localhost:443GET / HTTP/1.1 12-1720-0/0/15. 0.00215048200.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1720-0/0/13. 0.00222037740.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/13. 0.00219091560.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1720-0/0/12. 0.002160109620.00.000.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720156630/22/22_ 2.7210241810.00.920.92 206.81.1.88http/1.1localhost:443GET /about HTTP/1.1 17-1720156800/15/15_ 6.3910234760.00.350.35 206.81.1.88http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 18-1720156820/19/19_ 5.9211131220.00.170.17 206.81.1.88http/1.1localhost:443GET /v2/_catalog HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 28subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 104 seconds, (range: 14...293)index usage: 0%, cache usage: 1%total entries stored since starting: 282total entries replaced since starting: 0total entries expired since starting: 254total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 513 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 21:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073414c93c41Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 10:19:46 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 6 hours 17 minutes 33 seconds Server load: 0.72 0.89 1.13 Total accesses: 34865 - Total Traffic: 599.0 MB - Total Duration: 48122633 CPU Usage: u2869.26 s5115.09 cu50471000 cs12366800 - 277000% CPU load 1.54 requests/sec - 27.1 kB/second - 17.6 kB/request - 1380.26 ms/request 5 requests currently being processed, 7 idle workers _WCW_WW____._..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-171620210/15/2986_ 7.631041857230.00.0950.86 68.183.64.176http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-171615990/65/3067W 32.941040562630.01.2839.74 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1694575184.11598110198974609375 2-171621341/7/3045C 3.240039054911.40.0858.01 68.183.64.176http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-171621510/2/2868W 2.870040404390.00.0451.24 68.183.64.176http/1.1localhost:443GET /server-status HTTP/1.1 4-171617810/40/2818_ 19.570039409250.00.3739.65 68.183.64.176http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-171617880/32/2751W 16.351035058870.00.3042.75 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 6-171616570/52/2526W 55.080032085730.01.0838.11 172.71.223.38http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 7-171615030/83/2534_ 66.390194334464490.02.3533.94 66.249.71.198http/1.1www.12gobiz.com:443GET /sitemap-tax-post_tag-125.xml HTTP/1.1 8-171617900/45/2252_ 17.760032697520.00.2749.42 68.183.64.176http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-171614500/91/2231_ 71.220124430852280.01.4844.08 161.35.155.246http/1.1www.xn--m3cbp0adb4cva5bee03a.coGET / HTTP/1.1 10-171621790/0/2070_ 0.001029294090.00.0040.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716-0/0/1786. 0.00317028068180.00.0019.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-171616630/63/1179_ 29.790021399620.00.4736.59 68.183.64.176http/1.1localhost:443GET /about HTTP/1.1 13-1716-0/0/659. 0.00589010742390.00.007.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/437. 0.00109905392120.00.006.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/140. 0.0066511529990.00.002.52 172.71.94.162http/1.1www.orderaccounting.com:80POST /xmlrpc.php HTTP/1.0 16-1716-0/0/538. 0.0096408285270.00.007.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1716-0/0/121. 0.00364301234130.00.000.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/31. 0.003645054890.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/173. 0.00318211965670.00.0016.27 172.68.4.148http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-c25a 20-1716-0/0/110. 0.0036440853700.00.001.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1716-0/0/117. 0.0035850766370.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/113. 0.0052710855510.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1716-0/0/18. 0.0052450109850.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1716-0/0/21. 0.005250037670.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1716-0/0/9. 0.005248063280.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1716-0/0/76. 0.00475401550070.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1716-0/0/3. 0.005258033330.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1716-0/0/3. 0.0052670700.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1716-0/0/3. 0.0052660510.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1716-0/0/9. 0.00524904950.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1716-0/0/4. 0.0052610390.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1716-0/0/3. 0.00526002160.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1716-0/0/15. 0.0052210149050.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1716-0/0/4. 0.00525901040.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1716-0/0/6. 0.005253036240.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1716-0/0/6. 0.005234053100.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1716-0/0/61. 0.0049270977890.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1716-0/0/69. 0.00484501316420.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1716-0/0/3. 0.0052690250.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 79subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 130 seconds, (range: 12...293)index usage: 2%, cache usage: 3%total entries stored since starting: 5613total entries replaced since starting: 0total entries expired since starting: 5534total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 251 hit, 12623 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 03:18 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07343f595648Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 23:30:27 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 19 hours 28 minutes 13 seconds Server load: 0.66 0.72 0.66 Total accesses: 99664 - Total Traffic: 1.4 GB - Total Duration: 140994921 CPU Usage: u2715.8 s5072.53 cu50294600 cs12328100 - 89400% CPU load 1.42 requests/sec - 21.2 kB/second - 14.9 kB/request - 1414.7 ms/request 4 requests currently being processed, 6 idle workers _W..__C_WW__...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170285560/59/8500_ 20.4601115888610.00.39117.77 103.113.67.32http/1.1www.wecanfixtrading.com:443POST /xmlrpc.php HTTP/1.1 1-170287760/25/8424W 8.4400116230720.00.41126.68 138.68.133.118http/1.1localhost:443GET /server-status HTTP/1.1 2-1702-0/0/8239. 0.00600118604010.00.00120.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1702-0/0/8075. 0.00810112064960.00.00109.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-170286790/38/7527_ 14.370711109255810.00.18107.59 192.185.81.119http/1.1www.happy-carrent.com:80GET /wp-includes/PHPMailer/index.php HTTP/1.0 5-170285680/60/7961_ 22.630626107413680.00.41117.12 162.158.175.49http/1.1www.singkansard.com:443GET /wp-includes/shell20211028.php HTTP/1.1 6-170284191/76/7277C 27.5700107646811.40.6398.85 138.68.133.118http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-170284350/74/7533_ 28.4001107839620.00.62111.38 138.68.133.118http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-170286850/34/6773W 14.070095178720.00.3988.10 192.185.81.119http/1.1www.happy-carrent.com:80GET /wp-includes/PHPMailer/ HTTP/1.0 9-170287960/22/6329W 4.690089252430.00.2095.70 162.158.175.50http/1.1www.singkansard.com:443GET //gecko.php HTTP/1.1 10-170286090/53/5636_ 23.210078482860.00.6188.73 138.68.133.118http/1.1localhost:443GET /about HTTP/1.1 11-170288030/17/4909_ 6.74033765959670.00.1280.05 27.254.96.168http/1.1www.happy-carrent.com:80POST /wp-cron.php?doing_wp_cron=1694363426.82413411140441894531 12-1702-0/0/4385. 0.001045264472900.00.0070.34 149.56.150.193http/1.1www.chonlateeadmin.com:443GET /wp-content/plugins/qi-addons-for-elementor/inc/plugins/ele 13-1702-0/0/2245. 0.001050034051320.00.0044.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702-0/0/1943. 0.00349026295440.00.0029.18 141.148.205.245http/1.1www.summer-techthai.com:443POST /xmlrpc.php HTTP/1.1 15-1702-0/0/1290. 0.00631016197470.00.0016.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/536. 0.001083010827790.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/391. 0.00102304357650.00.004.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/89. 0.0010490956730.00.001.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.001065701786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.001289601383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.00128040344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.001290304959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.00129080735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.0012889077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.00129020103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.00128920121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.001237842131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.001288801402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.0012915074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.00127700299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.001280801458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.00127510524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.001291401921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.001290102967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.001291303934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.0012900057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.00124098722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.001291202571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.0012898045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0060096060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 46subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 132 seconds, (range: 1...235)index usage: 1%, cache usage: 2%total entries stored since starting: 17127total entries replaced since starting: 0total entries expired since starting: 17081total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 428 hit, 40237 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 16:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073460df05c3Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 13:13:23 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 9 hours 11 minutes 12 seconds Server load: 1.27 1.41 1.41 Total accesses: 76226 - Total Traffic: 1.1 GB - Total Duration: 121394310 CPU Usage: u2762.04 s5057.66 cu50083700 cs12282900 - 189000% CPU load 2.3 requests/sec - 36.1 kB/second - 15.7 kB/request - 1592.56 ms/request 6 requests currently being processed, 8 idle workers W_C_R_____WW_W.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-168582110/40/6141W 22.573096625820.00.3186.91 27.254.96.168http/1.1www.summer-techthai.com:443POST /wp-cron.php?doing_wp_cron=1694067199.74924302101135253906 1-168582180/50/6020_ 22.481093663670.00.3088.11 167.99.182.39http/1.1localhost:443GET /about HTTP/1.1 2-168581971/57/5868C 24.120095120431.40.2975.81 167.99.182.39http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-168582240/41/5626_ 17.71045292022880.00.2775.19 172.68.234.215http/1.1www.jbbgarment.com:80GET /gallery_home-07/ HTTP/1.0 4-168581360/67/5569R 28.35165786429690.00.4374.55 185.254.37.149http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4 5-168580510/72/5169_ 39.950264880108100.01.0277.71 172.68.234.201http/1.1www.jbbgarment.com:80POST /wp-cron.php?doing_wp_cron=1694067199.89790892601013183593 6-168584410/1/5232_ 0.45147178043610.00.0074.98 108.162.227.7http/1.1www.jbbgarment.com:80POST /wp-login.php HTTP/1.0 7-168583450/22/5347_ 11.13144985797530.00.2689.40 172.68.234.226http/1.1www.jbbgarment.com:80GET /gallery_home-08/ HTTP/1.0 8-168581080/56/5062_ 29.000121987185380.00.3776.63 170.64.190.205http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //wp-login.php HTTP/1.1 9-168581140/66/5175_ 41.88076878760160.00.6481.78 144.217.180.167http/1.1www.chonlateedesign.com:443GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1 10-168583620/16/4215W 11.740067340600.00.1676.46 170.64.190.205http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //wp-login.php HTTP/1.1 11-168584510/0/3773W 0.000059423000.00.0057.63 167.99.182.39http/1.1localhost:443GET /server-status HTTP/1.1 12-168583760/16/3337_ 6.991052204690.00.1443.54 167.99.182.39http/1.1localhost:443GET /v2/_catalog HTTP/1.1 13-168584530/0/3108W 0.000049272510.00.0090.07 172.71.160.3http/1.1www.chonlateecoffee.com:80GET //wp-json/oembed/1.0/embed?url=https://chonlateecoffee.com/ 14-1685-0/0/2156. 0.00596036898860.00.0030.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685-0/0/1896. 0.00411033887430.00.0029.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1685-0/0/919. 0.00591016377120.00.0012.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/406. 0.0060405545760.00.005.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/235. 0.005904394880.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/162. 0.0060201969450.00.001.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1685-0/0/137. 0.0043001953360.00.001.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/186. 0.0060103156990.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/198. 0.0058103504330.00.002.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1685-0/0/143. 0.0035001843480.00.002.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/40. 0.006000480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/6. 0.0059902870.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/93. 0.0012801895550.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0030574011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0030575012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.003057209920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0030586010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 100subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 96 seconds, (range: 6...259)index usage: 3%, cache usage: 4%total entries stored since starting: 10760total entries replaced since starting: 0total entries expired since starting: 10660total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 179 hit, 17560 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 06:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073483859dd6Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 03:55:25 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 12 hours 32 minutes 11 seconds Server load: 6.93 7.35 10.97 Total accesses: 207668 - Total Traffic: 1.3 GB - Total Duration: 556666825 CPU Usage: u3157.79 s5116.63 cu49769200 cs12212500 - 137000% CPU load 4.6 requests/sec - 29.9 kB/second - 6.5 kB/request - 2680.56 ms/request 16 requests currently being processed, 8 idle workers WW_WWW__CWWWW_W__W_W_WWW.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674173260/96/11798W 71.2010261052410.00.2486.83 172.68.234.202http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774523.8971 HTTP/1.0 1-1674186050/46/11625W 31.7600256642940.00.1189.53 172.68.234.205http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693774525.427 HTTP/1.0 2-1674190060/28/11673_ 18.8800255000790.00.0583.52 161.35.155.246http/1.1localhost:443GET /about HTTP/1.1 3-1674194890/6/11458W 3.4410248671060.00.0085.87 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693774523.8488 HTTP/1.0 4-1674178820/69/11186W 50.8000251065850.00.1792.49 172.68.234.173http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774524.81613206863403320312 5-1674179060/74/11117W 53.7700249420570.00.2983.65 172.68.234.203http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774524.8145 HTTP/1.0 6-1674179120/74/10560_ 53.9301736240006740.00.2077.71 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693774523.20480489730834960937 7-1674181390/64/10351_ 47.5401852234515990.00.1370.87 172.68.234.4http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774522.8915 HTTP/1.0 8-1674191901/21/10123C 12.3300233098891.40.0569.35 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1674196110/1/10216W 0.0000235804070.00.0088.31 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 10-1674191690/20/9645W 12.8200223563800.00.0679.30 172.68.234.204http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693774524.63417696952819824218 11-1674192050/18/8954W 12.0710216128390.00.0653.09 172.68.234.5http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774523.75085592269897460937 12-1674179460/72/8374W 52.2500204706290.00.1653.54 167.71.196.133http/1.1www.summer-techthai.com:443GET //test/wp-includes/wlwmanifest.xml HTTP/1.1 13-1674175310/87/7219_ 63.7401183191323080.00.2937.39 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693774523.85640096664428710937 14-1674192110/17/6818W 11.7900185700590.00.0453.10 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774525.44680595397949218750 15-1674192860/14/5942_ 10.4601941172783980.00.0229.42 172.68.234.5http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774523.14885210990905761718 16-1674193560/15/4820_ 7.5800152063370.00.0520.70 35.189.148.215http/1.1www.chonlateevip.com:443GET /xmlrpc.php HTTP/1.1 17-1674176120/90/4299W 65.3310138321370.00.1817.51 172.68.234.4http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774524.0822 HTTP/1.0 18-1674180090/67/4313_ 50.8401912140608910.00.2116.51 172.68.234.173http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774523.1991 HTTP/1.0 19-1674180540/63/3603W 45.7120122372130.00.1712.48 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 20-1674193930/10/3319_ 7.7301913117551740.00.0110.15 172.68.234.141http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774523.34972691535949707031 21-1674182230/62/2920W 42.9710105242820.00.1113.56 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774524.11072111129760742187 22-1674195210/4/2960W 2.2500102396470.00.0112.19 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774525.01421689987182617187 23-1674182510/56/2561W 42.971094810730.00.158.37 172.68.234.202http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774524.4537 HTTP/1.0 24-1674-0/0/2049. 0.00287080453180.00.006.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/2151. 0.0041172481529830.00.007.47 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774481.9769 HTTP/1.0 26-1674-0/0/1932. 0.0032180374218530.00.005.39 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774490.5347 HTTP/1.0 27-1674-0/0/1814. 0.0047185771534180.00.006.23 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774475.67345809936523437500 28-1674-0/0/1502. 0.00160062200810.00.005.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/1265. 0.00803052832140.00.003.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/1208. 0.00778053014350.00.003.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/1117. 0.00754048114840.00.004.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1674-0/0/1094. 0.00808047651570.00.002.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1674-0/0/941. 0.00792040901710.00.003.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/886. 0.00800038831900.00.004.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/780. 0.00527189735353430.00.002.48 172.68.234.140http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693773995.51320695877075195312 36-1674-0/0/649. 0.00801029487650.00.002.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/843. 0.00529177535779050.00.002.65 172.68.234.140http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693773994.2935 HTTP/1.0 38-1674-0/0/596. 0.00795029120010.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/492. 0.001176193424783380.00.001.17 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693773346.26406002044677734375 40-1674-0/0/460. 0.001375022928210.00.001.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/414. 0.001368020566640.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/393. 0.001415019698960.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/298. 0.001704014051340.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1674-0/0/337. 0.001501016692070.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1674-0/0/84. 0.00162005130180.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1674-0/0/75. 0.00169204158940.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1674-0/0/153. 0.00157109047310.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1674-0/0/207. 0.001634321911969840.00.000.52 172.68.234.172</
Found on 2023-09-03 20:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073482284866Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 01:36:04 +07 Restart Time: Friday, 01-Sep-2023 00:22:12 +07 Parent Server Config. Generation: 1655 Parent Server MPM Generation: 1654 Server uptime: 1 hour 13 minutes 51 seconds Server load: 5.25 4.17 3.78 Total accesses: 24159 - Total Traffic: 166.1 MB - Total Duration: 27073983 CPU Usage: u2778.28 s4956.5 cu48752300 cs11952400 - 1370000% CPU load 5.45 requests/sec - 38.4 kB/second - 7.0 kB/request - 1120.66 ms/request 13 requests currently being processed, 5 idle workers WWC..__W._WW.....W.RRCWW_C_....................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1654117460/67/1655W 39.350018854540.00.3511.04 172.71.246.74http/1.1www.chonlateeit.com:443GET /wp-login.php HTTP/1.1 1-1654119900/3/1636W 1.640018351760.00.0211.71 172.69.65.151http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 2-1654118821/23/1649C 15.690018334851.40.1311.21 192.53.126.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1654-0/0/1564. 0.0033017163040.00.0010.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1654-0/0/1575. 0.0035017597680.00.0016.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1654116940/87/1632_ 51.660018471580.00.459.87 192.53.126.23http/1.1localhost:443GET /about HTTP/1.1 6-1654117520/69/1606_ 41.24080117705240.00.379.79 167.71.196.133http/1.1www.siamgassaver.com:80POST /xmlrpc.php HTTP/1.0 7-1654118880/24/1320W 17.040014903950.00.118.68 192.53.126.23http/1.1localhost:443GET /server-status HTTP/1.1 8-1654-0/0/1505. 0.0011016664270.00.0013.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1654118350/39/1520_ 23.19089217248500.00.179.26 167.94.138.50http/1.1 10-1654118550/29/1315W 17.370014898310.00.108.27 167.71.196.133http/1.1www.siam2job.com:80POST //xmlrpc.php HTTP/1.0 11-1654118940/20/1284W 12.020014937880.00.088.86 167.71.196.133http/1.1www.shinsoko.co.th:443POST //xmlrpc.php HTTP/1.1 12-1654-0/0/1144. 0.003865412779280.00.007.35 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 13-1654-0/0/1251. 0.0037014454240.00.007.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1654-0/0/756. 0.001308128760.00.006.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1654-0/0/745. 0.00388128284340.00.004.85 172.69.65.151http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 16-1654-0/0/449. 0.003204800450.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1654119130/18/596W 10.49006253790.00.073.86 172.70.38.138http/1.1www.singkansard.com:443POST //wp-login.php HTTP/1.1 18-1654-0/0/283. 0.003603287800.00.001.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1654119260/20/420R 14.8806864573210.00.072.13 172.70.38.138http/1.1www.singkansard.com:443POST //wp-login.php HTTP/1.1 20-1654119320/20/118R 12.4809721193550.00.060.49 167.71.196.133http/1.1 21-1654119381/22/28C 14.4701043334263.80.100.15 172.70.42.152http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 22-1654119440/20/20W 14.4200292260.00.140.14 167.71.196.133http/1.1www.siamgassaver.com:80POST /xmlrpc.php HTTP/1.0 23-1654119500/21/21W 16.9800347610.00.100.10 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 24-1654119560/21/21_ 14.940992301940.00.080.08 167.71.196.133http/1.1www.siamsolarrooftop.com:443POST //xmlrpc.php HTTP/1.1 25-1654119621/23/23C 15.1407873267913.90.080.08 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 26-1654119680/23/23_ 12.220446249790.00.080.08 167.71.196.133http/1.1www.siam2job.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 112subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 81 seconds, (range: 10...280)index usage: 3%, cache usage: 5%total entries stored since starting: 1351total entries replaced since starting: 0total entries expired since starting: 1239total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 7291 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-31 18:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073434b63832Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:14:42 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 12 minutes 24 seconds Server load: 6.24 6.25 5.91 Total accesses: 165154 - Total Traffic: 969.6 MB - Total Duration: 214507287 CPU Usage: u2838.57 s4900.89 cu47923100 cs11730500 - 318000% CPU load 8.81 requests/sec - 53.0 kB/second - 6.0 kB/request - 1298.83 ms/request 15 requests currently being processed, 6 idle workers _WRW_WCWWWWW___RW_WWC............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164540460/4/10010_ 2.230991130234770.00.0260.28 172.71.166.61http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 1-164539010/45/9853W 22.9100125894700.00.2256.02 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 2-164540520/2/9590R 1.7011062125016770.00.0152.30 172.71.166.61http/1.1 3-164540050/13/9569W 7.6200124359250.00.0751.26 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 4-164538190/83/9508_ 45.5901122351730.00.4950.53 137.184.150.232http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-164537860/92/9267W 47.60210122186040.00.5349.36 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 6-164539091/38/9198C 25.810995121038083.80.2554.57 172.69.67.118http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 7-164539570/35/9336W 17.5700121028430.00.1967.08 172.71.167.105http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 8-164538480/69/8926W 38.1300115351110.00.4359.73 34.235.16.145http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4GET /xmlrpc.php HTTP/1.1 9-164538570/40/8667W 18.6100114080960.00.2047.92 49.228.230.175http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /wp-admin/admin-ajax.php HTTP/1.1 10-164540540/4/8628W 2.1400108898080.00.0343.22 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 11-164539230/32/8672W 16.13110114210030.00.1546.80 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 12-164539470/17/8289_ 41.8401319108770790.00.1644.65 195.191.148.9http/1.1www.chonlateebusiness.com:443GET /wp-content/themes/my-custom-theme/?ar8=1 HTTP/1.1 13-164539330/40/7628_ 22.410368100339110.00.1943.79 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 14-164538650/64/7403_ 39.40066396327860.00.3153.89 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 15-164538790/56/6812R 28.39177586987060.00.2938.52 192.42.116.191http/1.1 16-164539350/21/6419W 10.8931084351850.00.1138.23 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 17-164539700/30/5195_ 16.01074867374720.00.1530.34 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 18-164539860/22/3780W 13.800049662080.00.1234.87 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 19-164540130/10/2561W 4.720032158860.00.0514.15 137.184.150.232http/1.1localhost:443GET /server-status HTTP/1.1 20-164540221/9/2063C 6.96056327742687.10.0611.92 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 21-1645-0/0/1097. 0.00205013227930.00.005.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1645-0/0/455. 0.002669916243560.00.002.62 172.68.234.226http/1.1www.smebkk.com:80GET /category/type-b/ HTTP/1.0 23-1645-0/0/385. 0.002409144735560.00.002.34 172.69.65.48http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 24-1645-0/0/256. 0.0041803451990.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/248. 0.0041603167430.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/128. 0.00205801633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0020940296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00209801155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0019775411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00196502410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00193421789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0016269000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00161094221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00161114021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00161163661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00161103821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0016263011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0016259018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0016267030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00162450118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0016250054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0016247072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00161153841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00161144171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 88subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 108 seconds, (range: 1...281)index usage: 3%, cache usage: 4%total entries stored since starting: 6363total entries replaced since starting: 0total entries expired since starting: 6275total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 28790 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734067e5ce6Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 28-Aug-2023 02:55:42 +07 Restart Time: Monday, 28-Aug-2023 00:23:33 +07 Parent Server Config. Generation: 1632 Parent Server MPM Generation: 1631 Server uptime: 2 hours 32 minutes 9 seconds Server load: 5.36 4.87 4.68 Total accesses: 57193 - Total Traffic: 437.2 MB - Total Duration: 68879450 CPU Usage: u2809.89 s4833.3 cu47160100 cs11536500 - 643000% CPU load 6.26 requests/sec - 49.0 kB/second - 7.8 kB/request - 1204.33 ms/request 10 requests currently being processed, 5 idle workers W___WW_WR.CWW...._CW.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1631274420/25/4098W 13.940050013510.00.0828.00 172.69.62.34http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 1-1631273090/84/3880_ 44.71053346930530.00.3129.13 172.69.62.34http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 2-1631273170/72/4005_ 40.45050846737530.00.2841.94 172.68.66.32http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 3-1631274150/47/3745_ 25.48040344875210.00.2424.62 162.158.86.207http/1.1www.mbaaccount.com:80GET /wp-login.php HTTP/1.0 4-1631272860/95/3796W 51.640046403760.00.6627.23 159.223.108.26http/1.1localhost:443GET /server-status HTTP/1.1 5-1631273970/46/3805W 27.240045934060.00.1826.40 172.68.210.39http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 6-1631275110/2/3679_ 1.590103343728630.00.0022.98 172.69.65.171http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 7-1631274340/33/3676W 18.010044136170.00.0923.99 162.158.175.51http/1.1www.mgacccount.com:80POST //wp-login.php HTTP/1.0 8-1631273280/68/3575R 37.42149342762680.00.2222.83 172.70.42.160http/1.1 9-1631-0/0/3270. 0.0020037866430.00.0021.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1631274561/32/3222C 17.650040786531.40.1065.24 159.223.108.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1631274720/23/3116W 12.480037589600.00.0823.18 172.68.66.32http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 12-1631274850/20/2942W 10.550035403990.00.0519.33 172.69.64.231http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 13-1631-0/0/2681. 0.008044031649660.00.0015.63 172.68.66.32http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 14-1631-0/0/2102. 0.0055026423810.00.0012.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1631-0/0/2056. 0.00106024646010.00.0013.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1631-0/0/1090. 0.0093013074390.00.005.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1631273530/77/828_ 41.68048210169210.00.244.62 162.158.175.51http/1.1www.mgacccount.com:80POST //wp-login.php HTTP/1.0 18-1631273591/69/689C 36.3707028261927.00.243.77 74.249.250.179http/1.1www.thefixup333.com:443POST //xmlrpc.php HTTP/1.1 19-1631273610/73/731W 40.79008772820.00.313.71 172.71.242.31http/1.1www.report.business.co.th:443GET /wp-login.php HTTP/1.1 20-1631-0/0/102. 0.0038801140220.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1631-0/0/5. 0.007920165940.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1631-0/0/100. 0.006593991321810.00.000.34 172.71.166.229http/1.1www.mgacccount.com:80POST //wp-login.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 113subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 88 seconds, (range: 7...286)index usage: 4%, cache usage: 5%total entries stored since starting: 5023total entries replaced since starting: 0total entries expired since starting: 4910total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 16 hit, 8212 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-27 19:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07343558779eApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 26-Aug-2023 22:54:26 +07 Restart Time: Saturday, 26-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1627 Parent Server MPM Generation: 1626 Server uptime: 18 hours 52 minutes 14 seconds Server load: 0.40 0.71 0.71 Total accesses: 148832 - Total Traffic: 1.9 GB - Total Duration: 208358293 CPU Usage: u2640.87 s4767.72 cu46999100 cs11499500 - 86100% CPU load 2.19 requests/sec - 28.8 kB/second - 13.2 kB/request - 1399.96 ms/request 6 requests currently being processed, 5 idle workers _W_WR_WCW..__..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1626307660/30/12459_ 11.4401169758180.01.90165.20 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1626307330/36/12263W 13.4000173849180.00.63116.47 139.59.182.142http/1.1localhost:443GET /server-status HTTP/1.1 2-1626305710/55/12417_ 25.9701031166622870.00.51172.93 172.68.234.194http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 3-1626307430/29/11702W 15.3320165751660.00.60132.58 172.68.234.174http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1693065263.71399402618408203125 4-1626309150/0/11834R 0.000734167487200.00.00130.12 172.70.243.114http/1.1 5-1626308420/12/11050_ 5.1900155360290.00.06165.29 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 6-1626302520/91/10651W 43.4400150526680.00.8299.51 172.70.91.19http/1.1www.orderaccounting.com:80GET /s/33e26393e2431313e2838313/_/;/META-INF/maven/com.atlassia 7-1626302731/89/10638C 45.7001149701271.40.64106.83 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1626307730/32/9877W 10.8700136819350.00.55116.59 172.68.234.174http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 9-1626-0/0/9081. 0.001500129426690.00.00145.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1626-0/0/8285. 0.001490111976800.00.0089.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1626305960/56/7428_ 23.730763104582230.00.42140.87 167.172.73.29http/1.1www.xn--q3cj1a4cd8i.com:443GET /xmlrpc.php HTTP/1.1 12-1626307750/32/5941_ 15.58048681649530.00.3154.57 172.71.130.86http/1.1www.orderaccounting.com:80GET /.git/config HTTP/1.0 13-1626-0/0/4099. 0.001427059526880.00.0049.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1626-0/0/3727. 0.00660145454481860.00.0048.61 67.205.12.218http/1.1www.shinsoko.co.th:443POST /xmlrpc.php HTTP/1.1 15-1626-0/0/2347. 0.004316031577690.00.0085.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1626-0/0/1003. 0.004632017846050.00.0053.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1626-0/0/1039. 0.007676013444110.00.0014.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1626-0/0/379. 0.00799005761810.00.003.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1626-0/0/307. 0.00750510894191120.00.003.67 5.188.62.76http/1.1www.chonlateenextbiz.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 20-1626-0/0/431. 0.00797206021020.00.004.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1626-0/0/176. 0.001139602516930.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1626-0/0/271. 0.00107954293548110.00.001.99 8.210.247.187http/1.1www.importantaccount.com:443POST /xmlrpc.php HTTP/1.1 23-1626-0/0/274. 0.001080404235470.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1626-0/0/13. 0.00145160174970.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1626-0/0/71. 0.00144530929490.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1626-0/0/153. 0.002935202080320.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1626-0/0/7. 0.0029572091830.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1626-0/0/192. 0.00291284373482740.00.001.48 162.158.74.96http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 29-1626-0/0/101. 0.00291683371333070.00.000.94 193.106.249.135http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 30-1626-0/0/4. 0.0029589044850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1626-0/0/100. 0.002958201357680.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1626-0/0/100. 0.002956401364570.00.000.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1626-0/0/25. 0.00294880387720.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1626-0/0/100. 0.002959501554710.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1626-0/0/4. 0.0029594042980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1626-0/0/100. 0.002958101590540.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1626-0/0/5. 0.0029586015270.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1626-0/0/99. 0.002958001387810.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1626-0/0/15. 0.00295300291650.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1626-0/0/3. 0.0029579038430.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1626-0/0/57. 0.00293350711000.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1626-0/0/4. 0.0029574040110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 106subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 84 seconds, (range: 8...290)index usage: 3%, cache usage: 4%total entries stored since starting: 26496total entries replaced since starting: 0total entries expired since starting: 26390total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 193 hit, 40781 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-26 15:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734d5d4317eApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 25-Aug-2023 13:33:50 +07 Restart Time: Friday, 25-Aug-2023 04:02:14 +07 Parent Server Config. Generation: 1624 Parent Server MPM Generation: 1623 Server uptime: 9 hours 31 minutes 36 seconds Server load: 1.57 1.34 1.37 Total accesses: 91469 - Total Traffic: 1.1 GB - Total Duration: 141614145 CPU Usage: u2638.15 s4749.53 cu46859500 cs11466200 - 170000% CPU load 2.67 requests/sec - 33.9 kB/second - 12.7 kB/request - 1548.22 ms/request 4 requests currently being processed, 5 idle workers CWR___.W..._.._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-162314371/10/7132C 4.0902108925081.40.4179.84 134.122.63.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-16239220/82/7107W 40.8100106667270.00.5980.60 162.158.78.95http/1.1www.mgacccount.com:80GET /wp-admin/include.php.suspected HTTP/1.0 2-162311130/48/7033R 54.4723463107122990.00.5881.87 47.107.75.218http/1.1www.ddkserviceandtransport.com: 3-162312430/38/6613_ 15.8911103655340.00.2278.51 134.122.63.192http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-162312800/33/6550_ 42.5010101967730.00.1571.36 134.122.63.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-162312990/38/6584_ 18.390548101919120.00.2477.28 108.162.212.10http/1.1www.rooffurnish.com:443POST /xmlrpc.php HTTP/1.1 6-1623-0/0/6613. 0.0086098186640.00.0071.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-162313320/33/6385W 12.860099685730.00.5458.11 134.122.63.192http/1.1localhost:443GET /server-status HTTP/1.1 8-1623-0/0/6075. 0.001637493007400.00.0069.92 167.172.56.36http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 9-1623-0/0/5495. 0.0069082170080.00.0051.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1623-0/0/5365. 0.00106080246470.00.0076.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-162313670/28/4800_ 11.410177020720.00.4749.33 134.122.63.192http/1.1localhost:443GET /about HTTP/1.1 12-1623-0/0/3701. 0.002037159372850.00.0042.87 47.107.75.218http/1.1www.ddkserviceandtransport.com:GET /wp-login.php HTTP/1.1 13-1623-0/0/3103. 0.0058047626690.00.0034.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-162313690/29/2205_ 10.95155731572680.00.1931.84 162.158.79.138http/1.1www.mgacccount.com:80GET /wp-admin/include.php HTTP/1.0 15-1623-0/0/1972. 0.00511030590500.00.0026.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1623-0/0/1435. 0.00601022424160.00.0020.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1623-0/0/1050. 0.00453016485270.00.0012.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1623-0/0/379. 0.0058204639300.00.007.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1623-0/0/82. 0.00334501319910.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1623-0/0/201. 0.00311802913850.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1623-0/0/299. 0.00569204320610.00.003.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1623-0/0/109. 0.0050502958632670.00.0047.01 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 23-1623-0/0/206. 0.00568902767690.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1623-0/0/11. 0.005701054660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1623-0/0/258. 0.00569703998830.00.002.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1623-0/0/52. 0.00549201451750.00.000.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1623-0/0/57. 0.00531201534020.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1623-0/0/9. 0.0056740143050.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1623-0/0/99. 0.00568401467630.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1623-0/0/8. 0.005681077360.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1623-0/0/101. 0.0052192821083740.00.000.70 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 32-1623-0/0/7. 0.005665051430.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1623-0/0/99. 0.00520512671338230.00.000.72 162.158.204.201http/1.1www.khlangkaew.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 34-1623-0/0/13. 0.0056690130570.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1623-0/0/101. 0.0052197431493350.00.001.39 172.70.243.123http/1.1www.proplustech.co.th:443POST //xmlrpc.php HTTP/1.1 36-1623-0/0/7. 0.005682056410.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1623-0/0/5. 0.005676012380.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1623-0/0/4. 0.005702016770.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1623-0/0/7. 0.005687060070.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1623-0/0/5. 0.00567706570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1623-0/0/99. 0.0051822422099250.00.001.65 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 42-1623-0/0/4. 0.005670079130.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1623-0/0/2. 0.005696017500.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1623-0/0/4. 0.005671052890.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1623-0/0/4. 0.005672056260.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1623-0/0/9. 0.00530907476510.00.0045.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1623-0/0/3. 0.005678044010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1623-0/0/5. 0.005667073100.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1623-0/0/2. 0.005695024990.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-08-25 06:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f073473761e78Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 24-Aug-2023 15:49:18 +07 Restart Time: Thursday, 24-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1621 Parent Server MPM Generation: 1620 Server uptime: 11 hours 47 minutes 6 seconds Server load: 2.09 2.39 2.49 Total accesses: 133617 - Total Traffic: 1.6 GB - Total Duration: 197070778 CPU Usage: u2792.37 s4795.64 cu46754200 cs11442400 - 137000% CPU load 3.15 requests/sec - 39.0 kB/second - 12.4 kB/request - 1474.89 ms/request 5 requests currently being processed, 9 idle workers _W_C__R_W_W__.._.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-162045030/2/10343_ 1.0111028151443680.00.02100.40 172.177.232.193http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 1-162043870/23/10178W 13.2600152975560.00.11109.65 172.177.232.193http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 2-162041670/79/9964_ 56.673821146724680.00.54108.35 172.70.39.163http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 3-162043931/26/9989C 17.5610144904391.40.18118.30 104.236.193.132http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-162040340/91/9693_ 74.662942142861450.00.71100.03 141.101.99.84http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 5-162043680/38/9555_ 26.860822140410620.00.25164.81 141.101.98.77http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 6-162043990/27/8701R 15.6842043126932300.00.2192.25 124.120.218.205http/1.1 7-162044910/7/8441_ 5.611941122248080.00.03135.26 172.70.39.164http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 8-162045090/1/8627W 0.8800124408450.00.00142.74 172.70.39.164http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 9-162042450/70/8256_ 44.7501270122739510.00.5473.78 124.120.218.205http/1.1www.cnb.co.th:443GET /wp-admin/admin.php?import=wordpress HTTP/1.1 10-162045110/1/7519W 0.6200111673810.00.00125.34 104.236.193.132http/1.1localhost:443GET /server-status HTTP/1.1 11-162041870/80/6361_ 59.022095932070.00.7765.82 104.236.193.132http/1.1localhost:443GET /v2/_catalog HTTP/1.1 12-162041950/84/5974_ 56.59078692643030.00.6261.82 141.101.98.88http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 13-1620-0/0/4396. 0.00238063978730.00.0049.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1620-0/0/3816. 0.0088051933550.00.0036.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-162042510/72/3357_ 54.95384751528020.00.5641.84 172.177.232.193http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 16-1620-0/0/2029. 0.0028253729655350.00.0017.49 172.233.243.108http/1.1www.seasabithailand.com:80GET /2017 HTTP/1.0 17-1620-0/0/1618. 0.00303423689780.00.0014.40 172.68.234.185http/1.1www.biztaste.com:80GET /category/type-b/ HTTP/1.0 18-1620-0/0/649. 0.0011824208547720.00.006.27 172.70.242.155http/1.1www.mbaaccount.com:80POST /xmlrpc.php HTTP/1.0 19-1620-0/0/621. 0.001392010422440.00.005.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1620-0/0/474. 0.0011597316949710.00.006.49 172.71.242.215http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 21-1620-0/0/176. 0.0011622202690900.00.001.76 172.70.189.114http/1.1www.khlangkaew.com:443GET /wp-content/cache/autoptimize/css/autoptimize_4142ae401266d 22-1620-0/0/245. 0.00228304472040.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1620-0/0/57. 0.0021930867220.00.004.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1620-0/0/205. 0.00230202291510.00.001.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1620-0/0/36. 0.0022660652020.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1620-0/0/45. 0.0021880741510.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1620-0/0/143. 0.00218702091270.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1620-0/0/295. 0.00205304403930.00.003.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1620-0/0/21. 0.0022720416100.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1620-0/0/21. 0.0023000486250.00.001.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1620-0/0/124. 0.00225001787180.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1620-0/0/17. 0.0022730346470.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1620-0/0/170. 0.00229303280050.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1620-0/0/113. 0.00229201720760.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1620-0/0/20. 0.0022680347420.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1620-0/0/16. 0.0022770370370.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1620-0/0/115. 0.00229501534960.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1620-0/0/156. 0.00224702050370.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1620-0/0/209. 0.00225302869090.00.001.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1620-0/0/36. 0.0022910698300.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1620-0/0/213. 0.00227503712390.00.001.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1620-0/0/90. 0.00227901340380.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1620-0/0/106. 0.00225702337720.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1620-0/0/100. 0.00229001321280.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1620-0/0/100. 0.00192910011620700.00.002.18 172.177.232.193http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 46-1620-0/0/40. 0.0022800721870.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1620-0/0/67. 0.00205801161070.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1620-0/0/13. 0.0022710259300.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1620-0/0/107. 0.00229901512200.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred th
Found on 2023-08-24 08:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734f533933bApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 23-Aug-2023 09:10:20 +07 Restart Time: Wednesday, 23-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1618 Parent Server MPM Generation: 1617 Server uptime: 5 hours 8 minutes 7 seconds Server load: 2.68 2.90 3.00 Total accesses: 63976 - Total Traffic: 670.6 MB - Total Duration: 90964531 CPU Usage: u2713.52 s4749.06 cu46536800 cs11390100 - 313000% CPU load 3.46 requests/sec - 37.1 kB/second - 10.7 kB/request - 1421.85 ms/request 7 requests currently being processed, 7 idle workers _C_WW_W_WW_._...W...._............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1617147560/5/5262_ 4.00081774333100.00.0447.15 172.68.146.32http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 1-1617146731/39/4957C 22.690271568951.40.3192.79 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1617146070/53/5079_ 33.980072268440.00.4148.04 139.144.150.23http/1.1localhost:443GET /about HTTP/1.1 3-1617147650/3/4890W 2.163069550920.00.0245.63 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 4-1617146150/49/4995W 31.6413067259810.00.5151.44 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-1617147720/3/4776_ 0.700069627840.00.0142.88 139.144.150.23http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-1617147830/3/4687W 1.800066237570.00.0143.87 172.68.146.6http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 7-1617147890/2/4316_ 1.100132161426120.00.0142.54 108.162.227.103http/1.1www.xn--72czo5brcr3a6b0cwf.com:GET /robots.txt HTTP/1.0 8-1617143950/95/4203W 69.080058756710.01.0743.55 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 9-1617147910/2/3942W 1.550055101960.00.0337.51 139.144.150.23http/1.1localhost:443GET /server-status HTTP/1.1 10-1617148030/2/3670_ 1.23051651570270.00.0143.17 172.68.234.220http/1.1www.xn--72czo5brcr3a6b0cwf.com:POST /wp-cron.php?doing_wp_cron=1692756619.57737207412719726562 11-1617-0/0/3236. 0.00268044159900.00.0030.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1617144590/82/2995_ 53.930143522870.00.6230.57 139.144.150.23http/1.1localhost:443GET /v2/_catalog HTTP/1.1 13-1617-0/0/2040. 0.00026229714200.00.0017.68 51.210.183.85http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /xmlrpc.php HTTP/1.0 14-1617-0/0/1712. 0.00245024532340.00.0014.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1617-0/0/1085. 0.0024299817374040.00.0013.07 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 16-1617144710/78/859W 52.7714013561180.00.5711.22 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1692756606.06775903701782226562 17-1617-0/0/680. 0.00252010663400.00.009.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1617-0/0/301. 0.0026004371580.00.002.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1617-0/0/103. 0.0027201467000.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1617-0/0/7. 0.002570112760.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1617145040/84/165_ 55.6007412311460.00.691.24 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 22-1617-0/0/7. 0.00264091090.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1617-0/0/3. 0.0014388020200.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1617-0/0/1. 0.0014394000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1617-0/0/2. 0.0014390011730.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1617-0/0/3. 0.0014386029740.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 116subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 66 seconds, (range: 1...295)index usage: 4%, cache usage: 5%total entries stored since starting: 6495total entries replaced since starting: 0total entries expired since starting: 6379total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 7 hit, 17321 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-23 02:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734da4a6103Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 21-Aug-2023 17:42:50 +07 Restart Time: Monday, 21-Aug-2023 14:17:12 +07 Parent Server Config. Generation: 1612 Parent Server MPM Generation: 1611 Server uptime: 3 hours 25 minutes 38 seconds Server load: 3.74 3.57 3.77 Total accesses: 78339 - Total Traffic: 874.1 MB - Total Duration: 98120341 CPU Usage: u2643.96 s4710.51 cu46269000 cs11322900 - 467000% CPU load 6.35 requests/sec - 72.5 kB/second - 11.4 kB/request - 1252.51 ms/request 34 requests currently being processed, 13 idle workers C_RCWCW_WWCRCWWWCCCCWCWR_.RW_W_WCR_W__WWCR__C___.. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1611265281/80/5525C 28.620169074825.51.1260.66 34.221.48.230http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/eicons/css/element 1-1611267360/19/5400_ 8.050168255960.00.1252.77 54.185.205.149http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementskit-lite/libs/framework/assets/ 2-1611267460/20/5460R 7.42027767154340.00.1557.68 35.93.162.50http/1.1www.cnb.co.th:443 3-1611267481/23/5244C 9.530065455891.40.1759.04 138.68.163.10http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1611267780/7/5111W 3.190065625500.00.1143.82 54.202.171.112http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/corporate-business-handshake-pa 5-1611265731/50/5081C 14.950262348768.41.2657.89 35.88.92.107http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/f 6-1611267840/7/5010W 2.940062987000.00.0874.76 162.158.170.155http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 7-1611264530/85/4860_ 34.75054561344100.01.0552.89 54.202.171.112http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/busy-employer-1000x667.jpg HTTP 8-1611267900/9/4615W 0.570057904830.00.1557.38 34.212.83.173http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/CHONLATEE-NEXTBIZ_LINE-01.png H 9-1611267960/5/4523W 0.031056747470.00.1649.43 34.212.83.173http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/shiny-night-city-scaled.jpg HTT 10-1611264661/78/4596C 37.190158824976.00.7347.47 34.221.48.230http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swip 11-1611268020/7/4214R 0.03028652544220.00.0636.69 34.221.48.230http/1.1www.cnb.co.th:443 12-1611268031/5/3867C 0.750048303581.80.0459.07 34.221.48.230http/1.1www.cnb.co.th:443GET /wp-content/uploads/elementor/css/post-6.css?ver=1692602739 13-1611268140/5/3519W 0.010043649180.00.0134.12 138.68.163.10http/1.1localhost:443GET /server-status HTTP/1.1 14-1611268160/5/2954W 0.010038868130.00.0227.74 54.202.171.112http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/modern-business-building-scener 15-1611268220/1/2145W 0.020028399680.00.0120.45 172.71.167.237http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 16-1611268281/5/1393C 1.030017886960.20.0328.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1611266031/50/1062C 18.330214436426.41.3812.32 54.202.171.112http/1.1www.cnb.co.th:443GET /wp-includes/js/wp-emoji-release.min.js?ver=6.3 HTTP/1.1 18-1611268401/3/1040C 0.830229133379115.10.029.56 34.221.48.230http/1.1www.cnb.co.th:443GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3 H 19-1611266171/49/441C 14.1302503485938602.91.354.82 54.185.205.149http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/shiny-night-city-scaled.jpg HTT 20-1611268460/2/217W 0.02032014390.00.052.94 35.88.92.107http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/f 21-1611268521/3/248C 0.48011994981.80.081.80 35.88.92.107http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/s 22-1611266370/36/431W 6.83044906770.00.364.52 34.221.48.230http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/css/frontend-lite.min. 23-1611268580/2/125R 0.01041421520.00.111.54 54.185.205.149http/1.1www.cnb.co.th:443 24-1611266450/42/254_ 19.8105942231820.00.512.75 35.88.92.107http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementskit-lite/widgets/init/assets/cs 25-1611-0/0/39. 0.0000252490.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1611266570/46/80R 13.0002636370.00.670.98 54.185.205.149http/1.1www.cnb.co.th:443 27-1611268700/2/295W 0.010123542670.00.082.55 34.212.83.173http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfo 28-1611268760/3/214_ 0.7007062305110.00.011.46 162.158.170.155http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 29-1611268820/2/18W 0.0200105670.00.050.24 172.68.150.38http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 30-1611266810/45/144_ 17.7202331594810.00.421.16 35.93.162.50http/1.1www.cnb.co.th:443GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3 H 31-1611268880/1/9W 0.760020550.00.000.08 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 32-1611268941/2/24C 0.5205252014944.70.050.33 35.88.92.107http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 33-1611269000/2/114R 0.00031440020.00.014.43 35.93.162.50http/1.1www.cnb.co.th:443 34-1611267010/43/43_ 16.250903479280.01.781.78 54.202.171.112http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/golden-abacus-with-chinese-rmb- 35-1611269060/1/1W 0.000050.00.010.01 54.202.171.112http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/financial-analyst-working-offic 36-1611269120/2/2_ 0.0102752830.00.020.02 35.93.162.50http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/css/frontend-lite.min. 37-1611269180/2/2_ 0.01012270.00.020.02 35.93.162.50http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v 38-1611269240/1/1W 0.000060.00.010.01 172.70.91.236http/1.1www.chonlateeauto.com:443POST /xmlrpc.php HTTP/1.1 39-1611269300/1/1W 0.000490.00.000.00 34.212.83.173http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfo 40-1611269361/2/2C 0.930419013.70.020.02 34.212.83.173http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a 41-1611269380/2/2R 0.0101110.00.010.01 54.185.205.149http/1.1www.cnb.co.th:443 42-1611269480/2/2_ 0.000180.00.010.01 35.93.162.50http/1.1www.cnb.co.th:443GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swip 43-1611269540/3/3_ 0.0001100.00.010.01 167.172.17.89http/1.1localhost:80GET / HTTP/1.0 44-1611269601/2/2C 0.910318723.00.010.01 35.88.92.107http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a 45-1611269660/2/2_ 0.0102562670.00.020.02 54.185.205.149http/1.1www.cnb.co.th:443GET /wp-content/themes/sydney/js/scripts.js?ver=6.3 HTTP/1.1 46-1611269720/2/2_ 0.000130.00.000.00 35.93.162.50http/1.1www.cnb.co.th:443GET /wp-content/uploads/elementor/css/post-6.css?ver=1692602739 47-1611269780/2/2_ 0.0001110.00.010.01 34.212.83.173http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a SrvChild Server number
Found on 2023-08-21 10:41 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734658476ffApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 19-Aug-2023 22:56:44 +07 Restart Time: Saturday, 19-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1601 Parent Server MPM Generation: 1600 Server uptime: 18 hours 54 minutes 31 seconds Server load: 5.34 5.49 5.14 Total accesses: 477937 - Total Traffic: 4.9 GB - Total Duration: 731038687 CPU Usage: u2752.61 s4701.71 cu45725200 cs11171800 - 83600% CPU load 7.02 requests/sec - 75.9 kB/second - 10.8 kB/request - 1529.57 ms/request 9 requests currently being processed, 5 idle workers _WW_._WCWWW_WR......_............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1600236880/5/29024_ 3.120720436700000.00.04297.55 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 1-1600236970/1/28989W 0.5600431947870.00.00298.68 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 2-1600236370/17/28207W 11.6200430058280.00.16331.90 143.110.218.229http/1.1localhost:443GET /server-status HTTP/1.1 3-1600236100/24/27946_ 14.320678418066440.00.17317.27 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 4-1600-0/0/27305. 0.00190406251940.00.00262.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1600233620/91/27156_ 57.370477408832810.00.63286.43 162.158.2.33http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 6-1600234400/70/27492W 45.3400415733300.00.57283.49 162.158.3.13http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 7-1600234581/68/26667C 40.2210405297281.40.52272.27 143.110.218.229http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1600236490/15/26175W 9.5500398213600.00.13311.84 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 9-1600234670/68/25412W 43.5400386876320.00.58291.89 108.162.226.93http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 10-1600234920/54/24488W 31.0200372777730.00.33246.26 86.38.225.76http/1.1www.summer-techthai.com:443POST //xmlrpc.php HTTP/1.1 11-1600235290/42/23695_ 25.550550359281750.00.28234.97 108.162.226.93http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 12-1600235360/45/22970W 27.4700353442050.00.31235.39 172.71.166.215http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 13-1600233910/89/21776R 52.990585326406390.00.66218.40 40.77.12.103http/1.1 14-1600-0/0/19926. 0.00700309481530.00.00192.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1600-0/0/18861. 0.00980291475980.00.00181.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1600-0/0/15856. 0.00126691247391410.00.00200.30 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 17-1600-0/0/13297. 0.001720204602640.00.00128.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1600-0/0/10580. 0.0046578164117870.00.00125.80 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 19-1600-0/0/7867. 0.00114594124716080.00.0071.32 108.162.226.92http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 20-1600233650/87/6198_ 53.041097359850.00.6961.96 143.110.218.229http/1.1localhost:443GET /v2/_catalog HTTP/1.1 21-1600-0/0/4236. 0.00412069352690.00.0043.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1600-0/0/3487. 0.00554854956828240.00.0037.04 172.71.166.240http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 23-1600-0/0/2993. 0.005722050581900.00.0026.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1600-0/0/1950. 0.00554259433022470.00.0019.43 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 25-1600-0/0/1550. 0.005721027431110.00.0017.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1600-0/0/1024. 0.009132018020390.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1600-0/0/573. 0.009140010916890.00.005.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1600-0/0/253. 0.00912105349510.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1600-0/0/203. 0.00912304335330.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1600-0/0/193. 0.00914204186880.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1600-0/0/329. 0.00902505730970.00.007.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1600-0/0/137. 0.00913003147530.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1600-0/0/91. 0.00897801967430.00.003.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1600-0/0/141. 0.00912903233850.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1600-0/0/130. 0.00910602747280.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1600-0/0/27. 0.00914101364630.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1600-0/0/86. 0.00913502641510.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1600-0/0/40. 0.00913301572150.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1600-0/0/37. 0.00913401523990.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1600-0/0/113. 0.00902702530290.00.004.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1600-0/0/57. 0.00902801733960.00.004.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1600-0/0/37. 0.005185701431370.00.000.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1600-0/0/39. 0.005184301613950.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1600-0/0/29. 0.005188901232370.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1600-0/0/100. 0.00517309842442900.00.000.72 108.162.242.104http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 46-1600-0/0/37. 0.005183301507310.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1600-0/0/110. 0.00516957602580430.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 48-1600-0/0/23. 0.005189701163420.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1600-0/0/25. 0.005185101164760.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests
Found on 2023-08-19 15:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734e5b843aeApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 18-Aug-2023 22:22:16 +07 Restart Time: Friday, 18-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1598 Parent Server MPM Generation: 1597 Server uptime: 18 hours 20 minutes 4 seconds Server load: 4.72 4.88 4.78 Total accesses: 459370 - Total Traffic: 4.8 GB - Total Duration: 700347594 CPU Usage: u2756.66 s4692.26 cu45398600 cs11082200 - 85600% CPU load 6.96 requests/sec - 75.6 kB/second - 10.9 kB/request - 1524.58 ms/request 10 requests currently being processed, 6 idle workers ___WWWWWW_WW_C_.W................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1597138570/82/28313_ 63.200382420434020.00.83267.08 40.113.240.70http/1.1www.bannongsaischool.com:443POST //xmlrpc.php HTTP/1.1 1-1597139570/60/27881_ 45.850763421106700.00.59261.82 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 2-1597140140/49/27242_ 37.8701412157050.00.54332.80 165.227.146.2http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-1597141780/7/27414W 5.7000409990490.00.07278.88 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-1597141680/11/26843W 7.9900401365040.00.12291.24 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 5-1597141080/24/26622W 17.1310398306210.00.27270.44 172.70.42.24http/1.1www.siamautomation.com:443GET /tag/%e0%b8%88%e0%b8%b3%e0%b8%ab%e0%b8%99%e0%b9%88%e0%b8%b2 6-1597139720/59/26375W 42.1300397564830.00.59264.50 40.83.19.170http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 7-1597140230/51/25615W 38.7300389454620.00.57275.05 193.106.196.237http/1.1www.npaccounting.co.th:443POST //wp-login.php HTTP/1.1 8-1597140310/34/25122W 25.5400376850820.00.32245.50 82.157.16.11http/1.1www.tafa.or.th:443POST /xmlrpc.php HTTP/1.1 9-1597140600/38/23989_ 29.9201362206200.00.35296.41 165.227.146.2http/1.1localhost:443GET /about HTTP/1.1 10-1597140740/30/23517W 22.2100352841430.00.30236.94 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 11-1597141280/22/22060W 15.7600331116090.00.27224.13 165.227.146.2http/1.1localhost:443GET /server-status HTTP/1.1 12-1597141380/14/20915_ 9.780625315948010.00.14266.94 172.68.234.168http/1.1www.siamautomation.com:443POST /wp-cron.php?doing_wp_cron=1692372135.94512891769409179687 13-1597141901/6/20367C 4.6601306883601.40.04209.48 165.227.146.2http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1597142060/4/17185_ 2.630755262358430.00.03186.56 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 15-1597-0/0/15620. 0.00233687245451130.00.00210.05 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 16-1597137810/97/13492W 72.2800210908800.01.01153.36 81.161.229.250http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 17-1597-0/0/12298. 0.0060768191202120.00.00127.68 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 18-1597-0/0/9651. 0.0011686153372880.00.0088.15 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 19-1597-0/0/8175. 0.0017364134411590.00.0087.43 40.113.240.70http/1.1www.bannongsaischool.com:443POST //xmlrpc.php HTTP/1.1 20-1597-0/0/6706. 0.00890109601690.00.0078.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1597-0/0/5747. 0.002416088509290.00.0046.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1597-0/0/3932. 0.002435065454250.00.0050.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1597-0/0/3353. 0.002426056000710.00.0029.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1597-0/0/1846. 0.002339030340330.00.0013.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1597-0/0/1699. 0.00215484227133200.00.0014.48 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 26-1597-0/0/1234. 0.00216853821922830.00.009.25 172.70.162.212http/1.1www.tun36.com:80GET /login.action HTTP/1.0 27-1597-0/0/898. 0.002415013529880.00.0010.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1597-0/0/297. 0.00240706390320.00.003.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1597-0/0/499. 0.00243707830690.00.004.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1597-0/0/109. 0.00241802128540.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1597-0/0/209. 0.00243404569110.00.003.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1597-0/0/282. 0.00242705194930.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1597-0/0/167. 0.00237803815640.00.002.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1597-0/0/234. 0.00243304030640.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1597-0/0/345. 0.00216511076581550.00.002.59 193.106.196.237http/1.1www.npaccounting.co.th:443POST //xmlrpc.php HTTP/1.1 36-1597-0/0/345. 0.00241105461800.00.002.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1597-0/0/416. 0.00239007639390.00.002.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1597-0/0/225. 0.00243903677610.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1597-0/0/392. 0.0021578307072230.00.003.28 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 40-1597-0/0/428. 0.0021665158000860.00.003.07 172.71.178.136http/1.1www.tun36.com:80GET /.DS_Store HTTP/1.0 41-1597-0/0/61. 0.0024220990680.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1597-0/0/111. 0.00241903138350.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1597-0/0/281. 0.00233504729580.00.002.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1597-0/0/100. 0.00241702206820.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1597-0/0/152. 0.0021695412815910.00.001.79 172.70.91.11http/1.1www.tun36.com:80GET /server-status HTTP/1.0 46-1597-0/0/121. 0.00244202158600.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1597-0/0/283. 0.00242004804790.00.001.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1597-0/0/71. 0.00244101318470.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1597-0/0/131. 0.00242502496950.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to
Found on 2023-08-18 15:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07343e2851e2Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 17-Aug-2023 19:21:12 +07 Restart Time: Thursday, 17-Aug-2023 16:36:02 +07 Parent Server Config. Generation: 1595 Parent Server MPM Generation: 1594 Server uptime: 2 hours 45 minutes 10 seconds Server load: 5.70 5.44 5.38 Total accesses: 74872 - Total Traffic: 699.4 MB - Total Duration: 101353761 CPU Usage: u2608.6 s4616.43 cu45056200 cs10991500 - 566000% CPU load 7.56 requests/sec - 72.3 kB/second - 9.6 kB/request - 1353.69 ms/request 12 requests currently being processed, 4 idle workers WWW..WWW___RWWWCW_................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1594134350/13/4816W 7.890064345860.00.0742.94 46.101.103.192http/1.1localhost:443GET /server-status HTTP/1.1 1-1594134670/5/4664W 2.310062313450.00.0139.72 172.68.234.5http/1.1www.jbbgarment.com:80GET /%E0%B8%AA%E0%B8%B4%E0%B8%99%E0%B8%84%E0%B9%89%E0%B8%B2%E0% 2-1594133940/29/4717W 17.392063640760.00.1143.10 172.68.234.147http/1.1www.jbbgarment.com:80POST /wp-cron.php?doing_wp_cron=1692274870.35013604164123535156 3-1594-0/0/4586. 0.001062297720.00.0045.10 138.197.88.136http/1.1localhost:80GET /login.action HTTP/1.0 4-1594-0/0/4643. 0.00069161010840.00.0049.20 168.119.109.180http/1.1www.emba35.com:443GET / HTTP/1.1 5-1594134760/2/4458W 0.420060557870.00.0039.13 172.69.64.229http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 6-1594132900/67/4266W 40.540057677610.00.3541.05 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 7-1594133030/61/4160W 33.770055988900.00.4034.84 142.4.19.129http/1.1www.dreamhightravel.com:443GET /wp-login.php HTTP/1.1 8-1594133240/59/4187_ 32.42084256711280.00.3040.29 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 9-1594133550/47/3958_ 22.920052791290.00.2336.40 138.197.88.136http/1.1localhost:80GET /.git/config HTTP/1.0 10-1594133610/46/4288_ 23.78049857447820.00.2540.08 172.71.166.214http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 11-1594133670/44/3868R 23.061051984990.00.2837.29 147.139.172.176http/1.1www.dreamhightravel.com:443 12-1594134020/20/3402W 10.990045665060.00.0925.83 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 13-1594134100/25/3319W 12.390045369040.00.2035.43 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-1594134170/22/3383W 12.180046779350.00.1629.21 172.70.175.213http/1.1www.chorsiam.com:80POST //xmlrpc.php HTTP/1.0 15-1594134191/20/2836C 10.440038719931.40.1023.89 46.101.103.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1594134840/1/2511W 0.480034487420.00.0023.90 172.71.182.168http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 17-1594134900/2/1428_ 0.74075518652920.00.0117.57 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 18-1594-0/0/1186. 0.0021242315583020.00.0011.65 172.71.182.169http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 19-1594-0/0/840. 0.00568011701290.00.008.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1594-0/0/378. 0.0063405035510.00.006.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1594-0/0/342. 0.00114904420180.00.004.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1594-0/0/206. 0.00113032554750.00.003.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1594-0/0/139. 0.00116602542710.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1594-0/0/184. 0.00115402802770.00.004.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1594-0/0/236. 0.009827623427320.00.001.75 172.68.234.164http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1692273888.91179299354553222656 26-1594-0/0/368. 0.0087410805124200.00.002.74 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1594-0/0/78. 0.0011560929920.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1594-0/0/14. 0.0011650339710.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1594-0/0/132. 0.009896391945310.00.000.65 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 30-1594-0/0/8. 0.0011550405800.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1594-0/0/20. 0.0011410470770.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1594-0/0/21. 0.0011290535400.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1594-0/0/107. 0.009849661734180.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 34-1594-0/0/13. 0.0011640388640.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1594-0/0/123. 0.00103901920040.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1594-0/0/210. 0.00114002782140.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1594-0/0/174. 0.00102702511550.00.001.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1594-0/0/9. 0.0011580317150.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1594-0/0/21. 0.0011440504390.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1594-0/0/111. 0.009855061752710.00.000.62 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 41-1594-0/0/127. 0.00110501756830.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1594-0/0/114. 0.00115201776980.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1594-0/0/93. 0.00100301647580.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1594-0/0/19. 0.0011470421680.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1594-0/0/7. 0.0011620248140.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1594-0/0/99. 0.009939041420550.00.000.51 162.158.162.246http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 47-1594-0/0/3. 0.001159094030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 148subcaches: 32, indexes p
Found on 2023-08-17 12:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f07349c027b5bApache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 17:52:30 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 13 hours 50 minutes 16 seconds Server load: 6.37 5.51 4.94 Total accesses: 460324 - Total Traffic: 3.7 GB - Total Duration: 670780795 CPU Usage: u2881.6 s4672.01 cu44697400 cs10893200 - 112000% CPU load 9.24 requests/sec - 77.3 kB/second - 8.4 kB/request - 1457.19 ms/request 14 requests currently being processed, 5 idle workers WWWWWCRCWW__WWW..___W............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1588174350/38/25464W 24.8110362297150.00.24214.87 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 1-1588175110/16/25524W 9.3600359096900.00.07205.58 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1692183149.55976104736328125000 2-1588175430/1/25122W 0.0000361599190.00.00196.85 172.71.166.237http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 3-1588173800/65/24654W 37.2800360083240.00.28225.02 162.158.174.146http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 4-1588175210/9/24681W 4.6110356132510.00.05199.15 172.71.174.215http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 5-1588172461/100/24352C 60.0301272353330101.60.56174.87 162.158.174.146http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 6-1588173980/67/23975R 40.850534346173440.00.24183.00 172.70.134.69http/1.1www.siamautomation.com:443 7-1588172641/86/24189C 52.9800344102591.40.45164.91 45.79.83.159http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1588174120/46/22904W 29.3600329312680.00.37173.05 20.127.78.238http/1.1www.tkadvicesystem.com:443POST //wp-login.php HTTP/1.1 9-1588174530/39/22893W 22.7700331328440.00.17169.30 184.168.116.160http/1.1www.dreamhightravel.com:443POST /xmlrpc.php HTTP/1.1 10-1588172810/82/22062_ 49.800887319830090.00.39155.63 172.70.134.195http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 11-1588174600/39/21711_ 23.300684317703700.00.15169.92 172.71.170.83http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 12-1588172890/88/21281W 52.9100308414890.00.42175.99 172.70.175.187http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 13-1588175510/0/20501W 0.0000294324450.00.00162.58 45.79.83.159http/1.1localhost:443GET /server-status HTTP/1.1 14-1588175570/0/19841W 0.0000292214870.00.00226.24 172.71.170.83http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 15-1588-0/0/18171. 0.00611205264317910.00.00148.01 172.70.134.194http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 16-1588-0/0/17324. 0.00920250287660.00.00130.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1588173040/82/15315_ 49.9602227810360.00.42210.78 45.79.83.159http/1.1localhost:443GET /about HTTP/1.1 18-1588173100/88/13692_ 53.6601203678610.00.4199.96 66.249.79.163http/1.1 19-1588173160/84/11203_ 52.460552165963060.00.4492.35 172.69.94.118http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 20-1588173220/89/8737W 52.3400134493980.00.4163.16 172.69.94.118http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 21-1588-0/0/6407. 0.00381773796134780.00.0050.99 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 22-1588-0/0/5249. 0.003794453980588380.00.0048.08 172.68.234.164http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1692179350.52252793312072753906 23-1588-0/0/3779. 0.00381147159341980.00.0031.27 162.158.175.12http/1.1www.chonlateecamping.com:80POST //xmlrpc.php HTTP/1.0 24-1588-0/0/3268. 0.00382367152366930.00.0023.50 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 25-1588-0/0/2590. 0.00379270543024480.00.0018.39 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 26-1588-0/0/1421. 0.004020021319340.00.0013.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1588-0/0/1034. 0.004032015503660.00.007.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1588-0/0/806. 0.005857013495190.00.006.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1588-0/0/580. 0.006265110009260.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1588-0/0/319. 0.00621305306840.00.006.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1588-0/0/392. 0.00602806441090.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1588-0/0/83. 0.002800901652280.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1588-0/0/112. 0.002800202871870.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1588-0/0/101. 0.002797401881510.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1588-0/0/129. 0.002797502345130.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1588-0/0/18. 0.00280070652620.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1588-0/0/109. 0.00277888242613860.00.000.66 172.70.189.100http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 38-1588-0/0/100. 0.00392338141804300.00.000.65 172.70.135.128http/1.1www.chonlateefarm.com:443POST //wp-login.php HTTP/1.1 39-1588-0/0/90. 0.003926101630980.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1588-0/0/16. 0.00394100679680.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1588-0/0/14. 0.00394260608390.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1588-0/0/12. 0.00394220649130.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1588-0/0/12. 0.00394320608070.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1588-0/0/25. 0.00393890787580.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1588-0/0/17. 0.00394200616270.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1588-0/0/12. 0.00394350602590.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1588-0/0/10. 0.00394300621060.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1588-0/0/11. 0.00394390570430.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1588-0/0/12. 0.00394370584220.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process mos
Found on 2023-08-16 10:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734dda021c0Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 02:48:11 +07 Restart Time: Wednesday, 16-Aug-2023 00:24:35 +07 Parent Server Config. Generation: 1588 Parent Server MPM Generation: 1587 Server uptime: 2 hours 23 minutes 36 seconds Server load: 14.01 15.72 15.45 Total accesses: 108502 - Total Traffic: 627.7 MB - Total Duration: 207817029 CPU Usage: u3070.49 s4710.34 cu44435300 cs10822200 - 641000% CPU load 12.6 requests/sec - 74.6 kB/second - 5.9 kB/request - 1915.33 ms/request 22 requests currently being processed, 6 idle workers WWWWW_W.._WWRCWW.WW__WWW.CWW_._WR................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1587184560/92/4520W 73.710083572860.00.4327.20 172.69.64.228http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 1-1587189700/20/4508W 17.130083719280.00.1224.86 139.59.77.70http/1.1www.xn--m3cbp0adb4cva5bee03a.coGET /wp-login.php HTTP/1.1 2-1587188690/38/4446W 30.041082639540.00.1925.85 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 3-1587184940/77/4380W 65.960080521160.00.4425.43 89.116.236.84http/1.1www.bannongsaischool.com:443GET /wp-login.php HTTP/1.1 4-1587187860/46/4360W 36.570080683450.02.0726.38 142.93.153.3http/1.1localhost:443GET /server-status HTTP/1.1 5-1587189830/18/4433_ 15.130127881942540.00.1026.25 172.71.166.186http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 6-1587188070/47/4418W 34.630080879600.00.1824.54 40.78.153.9http/1.1www.dinocoffees.com:443POST //xmlrpc.php HTTP/1.1 7-1587-0/0/4142. 0.0013078155920.00.0024.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1587-0/0/4342. 0.007081120060.00.0027.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1587185030/85/4284_ 65.420114080488890.00.4024.04 20.127.78.238http/1.1www.tafa.or.th:443POST //wp-login.php HTTP/1.1 10-1587188150/47/4245W 35.230077914690.00.2122.67 172.69.64.242http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 11-1587190240/15/4277W 10.490078539600.00.0724.73 172.69.65.2http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 12-1587190320/13/4009R 10.15079474192590.00.0421.72 20.127.78.238http/1.1www.tafa.or.th:443 13-1587186651/66/4036C 49.820159975580785.20.3022.99 40.83.35.60http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 14-1587188480/41/3906W 33.400072242970.00.2321.68 40.83.35.186http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 15-1587189340/26/3902W 20.290072651590.00.1324.61 172.68.234.128http/1.1www.accprogress.com:80POST /wp-cron.php?doing_wp_cron=1692128891.26204490661621093750 16-1587-0/0/3860. 0.0011072367250.00.0020.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1587190480/11/3787W 7.210071755810.00.0423.95 172.173.116.204http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 18-1587190570/11/3610W 6.111068602000.00.1621.24 162.158.174.176http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 19-1587189420/27/3511_ 21.220121666562930.00.1320.72 172.69.64.248http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 20-1587188920/37/3279_ 29.280147763323940.00.2619.38 40.83.42.130http/1.1www.chonlateebusiness.com:443POST //xmlrpc.php HTTP/1.1 21-1587185650/69/3018W 57.040061180600.00.3317.31 162.158.175.100http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 22-1587189430/24/2652W 18.820052582680.00.1014.34 172.71.174.124http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 23-1587185040/80/2617W 65.850053762130.00.3914.58 172.69.0.51http/1.1www.accprogress.com:80POST /xmlrpc.php HTTP/1.0 24-1587-0/0/2477. 0.0015050576260.00.0013.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1587190631/10/2117C 7.170044015981.40.0311.66 142.93.153.3http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 26-1587186770/64/2054W 46.440042859700.00.3011.52 172.71.167.206http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 27-1587190720/10/1858W 7.260039246820.00.049.58 172.69.65.198http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 28-1587187110/57/1478_ 46.560213832001530.01.3710.91 74.207.237.114http/1.1www.partymanagementthailand.comGET / HTTP/1.1 29-1587-0/0/1118. 0.0012025870420.00.006.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1587190740/12/978_ 7.65074621859930.00.046.84 20.169.206.229http/1.1www.bannongsaischool.com:443POST //xmlrpc.php HTTP/1.1 31-1587187300/53/719W 44.082016517600.00.264.03 172.71.175.29http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 32-1587190750/9/405R 5.421010142540.00.032.26 40.78.158.54http/1.1 33-1587-0/0/277. 0.009013887485690.00.001.72 172.69.67.154http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 34-1587-0/0/88. 0.0038602371750.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1587-0/0/152. 0.0043204490560.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1587-0/0/239. 0.0026417805748490.00.001.27 172.71.174.124http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 232subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 45 seconds, (range: 1...157)index usage: 8%, cache usage: 10%total entries stored since starting: 5495total entries replaced since starting: 0total entries expired since starting: 5263total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 64 hit, 22195 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-15 19:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e42f0734e42f0734e2ac56c9Apache Status Apache Server Status for pop.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 14:52:14 +07 Restart Time: Thursday, 03-Aug-2023 14:51:31 +07 Parent Server Config. Generation: 1539 Parent Server MPM Generation: 1538 Server uptime: 43 seconds Server load: 3.35 3.47 3.49 Total accesses: 407 - Total Traffic: 2.4 MB - Total Duration: 274631 CPU Usage: u2398.88 s4241.76 cu40999400 cs9907560 - 1.18e+8% CPU load 9.47 requests/sec - 56.4 kB/second - 6.0 kB/request - 674.769 ms/request 20 requests currently being processed, 6 idle workers CC_WCCRCW.W.CC__C_CWWC_CCW._C..................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-15385571/27/27C 10.0913362125310.10.150.15 207.154.240.169http/1.1www.partymanagementthailand.comGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-15385581/27/27C 11.8310249781.30.190.19 139.144.150.23http/1.1localhost:443GET /.env HTTP/1.1 2-15387080/18/25_ 4.870838177740.00.100.13 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 3-15387290/5/12W 1.150066100.00.020.06 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 4-15385801/21/21C 9.3411203611.30.200.20 165.232.76.155http/1.1localhost:443GET /.env HTTP/1.1 5-15387391/3/9C 0.821178501.30.020.06 139.144.150.23http/1.1localhost:443GET /.env HTTP/1.1 6-15386110/29/29R 9.0701203380.00.180.18 142.93.238.219http/1.1www.partymanagementthailand.com 7-15386131/16/16C 6.8401135331.40.100.10 167.172.232.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-15386240/23/23W 9.6500197000.00.200.20 172.70.174.85http/1.1www.proplustech.co.th:443POST //wp-login.php HTTP/1.1 9-1538-0/0/26. 0.0000148440.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-15387450/6/15W 1.3700105640.00.030.09 167.172.232.142http/1.1localhost:443GET /server-status HTTP/1.1 11-1538-0/0/25. 0.0020100020.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-15386521/29/29C 7.700274169061.30.170.17 138.68.163.10http/1.1www.partymanagementthailand.comGET /server-status HTTP/1.1 13-15387541/4/7C 0.350348158010.00.010.02 207.154.240.169http/1.1www.partymanagementthailand.comGET /server-status HTTP/1.1 14-15386610/18/18_ 8.7000172990.00.120.12 142.93.238.219http/1.1www.partymanagementthailand.comGET / HTTP/1.0 15-15386730/19/19_ 4.29051797760.00.160.16 162.158.245.41http/1.1www.chonlateebranding.com:443GET /wp-login.php HTTP/1.1 16-15386751/24/24C 5.1000112621.30.080.08 139.144.150.23http/1.1localhost:443GET /.git/config HTTP/1.1 17-15386760/16/16_ 5.6800112350.00.090.09 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 18-15387551/4/10C 0.650065371.40.010.04 139.144.150.23http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 19-15387630/4/4W 0.48009760.00.010.01 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 20-15387720/3/3W 1.510030460.00.020.02 207.154.240.169http/1.1www.partymanagementthailand.comGET /login.action HTTP/1.1 21-15387791/3/3C 0.020071.40.000.00 165.232.76.155http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 22-15387850/3/3_ 0.3003066180.00.010.01 138.68.163.10http/1.1www.partymanagementthailand.comGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 23-15387881/3/3C 1.580132251.40.030.03 139.144.150.23http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 24-15387971/3/3C 0.30006131.40.010.01 165.232.76.155http/1.1localhost:443GET /.git/config HTTP/1.1 25-15387990/3/3W 0.750015410.00.010.01 162.158.245.45http/1.1www.chonlateebranding.com:443POST /wp-login.php HTTP/1.1 26-1538-0/0/2. 0.00107380.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-15388110/2/2_ 0.72072114450.00.010.01 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 28-15388171/3/3C 0.010041.40.000.00 139.144.150.23http/1.1localhost:443GET /.git/config HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 47subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 273 seconds, (range: 261...292)index usage: 1%, cache usage: 2%total entries stored since starting: 47total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 191 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-03 07:51
-