Domain pop.spamechanicssystem.com
Thailand
CS LOXINFO Public Company Limited.
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: pop.spamechanicssystem.com
Port: 80
URL: http://pop.spamechanicssystem.comFirst seen 2022-10-25 07:05
Last seen 2024-02-02 18:01
Open for 465 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389ffe344743Apache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 01:01:29 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 95 Parent Server MPM Generation: 94 Server uptime: 28 days 15 hours 8 seconds Server load: 2.01 2.02 2.07 Total accesses: 1850649 - Total Traffic: 23.8 GB - Total Duration: 2141120985 CPU Usage: u173.08 s105.95 cu32159.4 cs2232.06 - 1.4% CPU load .748 requests/sec - 10.1 kB/second - 13.5 kB/request - 1156.96 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031725no0yes032000 231729no0yes032000 331728no0yes032000 531726no0yes131000 Sum400 1127000 ________________________________................................ ________________________________________________________________ ................................_____W__________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-94317250/1/14806_ 0.40100160261020.00.00193.82 139.144.150.45http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-94317250/0/15296_ 0.00100139013540.00.00198.97 164.90.205.35http/1.1localhost:443GET /.env HTTP/1.1 0-94317250/1/14868_ 0.4080150309570.00.00192.75 139.144.150.45http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-94317250/0/15048_ 0.0080145875140.00.00186.02 138.197.88.136http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-94317250/1/14951_ 0.4070147711750.00.00185.46 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.1 0-94317250/1/15173_ 0.4070156649260.00.00188.55 139.144.150.8http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/1/14848_ 0.4140145588920.00.00200.31 165.232.76.155http/1.1localhost:80GET / HTTP/1.1 0-94317250/0/15155_ 0.0040150182090.00.00187.60 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 0-94317250/0/15114_ 0.0040145226990.00.00229.90 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-94317250/0/15248_ 0.0040148853450.00.00194.92 159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/1/14813_ 0.4130154393450.00.00200.74 139.144.150.8http/1.1localhost:80GET /.env HTTP/1.1 0-94317250/1/14825_ 0.4130147156450.00.00195.47 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 0-94317250/1/14694_ 0.4130137182790.00.00185.56 139.144.150.8http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/14845_ 0.0020169086640.00.00186.04 159.203.94.228h2localhost:443[0/0] Software caused connection abort 0-94317250/1/15800_ 0.4220141615400.00.00187.81 138.197.88.136http/1.1localhost:80GET /about HTTP/1.1 0-94317250/1/14850_ 0.4220165341270.00.00182.52 139.144.150.8http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/0/14900_ 0.0010143405120.00.00206.40 74.207.237.114http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/1/14960_ 0.4210144940050.00.00189.33 165.232.76.155http/1.1localhost:80GET /login.action HTTP/1.1 0-94317250/0/14780_ 0.0010160388390.00.00200.58 146.190.64.200http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/0/15001_ 0.0000144639410.00.00193.85 159.203.94.228http/1.1 0-94317250/0/14992_ 0.0000181496050.00.00193.47 162.243.161.105http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/15016_ 0.0000147053800.00.00204.12 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.1 0-94317250/0/15472_ 0.0020650150756110.00.00188.31 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x0c\x01 0-94317250/0/14676_ 0.00206514138765560.00.00190.21 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 0-94317250/0/14987_ 0.0020650162205960.00.00186.91 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/14661_ 0.0020650135981680.00.00197.05 164.90.222.93http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/15159_ 0.0020650144713590.00.00194.53 142.93.158.96http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-94317250/0/14942_ 0.0020650159195750.00.00213.34 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 0-94317250/0/14742_ 0.0020650152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-94317250/0/15189_ 0.0020650135139150.00.00225.17 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/14678_ 0.0020650155573090.00.00199.16 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-94317250/0/14940_ 0.0020650145815220.00.00185.19 162.243.184.251http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-94-0/0/15731. 0.0020600138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-94-0/0/15813. 0.0020600136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15602. 0.0020600174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15318. 0.0020600150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-94-0/0/15276. 0.0020600146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-94-0/0/15655. 0.0020600134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-94-0/0/15351. 0.0020600172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-94-0/0/15185. 0.0020600165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15335. 0.0020600127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/14956. 0.0020600152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-94-0/0/15041. 0.0020600148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15506. 0.0020600159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-94-0/0/15329. 0.0020600159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/15189. 0.0020600137016410.00.00183.04
Found on 2024-02-02 18:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389f0c831ec5Apache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:21:37 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 20 minutes 16 seconds Server load: 2.62 2.99 3.04 Total accesses: 859387 - Total Traffic: 11.6 GB - Total Duration: 1067360092 CPU Usage: u188.1 s16.82 cu14583.6 cs765.51 - 8.42% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1242 ms/request 7 requests currently being processed, 57 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 014738no6yes626003 14311no3yes131000 Sum209 757003 ______WW_R_____W____WW___________R______________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7147380/296/6848_ 153.94184490644470.03.99100.40 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /xrmemnz-20056zetidm93kez HTTP/1.1 0-7147380/252/7305_ 154.09135971967920.02.46101.57 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=efv-550p-1av-casio-middle-east-africa-0-ii-apv6pnCl HTT 0-7147380/330/6886_ 154.20068478444990.03.5499.42 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 0-7147380/289/7123_ 154.101075478490.03.0791.86 207.154.240.169http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7147380/536/7095_ 154.190075937800.03.9389.03 137.184.150.232http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-7147380/250/7228_ 153.28184488676530.03.2495.63 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147381/293/7031W 153.820070202090.03.60105.76 52.70.240.171http/1.1www.chonlateeboi.com:443GET /7652tbrmitems/etidm7.html HTTP/1.1 0-7147381/281/7119W 153.830073504340.03.2593.09 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /wmlemnz-17975yetidm30jz.html HTTP/1.1 0-7147380/234/7271_ 153.941075573140.02.93143.07 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-7147380/346/7151R 154.061077956850.03.2590.16 3.224.220.101http/1.1www.chonlateeadmin.com:443 0-7147380/460/6951_ 154.21035882288770.05.17111.51 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=nike-air-max-sp-x-kasina-won-ang-orange-7-ii-34XJXWun H 0-7147380/279/6721_ 154.09184083932330.03.3987.44 52.70.240.171http/1.1www.chonlateeboi.com:443GET /18807crwditems/etidm98jd.htm HTTP/1.1 0-7147380/278/6764_ 154.040063590720.04.4089.98 159.223.108.26http/1.1 0-7147380/267/6968_ 153.33135094453330.03.4995.19 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=the-history-of-the-casio-g-shock-52%-off-11-ii-qpL80nho 0-7147380/310/7636_ 153.96163671932500.03.2196.27 137.184.150.232http/1.1localhost:80\x16\x03\x01\x01\r\x01 0-7147381/312/6822W 154.070093625630.02.7587.56 164.90.205.35http/1.1localhost:80GET /server-status HTTP/1.1 0-7147380/283/6965_ 153.971072509040.03.3990.07 128.199.195.68http/1.1localhost:80GET /about HTTP/1.1 0-7147380/269/7062_ 154.190071378910.02.9394.33 164.90.205.35http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-7147380/278/7028_ 154.0401188336480.02.9788.49 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147380/336/7090_ 153.83154974616670.03.3495.65 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=folk-art-of-france-milner-craft-series-1-ii-vlB3gLfO HT 0-7147381/334/7137W 150.43750112391820.04.9999.02 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7147381/268/6801W 153.120078437110.02.7991.08 93.183.131.53http/1.1www.ltclevelup.com:443GET /wp-login.php HTTP/1.1 0-7147380/299/7366_ 154.101086193700.03.6297.55 164.90.205.35http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7147380/290/6906_ 154.040069652500.03.1297.57 164.90.205.35http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-7147380/409/6954_ 153.71084691768200.04.7788.04 52.70.240.171http/1.1www.chonlateeboi.com:443GET /30330ztiaetid.htm HTTP/1.1 0-7147380/316/7120_ 153.89185063195590.04.2190.70 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147380/278/6941_ 153.51184876740180.03.4898.51 85.208.96.197http/1.1www.chonlateeboi.com:443GET /18737zypyeti.html HTTP/1.1 0-7147380/309/6991_ 154.200087448790.03.26119.54 207.154.240.169http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-7147380/268/6817_ 153.781106175805550.02.7485.52 159.223.108.26http/1.1 0-7147380/261/7108_ 154.081078661190.02.77124.48 128.199.195.68http/1.1localhost:80GET /config.json HTTP/1.1 0-7147380/239/6749_ 153.941084397100.02.5897.81 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-7147380/292/7126_ 154.07164276122630.03.3991.18 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lraemnz-17964netidm8.htm HTTP/1.1 1-743110/62/6873_ 30.281077595210.00.6289.25 164.90.205.35http/1.1localhost:80GET /about HTTP/1.1 1-743110/128/6671R 30.232078142550.01.4884.99 52.70.240.171http/1.1www.chonlateeboi.com:443 1-743110/60/6620_ 30.101836104720480.00.5284.97 3.224.220.101http/1.1www.chonlateeboi.com:443GET /25249ztiaitems/eti HTTP/1.1 1-743110/64/6358_ 30.271082443890.00.5684.03 128.199.195.68http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-743110/68/6552_ 29.59083879586140.00.6697.41 159.223.108.26h2localhost:443[0/0] Software caused connection abort 1-743110/138/6653_ 30.281077589110.03.2089.53 128.199.195.68http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/70/6590_ 30.181089704870.00.6884.10 165.22.108.223http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-743110/72/6691_ 30.181090110050.00.7089.10 165.22.108.223http/1.1localhost:80GET /.git/config HTTP/1.1 1-743110/84/6746_ 30.220060127660.00.6386.76 128.199.195.68http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-743110/49/6606_ 27.58054882529610.00.5591.62 40.77.167.52h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B 1-743110/26/6348_ 30.15084789126170.00.2789.83 164.92.84.255http/1.1 1-743110/71/6855_ 30.281078399210.00.8698.84 128.199.195.68http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/68/6631_ 30.290093797970.00.6788.31 207.154.240.169http/1.1localhost:80
Found on 2024-01-07 06:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389f477d8e57Apache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 20:31:37 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 10 hours 30 minutes 16 seconds Server load: 2.48 2.52 2.51 Total accesses: 189244 - Total Traffic: 2.8 GB - Total Duration: 150808018 CPU Usage: u271.4 s14.6 cu2734.05 cs151.16 - 8.39% CPU load 5 requests/sec - 76.3 kB/second - 15.2 kB/request - 796.897 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06904no14yes7250010 25731no3yes230000 Sum2017 9550010 _W_____R__W__W____W___R_______R_................................ _______________RW_______________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-069040/245/2218_ 137.510018163700.02.9034.69 206.81.1.88http/1.1localhost:80GET /about HTTP/1.1 0-069041/232/2347W 137.510017299080.02.9929.09 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?rpqsvcw-296014detid HTTP/1.1 0-069040/228/2177_ 137.6011029471390.02.9342.35 144.126.202.105http/1.1localhost:80GET /server-status HTTP/1.1 0-069040/252/2383_ 137.420017577140.03.1631.04 159.65.58.104http/1.1 0-069040/225/2308_ 137.640018014550.02.7928.95 134.122.89.242http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-069040/261/2567_ 137.680617963960.03.4832.18 206.81.1.88http/1.1localhost:80GET /server-status HTTP/1.1 0-069040/253/2193_ 137.580017660480.02.8527.13 167.172.20.95http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-069040/229/2302R 137.471018317830.02.9030.16 66.249.72.65http/1.1www.chonlateeadmin.com:443 0-069040/233/2319_ 137.680017302470.02.9663.76 144.126.202.105http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-069040/233/2279_ 137.650017272410.03.0029.44 167.172.20.95http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069041/243/2257W 137.470020924110.02.8627.59 167.172.20.95http/1.1localhost:80GET /server-status HTTP/1.1 0-069040/232/2188_ 137.51199117343330.02.9928.64 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?nuohsbr-19188bitems/etid.html HTTP/1.1 0-069040/206/2158_ 137.641017760740.03.1530.74 162.243.184.251http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-069041/275/2470W 137.510018343020.03.1832.58 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?mznvrsm-370499aitems/eti HTTP/1.1 0-069040/214/2503_ 137.611020336590.02.7434.31 206.81.1.88http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-069040/239/2225_ 137.25197717659330.02.8029.77 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/236/2184_ 137.660017907790.03.2328.90 147.182.130.98http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-069040/223/2350_ 137.591017532830.02.7332.79 134.122.89.242http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-069040/230/2373_ 137.71099317124180.02.9131.31 3.224.220.101http/1.1www.chonlateeboi.com:443GET /23703ztiaitems/etidm26ra.htm HTTP/1.1 0-069040/232/2212_ 137.611519265190.02.7927.02 147.182.130.98http/1.1localhost:80GET /server-status HTTP/1.1 0-069040/226/2277_ 137.580017480010.02.5633.10 134.122.89.242http/1.1localhost:80GET /login.action HTTP/1.1 0-069040/228/2279_ 137.410018400420.03.5033.71 134.122.89.242http/1.1localhost:80GET /about HTTP/1.1 0-069040/235/2540R 137.471017076840.03.5131.51 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069040/239/2196_ 137.35134416889490.02.9229.42 159.65.58.104http/1.1 0-069040/217/2212_ 137.65082917930260.02.5829.16 85.208.96.208http/1.1www.chonlateefood.com:443GET /items/gzv18362kezutidm.html HTTP/1.1 0-069040/224/2215_ 137.341017102530.02.7428.61 142.93.158.96h2localhost:443[0/0] Software caused connection abort 0-069040/222/2146_ 137.660123216663250.02.7127.43 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ehtjupk-34233gitems/eti.htm HTTP/1.1 0-069040/236/2289_ 137.580017191010.03.1559.79 147.182.130.98http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069040/238/2164_ 137.391017397780.02.8627.43 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 0-069040/223/2502_ 137.410016693260.02.8568.19 142.93.158.96h2localhost:443[0/0] Software caused connection abort 0-069040/234/2177R 137.581017356020.02.6935.00 66.249.77.72http/1.1 0-069040/389/2512_ 137.371017484630.03.8130.54 142.93.158.96h2localhost:443[0/0] Software caused connection abort 1-0-0/0/1494. 0.00283384410789900.00.0019.95 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1 1-0-0/0/1277. 0.00283390410369240.00.0016.79 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1 1-0-0/0/1292. 0.00283384310629170.00.0018.86 52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1 1-0-0/0/1320. 0.00283384010544740.00.0017.61 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1 1-0-0/0/1329. 0.00283384010311000.00.0021.84 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1 1-0-0/0/1313. 0.00283383710077550.00.0017.92 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1 1-0-0/0/1347. 0.00283386610387560.00.0016.37 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1 1-0-0/0/1346. 0.00283389710630850.00.0016.65 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1 1-0-0/0/1346. 0.00283383910436060.00.0017.96 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1 1-0-0/0/1273. 0.00283384110395360.00.0016.70 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1 1-0-0/0/1214. 0.00283392410022070.00.0015.53 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wuxaonh-247555kitems/eti.htm HTTP/1.1 1-0-0/0/1373. 0.002833107410816380.00.0018.55 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22932oqmietidm9.htm HTTP/1.1 1-0-0/0/1300. 0.00283384210566390.00.0017.35 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?uethsbr-171347getidm21hr.html HTTP/1.1
Found on 2024-01-05 13:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389f9eb05a9eApache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:23:54 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 3 days 8 hours 29 minutes 35 seconds Server load: 1.55 1.75 1.60 Total accesses: 1080582 - Total Traffic: 11.9 GB - Total Duration: 677903265 CPU Usage: u60.63 s15.86 cu17171.1 cs976.25 - 6.29% CPU load 3.73 requests/sec - 42.9 kB/second - 11.5 kB/request - 627.35 ms/request 6 requests currently being processed, 122 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06042no2yes032001 16305no6yes230003 26053no9yes329102 36062no2yes131000 Sum4019 6122106 ___________________________________________W__R_________________ R______________W_______________R_R______________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1260420/16/9754_ 8.877062526090.00.13104.44 23.178.112.106http/1.1www.tafa.or.th:80GET /.well-known/acme-challenge/jDCYOModdPAiUNfG2GlsLW9yMpfyJ_Y 0-1260420/19/9534_ 8.940064057010.00.1693.79 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-1260420/23/9778_ 8.49987163177730.00.1696.81 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?sthggdh-280545uitems/eti.htm HTTP/1.1 0-1260420/24/9683_ 8.931057517730.00.1891.34 144.126.198.24http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-1260420/24/9711_ 8.931058049250.00.15110.24 178.62.73.12http/1.1www.spamechanicssystem.com:80GET /debug/default/view?panel=config HTTP/1.1 0-1260420/19/9515_ 8.610107762200910.00.16106.05 40.77.167.152h2www.chonlateeaa.com:443GET /?s=wset-level1-practice-questions-pdf-pdf-wine-phenolic-co 0-1260420/18/9673_ 8.894234556637490.00.16142.39 136.243.220.210http/1.1www.chonlateefbc.com:80GET /?q=swagelok-ss-63ts8-33c-l1-pneumatic-stainless-ball-valve 0-1260420/18/9309_ 8.688057267890.00.1293.78 27.254.96.168http/1.1localhost:80GET /.well-known/acme-challenge/letsencrypt_1703784210 HTTP/1.1 0-1260420/15/10031_ 8.16486955676830.00.13121.67 31.184.236.34http/1.1 0-1260420/25/9586_ 8.904108059315200.00.21101.36 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?277937qpjoeti.html HTTP/1.1 0-1260420/21/9613_ 8.931056205040.00.1493.74 164.90.222.93http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-1260420/21/9697_ 8.82086655885520.00.1799.85 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?xtmggdh-210532zetidm4 HTTP/1.1 0-1260420/33/9806_ 8.53186562340510.00.31114.93 40.77.167.152h2www.chonlateepr.com:443[1/1] done: stream 1, GET /dfutin/ceciu0024769326.html 0-1260420/19/9790_ 8.24094062079820.00.19101.05 40.77.167.152h2www.chonlateeaa.com:443[1/1] done: stream 1, GET /?s=wset-level1-practice-questions-pd 0-1260420/21/9603_ 8.6411107763591300.00.16103.17 31.184.236.34http/1.1 0-1260420/14/9569_ 7.12586058071180.00.11178.78 40.77.167.13h2www.chonlateepr.com:443[1/1] done: stream 1, GET /laix/ptrna0027065070.html 0-1260420/16/9904_ 8.93190162252780.00.12101.92 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x0e\x01 0-1260420/21/9492_ 8.93287760551650.00.1493.78 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?296944qpjoetidm44yqn HTTP/1.1 0-1260420/18/9605_ 7.90390258480790.00.1498.52 157.55.39.10h2www.thesungolden.com:443[1/1] done: stream 1, GET /g2269240.shtml 0-1260420/21/9838_ 8.600056533620.00.17105.39 138.68.133.118h2localhost:443[0/0] Software caused connection abort 0-1260420/23/9748_ 8.931062740620.00.14101.85 139.59.182.142http/1.1localhost:80GET / HTTP/1.1 0-1260420/21/9651_ 8.60089558992870.00.1499.93 85.208.96.206http/1.1www.chonlateeadmin.com:443GET /xrmxzet-11866zetid HTTP/1.1 0-1260420/23/9746_ 8.774074669510.00.13147.06 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /uqbrtdd204887ojvyc84i5dl/3ddb809e4.htm HTTP/1.1 0-1260420/28/9448_ 8.930092525470.00.20104.86 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-1260420/32/9755_ 8.308107158617470.00.20137.07 40.77.167.152h2www.chonlateepr.com:443GET /digous/enohp0023654835.html HTTP/2.0 0-1260420/26/9451_ 8.8710083851860.00.2593.58 40.77.167.126h2www.chonlateepr.com:443GET /sotaby/pthgi0026782107.html HTTP/2.0 0-1260420/27/9512_ 8.87990057168420.00.2294.19 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?277963qpjoitems/etidm HTTP/1.1 0-1260420/18/9656_ 8.2910063147220.00.13100.83 40.77.167.126h2www.chonlateepr.com:443[1/1] done: stream 1, GET /sotaby/pthgi0026782107.html 0-1260420/24/9606_ 8.77286759719320.00.23138.00 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?272750qpjoitems/etidm32k.html HTTP/1.1 0-1260420/22/9620_ 8.57089761462640.00.20107.36 138.68.163.10http/1.1 0-1260420/12/9557_ 7.80090061996430.00.13103.77 138.68.163.10http/1.1 0-1260420/28/9586_ 8.820659888460.00.22115.33 40.77.167.152h2www.chonlateepr.com:443GET /kerate/alcad0024095880.html HTTP/2.0 1-1263050/23/9122_ 10.03077954166340.00.18142.44 162.243.186.177http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 1-1263050/26/8958_ 10.590055073120.00.23107.42 18.237.114.94http/1.1www.tafa.or.th:443GET /.well-known/acme-challenge/nQqnPb9e-r13dEpjFEsBUXEiwD9ImBv 1-1263050/25/9090_ 10.390055461180.00.22131.61 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-1263050/24/9364_ 9.231057403860.00.18142.94 138.68.163.10h2localhost:443[0/0] Software caused connection abort 1-1263050/24/9340_ 10.501056457330.00.16111.76 178.62.73.12http/1.1www.spamechanicssystem.com:80GET /about HTTP/1.1 1-1263050/50/9072_ 10.570056129790.00.3098.98 178.62.73.12http/1.1www.spamechanicssystem.com:80GET /v2/_catalog HTTP/1.1 1-1263050/28/9251_ 9.52087055993250.00.24109.48 138.68.163.10http/1.1 1-1263050/27/9335_ 10.411056428010.00.3193.11 18.224.213.15http/1.1www.tafa.or.th:80GET /.well-known/acme-challenge/nQqnPb9e-r13dEpjFEsBUXEiwD9ImBv 1-1263050/29/9204_ 9.39086655710380.00.2590.45 65.154.226.168h2www.spamechanicssystem.com:443[1/1] done: stream 1, GET / 1-1263050/16/9154_ 10.040073678150.00.08108.66 165.232.76.155http/1.1 1-1263050/25/9373_ 10.021107255693000.00.2195.39 165.232.76.155h2localhost:443[0/0] Software caused connection abort 1-1263051/29/9124W 10.310055869540.00.1890.96 52.70.240.171http/1.1www.chonlateeboi.com:443GET /tru
Found on 2023-12-28 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c44481de7Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 14:11:49 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 10 hours 9 minutes 37 seconds Server load: 1.04 0.67 0.42 Total accesses: 29197 - Total Traffic: 367.4 MB - Total Duration: 39432388 CPU Usage: u3388.35 s6001.83 cu56642000 cs13848000 - 193000% CPU load .798 requests/sec - 10.3 kB/second - 12.9 kB/request - 1350.56 ms/request 4 requests currently being processed, 6 idle workers _CW__W___W........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079233340/73/2767_ 40.110034328180.00.5631.26 64.227.126.135http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-2079236431/41/2781C 21.730038806622.20.3743.45 138.68.133.118http/1.1localhost:443GET / HTTP/1.1 2-2079233430/68/2588W 35.800036082530.00.4028.49 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 3-2079234970/49/2593_ 27.46054834495320.00.6342.08 162.158.238.37http/1.1www.chonlateetravel.com:80GET //.env HTTP/1.0 4-2079233640/57/2448_ 36.640032873840.00.3024.46 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-2079233790/66/2478W 32.070032030770.00.3025.98 162.158.238.10http/1.1www.chonlateetravel.com:80GET /.env HTTP/1.0 6-2079236570/39/2323_ 26.780032995950.00.1624.79 164.92.192.25http/1.1localhost:80GET / HTTP/1.0 7-2079237470/21/2163_ 19.60187728656770.00.1438.81 172.71.98.64http/1.1www.chorsiam.com:80POST //wp-login.php HTTP/1.0 8-2079238140/10/1974_ 5.990026241510.00.0335.06 164.92.192.25http/1.1localhost:80GET / HTTP/1.0 9-2079238700/5/1856W 3.100025630890.00.0122.83 172.71.98.64http/1.1www.chorsiam.com:80POST //wp-login.php HTTP/1.0 10-2079-0/0/1682. 0.009025650110.00.0016.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-2079-0/0/1419. 0.00301055419939820.00.0014.13 108.162.212.45http/1.1www.chonlateecamping.com:80POST /wp-login.php HTTP/1.0 12-2079-0/0/882. 0.003022111435390.00.006.91 172.68.242.243http/1.1www.time2hand.com:80GET /wp-content/plugins/widgets-for-siteorigin/css/defaults.css 13-2079-0/0/719. 0.00302229211190.00.005.22 172.68.242.201http/1.1www.time2hand.com:80GET /wp-content/themes/chonlateedesign/fonts/font-awesome.min.c 14-2079-0/0/45. 0.0069270504170.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2079-0/0/124. 0.00692401903560.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2079-0/0/140. 0.00693101669140.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2079-0/0/49. 0.0069470430560.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2079-0/0/96. 0.00196837051161230.00.000.75 172.71.178.161http/1.1www.chonlateecamping.com:80GET / HTTP/1.0 19-2079-0/0/3. 0.0020788030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.0020791010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2079-0/0/5. 0.0020777070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2079-0/0/5. 0.0020782080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2079-0/0/52. 0.00202820275920.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2079-0/0/4. 0.0020779090.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 6subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 254 seconds, (range: 217...266)index usage: 0%, cache usage: 0%total entries stored since starting: 234total entries replaced since starting: 0total entries expired since starting: 228total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 10699 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 07:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c6dd3c10cApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 03:07:52 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 2 hours 43 minutes 2 seconds Server load: 0.84 1.07 1.05 Total accesses: 9434 - Total Traffic: 89.1 MB - Total Duration: 15310237 CPU Usage: u3316.52 s5953.16 cu56303300 cs13768500 - 716000% CPU load .964 requests/sec - 9.3 kB/second - 9.7 kB/request - 1622.88 ms/request 8 requests currently being processed, 2 idle workers CC_WWC.C_...R.C................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041219371/45/893C 22.930014752961.30.379.18 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 1-2041216361/81/839C 39.630014050752.60.667.89 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-2041217300/58/829_ 35.260014088370.00.448.42 165.22.74.203http/1.1localhost:80GET /login.action HTTP/1.0 3-2041219580/38/760W 13.570011618130.00.226.42 146.190.160.11http/1.1localhost:80GET /server-status HTTP/1.0 4-2041220060/34/785W 11.890012694080.00.219.00 172.68.26.199http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 5-2041220131/24/655C 11.291010491302.60.255.87 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-2041-0/0/579. 0.0016009639720.00.005.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-2041217371/60/613C 30.371010118031.30.505.92 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 8-2041220200/33/742_ 13.130012072630.00.216.97 159.223.102.13http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-2041-0/0/598. 0.00352010474300.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-2041-0/0/554. 0.002778708839130.00.005.09 172.71.167.55http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%88%E0%B8%A3 11-2041-0/0/317. 0.002225985119190.00.002.97 172.68.234.163http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81 12-2041217550/55/193R 31.85002325720.00.521.27 139.59.182.142http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 13-2041-0/0/207. 0.0023410973220100.00.001.81 172.69.64.180http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 14-2041217611/54/141C 29.72001911251.30.471.14 139.59.182.142http/1.1localhost:443GET /v2/_catalog HTTP/1.1 15-2041-0/0/139. 0.0016102209180.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2041-0/0/20. 0.001486054740.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2041-0/0/14. 0.001499047850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2041-0/0/12. 0.001497040310.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2041-0/0/98. 0.0087401631250.00.000.86 138.197.88.136http/1.1 20-2041-0/0/178. 0.0096103353390.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2041-0/0/157. 0.00113302513850.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2041-0/0/104. 0.00147801813100.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2041-0/0/2. 0.001503050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2041-0/0/5. 0.001483022870.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 216 seconds, (range: 114...297)index usage: 0%, cache usage: 0%total entries stored since starting: 124total entries replaced since starting: 0total entries expired since starting: 115total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3755 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 20:07 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910cf2da91a5Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 08:56:41 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 4 hours 54 minutes 30 seconds Server load: 0.87 0.67 0.56 Total accesses: 17892 - Total Traffic: 342.7 MB - Total Duration: 25518153 CPU Usage: u3245.23 s5860.98 cu55539900 cs13590800 - 391000% CPU load 1.01 requests/sec - 19.9 kB/second - 19.6 kB/request - 1426.23 ms/request 3 requests currently being processed, 7 idle workers .R_W_____W._...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965-0/0/1555. 0.00101023265450.00.0037.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-196539660/85/1561R 50.870021000500.01.0833.80 139.144.150.23http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-196542450/52/1588_ 25.270123035850.01.8424.45 128.199.61.251http/1.1localhost:80GET /about HTTP/1.0 3-196540890/70/1546W 38.110021212590.00.9434.20 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 4-196541170/69/1415_ 41.330019601420.00.7728.25 128.199.195.68http/1.1localhost:80GET /config.json HTTP/1.0 5-196541290/63/1374_ 42.470119428290.00.8517.41 165.22.108.223http/1.1 6-196541360/67/1204_ 37.810015838700.01.7412.71 164.92.192.25http/1.1 7-196542130/52/1239_ 26.590117476210.00.4812.31 104.131.1.32http/1.1localhost:80GET /about HTTP/1.0 8-196541420/64/1164_ 37.540115620500.01.1312.56 165.22.108.223http/1.1 9-196547500/15/990W 4.814014445050.015.2942.28 146.190.64.200http/1.1www.chonlateefood.com:443GET / HTTP/1.1 10-1965-0/0/834. 0.00104013121390.00.009.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-196547580/21/830_ 8.370113183700.00.1524.71 159.203.63.67http/1.1 12-1965-0/0/544. 0.00124607785360.00.007.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1965-0/0/407. 0.00496715995814690.00.004.44 162.158.170.247http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 14-1965-0/0/213. 0.00626202611590.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1965-0/0/207. 0.00626103153320.00.005.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1965-0/0/463. 0.00626506605010.00.006.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1965-0/0/197. 0.0046095773086220.00.002.13 162.158.239.34http/1.1www.chonlateetravel.com:80GET /wp-content/outcms.php?up HTTP/1.0 18-1965-0/0/140. 0.00706415341865060.00.002.38 162.158.189.248http/1.1www.thaidocuments.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A3%E0%B8%AD%E0%B8%87 19-1965-0/0/105. 0.00828902193620.00.0015.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1965-0/0/199. 0.00705213122340.00.004.02 137.184.162.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 21-1965-0/0/10. 0.008266086660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1965-0/0/4. 0.008284025900.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1965-0/0/4. 0.008292017650.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1965-0/0/96. 0.0070584821570840.00.001.29 137.184.150.232http/1.1 25-1965-0/0/1. 0.008301000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1965-0/0/2. 0.008299013470.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 295 seconds, (range: 294...297)index usage: 0%, cache usage: 0%total entries stored since starting: 558total entries replaced since starting: 0total entries expired since starting: 554total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 7399 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-17 01:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c67f8e744Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:33:49 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 31 minutes 36 seconds Server load: 0.83 0.72 0.56 Total accesses: 50920 - Total Traffic: 932.7 MB - Total Duration: 97445727 CPU Usage: u3028.8 s5769.59 cu55152900 cs13502400 - 2.e+5% CPU load 1.48 requests/sec - 27.8 kB/second - 18.8 kB/request - 1913.7 ms/request 9 requests currently being processed, 1 idle workers WCRRWW_WWW........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193277110/8/4263W 1.110086835460.00.03118.15 172.69.65.109http/1.1www.proplustech.co.th:443GET /?page_id=S1060561 HTTP/1.1 1-193273221/68/4196C 24.360180383902.60.4852.80 74.207.237.46http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-193276770/21/4201R 2.380179348620.00.0855.74 165.232.76.155http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-193273330/81/4073R 30.960279370930.00.5670.41 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 4-193276840/22/4118W 4.070078659260.00.0863.63 172.71.174.7http/1.1www.proplustech.co.th:443GET /?page_id=O374508 HTTP/1.1 5-193277350/9/3816W 0.030069415620.00.0146.33 172.71.170.192http/1.1www.proplustech.co.th:443GET /?page_id=G1418186 HTTP/1.1 6-193276860/15/3799_ 5.730532973584870.00.2858.53 178.62.3.65http/1.1www.chonlateefood.com:443GET / HTTP/1.1 7-193277460/2/3687W 0.000073374880.00.0093.89 172.70.92.136http/1.1www.xn--72cz8bp5a1a1b8d.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 8-193273860/66/3437W 21.540065741780.00.3555.54 172.69.67.14http/1.1www.proplustech.co.th:443GET /?page_id=C1571085 HTTP/1.1 9-193273930/64/3026W 24.490057063710.00.4135.77 165.232.76.155http/1.1localhost:80GET /server-status HTTP/1.0 10-1932-0/0/2781. 0.008252676990.00.0043.50 172.71.222.29http/1.1www.jbbgarment.com:80POST /xmlrpc.php HTTP/1.0 11-1932-0/0/2105. 0.0025041595730.00.0030.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1932-0/0/1991. 0.004135730940.00.0034.48 178.62.3.65http/1.1localhost:80GET /about HTTP/1.0 13-1932-0/0/1743. 0.001330037768610.00.00116.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/944. 0.001263017948590.00.0010.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/563. 0.00632268683030.00.0020.48 162.158.78.106http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 16-1932-0/0/444. 0.0061617363220.00.003.83 172.71.150.27http/1.1www.anumotanaboon.com:443POST /xmlrpc.php HTTP/1.1 17-1932-0/0/250. 0.00389402763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00474207137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00539102780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00539205022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0053820690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00538602695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.004584192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.005387029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00523901528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00486602033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00468101828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00144440140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00144330108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 13subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 245 seconds, (range: 221...293)index usage: 0%, cache usage: 0%total entries stored since starting: 398total entries replaced since starting: 0total entries expired since starting: 385total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 29280 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910ce0e8a0d6Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:29:59 +07 Restart Time: Sunday, 29-Oct-2023 00:11:24 +07 Parent Server Config. Generation: 1902 Parent Server MPM Generation: 1901 Server uptime: 18 minutes 34 seconds Server load: 7.55 7.08 6.69 Total accesses: 7762 - Total Traffic: 86.2 MB - Total Duration: 27794792 CPU Usage: u3437.92 s5791 cu54399300 cs13297100 - 6080000% CPU load 6.97 requests/sec - 79.3 kB/second - 11.4 kB/request - 3580.88 ms/request 21 requests currently being processed, 10 idle workers _RW_RWWW_WCWW_WWR__CWWC__R__WWW................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1901306590/15/341_ 5.470110694020.00.143.85 161.35.27.144http/1.1 1-1901311050/6/286R 0.030110794280.00.013.29 52.70.240.171http/1.1 2-1901291640/26/302W 25.332011541900.00.273.56 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=2004-kubota-b7510-4wd-tractor-pto-3-pt-hst-mm-9BP81zhE 3-1901262300/78/321_ 64.440011047430.00.903.69 139.144.150.23http/1.1localhost:80GET /login.action HTTP/1.0 4-1901292480/30/266R 20.930010172030.00.262.98 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1901306220/8/287W 5.714010304590.00.103.09 172.68.138.231http/1.1www.time2hand.com:80GET / HTTP/1.0 6-1901277620/48/281W 44.131010606120.00.543.17 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=used-kubota-bx1500d-for-sale-listings-machinery-pete-mm 7-1901263680/76/304W 51.020011428910.00.703.31 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=cosette-mm-24yWRNfV HTTP/1.1 8-1901311310/5/274_ 1.0304719916100.00.022.92 13.80.105.153http/1.1www.theangelluxury.com:80POST /wp-login.php HTTP/1.0 9-1901264530/70/265W 45.91308547080.00.732.98 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0038333312.html HTTP/1.1 10-1901298001/28/308C 8.770818102246913.80.253.40 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?hpwsvcw-168682jetid HTTP/1.1 11-1901311330/2/296W 0.002010923050.00.003.36 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=cherry-pie-jewelry-tray-shop-online-on-roomtery-mm-vnrP 12-1901298260/19/251W 19.94209725580.00.222.73 40.77.167.27http/1.1www.mkandptfoods.com:443GET /wzy.php?blogger-PERENNIAL.xml HTTP/1.1 13-1901259080/84/300_ 70.940111107040.00.963.16 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.0 14-1901292490/29/274W 22.331010096680.00.313.05 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=natural-seashell-jewelry-tray-shop-online-on-roomtery-m 15-1901293070/26/262W 21.34009897640.00.222.63 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0038713960.html HTTP/1.1 16-1901272550/61/236R 35.57008391120.00.612.71 52.70.240.171http/1.1www.chonlateefbc.com:443 17-1901274110/54/219_ 38.30007961460.00.572.62 164.90.205.35http/1.1www.spamechanicssystem.com:80GET /server-status HTTP/1.0 18-1901306860/11/203_ 7.31007619810.00.092.29 165.232.76.155http/1.1 19-1901307611/11/270C 6.050835106545013.80.072.80 3.224.220.101http/1.1www.chonlateeboi.com:443GET /9586tlkaetid HTTP/1.1 20-1901274910/44/222W 41.47408138290.00.732.73 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=pin-by-on-stories-%E2%80%A7%E2%82%8A%E2%9C%A6-funky-jew 21-1901277730/45/229W 35.82008400170.00.612.88 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 22-1901311711/3/162C 0.05005531610.20.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1901311770/2/183_ 0.45005688870.00.011.87 64.227.126.135http/1.1 24-1901277750/54/247_ 35.08009018360.00.492.65 138.197.88.136http/1.1 25-1901311830/1/200R 0.09007072740.00.002.29 164.92.84.255http/1.1www.spamechanicssystem.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 26-1901260700/90/196_ 65.21016582400.00.952.08 164.90.205.35http/1.1 27-1901296060/27/141_ 17.01037024927580.00.211.60 161.35.27.144http/1.1 28-1901311890/1/78W 0.01002739870.00.000.75 139.59.65.144http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 29-1901296940/19/118W 15.58204607400.00.151.34 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=large-acrylic-jewelry-box-with-drawers-%E2%80%93-mont%C 30-1901297000/24/92W 11.75203322260.00.230.89 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=kubota-b7510hsd-r-farm-tractor-in-delmar-delaware-unite 31-1901-0/0/113. 0.00703808770.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1901-0/0/27. 0.00500507580.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1901-0/0/10. 0.00480129080.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1901-0/0/6. 0.0010810179860.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1901-0/0/17. 0.00103531689810.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1901-0/0/4. 0.001092055410.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1901-0/0/4. 0.0010963423050.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1901-0/0/6. 0.0010850141300.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1901-0/0/22. 0.00103110554910.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1901-0/0/2. 0.001101130.00.000.01 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /reune.php?ywfbjai86461setidm71.html HTTP/1.1 41-1901-0/0/4. 0.001091083560.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1901-0/0/41. 0.009770910970.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1901-0/0/58. 0.0088902283870.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1901-0/0/2. 0.001097016330.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1901-0/0/12. 0.0010660241440.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1901-0/0/3. 0.0010890127220.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1901-0/0/14. 0.0010540493820.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1901-0/0/1. 0.001105000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1901-0/0/2. 0.001099317100.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process
Found on 2023-10-28 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910cf3dd5227Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 09:51:48 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 5 hours 49 minutes 37 seconds Server load: 0.79 0.65 0.73 Total accesses: 33258 - Total Traffic: 492.8 MB - Total Duration: 45333171 CPU Usage: u2734.91 s5172.16 cu51101000 cs12502100 - 303000% CPU load 1.59 requests/sec - 24.1 kB/second - 15.2 kB/request - 1363.08 ms/request 4 requests currently being processed, 6 idle workers C__W._.W_.._..W_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762298631/52/2818C 15.311103136090687.40.5451.35 172.104.102.196http/1.1www.chonlateepro.com:443GET /server-status HTTP/1.1 1-1762303650/3/2630_ 0.402135694130.00.0053.64 142.93.153.3http/1.1localhost:80GET /about HTTP/1.0 2-1762302800/11/2741_ 4.520136217910.00.0833.36 142.93.153.3http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1762299640/44/2486W 16.080033834660.01.1933.85 172.104.102.196http/1.1www.chonlateepro.com:443GET /login.action HTTP/1.1 4-1762-0/0/2627. 0.0063033019940.00.0047.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1762302890/12/2531_ 4.951136197010.00.2030.62 142.93.153.3http/1.1localhost:80GET /v2/_catalog HTTP/1.0 6-1762-0/0/2385. 0.0061033393310.00.0030.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1762302910/11/2185W 5.64086029655020.00.1030.86 172.69.214.32http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 8-1762303160/9/1981_ 7.29099326570800.00.3825.32 172.104.102.196http/1.1www.chonlateepro.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1762-0/0/1921. 0.007843026541210.00.0025.83 144.126.198.24http/1.1 10-1762-0/0/1871. 0.00228025126580.00.0024.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1762300580/33/1620_ 12.191024143220.00.5320.47 142.93.153.3http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 12-1762-0/0/1142. 0.0010110216717330.00.0019.91 144.217.135.250http/1.1www.nadapool.com:443GET /ads.txt HTTP/1.1 13-1762-0/0/1059. 0.00226015317430.00.0012.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762300660/31/1072W 12.690015850040.00.5417.26 142.93.153.3http/1.1localhost:80GET /server-status HTTP/1.0 15-1762300720/31/865_ 13.072110656040.00.4911.46 142.93.153.3http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 16-1762-0/0/650. 0.00154708482990.00.008.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/85. 0.0015670913100.00.002.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/224. 0.00156304510250.00.003.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/191. 0.0094812952579960.00.002.20 142.93.158.96http/1.1 20-1762-0/0/116. 0.00153201364370.00.004.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/19. 0.0015650285820.00.002.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/8. 0.001553048210.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/20. 0.001543082410.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/10. 0.001544039160.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/1. 0.001569000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 70subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 102 seconds, (range: 1...290)index usage: 2%, cache usage: 3%total entries stored since starting: 4601total entries replaced since starting: 0total entries expired since starting: 4531total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 174 hit, 10828 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 02:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c6906d6d6Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 10:23:15 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 6 hours 21 minutes 2 seconds Server load: 1.51 1.40 1.36 Total accesses: 37701 - Total Traffic: 669.0 MB - Total Duration: 54802086 CPU Usage: u2824.19 s5160.93 cu50870000 cs12452800 - 277000% CPU load 1.65 requests/sec - 30.0 kB/second - 18.2 kB/request - 1453.6 ms/request 1 requests currently being processed, 9 idle workers _._______.....W_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743197920/46/3076_ 20.660046491150.01.1064.78 138.68.133.118http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1743-0/0/3122. 0.0014045678100.00.0065.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1743199910/4/3240_ 2.542046855570.00.0562.77 138.68.133.118http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 3-1743197980/44/3105_ 19.961042842430.01.4060.07 138.68.133.118http/1.1localhost:80GET /about HTTP/1.0 4-1743195710/73/2877_ 38.583040474130.01.2039.17 138.68.133.118http/1.1localhost:80GET / HTTP/1.0 5-1743195770/62/2956_ 34.612141415340.00.6555.20 138.68.133.118http/1.1localhost:80GET / HTTP/1.0 6-1743200010/3/2714_ 9.580038805830.05.9651.00 138.68.133.118http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1743196580/60/2759_ 31.840223538195680.00.8344.94 184.22.232.72http/1.1www.chonlateeboi.com:443POST /wp-admin/admin-ajax.php HTTP/1.1 8-1743198700/38/2715_ 14.824140305690.01.0938.99 134.19.179.155http/1.1www.ddkserviceandtransport.com:POST /xmlrpc.php HTTP/1.1 9-1743-0/0/2448. 0.00185035961920.00.0034.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1743-0/0/2067. 0.00188031451670.00.0033.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/1653. 0.00186026038310.00.0028.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/1470. 0.00231019666070.00.0030.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/1290. 0.005281821460420.00.0022.82 172.68.234.213http/1.1www.jrajar.com:80POST /wp-cron.php?doing_wp_cron=1695093741.25213098526000976562 14-1743196880/53/865W 25.610012712870.02.1414.32 138.68.133.118http/1.1localhost:80GET /server-status HTTP/1.0 15-1743196940/60/515_ 32.56106958060.01.178.16 138.68.133.118http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 16-1743-0/0/537. 0.00282208461110.00.008.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/134. 0.00354202057450.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/95. 0.00313401389890.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/39. 0.0033830626550.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/8. 0.003605079460.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/7. 0.003613026970.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/2. 0.003619031570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/5. 0.00361803700.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/2. 0.003620030790.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 115subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 74 seconds, (range: 3...252)index usage: 4%, cache usage: 5%total entries stored since starting: 6970total entries replaced since starting: 0total entries expired since starting: 6855total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 258 hit, 10650 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-19 03:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c4ca9f9b3Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:46:03 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 2 hours 18 minutes 5 seconds Server load: 0.58 0.75 0.81 Total accesses: 11773 - Total Traffic: 172.3 MB - Total Duration: 16581904 CPU Usage: u2802.05 s5142.34 cu50713900 cs12419400 - 762000% CPU load 1.42 requests/sec - 21.3 kB/second - 15.0 kB/request - 1408.47 ms/request 3 requests currently being processed, 5 idle workers _...._.............._W..._....W.....W._........... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733118550/17/928_ 11.501012286120.00.1612.34 46.101.103.192http/1.1localhost:80GET /about HTTP/1.0 1-1733-0/0/942. 0.00173013164920.00.0011.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1733-0/0/875. 0.00534012686510.00.0010.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1733-0/0/858. 0.00511012422950.00.0010.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1733-0/0/851. 0.00538011051070.00.0010.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1733113860/57/867_ 35.930012218600.00.5117.58 46.101.103.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 6-1733-0/0/779. 0.00518012828380.00.0011.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1733-0/0/745. 0.001590611309800.00.0017.63 162.158.183.183http/1.1www.siamerp.com:443GET /tag/%E0%B9%80%E0%B8%8A%E0%B9%88%E0%B8%B2%E0%B9%82%E0%B8%9B 8-1733-0/0/859. 0.00539011158250.00.0012.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1733-0/0/692. 0.0051309792260.00.008.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1733-0/0/661. 0.0053608661360.00.007.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1733-0/0/470. 0.0051706282800.00.006.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1733-0/0/333. 0.0052204418920.00.003.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/341. 0.00104765710.00.0014.80 46.101.103.192http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 14-1733-0/0/258. 0.0053103763710.00.002.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/278. 0.0053503919250.00.003.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/181. 0.0053202888030.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/146. 0.0050102159430.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/49. 0.005240464520.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/16. 0.005090137230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733114280/56/76_ 30.4628001147080.00.430.55 162.158.238.247http/1.1www.siamerp.com:443GET /tag/%E0%B9%80%E0%B8%8A%E0%B9%88%E0%B8%B2%E0%B9%82%E0%B8%9B 21-1733114340/54/157W 32.32002675200.00.461.76 108.162.241.52http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 22-1733-0/0/17. 0.005230145630.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/8. 0.00529053030.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/6. 0.00530025030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733114610/55/58_ 27.3300833490.00.530.54 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 26-1733-0/0/88. 0.005330983180.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1733-0/0/38. 0.005210201420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/8. 0.00520135956180.00.000.02 154.16.78.225http/1.1 29-1733-0/0/3. 0.00525019290.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1733114820/50/50W 31.99101306120.00.650.65 198.41.230.111http/1.1www.siamautomation.com:443GET / HTTP/1.1 31-1733-0/0/1. 0.00537010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1733-0/0/3. 0.00526023590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1733-0/0/4. 0.00515050680.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1733-0/0/3. 0.00516018340.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1733-0/0/4. 0.00514034410.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1733115270/55/55W 31.2900875220.00.580.58 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 37-1733-0/0/3. 0.00527010240.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1733115390/52/52_ 26.2910894590.00.410.41 46.101.103.192http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 39-1733-0/0/7. 0.00500086250.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1733-0/0/3. 0.00528040.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 35subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 76 seconds, (range: 0...226)index usage: 1%, cache usage: 1%total entries stored since starting: 1677total entries replaced since starting: 0total entries expired since starting: 1642total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5162 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 19:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c6efe1855Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 05:53:36 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 1 hour 51 minutes 24 seconds Server load: 0.90 0.57 0.57 Total accesses: 7393 - Total Traffic: 93.2 MB - Total Duration: 8126878 CPU Usage: u2666.64 s5084.68 cu50515600 cs12376300 - 941000% CPU load 1.11 requests/sec - 14.3 kB/second - 12.9 kB/request - 1099.27 ms/request 2 requests currently being processed, 7 idle workers ______WW_......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720192420/35/570_ 7.96107394330.00.296.77 139.144.150.8http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1720191670/70/634_ 16.22107071140.00.548.03 139.144.150.8http/1.1localhost:80GET /about HTTP/1.0 2-1720191930/49/545_ 11.8001946262850.00.526.83 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 3-1720192480/30/573_ 7.8112005675600.00.246.84 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 4-1720191990/50/590_ 11.6302057834990.00.618.24 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 5-1720192050/49/488_ 13.04005141190.00.375.64 139.144.150.8http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1720192680/19/491W 4.65005409890.00.115.03 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 7-1720192790/11/521W 2.36005888000.00.096.04 139.144.150.8http/1.1localhost:80GET /server-status HTTP/1.0 8-1720192890/5/429_ 1.21005369910.00.026.03 139.144.150.8http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-1720-0/0/451. 0.0077605254410.00.005.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1720-0/0/423. 0.00811814281960.00.004.39 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 11-1720-0/0/370. 0.00942113710160.00.004.05 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 12-1720-0/0/301. 0.002102002682040.00.003.55 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 13-1720-0/0/56. 0.007660578810.00.000.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/172. 0.00791901332260.00.002.00 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 15-1720-0/0/57. 0.007690436600.00.001.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720-0/0/134. 0.0077801976500.00.002.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1720-0/0/169. 0.00881901503340.00.005.15 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 18-1720-0/0/106. 0.0077101291690.00.001.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/41. 0.007790403400.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/131. 0.0095173848380.00.001.42 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 21-1720-0/0/40. 0.007770364570.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/2. 0.007700370.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/97. 0.0092199556150.00.000.99 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 24-1720-0/0/2. 0.007670120.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 26subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 124 seconds, (range: 35...287)index usage: 0%, cache usage: 1%total entries stored since starting: 1781total entries replaced since starting: 0total entries expired since starting: 1755total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 2881 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 22:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910ccf8d326fApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 06:58:24 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 2 hours 56 minutes 11 seconds Server load: 0.67 0.61 0.61 Total accesses: 14924 - Total Traffic: 221.4 MB - Total Duration: 18083818 CPU Usage: u2731.11 s5098.97 cu50462800 cs12365100 - 594000% CPU load 1.41 requests/sec - 21.4 kB/second - 15.2 kB/request - 1211.73 ms/request 1 requests currently being processed, 9 idle workers ______.__W_....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716199190/36/1330_ 19.301116701210.01.0215.55 159.223.102.13http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1716199490/31/1386_ 16.113116228130.00.2615.72 159.223.102.13http/1.1localhost:80GET / HTTP/1.0 2-1716200420/18/1333_ 13.252115635050.00.1915.57 159.223.102.13http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 3-1716201380/6/1274_ 3.371115970780.00.0722.23 159.223.102.13http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-1716201840/2/1228_ 1.39056115328950.00.0115.68 162.158.174.36http/1.1www.siamautomation.com:443POST /wp-login.php HTTP/1.1 5-1716199020/40/1172_ 21.682113017190.00.9916.41 159.223.102.13http/1.1localhost:80GET /about HTTP/1.0 6-1716-0/0/1065. 0.0021868212578080.00.0014.24 172.69.65.19http/1.1www.time2hand.com:80GET /?p=2454 HTTP/1.0 7-1716197690/67/1181_ 29.120113859210.00.9012.88 159.223.102.13http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1716197940/64/1006_ 27.21157012258900.01.2218.13 172.68.174.143http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 9-1716198840/42/989W 17.830011610720.00.8417.72 159.223.102.13http/1.1localhost:80GET /server-status HTTP/1.0 10-1716198900/43/963_ 20.81066611823020.00.8821.54 162.158.238.60http/1.1www.siamerp.com:443GET /category/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0% 11-1716-0/0/624. 0.0030007670570.00.005.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1716-0/0/423. 0.00100707188860.00.0018.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/283. 0.0098304193770.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/94. 0.008070612810.00.002.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/10. 0.00985032890.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/198. 0.0047812462551970.00.002.37 162.158.238.61http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 17-1716-0/0/96. 0.00100901216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.0010100110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/60. 0.006950551080.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1716-0/0/96. 0.00565424847590.00.001.07 172.71.223.193http/1.1www.yuritrading.com:80GET //wp-content/dropdown.php HTTP/1.0 21-1716-0/0/12. 0.00948067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/95. 0.005261706852810.00.002.11 54.36.149.3http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 23-1716-0/0/4. 0.00999040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 56subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 123 seconds, (range: 3...279)index usage: 1%, cache usage: 2%total entries stored since starting: 2243total entries replaced since starting: 0total entries expired since starting: 2187total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 114 hit, 5530 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 23:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910ca3aaece5Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 19:19:27 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 15 hours 17 minutes 12 seconds Server load: 0.96 0.87 0.83 Total accesses: 77097 - Total Traffic: 1.1 GB - Total Duration: 110729844 CPU Usage: u2676.6 s5065.04 cu50285400 cs12326100 - 114000% CPU load 1.4 requests/sec - 20.5 kB/second - 14.6 kB/request - 1436.24 ms/request 2 requests currently being processed, 8 idle workers ____.WW_._.._.._.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702257920/26/6538_ 9.390185590782650.00.5392.45 162.158.238.232http/1.1www.chonlateeauto.com:443GET /wp-login.php?action=register HTTP/1.1 1-1702259110/2/6516_ 1.69084091328190.00.0398.58 172.68.234.230http/1.1www.chonlateeauto.com:443POST /wp-cron.php?doing_wp_cron=1694348366.21498394012451171875 2-1702254490/81/6352_ 21.921124292945530.01.7598.56 172.69.64.247http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%94%E0%B8%B9%E0%B9%81 3-1702258040/23/6266_ 9.621090491350.00.4188.09 64.227.126.135http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-1702-0/0/5821. 0.00126084274380.00.0086.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1702254240/80/6222W 29.230085216450.00.8181.95 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 6-1702258110/21/5614W 7.220085816800.00.2778.10 185.191.171.6http/1.1www.chonlateevip.com:443GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 7-1702257310/35/5852_ 10.470085575350.00.3585.28 64.227.126.135http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1702-0/0/5361. 0.00127076047440.00.0070.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1702258130/22/4909_ 9.661169697150.00.2764.40 64.227.126.135http/1.1localhost:80GET /about HTTP/1.0 10-1702-0/0/4335. 0.00158061020180.00.0071.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1702-0/0/3735. 0.00159051558650.00.0064.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1702256170/61/3566_ 17.292152448230.01.5247.54 64.227.126.135http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 13-1702-0/0/1689. 0.00129023374410.00.0021.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702-0/0/1285. 0.00128017916730.00.0019.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1702257610/32/968_ 9.130112382570.00.5111.92 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1702-0/0/421. 0.00207708412010.00.006.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/352. 0.00223904099350.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/67. 0.00168176888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.001563001655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001681901344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0016814037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.001560904933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00168340733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0016823036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0016833086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0016806068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0016832010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.00156035501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0016816074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0016831010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.001593501144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0016830010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.00155577261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.001562802967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.001538603934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0016829041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0016803095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.00153876982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0045050000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0045036060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 86subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 85 seconds, (range: 1...216)index usage: 3%, cache usage: 3%total entries stored since starting: 14027total entries replaced since starting: 0total entries expired since starting: 13941total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 290 hit, 30205 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 12:18 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910ca03c9e81Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:34:22 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 32 minutes 11 seconds Server load: 2.13 1.75 1.69 Total accesses: 25248 - Total Traffic: 318.3 MB - Total Duration: 32480904 CPU Usage: u2734.08 s5052.13 cu50054800 cs12276800 - 382000% CPU load 1.55 requests/sec - 20.0 kB/second - 12.9 kB/request - 1286.47 ms/request 3 requests currently being processed, 8 idle workers __WW_____..R_..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685209120/18/2224_ 13.140121630672480.00.1432.43 180.247.192.81http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 1-1685207580/44/2184_ 33.420027498240.00.6528.69 165.232.76.155http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-1685207260/66/2113W 29.290026373500.01.5524.44 165.232.76.155http/1.1localhost:80GET /server-status HTTP/1.0 3-1685207850/40/1976W 31.550026537590.00.3325.08 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 4-1685208310/21/1990_ 13.9912225710130.00.2123.94 162.158.238.39http/1.1www.chonlateecoffee.com:80GET /category/%E0%B8%A0%E0%B8%B2%E0%B8%84%E0%B8%95%E0%B8%B0%E0% 5-1685208480/26/1775_ 14.01038419909070.00.2822.13 172.70.242.136http/1.1www.makeregist.com:80GET //wp-login.php HTTP/1.0 6-1685208400/25/1924_ 26.981123653210.00.3323.81 165.232.76.155http/1.1localhost:80GET /about HTTP/1.0 7-1685209240/13/1980_ 9.500136425842270.00.1321.71 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 8-1685208550/15/1795_ 11.680122337760.00.1020.92 165.232.76.155http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1685-0/0/1764. 0.000023070980.00.0025.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1685-0/0/1311. 0.0073017122220.00.0017.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1685208570/19/1055R 18.212136013277020.00.2611.90 180.247.192.81http/1.1 12-1685207970/35/901_ 24.491213033050.00.5110.56 165.232.76.155http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 13-1685-0/0/731. 0.00233010987410.00.0011.12 54.37.237.164http/1.1www.dreamhightravel.com:80GET / HTTP/1.0 14-1685-0/0/563. 0.0020817492360.00.006.91 171.97.46.13http/1.1www.chonlateeins.com:443GET /wp-content/plugins/jeg-elementor-kit/assets/img/admin/bloc 15-1685-0/0/427. 0.0045405118970.00.004.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1685-0/0/105. 0.00521101181390.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/118. 0.00510401201320.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/3. 0.0013844019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.001315111391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0013830015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001312010331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001314031185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001383708790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0013839010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0013836030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0013847010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0013834011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0013835012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001383209920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0013846010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 197subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 39 seconds, (range: 3...163)index usage: 6%, cache usage: 8%total entries stored since starting: 3957total entries replaced since starting: 0total entries expired since starting: 3760total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 96 hit, 7436 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c882b3c59Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 02:17:20 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 10 hours 54 minutes 6 seconds Server load: 5.60 8.17 8.75 Total accesses: 158589 - Total Traffic: 1.1 GB - Total Duration: 357782233 CPU Usage: u3012.6 s5081.94 cu49739100 cs12205400 - 158000% CPU load 4.04 requests/sec - 30.5 kB/second - 7.5 kB/request - 2256.03 ms/request 16 requests currently being processed, 5 idle workers WWWWWWWW_WWW__.WWW__.....WW....................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674309330/26/9945W 18.8910192271240.00.1381.13 172.68.234.5http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693768639.4897 HTTP/1.0 1-1674311840/16/9833W 10.1800188938060.00.0682.85 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693768640.9257 HTTP/1.0 2-1674305910/46/9929W 30.0410189771230.00.1277.39 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693768639.4556 HTTP/1.0 3-1674311970/13/9601W 9.9110180399470.00.0280.78 172.68.234.5http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693768639.40591597557067871093 4-1674304620/51/9411W 34.4500184154350.00.1487.57 172.68.234.141http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693768640.29793095588684082031 5-1674312030/12/9268W 8.1800181427440.00.0376.71 172.68.234.4http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693768640.0871 HTTP/1.0 6-1674306370/48/8814W 27.1700174650470.00.1372.02 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768640.22837591171264648437 7-1674312170/14/8599W 9.2210168114170.00.0463.78 162.158.94.182http/1.1www.chonlateeauto.com:443GET /login.action HTTP/1.1 8-1674314140/6/8387_ 2.6607167581500.00.0264.40 180.149.22.79http/1.1www.chonlateekeyman.com:443GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP 9-1674312230/14/8524W 9.3500172395270.00.0381.36 172.68.234.170http/1.1www.chonlateeauto.com:443POST /wp-cron.php?doing_wp_cron=1693768640.60552906990051269531 10-1674297930/77/7925W 53.5910159035780.00.2674.26 172.68.234.178http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693768639.5542 HTTP/1.0 11-1674300260/71/7352W 45.2400154050850.00.2349.01 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693768640.94082808494567871093 12-1674314670/4/6764_ 0.440285144247730.00.0448.40 168.151.118.52http/1.1www.chonlateekeyman.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1 13-1674307600/41/5574_ 27.6201738129338200.00.1133.01 172.68.234.204http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768638.92799806594848632812 14-1674-0/0/5304. 0.00260128074260.00.0047.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1674295430/93/4348W 61.2400111286360.00.2225.82 172.68.234.173http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693768640.28468489646911621093 16-1674299430/74/3341W 48.291094689090.00.1815.61 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 17-1674312350/14/2926W 9.680083231580.00.0413.11 46.101.103.192http/1.1www.xn--m3cbp0adb4cva5bee03a.coGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1674298780/78/2851_ 50.380189284577350.00.2012.64 172.68.234.140http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693768638.74591898918151855468 19-1674295770/87/2317_ 57.640173471295060.00.218.09 172.68.234.173http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693768638.97114896774291992187 20-1674-0/0/1981. 0.00164064787930.00.006.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/1825. 0.00150159651260.00.0010.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1674-0/0/1771. 0.001086156016040.00.008.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1674-0/0/1365. 0.00160045640140.00.004.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1674-0/0/1142. 0.00103040133410.00.003.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674302060/66/1267W 43.600043217230.00.205.16 27.254.96.168http/1.1www.xn--m3cbp0adb4cva5bee03a.coPOST /wp-cron.php?doing_wp_cron=1693768640.55707788467407226562 26-1674302960/57/1030W 37.000035443420.00.163.18 139.144.150.26http/1.1localhost:80GET /server-status HTTP/1.0 27-1674-0/0/1104. 0.00183038076940.00.004.41 198.54.120.17http/1.1www.uniqueworkthailand.com:443POST /xmlrpc.php HTTP/1.1 28-1674-0/0/760. 0.00531027264780.00.003.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/656. 0.00482823557150.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/579. 0.00513022425880.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/634. 0.00326205623673610.00.002.86 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768312.39440798759460449218 32-1674-0/0/575. 0.00233021754950.00.001.46 64.227.126.135http/1.1localhost:80GET /config.json HTTP/1.0 33-1674-0/0/492. 0.00934018286840.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/409. 0.00905015185930.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/304. 0.00781012136060.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1674-0/0/280. 0.00831011005120.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/317. 0.00859262011664300.00.001.10 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693767778.21682310104370117187 38-1674-0/0/155. 0.0074106854850.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/167. 0.0093207727360.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1674-0/0/151. 0.0080116704480.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/201. 0.0067124859094560.00.000.42 172.68.234.196http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693767966.2283 HTTP/1.0 42-1674-0/0/190. 0.0066522349099890.00.000.76 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693767971.9458 HTTP/1.0 43-1674-0/0/121. 0.001457115754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.001455519884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000
Found on 2023-09-03 19:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c49aba334Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 02:00:06 +07 Restart Time: Friday, 01-Sep-2023 00:22:12 +07 Parent Server Config. Generation: 1655 Parent Server MPM Generation: 1654 Server uptime: 1 hour 37 minutes 54 seconds Server load: 3.93 4.30 4.39 Total accesses: 36004 - Total Traffic: 235.7 MB - Total Duration: 41702715 CPU Usage: u2783.61 s4959.11 cu48757700 cs11953900 - 1030000% CPU load 6.13 requests/sec - 41.1 kB/second - 6.7 kB/request - 1158.28 ms/request 11 requests currently being processed, 4 idle workers WR...R__W.W.R....W.RW..W....__W................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1654141450/2/2339W 0.580027409860.00.0015.04 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 1-1654141540/1/2283R 0.000126151490.00.0016.30 119.29.156.110http/1.1www.uniqueworkthailand.com:443 2-1654-0/0/2336. 0.0079026715160.00.0014.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1654-0/0/2216. 0.0063025110950.00.0013.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1654-0/0/2227. 0.0019025740950.00.0019.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1654138740/62/2280R 31.86079226322270.00.3613.43 172.69.65.152http/1.1 6-1654137930/80/2264_ 41.550126140970.00.4713.02 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1654138650/58/1989_ 27.090123040720.00.4612.87 161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1654140680/38/2129W 19.670024532070.00.1818.21 20.7.172.55http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 9-1654-0/0/2091. 0.006952024015230.00.0012.32 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 10-1654140740/41/1892W 18.990022208270.00.2611.58 172.68.234.166http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 11-1654-0/0/1860. 0.004683322088070.00.0012.12 172.70.42.152http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 12-1654138950/55/1641R 29.45054519021990.00.419.98 172.71.166.192http/1.1www.singkansard.com:443 13-1654-0/0/1696. 0.0075020186350.00.0010.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1654-0/0/1287. 0.0088014701390.00.009.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1654-0/0/1177. 0.0096013766060.00.007.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1654-0/0/771. 0.0010708948630.00.004.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1654138350/52/929W 29.750011019620.00.375.58 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 18-1654-0/0/466. 0.003505617810.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1654139190/45/644R 26.6405807255680.00.243.18 172.70.55.166http/1.1www.business.co.th:443POST /xmlrpc.php HTTP/1.1 20-1654139250/52/347W 27.08003762110.00.392.16 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.0 21-1654-0/0/96. 0.00890945250.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1654-0/0/214. 0.005402577820.00.001.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1654139440/48/245W 23.37003047230.00.281.38 172.70.42.153http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 24-1654-0/0/174. 0.007601732400.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1654-0/0/125. 0.008201461770.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1654-0/0/109. 0.0011001529610.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1654-0/0/14. 0.00860100910.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1654139710/46/46_ 24.610478613460.00.300.30 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 29-1654139770/53/53_ 24.9701525380.00.300.30 46.101.103.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 30-1654139790/51/51W 27.0950604800.00.330.33 172.68.234.190http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1693508401.42536306381225585937 31-1654-0/0/12. 0.00900132710.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1654-0/0/1. 0.00113000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 169subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 139 seconds, (range: 3...193)index usage: 6%, cache usage: 7%total entries stored since starting: 1875total entries replaced since starting: 0total entries expired since starting: 1706total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 11007 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-31 18:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c7c79c966Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:06:20 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 4 minutes 2 seconds Server load: 8.23 5.93 5.48 Total accesses: 160503 - Total Traffic: 936.0 MB - Total Duration: 207716927 CPU Usage: u2877.47 s4902.38 cu47920800 cs11729900 - 327000% CPU load 8.8 requests/sec - 52.5 kB/second - 6.0 kB/request - 1294.16 ms/request 18 requests currently being processed, 7 idle workers WWCCW_WW_WC_WC._CRRWW___RW........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164531500/1/9782W 0.0000126987660.00.0058.30 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 1-164530610/26/9608W 15.5300122014540.00.1053.77 172.70.246.18http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 2-164530781/22/9404C 12.3500122510350.20.8650.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-164529031/51/9343C 32.8301120857062.60.2449.97 147.182.130.98http/1.1localhost:443GET /info.php HTTP/1.1 4-164529270/44/9267W 26.2200119009470.00.2149.03 162.158.30.103http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 5-164527610/66/9068_ 70.9400119223290.00.3548.15 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-164530040/40/8986W 18.9400118180360.00.1753.51 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 7-164530990/16/9076W 6.1800117467760.00.0564.99 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 8-164529480/34/8700_ 23.070571111469990.00.2058.45 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 9-164531110/8/8486W 3.9300110263680.00.0346.05 172.71.167.106http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 10-164530151/34/8363C 20.0801136105555923.80.1641.26 172.69.67.119http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 11-164528060/77/8461_ 47.1501111599350.00.3845.69 143.110.218.229http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 12-164531170/8/8090W 4.6800105388020.00.0543.50 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 13-164531441/3/7392C 0.011097347241.40.0041.81 142.93.64.15http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 14-1645-0/0/7238. 0.000094083980.00.0053.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-164529640/19/6610_ 41.850084271240.00.1036.31 142.93.64.15http/1.1localhost:443GET /.git/config HTTP/1.1 16-164529741/33/6246C 23.550181878531.30.2037.33 142.93.64.15http/1.1localhost:443GET /config.json HTTP/1.1 17-164531560/3/5071R 1.46063764983960.00.0129.15 85.208.96.194http/1.1 18-164529820/36/3614R 22.610047349190.00.1933.24 40.122.174.22http/1.1www.ss-cool.com:443 19-164529830/39/2393W 24.130029844700.00.1812.54 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 20-164531620/1/1943W 0.000026103210.00.0011.34 172.71.166.60http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 21-164531630/4/991_ 0.59063811416550.00.005.31 162.158.30.103http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 22-164528180/45/348_ 28.99004967450.00.252.13 161.35.155.246http/1.1localhost:443GET /login.action HTTP/1.1 23-164528240/85/273_ 44.69003150300.00.461.76 134.122.34.144http/1.1localhost:80GET /.git/config HTTP/1.0 24-164531690/3/208R 0.5906272797870.00.011.78 162.158.30.103http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 25-164531760/2/203W 0.72002566120.00.021.13 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 26-1645-0/0/128. 0.00155501633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0015910296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00159501155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0014755411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00146302410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00143221789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0015766000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00156074221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00156094021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00156143661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00156083821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0015760011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0015756018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0015764030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00157420118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0015747054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0015744072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00156133841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00156124171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 120subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 64 seconds, (range: 0...280)index usage: 4%, cache usage: 5%total entries stored since starting: 6170total entries replaced since starting: 0total entries expired since starting: 6050total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 27766 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:05 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c7b02e133Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:24:27 +07 Restart Time: Wednesday, 30-Aug-2023 00:16:28 +07 Parent Server Config. Generation: 1644 Parent Server MPM Generation: 1643 Server uptime: 7 minutes 58 seconds Server load: 5.50 5.85 6.44 Total accesses: 5256 - Total Traffic: 37.7 MB - Total Duration: 4976048 CPU Usage: u2698.95 s4856.87 cu47807900 cs11700200 - 1.25e+7% CPU load 11 requests/sec - 80.7 kB/second - 7.3 kB/request - 946.737 ms/request 18 requests currently being processed, 0 idle workers RWWCRCRCCCCWWWWCCR................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1643197490/24/325R 6.00002689470.00.092.25 51.81.167.146http/1.1 1-1643198690/8/283W 4.89002533210.00.081.86 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.0 2-1643189330/42/329W 18.03003061290.00.272.33 168.61.169.70http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 3-1643178551/79/302C 31.87012943621.30.482.44 139.59.230.191http/1.1localhost:443GET /about HTTP/1.1 4-1643200260/7/304R 1.49002923620.00.032.17 159.65.138.217http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-1643201291/5/279C 0.02002723632.20.011.89 159.203.94.228http/1.1localhost:443GET / HTTP/1.1 6-1643178610/78/293R 33.06002781660.00.542.19 23.99.197.177http/1.1www.nptpropertythailand.com:443 7-1643201371/3/274C 0.01012386731.40.001.87 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1643179961/72/277C 29.53072695022.70.441.77 128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1643181891/74/239C 23.89022234612.70.391.59 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1643187871/44/270C 19.22002420681.30.301.87 128.199.195.68http/1.1localhost:443GET /about HTTP/1.1 11-1643189620/40/230W 15.74002047740.00.291.66 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 12-1643190010/39/235W 15.67002270690.00.181.66 134.122.89.242http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 13-1643189640/33/230W 18.54002513350.00.241.66 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 14-1643190300/39/265W 13.88002606530.00.231.94 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 15-1643190361/33/241C 13.7507642244007.80.211.74 81.88.52.185http/1.1www.thefixup333.com:443POST /wp-login.php HTTP/1.1 16-1643190651/39/237C 13.88002266531.40.202.07 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1643201390/0/96R 0.00001022800.00.000.67 85.215.215.172http/1.1www.chonlateebusiness.com:443 18-1643-0/0/174. 0.00562041630150.00.001.29 168.61.169.70http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 19-1643-0/0/95. 0.00962861127990.00.000.74 168.61.169.70http/1.1www.dtacbusiness.com:80POST //wp-login.php HTTP/1.0 20-1643-0/0/111. 0.002310929200.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1643-0/0/5. 0.00242222960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1643-0/0/65. 0.001460671270.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1643-0/0/97. 0.00987441013590.00.000.80 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 149subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 75 seconds, (range: 1...281)index usage: 5%, cache usage: 6%total entries stored since starting: 227total entries replaced since starting: 0total entries expired since starting: 78total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 409 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910ccf8e0cdcApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 30-Jun-2023 09:32:44 +07 Restart Time: Friday, 30-Jun-2023 09:31:39 +07 Parent Server Config. Generation: 1382 Parent Server MPM Generation: 1381 Server uptime: 1 minute 4 seconds Server load: 1.71 2.15 2.00 Total accesses: 219 - Total Traffic: 1.0 MB - Total Duration: 262892 CPU Usage: u2142.46 s3706.99 cu34755900 cs8297740 - 6.73e+7% CPU load 3.42 requests/sec - 16.5 kB/second - 4928 B/request - 1200.42 ms/request 8 requests currently being processed, 6 idle workers ___W.RCWRW_WR__................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1381112510/19/19_ 7.8203194450.00.090.09 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.0 1-1381112730/17/17_ 6.7200292010.00.040.04 104.131.1.32http/1.1www.spamechanicssystem.com:80GET /.vscode/sftp.json HTTP/1.0 2-1381112790/15/15_ 5.3400257580.00.060.06 64.227.126.135http/1.1 3-1381114140/6/13W 0.9610124090.00.010.05 107.189.7.170http/1.1www.siamgassaver.com:443GET /wp-login.php HTTP/1.1 4-1381-0/0/11. 0.0000134410.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1381114240/7/14R 1.160096990.00.020.04 104.248.140.11http/1.1 6-1381114731/6/18C 0.740722155329.90.010.09 188.127.225.2http/1.1www.wecanfixtrading.com:443POST /wp-login.php HTTP/1.1 7-1381113100/19/19W 6.9900144280.00.090.09 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 8-1381113160/22/22R 6.1800159260.00.080.08 68.183.64.176http/1.1 9-1381114590/3/10W 0.010037260.00.010.02 27.254.96.168http/1.1www.siamgassaver.com:443POST /wp-cron.php?doing_wp_cron=1688092363.39802598953247070312 10-1381113280/16/16_ 4.7801131200.00.070.07 161.35.176.95http/1.1 11-1381113340/11/11W 5.7200586690.00.050.05 162.158.87.174http/1.1www.chonlateeauto.com:443GET /private/.git/config HTTP/1.1 12-1381113400/15/15R 5.8301175210.00.160.16 167.71.48.191http/1.1localhost:80GET /v2/_catalog HTTP/1.0 13-1381113530/13/13_ 6.3500139040.00.090.09 143.110.218.229http/1.1 14-1381114790/6/6_ 0.08011070.00.030.03 205.169.39.93http/1.1localhost:80GET / HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 54subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 258 seconds, (range: 238...296)index usage: 1%, cache usage: 2%total entries stored since starting: 54total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 110 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-30 02:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c64fbff2cApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 25-Oct-2022 14:07:04 +07 Restart Time: Tuesday, 25-Oct-2022 14:06:02 +07 Parent Server Config. Generation: 469 Parent Server MPM Generation: 468 Server uptime: 1 minute 1 second Server load: 1.49 1.00 1.04 Total accesses: 378 - Total Traffic: 7.5 MB - Total Duration: 162380 CPU Usage: u696.27 s1278.7 cu12904100 cs3103810 - 2.62e+7% CPU load 6.2 requests/sec - 125.1 kB/second - 20.2 kB/request - 429.577 ms/request 12 requests currently being processed, 3 idle workers _WLCWWWWWWR_RW_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-468323640/13/26_ 2.4500172450.00.050.35 159.65.199.18http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-468322180/33/33W 8.2100203470.00.610.61 194.195.241.186http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 2-468323160/25/29_ 6.0100152360.00.480.57 206.81.16.9http/1.1localhost:80GET /telescope/requests HTTP/1.0 3-468323901/2/34C 1.120056362.20.030.70 45.79.148.46http/1.1localhost:443GET / HTTP/1.1 4-468322450/37/37W 3.4213071430.01.051.05 172.68.234.132http/1.1www.12gobiz.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-468322600/21/21W 2.9624063300.00.620.62 172.68.234.132http/1.1www.12gobiz.com:80POST /wp-cron.php?doing_wp_cron=1666681600.09494090080261230468 6-468322660/27/27W 2.8923077880.00.880.88 172.68.189.130http/1.1www.12gobiz.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 7-468322680/28/28W 4.7500135440.00.690.69 212.71.255.211http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 8-468322780/33/33W 6.7630140240.00.750.75 27.254.96.168http/1.1www.sarmakbitkub.com:80POST /wp-cron.php?doing_wp_cron=1666681620.33148908615112304687 9-468322800/36/36W 4.673096010.00.420.42 172.68.234.178http/1.1www.12gobiz.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 10-468322850/31/31R 7.0400224160.00.310.31 172.105.91.149http/1.1www.spamechanicssystem.com:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-468322870/28/28_ 6.3800219390.00.480.48 206.81.16.9http/1.1localhost:80GET / HTTP/1.0 12-468324000/5/5R 0.540011060.00.010.01 172.105.91.149http/1.1www.spamechanicssystem.com:80GET /.git/config HTTP/1.0 13-468324060/9/9W 0.0200140.00.010.01 159.65.199.18http/1.1localhost:80GET /server-status HTTP/1.0 14-468324310/1/1_ 0.000240.00.000.00 134.209.227.71http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 36subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 265 seconds, (range: 238...298)index usage: 1%, cache usage: 1%total entries stored since starting: 36total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 41 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-25 07:05
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: pop.spamechanicssystem.com
Port: 443
URL: https://pop.spamechanicssystem.comFirst seen 2022-10-25 07:05
Last seen 2024-02-02 15:47
Open for 465 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389f95639dd5Apache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 22:47:54 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 12 hours 46 minutes 33 seconds Server load: 2.07 2.02 2.00 Total accesses: 1850279 - Total Traffic: 23.8 GB - Total Duration: 2141120640 CPU Usage: u236.28 s124.86 cu32089.3 cs2210.25 - 1.41% CPU load .751 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.19 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes032000 329394no0yes131000 529374no0yes032000 Sum400 1127000 ________________________________................................ _________________________________________________________W______ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/54/14802_ 19.9700160261000.00.18193.80 104.236.193.132http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/51/15294_ 19.8770139013530.00.12198.97 159.89.83.196http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/52/14865_ 19.2280150309560.00.18192.75 159.203.182.222h2localhost:443[0/0] Software caused connection abort 0-92293730/54/15047_ 19.9710145875140.00.15186.02 167.172.20.95http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/51/14949_ 19.9700147711740.00.19185.46 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/44/15171_ 19.4980156649170.00.13188.55 159.203.182.222h2localhost:443[0/0] Software caused connection abort 0-92293730/43/14843_ 19.8860145588900.00.18200.28 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-92293730/45/15152_ 19.6250150182080.00.10187.60 207.154.240.169http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/46/15113_ 19.5080145226990.00.11229.90 146.190.160.11http/1.1 0-92293730/53/15247_ 19.9650148853450.00.20194.92 167.172.20.95http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/51/14811_ 19.9580154393440.00.13200.72 146.190.160.11http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/49/14822_ 19.9650147156360.00.10195.46 159.89.83.196http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/58/14689_ 18.8280137182770.00.19185.55 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-92293730/52/14843_ 19.9490169086630.00.11186.04 159.89.83.196http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/52/15798_ 19.9630141615390.00.15187.81 159.203.182.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/54/14846_ 19.9330165341260.00.13182.52 104.236.193.132http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/59/14898_ 19.7150143405110.00.14206.39 128.199.62.55http/1.1 0-92293730/51/14958_ 19.0640144940050.00.15189.33 161.35.176.95http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/50/14778_ 19.9660160388380.00.10200.58 159.203.182.222http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/54/14999_ 19.7510144639400.00.17193.85 159.89.83.196http/1.1localhost:443GET / HTTP/1.1 0-92293730/53/14990_ 19.9650181496040.00.20193.46 104.236.193.132http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/50/15015_ 19.6250147053790.00.14204.12 167.172.20.95http/1.1 0-92293730/53/15471_ 19.3950150756110.00.19188.31 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-92293730/44/14675_ 19.0560138765330.00.16190.21 167.172.20.95http/1.1 0-92293730/61/14985_ 19.5825162205950.00.13186.91 167.172.20.95http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/55/14658_ 19.9580135981670.00.20197.05 104.236.193.132http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/51/15158_ 19.9250144713520.00.09194.53 104.236.193.132http/1.1localhost:443GET /about HTTP/1.1 0-92293730/56/14941_ 19.9490159195750.00.08213.32 167.172.20.95http/1.1localhost:443GET / HTTP/1.1 0-92293730/55/14742_ 19.5750152174680.00.13175.94 128.199.62.55http/1.1 0-92293730/39/15187_ 19.9700135139150.00.11225.16 159.89.83.196http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/58/14677_ 19.9640155573090.00.08199.15 167.172.20.95http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/48/14938_ 19.5970145815210.00.20185.19 167.172.20.95h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15731. 0.00668590138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00668590136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00668590174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00668590150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00668590146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00668590134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00668590172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00668590165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00668590127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00668590152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00668590148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00668590159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00668590159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00668590137016410.00.00183.04 159.223.102.13http/1.1
Found on 2024-02-02 15:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389f29662075Apache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 12:16:02 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 2 hours 14 minutes 41 seconds Server load: 2.76 2.75 2.72 Total accesses: 840626 - Total Traffic: 11.4 GB - Total Duration: 1043241053 CPU Usage: u250.93 s19.43 cu14229.9 cs747.1 - 8.43% CPU load 4.65 requests/sec - 65.9 kB/second - 14.2 kB/request - 1241.03 ms/request 14 requests currently being processed, 50 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 131206no4yes923000 229763no10yes527004 Sum2014 1450004 ................................______W____W____W____RR_W_R___RW _____W_________R___________RWW__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/6552. 0.00129612368188558120.00.0096.41 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/7053. 0.00129684864235680.00.0099.11 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /eitkawv-13875gitems/etidm.htm HTTP/1.1 0-7-0/0/6556. 0.001296076524630.00.0095.89 54.186.174.90http/1.1localhost:443GET /modules/.git/config HTTP/1.1 0-7-0/0/6834. 0.00129683973518460.00.0088.79 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?gfchsbr-333781petidm46t HTTP/1.1 0-7-0/0/6559. 0.00129695474139030.00.0085.10 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /rkgxsgj-27408tetidm84ext.htm HTTP/1.1 0-7-0/0/6978. 0.00129663384471470.00.0092.39 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ijnecaw-308615aeti.html HTTP/1.1 0-7-0/0/6738. 0.00129684168369350.00.00102.15 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /njckawv-18902pitems/etidm96a.html HTTP/1.1 0-7-0/0/6838. 0.00129684671606760.00.0089.85 185.191.171.14http/1.1www.chonlateeadmin.com:443GET /rvgitgo-4528tetidm73eit HTTP/1.1 0-7-0/0/7037. 0.00129684366715850.00.00140.14 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?zqaggdh-287234netidm56mdn HTTP/1.1 0-7-0/0/6805. 0.001296075434310.00.0086.91 154.40.58.51http/1.1www.tkadvicesystem.com:80GET /wp-content/plugins/wp-mlm/js/custom.js HTTP/1.1 0-7-0/0/6491. 0.00129684780490450.00.00106.34 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /kfzxsgj-42741mitems/etidm54.htm HTTP/1.1 0-7-0/0/6442. 0.001296105781888170.00.0084.05 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /qnfkawv-13861sitems/etidm16 HTTP/1.1 0-7-0/0/6486. 0.00129668660477520.00.0085.58 52.167.144.190h2www.chonlateefbl.com:443GET /bath-body-works-2023-haunted-castle-luminary-871982.html H 0-7-0/0/6701. 0.00129666390197780.00.0091.70 148.72.211.177http/1.1www.chonlateekeyman.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7326. 0.00129683969746530.00.0093.06 52.70.240.171http/1.1www.chonlateeboi.com:443GET /1310yytxitems/etidm43k.html HTTP/1.1 0-7-0/0/6510. 0.00129684788465600.00.0084.81 52.70.240.171http/1.1www.chonlateeboi.com:443GET /21293hevyetidm58.html HTTP/1.1 0-7-0/0/6682. 0.00129620370739740.00.0086.69 217.34.133.56http/1.1www.xn--12cf1cddmk0fho2ci6he1a9GET /wp-login.php HTTP/1.1 0-7-0/0/6793. 0.00129628769725410.00.0091.40 51.15.17.105http/1.1www.pentorproperty.com:80GET /.well-known/pki-validation/x.php HTTP/1.1 0-7-0/0/6750. 0.00129684686251620.00.0085.52 23.22.35.162http/1.1www.chonlateeboi.com:443GET /7052khrritems/etidm9.html HTTP/1.1 0-7-0/0/6754. 0.00129667772792400.00.0092.31 154.40.58.51http/1.1www.tkadvicesystem.com:443GET /wp-content/plugins/wp-mlm/js/custom.js HTTP/1.1 0-7-0/0/6803. 0.0012961443062110446390.00.0094.03 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6533. 0.00129667976228870.00.0088.29 85.208.96.206http/1.1www.chonlateefood.com:443GET /getid/dts38899csrtitems HTTP/1.1 0-7-0/0/7067. 0.00129683384242990.00.0093.93 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /eftxsgj-27473geti.html HTTP/1.1 0-7-0/0/6616. 0.00129683867185760.00.0094.45 23.22.35.162http/1.1www.chonlateeboi.com:443GET /38903ztiaetidm51ha.html HTTP/1.1 0-7-0/0/6545. 0.00129684224389758900.00.0083.28 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6804. 0.00129647061437680.00.0086.49 51.77.66.84http/1.1www.emba35.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/6663. 0.00129684274790590.00.0095.03 66.249.73.11http/1.1www.chonlateeadmin.com:443GET /trust.php?hneadej-56960retid.htm HTTP/1.1 0-7-0/0/6682. 0.00129684285351900.00.00116.28 47.128.61.3h2www.seasabithailand.com:443GET /wp-theme/index.php?hl=xim-xbox HTTP/2.0 0-7-0/0/6549. 0.00129684673699920.00.0082.78 52.70.240.171http/1.1www.chonlateeboi.com:443GET /43530gzgqetid.htm HTTP/1.1 0-7-0/0/6847. 0.00129683776532610.00.00121.71 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /lkaxsgj-1896netidm98yxn.htm HTTP/1.1 0-7-0/0/6510. 0.00129683775565700.00.0095.23 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /uwjxsgj-27411witems/etidm.htm HTTP/1.1 0-7-0/0/6834. 0.00129685073873630.00.0087.79 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?vnsadej-379868fetidm57i.htm HTTP/1.1 1-7312060/340/6806_ 182.67084977164240.04.5088.57 164.92.192.25h2localhost:443[0/0] Software caused connection abort 1-7312060/292/6541_ 182.870077723410.04.0883.50 178.62.3.65http/1.1localhost:443GET / HTTP/1.1 1-7312060/343/6555_ 182.821352103067570.04.1384.43 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=deichmann-gewerbepark-7-he%C3%9Fdorf-bayern-germany-sho 1-7312060/313/6290_ 182.67172882093920.04.0283.43 159.203.63.67http/1.1 1-7312060/327/6479_ 183.17085379198330.04.0796.70 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /rjgwaok-47740tetidm7 HTTP/1.1 1-7312060/289/6512_ 182.88084677263460.04.5586.30 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wqvadej-346121ietidm22.html HTTP/1.1 1-7312061/268/6519W 157.08819079681010.03.8583.42 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 1-7312060/299/6618_ 182.900089609850.03.6988.39 143.110.156.182http/1.1 1-7312060/370/6658_ 182.811106159760860.04.6986.09 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /vjkwaok-46028xitems/etidm2.html HTTP/1.1 1-7312060/329/6553_ 181.98083582283200.04.3391.03 159.203.63.67h2localhost:443[0/0] Software caused connection abort 1-7312060/291/6319_ 181.16043685344570.03.4289.50 143.110.156.182http/1.1 1-7312061/231/6783W 168.16459070811610.0
Found on 2024-01-07 05:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389fd301e82fApache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 22:45:30 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 12 hours 44 minutes 9 seconds Server load: 2.91 2.80 2.63 Total accesses: 227109 - Total Traffic: 3.3 GB - Total Duration: 181732205 CPU Usage: u208.16 s12.07 cu3522.42 cs190.09 - 8.58% CPU load 4.95 requests/sec - 75.7 kB/second - 15.3 kB/request - 800.198 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 012776no13yes428017 112906no11yes527007 Sum2024 9550114 ______W_____R__R_______________R______________W_R__R__W__R______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0127760/174/2491_ 113.32085020315580.02.3538.40 20.15.133.185h2www.twinbuilt.co.th:443[0/0] init 0-0127760/330/2764_ 113.430619179330.06.8836.98 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 0-0127760/183/2445_ 113.521031447370.02.1145.49 20.15.133.185h2www.twinbuilt.co.th:443GET /?a=lovers-x-the-rspb-a-brand-campaign-repositioning-uk-5-v 0-0127760/189/2679_ 113.191019598530.02.0134.33 20.15.133.185h2www.twinbuilt.co.th:443[1/1] done: stream 1, GET /?a=lovers-x-the-rspb-a-brand-campaig 0-0127760/166/2560_ 113.12185420021670.02.0031.95 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /vhkuzzo-9680xitems/etidm91iux.html HTTP/1.1 0-0127760/164/2828_ 113.470020061080.02.0635.54 159.223.102.13http/1.1localhost:443GET /about HTTP/1.1 0-0127761/268/2551W 113.420019654200.011.2939.66 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?mwoadej-276847betidm46z HTTP/1.1 0-0127760/180/2570_ 113.601020501160.02.2733.55 164.90.222.93http/1.1localhost:443GET /.git/config HTTP/1.1 0-0127760/217/2628_ 113.440719397960.011.5276.38 128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1 0-0127760/182/2558_ 113.480019426440.02.3833.04 159.203.63.67http/1.1localhost:443GET /about HTTP/1.1 0-0127760/163/2512_ 113.53084622903930.02.0730.94 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?wuyggdh-413019letid.htm HTTP/1.1 0-0127760/173/2445_ 113.63091719587470.02.0631.80 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2937gcmpitems/eti.htm HTTP/1.1 0-0127760/149/2398R 113.481019567350.01.8133.68 52.70.240.171http/1.1www.chonlateeboi.com:443 0-0127760/183/2735_ 113.63090520470530.02.8136.67 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /amyemnz-25519letid.htm HTTP/1.1 0-0127760/169/2761_ 113.400022634030.02.2537.69 52.167.144.209h2www.xn--12cx2bef7bl0boq4ch6gugw[2/2] done: stream 3, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B 0-0127760/169/2491R 113.512114419777150.02.1033.16 188.165.232.135http/1.1 0-0127760/170/2433_ 113.630019990630.02.0531.83 164.90.222.93http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-0127760/163/2611_ 113.63085119775550.02.0436.01 52.167.144.209h2www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B8%9B%E0%B8%A5%E0%B8%B2 0-0127760/169/2629_ 113.630019270300.01.9634.44 164.90.222.93http/1.1localhost:443GET /.git/config HTTP/1.1 0-0127760/174/2478_ 113.121021362850.09.7338.08 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-0127760/174/2542_ 113.57084819571330.02.5036.88 23.22.35.162http/1.1www.chonlateeboi.com:443GET /2997gcmpitems/etidm31.htm HTTP/1.1 0-0127760/227/2591_ 113.560020538720.03.0937.93 159.203.63.67http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-0127760/216/2845_ 113.630019313170.02.8335.60 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0127760/157/2448_ 113.60189018812070.01.9532.57 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?supaonh-358363cetidm69.html HTTP/1.1 0-0127760/167/2464_ 113.530019839610.01.9432.12 164.90.222.93http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-0127760/162/2473_ 113.01084419195480.02.0832.01 52.167.144.209h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init 0-0127760/276/2514_ 112.53090318990650.012.9241.51 52.167.144.209h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B 0-0127760/148/2541_ 113.630019373020.01.7562.88 138.68.163.10http/1.1localhost:443GET /.git/config HTTP/1.1 0-0127760/162/2424_ 113.630019414800.01.9630.60 128.199.62.55http/1.1localhost:443GET /.git/config HTTP/1.1 0-0127760/175/2766_ 113.480105618800390.01.9971.41 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /qbfuzzo-28239sitems/etidm39do.htm HTTP/1.1 0-0127760/168/2441_ 113.59187219374870.02.7839.04 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /rhguzzo-39940tetidm5 HTTP/1.1 0-0127760/158/2762R 113.491108019445670.02.4334.14 52.167.144.209h2www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B8%9B%E0%B8%A5%E0%B8%B2 1-0129060/168/1976_ 101.951014882610.02.0926.03 138.68.163.10http/1.1localhost:443GET /.env HTTP/1.1 1-0129060/165/1754_ 101.91169714408160.01.9322.74 40.77.167.52h2www.chonlateefbl.com:443GET /bts-jimin-muster-photocard-official-66565.html HTTP/2.0 1-0129060/157/1872_ 100.521121314787340.01.8826.09 157.55.39.201h2www.chonlateeaa.com:443[0/0] init 1-0129060/157/1760_ 101.990714442580.01.9823.35 159.223.102.13http/1.1localhost:443GET /server-status HTTP/1.1 1-0129060/160/1784_ 101.920014333110.02.0827.97 164.90.222.93http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-0129060/153/1795_ 101.901014175730.01.7323.92 164.90.222.93http/1.1localhost:443GET /_all_dbs HTTP/1.1 1-0129060/160/1824_ 101.64186114672230.01.9422.50 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?sfqhsbr-8533detidm40fsd.htm HTTP/1.1 1-0129060/224/1874_ 102.01096814496420.04.8125.46 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ampuzzo-45825citems/eti.htm HTTP/1.1 1-0129060/140/1842_ 101.78184714766750.02.9626.07 40.77.167.52h2www.chonlateefbl.com:443[1/1] done: stream 1, GET /bts-jimin-muster-photocard-official- 1-0129060/199/1786_ 101.431129014320460.02.0923.48 31.184.236.34http/1.1 1-0129060/154/1776_ 102.010014023380.01.9126.61 128.199.62.55http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-0129060/228/1924_ 101.5023015142080.04.2727.17 40.77.167.8h2www.chonlateefood.com:443[0/0] init 1-0129060/223/1840_ 101.8308481463
Found on 2024-01-05 15:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319f7a389f9f7a389f0599bf6aApache Status Apache Server Status for pop.spamechanicssystem.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:24:00 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 3 days 8 hours 29 minutes 40 seconds Server load: 1.54 1.75 1.60 Total accesses: 1080751 - Total Traffic: 11.9 GB - Total Duration: 677915433 CPU Usage: u61.6 s15.95 cu17171.1 cs976.25 - 6.29% CPU load 3.73 requests/sec - 42.9 kB/second - 11.5 kB/request - 627.263 ms/request 10 requests currently being processed, 118 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06042no13yes131008 16305no6yes230003 26053no11yes329109 36062no15yes4280014 Sum4045 101181034 ________________________W_____________________W________R________ ____W_W_____________________W__________W_R________R___R_________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1260420/17/9755_ 9.240062526100.00.13104.44 138.68.163.10http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-1260420/19/9534_ 8.941064057010.00.1693.79 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-1260420/25/9780_ 9.091063177730.00.1896.83 205.169.39.139http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 0-1260420/25/9684_ 9.061057517730.00.1891.34 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /bbikeon117274vy1k/daf8.html HTTP/1.1 0-1260420/24/9711_ 8.930058049250.00.15110.24 178.62.73.12http/1.1www.spamechanicssystem.com:80GET /debug/default/view?panel=config HTTP/1.1 0-1260420/19/9515_ 8.611107762200910.00.16106.05 54.36.149.13h2www.chonlateefood.com:443[0/0] init 0-1260420/20/9675_ 9.270056637500.00.19142.43 205.169.39.139http/1.1www.spamechanicssystem.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1 0-1260420/20/9311_ 9.130057267900.00.1293.78 46.101.103.192http/1.1localhost:443GET /about HTTP/1.1 0-1260420/16/10032_ 8.990055676840.00.13121.67 162.243.186.177http/1.1 0-1260420/25/9586_ 8.90167559321960.00.21101.36 205.169.39.139http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 0-1260420/23/9615_ 9.201056205050.00.1493.75 165.232.76.155http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-1260420/23/9699_ 9.191155885530.00.1899.86 205.169.39.139http/1.1www.spamechanicssystem.com:443GET /wp-includes/js/wp-emoji-release.min.js?ver=5.6.12 HTTP/1.1 0-1260420/34/9807_ 9.11187462349250.00.32114.95 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?277927qpjoitems/etidm46no HTTP/1.1 0-1260420/21/9792_ 9.27089762088800.00.21101.06 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?xqmggdh-278938zetid HTTP/1.1 0-1260420/23/9605_ 9.231063591300.00.16103.18 64.227.126.135http/1.1localhost:80GET /config.json HTTP/1.1 0-1260420/14/9569_ 7.12086058071180.00.11178.78 138.68.133.118h2localhost:443[0/0] Software caused connection abort 0-1260420/17/9905_ 9.182062252790.00.12101.92 64.227.126.135http/1.1localhost:80GET /.git/config HTTP/1.1 0-1260420/22/9493_ 9.27087760551650.00.1693.80 54.36.149.13http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%88%E0%B8%B1%E0%B8%94%E0%B9%80%E0%B8%A5%E0%B8%B5 0-1260420/19/9606_ 9.052058480800.00.1498.53 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 0-1260420/21/9838_ 8.601056533620.00.17105.39 138.68.133.118h2localhost:443[0/0] Software caused connection abort 0-1260420/25/9750_ 9.21142362744970.00.16101.87 138.68.133.118http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 0-1260420/22/9652_ 9.051058992880.00.1499.94 162.243.186.177http/1.1 0-1260420/24/9747_ 8.960074669510.00.13147.06 139.59.182.142http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-1260420/28/9448_ 8.931092525470.00.20104.86 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-1260421/33/9756W 8.962058617480.00.20137.08 85.208.96.206http/1.1www.chonlateefbc.com:443GET /tag/%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%A5%E0%B8%87%E0%B8%97 0-1260420/26/9451_ 8.870083851860.00.2593.58 54.36.149.13h2www.chonlateefood.com:443[1/1] done: stream 1, GET /tag/%E0%B8%88%E0%B8%B1%E0%B8%94%E0%B 0-1260420/27/9512_ 8.87190057168420.00.2294.19 46.101.103.192h2localhost:443[0/0] Software caused connection abort 0-1260420/19/9657_ 9.231063147220.00.13100.83 46.101.103.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-1260420/25/9607_ 9.170059719320.00.23138.00 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 0-1260420/22/9620_ 8.57189761462640.00.20107.36 162.243.186.177http/1.1 0-1260420/12/9557_ 7.8002061996630.00.13103.77 205.169.39.139http/1.1www.spamechanicssystem.com:443GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1 0-1260420/30/9588_ 9.180059888460.00.22115.33 138.68.163.10http/1.1localhost:443GET /about HTTP/1.1 1-1263050/23/9122_ 10.03177954166340.00.18142.44 138.68.133.118h2localhost:443[0/0] Software caused connection abort 1-1263050/27/8959_ 10.850055073130.00.23107.42 139.59.182.142http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-1263050/26/9091_ 10.721055461190.00.22131.61 165.232.76.155http/1.1localhost:443GET / HTTP/1.1 1-1263050/26/9366_ 10.820057403860.00.29143.05 165.232.76.155http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1263050/26/9342_ 10.92042056461540.00.17111.77 138.68.133.118http/1.1www.spamechanicssystem.com:443GET /.vscode/sftp.json HTTP/1.1 1-1263050/51/9073_ 10.89086656138460.00.3198.99 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?277943qpjoetidm71do.html HTTP/1.1 1-1263050/30/9253_ 10.851055993250.00.24109.48 167.172.20.95http/1.1www.spamechanicssystem.com:80GET /_all_dbs HTTP/1.1 1-1263050/28/9336_ 10.680056428020.00.3193.11 162.243.186.177h2localhost:443[0/0] Software caused connection abort 1-1263050/30/9205_ 10.871055710380.00.2590.45 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /amhzycz24115uetidm.html HTTP/1.1 1-1263050/16/9154_ 10.040073678150.00.08108.66 165.232.76.155http/1.1 1-1263050/27/9375_ 10.900055693010.00.2195.39 64.227.126.135http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-1263050/30/9125_ 10.68190155878550.00.1990.97 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?316880qpjoitems/etidm16sqh.html HTTP/1.1 1-12
Found on 2023-12-28 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c2ebe68beApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 08:25:13 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 4 hours 23 minutes Server load: 0.41 0.31 0.35 Total accesses: 11997 - Total Traffic: 109.7 MB - Total Duration: 16395016 CPU Usage: u3279.09 s5969.98 cu56635900 cs13846500 - 447000% CPU load .76 requests/sec - 7.1 kB/second - 9.4 kB/request - 1366.59 ms/request 13 requests currently being processed, 0 idle workers CRWCWCRW.C..WCC.C................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-207932081/33/1286C 8.601015225991.30.3810.77 128.199.195.68http/1.1localhost:443GET /login.action HTTP/1.1 1-207935460/3/1156R 0.570115914490.00.019.52 164.92.192.25http/1.1 2-207931480/28/1070W 8.194014850540.00.199.82 162.243.161.105http/1.1www.chonlateefood.com:80GET / HTTP/1.0 3-207932151/29/1075C 6.151114982821.40.2110.26 159.65.138.217http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-207935540/0/1001W 0.000013331270.00.009.67 159.65.138.217http/1.1localhost:443GET /server-status HTTP/1.1 5-207932271/27/1063C 5.841112970171.30.1010.72 159.65.138.217http/1.1localhost:443GET /about HTTP/1.1 6-207935600/0/904R 0.000013933750.00.008.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-207927650/61/948W 28.914012565090.00.409.01 144.126.202.105http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 8-2079-0/0/806. 0.00454010301460.00.005.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-207932291/27/696C 7.40109266552.70.239.70 128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-2079-0/0/710. 0.00445011421060.00.007.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-2079-0/0/575. 0.0045309728980.00.004.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-207929990/46/428W 15.95206025390.00.482.98 198.199.121.22http/1.1www.chonlateefood.com:80GET / HTTP/1.0 13-207931701/28/217C 12.23102756301.30.291.42 128.199.195.68http/1.1localhost:443GET /about HTTP/1.1 14-207931761/27/27C 7.5510390712.70.150.15 159.65.138.217http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 15-2079-0/0/8. 0.00458030000.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-207932411/27/27C 8.1610255501.40.150.15 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 257 seconds, (range: 26...296)index usage: 0%, cache usage: 0%total entries stored since starting: 136total entries replaced since starting: 0total entries expired since starting: 126total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3685 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c3e39bd56Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 02:42:41 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 2 hours 17 minutes 51 seconds Server load: 2.28 1.26 0.82 Total accesses: 6995 - Total Traffic: 67.8 MB - Total Duration: 11378722 CPU Usage: u3229.11 s5932.39 cu56302300 cs13768200 - 847000% CPU load .846 requests/sec - 8.4 kB/second - 9.9 kB/request - 1626.69 ms/request 13 requests currently being processed, 3 idle workers RW_WCRWR_CCR_RCW.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041204670/5/673R 0.740111376330.00.027.19 137.184.222.107http/1.1localhost:443GET / HTTP/1.1 1-2041201850/33/654W 24.122010916330.00.336.34 143.110.218.229http/1.1www.chonlateefood.com:80GET /.vscode/sftp.json HTTP/1.0 2-2041196120/93/669_ 60.380111531530.00.907.02 139.144.150.23http/1.1localhost:443GET /about HTTP/1.1 3-2041203440/12/659W 8.210010194720.00.125.73 144.126.202.105http/1.1localhost:443GET /server-status HTTP/1.1 4-2041202991/14/652C 8.171110652632.60.197.94 159.65.58.104http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-2041204410/3/531R 0.09018409250.00.014.82 167.172.232.142http/1.1 6-2041203150/8/472W 5.25007717910.00.144.08 207.154.240.169http/1.1www.chonlateefood.com:80GET /about HTTP/1.0 7-2041203160/14/536R 7.48019159300.00.095.33 74.207.237.114http/1.1 8-2041204490/5/538_ 0.88018595670.00.035.28 159.65.58.104http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 9-2041203731/9/501C 3.54018796681.40.044.52 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-2041203741/6/378C 3.27105922841.30.033.46 159.65.58.104http/1.1localhost:443GET /about HTTP/1.1 11-2041204510/2/129R 2.07016821901090.00.001.25 207.154.240.169http/1.1www.chonlateefood.com:80GET /.vscode/sftp.json HTTP/1.0 12-2041203920/7/125_ 2.21001385640.00.020.70 137.184.162.65http/1.1 13-2041203980/8/25R 2.0501192950.00.020.05 144.126.202.105http/1.1localhost:443GET /about HTTP/1.1 14-2041204041/10/26C 3.1500102041.40.030.06 144.126.202.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-2041204760/0/101W 0.00001646150.00.000.94 172.68.26.198http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%82%E0%B8%B5 16-2041-0/0/13. 0.00920022910.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2041-0/0/10. 0.009210200.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2041-0/0/6. 0.00923070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2041-0/0/2. 0.00939030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2041-0/0/98. 0.007127461853770.00.000.85 162.158.106.223http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%95 21-2041-0/0/99. 0.00583991655470.00.000.83 172.68.234.123http/1.1www.biz9nar.com:80POST /wp-cron.php?doing_wp_cron=1702323702.78646492958068847656 22-2041-0/0/98. 0.00578551753580.00.001.41 172.69.67.19http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 22subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 263 seconds, (range: 16...298)index usage: 0%, cache usage: 1%total entries stored since starting: 93total entries replaced since starting: 0total entries expired since starting: 71total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3278 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 19:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c18d2f2c7Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 06:13:08 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 2 hours 10 minutes 57 seconds Server load: 0.86 0.57 0.55 Total accesses: 9327 - Total Traffic: 170.6 MB - Total Duration: 12166950 CPU Usage: u3123.63 s5830.63 cu55536500 cs13590000 - 880000% CPU load 1.19 requests/sec - 22.2 kB/second - 18.7 kB/request - 1304.49 ms/request 11 requests currently being processed, 4 idle workers _CC_RCW_CCR_CWR................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965259560/2/894_ 0.010012451100.00.0027.37 167.99.184.41http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-1965256491/24/801C 17.661010241881.30.2219.22 159.203.94.228http/1.1localhost:443GET /about HTTP/1.1 2-1965256641/25/823C 14.690011398871.30.189.30 74.207.237.46http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-1965259060/4/754_ 0.56009030290.00.017.80 167.99.184.41http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-1965251870/47/714R 27.61018415500.00.338.00 159.203.94.228http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1965248641/67/758C 36.14109467171.31.537.03 167.99.184.41http/1.1localhost:443GET /about HTTP/1.1 6-1965259620/0/616W 0.00007046530.00.004.91 159.89.83.196http/1.1www.chonlateefood.com:80GET /debug/default/view?panel=config HTTP/1.0 7-1965251460/55/603_ 32.45010967002360.00.554.16 134.122.34.144http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 8-1965251971/42/648C 25.93008289991.40.405.62 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1965259151/3/547C 1.34107321931.30.0020.78 74.207.237.46http/1.1localhost:443GET /about HTTP/1.1 10-1965259170/3/384R 2.81005969850.00.025.02 139.144.150.45http/1.1localhost:443GET /about HTTP/1.1 11-1965259330/3/363_ 1.25017205592190.00.0018.02 159.203.63.67http/1.1www.chonlateefood.com:80GET /about HTTP/1.0 12-1965259401/2/418C 1.45006083522.70.026.57 137.184.106.30http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 13-1965259460/2/297W 0.00003730700.00.002.75 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 14-1965259680/0/200R 0.00002537380.00.003.63 137.184.150.232http/1.1 15-1965-0/0/11. 0.001261050620.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1965-0/0/271. 0.0035422533420020.00.002.37 172.71.150.179http/1.1www.proplustech.co.th:443GET /?page_id=I360910 HTTP/1.1 17-1965-0/0/93. 0.00125201187940.00.000.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1965-0/0/29. 0.0011040212080.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1965-0/0/92. 0.002577202148940.00.0015.52 162.158.189.245http/1.1www.acumaticathailand.com:80GET /.env HTTP/1.0 20-1965-0/0/11. 0.001203070540.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 14subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 289...299)index usage: 0%, cache usage: 0%total entries stored since starting: 477total entries replaced since starting: 0total entries expired since starting: 463total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4314 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 23:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c462822cfApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 12:03:56 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 8 hours 1 minute 43 seconds Server load: 0.58 0.29 0.33 Total accesses: 43671 - Total Traffic: 831.7 MB - Total Duration: 86264898 CPU Usage: u3011.28 s5763.81 cu55151100 cs13501900 - 238000% CPU load 1.51 requests/sec - 29.5 kB/second - 19.5 kB/request - 1975.34 ms/request 13 requests currently being processed, 12 idle workers C___R._W.W_WW___.RC_C_C_C_CC...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193218751/56/3646C 14.700177386831.30.47110.89 178.62.73.12http/1.1localhost:443GET /.env HTTP/1.1 1-193214820/93/3625_ 25.720171586160.01.0047.12 64.227.126.135http/1.1localhost:443GET /.DS_Store HTTP/1.1 2-193223820/5/3633_ 0.041170033800.00.0148.81 137.184.222.107http/1.1localhost:443GET /about HTTP/1.1 3-193220920/26/3502_ 6.050171146530.00.3353.01 139.144.150.23http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-193221710/23/3532R 7.951270559950.00.1657.99 178.62.73.12http/1.1localhost:443GET /_all_dbs HTTP/1.1 5-1932-0/0/3229. 0.002060563630.00.0040.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-193219180/44/3244_ 10.770156165131160.00.5053.23 137.184.150.232http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 7-193223110/17/3170W 3.790065311330.00.1189.11 137.184.222.107http/1.1localhost:443GET /server-status HTTP/1.1 8-1932-0/0/2982. 0.001059559450.00.0050.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-193223940/5/2641W 1.360051172650.00.0232.32 137.184.150.232http/1.1www.spamechanicssystem.com:443GET /.vscode/sftp.json HTTP/1.1 10-193224040/6/2368_ 0.450046170060.00.0139.70 178.62.73.12http/1.1localhost:443GET /.DS_Store HTTP/1.1 11-193220160/35/1897W 6.621038631610.00.3328.79 159.89.83.196http/1.1www.chonlateefood.com:80GET /debug/default/view?panel=config HTTP/1.0 12-193221070/31/1695W 6.841032049780.00.3132.31 146.190.64.200http/1.1www.chonlateefood.com:80GET /debug/default/view?panel=config HTTP/1.0 13-193224110/4/1529_ 0.040134273520.00.02113.25 142.93.158.96http/1.1localhost:443GET /server-status HTTP/1.1 14-193221210/28/866_ 4.720116541100.00.369.73 178.62.73.12http/1.1localhost:443GET /login.action HTTP/1.1 15-193224130/2/406_ 1.52115925430.00.024.01 178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1932-0/0/344. 0.00005510810.00.002.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-193224320/4/237R 0.01112611970.00.002.59 137.184.222.107http/1.1localhost:443GET /v2/_catalog HTTP/1.1 18-193224381/2/333C 0.00105441051.30.003.52 64.227.126.135http/1.1localhost:443GET /login.action HTTP/1.1 19-193224440/2/167_ 0.01102780860.00.002.48 64.227.126.135http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 20-193224501/2/312C 0.02005022050.20.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-193224520/2/50_ 1.5110690420.00.000.54 64.227.126.135http/1.1localhost:443GET /_all_dbs HTTP/1.1 22-193224581/3/180C 0.01112695251.30.002.05 139.144.150.23http/1.1localhost:443GET /config.json HTTP/1.1 23-193224640/2/6_ 0.001028670.00.000.02 139.144.150.23http/1.1localhost:443GET /.env HTTP/1.1 24-193224741/3/8C 0.010029621.40.010.02 137.184.222.107http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 25-193224760/1/41_ 0.00021125820.00.001.10 139.144.150.23http/1.1localhost:443GET /.git/config HTTP/1.1 26-193224861/3/20C 0.0110560351.40.010.65 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 27-193224921/2/4C 0.000181.30.000.00 64.227.126.135http/1.1localhost:443GET /.env HTTP/1.1 28-1932-0/0/2. 0.0090510140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.0090400108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 14subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 289 seconds, (range: 285...296)index usage: 0%, cache usage: 0%total entries stored since starting: 312total entries replaced since starting: 0total entries expired since starting: 298total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 26136 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 05:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c1db4fa8aApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:30:05 +07 Restart Time: Sunday, 29-Oct-2023 00:11:24 +07 Parent Server Config. Generation: 1902 Parent Server MPM Generation: 1901 Server uptime: 18 minutes 40 seconds Server load: 7.51 7.08 6.70 Total accesses: 7906 - Total Traffic: 87.0 MB - Total Duration: 27995231 CPU Usage: u3440.33 s5791.83 cu54399300 cs13297100 - 6050000% CPU load 7.06 requests/sec - 79.6 kB/second - 11.3 kB/request - 3541.01 ms/request 32 requests currently being processed, 11 idle workers CCWWRCRRCC_CWWW_RWCCCWWRWWWCW_WCWCW________....... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1901306591/20/346C 6.48155610714196.80.163.87 139.59.65.144http/1.1www.spamechanicssystem.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1901311051/15/295C 0.661110822742.70.043.32 138.197.88.136http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-1901291640/30/306W 26.881011630250.00.283.57 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0044172864.html HTTP/1.1 3-1901262300/81/324W 64.903011056990.00.913.70 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=large-acrylic-jewelry-box-with-drawers-%E2%80%93-mont%C 4-1901292480/35/271R 21.480010199290.00.283.00 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 5-1901306221/10/289C 9.8103692104884015.50.173.16 40.77.167.44http/1.1www.mkandptfoods.com:443GET /wzy.php?popularity-NEGOTIATE.xml HTTP/1.1 6-1901277620/52/285R 46.36051910716670.00.543.17 164.90.205.35http/1.1www.spamechanicssystem.com:443GET /about HTTP/1.1 7-1901263680/78/306R 52.790011523760.00.713.32 52.70.240.171http/1.1 8-1901311311/14/283C 1.5704859947376.80.042.95 139.59.65.144http/1.1www.spamechanicssystem.com:443GET /server-status HTTP/1.1 9-1901264531/78/273C 48.65082886449013.90.793.04 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ujjsvcw-168643witems/etidm HTTP/1.1 10-1901298000/30/310_ 10.87044110327270.00.263.41 13.80.105.153http/1.1www.theangelluxury.com:80POST /wp-login.php HTTP/1.0 11-1901311331/5/299C 2.070211016025.10.043.40 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 12-1901298260/21/253W 19.98032379822340.00.232.74 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0036930564.html HTTP/1.1 13-1901259080/91/307W 72.031011129190.00.983.18 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=used-kubota-bx1500d-for-sale-listings-machinery-pete-mm 14-1901292490/30/275W 24.260010218870.00.323.06 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=on-instagram-%E2%80%9Cposting-some-jewelry-trays-decor- 15-1901293070/28/264_ 23.59009964090.00.252.65 64.227.126.135http/1.1localhost:443GET /about HTTP/1.1 16-1901272550/63/238R 37.9304738479340.00.632.73 52.70.240.171http/1.1 17-1901274110/59/224W 39.28107981280.00.592.63 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=minimalist-jewelry-dish-handmade-polymer-clay-trinket-t 18-1901306861/18/210C 7.38007671291.40.122.32 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-1901316521/5/276C 0.630010666891.30.012.81 138.197.88.136http/1.1localhost:443GET /about HTTP/1.1 20-1901274911/49/227C 43.96008271751.40.772.78 64.227.126.135http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 21-1901277730/60/244W 35.89008400390.00.632.91 13.80.105.153http/1.1www.theangelluxury.com:80POST /wp-login.php HTTP/1.0 22-1901316830/1/163W 0.00005531640.00.001.87 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=cosette-mm-24yWRNfV HTTP/1.1 23-1901311770/11/192R 0.50005688930.00.021.89 3.224.220.101http/1.1 24-1901316890/2/250W 0.00009018400.00.002.65 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yinsvcw-130193aeti.html HTTP/1.1 25-1901311830/3/202W 1.89007149290.00.002.30 164.90.205.35http/1.1www.spamechanicssystem.com:443GET /debug/default/view?panel=config HTTP/1.1 26-1901260700/91/197W 67.39106647140.00.972.11 162.158.103.213http/1.1www.time2hand.com:80POST / HTTP/1.0 27-1901296061/28/142C 18.60038965005526.20.221.60 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=2004-kubota-b7510-4wd-tractor-pto-3-pt-hst-mm-9BP81zhE 28-1901311890/10/87W 2.54002795330.00.140.89 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 29-1901296940/24/123_ 17.3106304732250.00.191.38 23.22.35.162http/1.1www.chonlateeboi.com:443GET /25773mywgitems/etidm14.htm HTTP/1.1 30-1901297000/26/94W 13.63303405860.00.250.91 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=tays-realty-auction-auction-online-absolute-auction-far 31-1901316971/1/114C 0.00013808791.40.001.29 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 32-1901317030/0/27W 0.0000507580.00.000.24 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=natural-seashell-jewelry-tray-shop-online-on-roomtery-m 33-1901317061/1/11C 0.480501139116.80.010.08 139.59.65.144http/1.1www.spamechanicssystem.com:443GET /login.action HTTP/1.1 34-1901317110/1/7W 0.4800190150.00.010.07 139.59.65.144http/1.1www.spamechanicssystem.com:443GET /_all_dbs HTTP/1.1 35-1901317440/0/17_ 0.00031689810.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1901317460/0/4_ 0.000055410.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1901317560/0/4_ 0.0003423050.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1901317580/0/6_ 0.0000141300.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1901317680/0/22_ 0.00010554910.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1901317700/0/2_ 0.000130.00.000.01 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /reune.php?ywfbjai86461setidm71.html HTTP/1.1 41-1901317760/0/4_ 0.000083560.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1901317810/0/41_ 0.0000910970.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1901-0/0/58. 0.0089502283870.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1901-0/0/2. 0.001103016330.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1901-0/0/12. 0.0010720241440.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1901-0/0/3. 0.0010950127220.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1901-0/0/14. 0.0010600493820.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1901-0/0/1. 0.001111000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1901-0/0/2. 0.001105317100.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChi
Found on 2023-10-28 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c16788b57Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 06:10:32 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 2 hours 8 minutes 21 seconds Server load: 1.21 0.97 0.78 Total accesses: 11299 - Total Traffic: 128.4 MB - Total Duration: 13649660 CPU Usage: u2846.57 s5197.33 cu51091400 cs12500100 - 826000% CPU load 1.47 requests/sec - 17.1 kB/second - 11.6 kB/request - 1208.04 ms/request 4 requests currently being processed, 5 idle workers W..W_..C____C..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762140890/97/996W 55.520012396070.01.069.09 143.42.118.5http/1.1localhost:443GET /server-status HTTP/1.1 1-1762-0/0/878. 0.00113010082140.00.0020.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1762-0/0/997. 0.00122011722950.00.009.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1762145770/20/864W 16.70009750320.00.339.57 5.62.34.21http/1.1www.chonlateepr.com:443POST //wp-login.php HTTP/1.1 4-1762141670/89/1005_ 49.09042411205520.00.849.79 27.254.96.168http/1.1www.ltclevelup.com:443POST /wp-cron.php?doing_wp_cron=1695424230.89833498001098632812 5-1762-0/0/1063. 0.00123013499400.00.0010.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1762-0/0/802. 0.0011409831810.00.006.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1762141941/75/803C 44.37009502061.40.838.13 143.42.118.5http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1762145840/21/681_ 12.07118364620.00.347.47 143.42.118.5http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-1762145860/24/557_ 15.48113127247080.00.256.26 5.62.34.21http/1.1www.chonlateepr.com:443POST //wp-login.php HTTP/1.1 10-1762145990/26/722_ 11.79009029100.00.235.99 79.110.48.241http/1.1www.spamechanicssystem.com:80GET /lufi.php HTTP/1.0 11-1762146020/22/384_ 11.31104640440.00.324.26 143.42.118.5http/1.1localhost:443GET /about HTTP/1.1 12-1762146071/24/271C 14.410175327770623.20.263.21 179.43.191.18http/1.1www.ltclevelup.com:443GET / HTTP/1.1 13-1762-0/0/387. 0.0011805018210.00.003.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/394. 0.0010121505416320.00.007.12 172.70.134.251http/1.1www.jrajar.com:80GET /%E0%B8%99%E0%B9%82%E0%B8%A2%E0%B8%9A%E0%B8%B2%E0%B8%A2%E0% 15-1762-0/0/330. 0.0012103694180.00.004.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1762-0/0/137. 0.0049302163240.00.001.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/20. 0.006510123820.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/8. 0.003763032160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 91subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 94 seconds, (range: 26...239)index usage: 3%, cache usage: 4%total entries stored since starting: 1362total entries replaced since starting: 0total entries expired since starting: 1271total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 28 hit, 3416 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-22 23:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c7caf2cb2Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 16:21:47 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 12 hours 19 minutes 34 seconds Server load: 1.29 1.21 1.11 Total accesses: 77072 - Total Traffic: 1.6 GB - Total Duration: 117110467 CPU Usage: u2944.33 s5198.75 cu50888600 cs12456300 - 143000% CPU load 1.74 requests/sec - 37.4 kB/second - 21.5 kB/request - 1519.49 ms/request 3 requests currently being processed, 9 idle workers __WR_C_____._..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743122000/88/6292_ 59.35163498419210.01.92154.66 94.232.42.51http/1.1www.dinocoffees.com:443GET /adminer-4.4.0-en.php HTTP/1.1 1-1743124810/60/6247_ 47.00064395601750.01.03147.55 94.232.42.51http/1.1www.dinocoffees.com:443GET /adminer-4.4.0-en.php HTTP/1.1 2-1743125430/47/6277W 34.300094263510.00.79138.15 167.71.48.191http/1.1localhost:443GET /server-status HTTP/1.1 3-1743125880/32/6079R 19.81381287921820.00.43118.65 94.232.42.51http/1.1www.dinocoffees.com:443GET /adminer-4.4.0.php HTTP/1.1 4-1743123820/72/5876_ 57.97295087831670.01.41118.33 172.71.161.143http/1.1www.smetast.com:80GET /blog/wp-content/plugins/seoplugins/db.php?u HTTP/1.0 5-1743126201/31/5734C 22.891184447451.40.49135.49 167.71.48.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1743128360/10/5418_ 5.010179261330.00.07101.31 162.158.22.127http/1.1www.xn--72cz8bp5a1a1b8d.com:443POST /xmlrpc.php HTTP/1.1 7-1743128430/9/5190_ 4.32388578545160.00.04107.49 172.71.161.143http/1.1www.smetast.com:80GET /blog/wp-content/themes/seotheme/db.php?u HTTP/1.0 8-1743128450/9/5252_ 5.69090585086870.00.0499.08 172.71.161.143http/1.1www.smetast.com:80GET /blog/wp-content/plugins/seoplugins/mar.php HTTP/1.0 9-1743123880/71/4663_ 57.66070671787090.01.1984.48 172.71.161.143http/1.1www.smetast.com:80GET /wordpress/wp-content/themes/pridmag/db.php?u HTTP/1.0 10-1743123940/83/4242_ 52.710164714200.01.3877.12 172.71.242.8http/1.1www.anumotanaboon.com:443POST /xmlrpc.php HTTP/1.1 11-1743-0/0/3384. 0.00159056106460.00.0071.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743126290/27/3260_ 18.922148979880.00.2470.38 167.71.48.191http/1.1localhost:443GET /v2/_catalog HTTP/1.1 13-1743-0/0/2444. 0.001436041244130.00.0048.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743-0/0/1723. 0.001591025641390.00.0036.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/1370. 0.00107242920369930.00.0026.45 172.68.234.152http/1.1www.accsmile.com:80GET /%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B8%A5%E0%B8%B4%E0%B9%89%E0% 16-1743-0/0/1092. 0.001351014739020.00.0024.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/567. 0.00240907869520.00.0025.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/342. 0.00248203296360.00.005.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/112. 0.00393101810530.00.002.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/106. 0.0046980925920.00.002.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/39. 0.0048190514610.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/135. 0.00466102288680.00.002.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/57. 0.0048150741160.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/139. 0.001578801688780.00.001.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1743-0/0/41. 0.00157850648490.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/43. 0.00157860740610.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/12. 0.00157650286800.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743-0/0/150. 0.001513901644400.00.002.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1743-0/0/13. 0.00157750440100.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/12. 0.00157740325260.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743-0/0/197. 0.001483213975970.00.005.21 139.144.150.205http/1.1localhost:80GET /.DS_Store HTTP/1.0 32-1743-0/0/80. 0.001578201026530.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743-0/0/98. 0.001501023392384530.00.001.28 35.164.89.242http/1.1www.ckt-trading.com:443GET / HTTP/1.1 34-1743-0/0/14. 0.00157630415030.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/20. 0.00157640499850.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743-0/0/48. 0.00155840579330.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1743-0/0/14. 0.00157830314670.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/13. 0.00157810388600.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/119. 0.001575401026510.00.002.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743-0/0/99. 0.001577301279860.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1743-0/0/2. 0.0021326078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.0021331041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.00213020128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.00211300756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.0021338000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.0021301080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.0021314050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.0021337010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.0021313025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child
Found on 2023-09-19 09:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910cd9b2b7e8Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:57:40 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 2 hours 29 minutes 43 seconds Server load: 0.91 0.81 0.81 Total accesses: 12623 - Total Traffic: 187.7 MB - Total Duration: 17904088 CPU Usage: u2777.69 s5136.31 cu50714300 cs12419500 - 703000% CPU load 1.41 requests/sec - 21.4 kB/second - 15.2 kB/request - 1418.37 ms/request 5 requests currently being processed, 4 idle workers .C__C_._WWC....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733-0/0/1007. 0.0016138113678840.00.0013.19 176.123.174.134http/1.1www.thaicarsale.com:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.0 1-1733120601/84/1026C 35.480014478591.31.6212.97 137.184.222.107http/1.1localhost:443GET /.DS_Store HTTP/1.1 2-1733122850/60/944_ 28.17048113800910.00.4610.85 162.158.102.145http/1.1www.makeregist.com:80GET /?author=20 HTTP/1.0 3-1733122350/63/921_ 25.810013404330.01.3611.92 137.184.222.107http/1.1localhost:443GET /_all_dbs HTTP/1.1 4-1733123701/49/900C 23.571111971971.30.5410.62 137.184.222.107http/1.1localhost:443GET /login.action HTTP/1.1 5-1733123770/38/942_ 23.560113653450.00.3118.23 159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 6-1733-0/0/813. 0.00103013480140.00.0012.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1733124050/48/793_ 20.630111856170.00.4018.03 159.203.182.222http/1.1localhost:80GET /about HTTP/1.0 8-1733124140/43/902W 17.090011632330.00.4012.57 178.128.151.41http/1.1localhost:443GET /server-status HTTP/1.1 9-1733124580/40/732W 16.900010450450.00.318.72 172.70.85.99http/1.1www.makeregist.com:80GET /?author=43 HTTP/1.0 10-1733126501/24/685C 5.41008800831.40.167.45 178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1733-0/0/472. 0.0010506303030.00.006.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1733-0/0/333. 0.00122004418920.00.003.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/341. 0.0069904765710.00.0014.80 46.101.103.192http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 14-1733-0/0/258. 0.00122903763710.00.002.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/278. 0.00123303919250.00.003.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/181. 0.00123002888030.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/146. 0.00119902159430.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/49. 0.0012220464520.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/16. 0.0012070137230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/118. 0.0037101756370.00.007.42 134.122.89.242http/1.1localhost:80GET /config.json HTTP/1.0 21-1733-0/0/198. 0.003597263351660.00.002.07 162.158.106.90http/1.1www.chonlateeplus.com:443GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1 22-1733-0/0/17. 0.0012210145630.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/8. 0.001227053030.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/6. 0.001228025030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/98. 0.0037111495680.00.000.78 134.122.89.242http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 26-1733-0/0/88. 0.0012310983180.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1733-0/0/38. 0.0012190201420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/8. 0.001218135956180.00.000.02 154.16.78.225http/1.1 29-1733-0/0/3. 0.001223019290.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1733-0/0/95. 0.003598471811710.00.001.00 172.68.234.137http/1.1www.chonlateeauto.com:443POST /wp-cron.php?doing_wp_cron=1694893899.82295298576354980468 31-1733-0/0/1. 0.001235010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1733-0/0/3. 0.001224023590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1733-0/0/4. 0.001213050680.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1733-0/0/3. 0.001214018340.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1733-0/0/4. 0.001212034410.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1733-0/0/85. 0.0045001396670.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1733-0/0/3. 0.001225010240.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1733-0/0/94. 0.003666851493450.00.000.75 162.158.106.91http/1.1www.chonlateeplus.com:443GET /wp-content/themes/seotheme/db.php?u HTTP/1.1 39-1733-0/0/7. 0.001198086250.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1733-0/0/3. 0.001226040.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 72subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 114 seconds, (range: 0...288)index usage: 2%, cache usage: 3%total entries stored since starting: 1831total entries replaced since starting: 0total entries expired since starting: 1759total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5556 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 19:56 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c1787a1f8Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 03:00:04 +07 Restart Time: Thursday, 14-Sep-2023 00:23:29 +07 Parent Server Config. Generation: 1720 Parent Server MPM Generation: 1719 Server uptime: 2 hours 36 minutes 35 seconds Server load: 0.60 0.55 0.54 Total accesses: 8193 - Total Traffic: 126.1 MB - Total Duration: 12867444 CPU Usage: u2720.13 s5104.32 cu50511500 cs12375300 - 669000% CPU load .872 requests/sec - 13.7 kB/second - 15.8 kB/request - 1570.54 ms/request 2 requests currently being processed, 8 idle workers _.__C___.__W...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1719111500/3/575_ 0.88119467220.00.016.91 172.70.134.70http/1.1www.farmoflove.com:80POST /xmlrpc.php HTTP/1.0 1-1719-0/0/657. 0.0011608889080.00.0012.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1719104980/64/388_ 35.93106085690.00.683.75 134.122.63.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1719105060/59/522_ 35.90408825150.09.0814.74 134.122.63.192http/1.1localhost:443GET / HTTP/1.1 4-1719110201/13/574C 4.10017980841.40.138.36 134.122.63.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1719108490/29/326_ 13.53207052330.00.604.88 134.122.63.192http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 6-1719108550/34/383_ 13.48116516470.01.545.41 134.122.63.192http/1.1localhost:443GET /v2/_catalog HTTP/1.1 7-1719110800/9/384_ 2.16107061580.00.0412.68 134.122.63.192http/1.1localhost:443GET /about HTTP/1.1 8-1719-0/0/448. 0.002407341680.00.005.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1719110880/8/289_ 5.54215492360.00.083.57 172.70.130.235http/1.1www.farmoflove.com:80POST /xmlrpc.php HTTP/1.0 10-1719106650/54/268_ 29.18414709770.00.643.37 134.122.63.192http/1.1 11-1719108610/30/237W 11.56004466190.00.423.53 134.122.63.192http/1.1localhost:443GET /server-status HTTP/1.1 12-1719-0/0/137. 0.0011902628740.00.007.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1719-0/0/205. 0.0039993458110.00.002.85 3.252.198.104http/1.1www.chonlateebusiness.com:443GET /wp-content/plugins/so-widgets-bundle/widgets/button/css/st 14-1719-0/0/284. 0.00175003916850.00.003.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1719-0/0/204. 0.00420702606180.00.002.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1719-0/0/14. 0.0042130398190.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1719-0/0/13. 0.0041810451110.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1719-0/0/67. 0.0042140977330.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1719-0/0/103. 0.00419701587400.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1719-0/0/111. 0.00334901253490.00.000.73 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.0 21-1719-0/0/41. 0.0041940378610.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1719-0/0/103. 0.00422201409610.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1719-0/0/85. 0.00422001159350.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1719-0/0/167. 0.00419002853240.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1719-0/0/11. 0.0042090416760.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1719-0/0/191. 0.00330402018290.00.001.49 51.15.17.105http/1.1www.chonlateepro.com:80GET /wp-admin/dropdown.php HTTP/1.0 27-1719-0/0/126. 0.00398401751060.00.001.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1719-0/0/78. 0.00419901163110.00.003.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1719-0/0/110. 0.0033177731587560.00.000.66 172.71.134.123http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 30-1719-0/0/194. 0.00420802176920.00.001.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1719-0/0/14. 0.0042050237680.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1719-0/0/15. 0.0041980343510.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1719-0/0/72. 0.00420001339000.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1719-0/0/124. 0.00327601468900.00.000.90 51.15.17.105http/1.1www.chonlateepro.com:80GET /about.php HTTP/1.0 35-1719-0/0/102. 0.00421101396420.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1719-0/0/77. 0.00419601103280.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1719-0/0/24. 0.0041890464130.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1719-0/0/10. 0.0042100244910.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1719-0/0/101. 0.00331111166230.00.000.72 128.199.107.85http/1.1www.pndintertrade.com:443GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1 40-1719-0/0/10. 0.0042150218960.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1719-0/0/104. 0.00419201518840.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1719-0/0/36. 0.0042180518450.00.000.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1719-0/0/9. 0.0042010263700.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1719-0/0/9. 0.0042160241300.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1719-0/0/64. 0.0041780217990.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1719-0/0/9. 0.0042060226950.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1719-0/0/99. 0.00334611159860.00.000.88 159.223.102.13http/1.1localhost:80GET /telescope/requests HTTP/1.0 48-1719-0/0/8. 0.0042030206300.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1719-0/0/11. 0.0041870257510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-09-13 19:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910ce013910bApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 04:27:08 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 24 minutes 56 seconds Server load: 0.29 0.47 0.70 Total accesses: 2626 - Total Traffic: 17.9 MB - Total Duration: 2939673 CPU Usage: u2726.18 s5098.5 cu50458200 cs12364100 - 4.2e+6% CPU load 1.76 requests/sec - 12.3 kB/second - 7.0 kB/request - 1119.45 ms/request 4 requests currently being processed, 5 idle workers _WC._C.C_.__...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716101720/74/269_ 39.06003192580.00.621.84 139.59.230.191http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-1716107010/7/237W 2.54002526510.00.061.65 139.59.230.191http/1.1localhost:443GET /server-status HTTP/1.1 2-1716106081/16/269C 10.35003060521.30.121.78 139.59.230.191http/1.1localhost:443GET /about HTTP/1.1 3-1716-0/0/252. 0.0023702971410.00.002.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1716102050/73/184_ 31.89002306350.00.461.17 139.59.230.191http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 5-1716102111/71/268C 36.95002972141.40.532.02 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1716-0/0/153. 0.0017011748920.00.000.95 159.89.83.196http/1.1localhost:443GET /login.action HTTP/1.1 7-1716104471/36/231C 11.74002236262.70.281.36 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 8-1716105010/33/209_ 11.990112181990.00.161.23 139.59.230.191http/1.1 9-1716-0/0/214. 0.0024002465890.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1716105620/23/219_ 9.82002373310.00.131.49 139.59.230.191http/1.1localhost:443GET / HTTP/1.1 11-1716105740/23/121_ 11.1505511360790.00.170.70 172.68.231.144http/1.1www.chonlateetravel.com:80POST /wp-login.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 51subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 72 seconds, (range: 8...298)index usage: 1%, cache usage: 2%total entries stored since starting: 324total entries replaced since starting: 0total entries expired since starting: 273total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 21 hit, 649 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 21:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c36ae8a23Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 18:41:14 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 14 hours 39 minutes Server load: 1.10 1.06 0.98 Total accesses: 73970 - Total Traffic: 1.0 GB - Total Duration: 105813988 CPU Usage: u2734.08 s5073.05 cu50283900 cs12325900 - 119000% CPU load 1.4 requests/sec - 20.4 kB/second - 14.6 kB/request - 1430.5 ms/request 6 requests currently being processed, 12 idle workers _WW_W__CWC________................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702231970/93/6289_ 43.220109786608500.01.3788.98 172.69.65.6http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 1-1702234900/24/6265W 6.8117086957650.00.2194.97 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 2-1702235500/23/6046W 8.047088885780.00.4094.05 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 3-1702236090/15/6044_ 5.77051387659150.00.2785.21 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/financial-analyst-working-offic 4-1702232400/79/5630W 35.1217080287080.01.9183.66 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1694346056.69620895385742187500 5-1702235600/24/5935_ 6.401080872570.00.2978.20 137.184.162.65http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-1702236730/7/5406_ 1.640283107770.00.0572.09 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-includes/js/wp-emoji-release.min.js?ver=6.3.1 HTTP/1.1 7-1702236001/17/5546C 4.380082581991.40.1181.62 137.184.162.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1702235680/21/5150W 9.960071101000.00.2263.19 137.184.162.65http/1.1localhost:443GET /server-status HTTP/1.1 9-1702236791/6/4718C 0.06012696602373247.90.3661.89 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/corporate-business-handshake-pa 10-1702233470/62/4223_ 49.801059156950.02.1169.02 137.184.162.65http/1.1localhost:443GET /about HTTP/1.1 11-1702236810/8/3521_ 1.37025747581450.00.0561.94 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/promotion-company-regis-1000x10 12-1702233710/55/3368_ 18.71151549782680.01.7844.39 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/busy-employer-1000x667.jpg HTTP 13-1702236910/5/1585_ 0.03125621498760.00.0920.40 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/%E0%B9%80%E0%B8%A7%E0%B9%87%E0% 14-1702236990/3/1274_ 0.03226517820200.00.1318.58 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/cropped-CHONLATEE-NEXTBIZ_LINE- 15-1702237060/3/935_ 0.02175912137680.00.1111.41 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/golden-abacus-with-chinese-rmb- 16-1702237120/4/398_ 0.0212418124470.00.065.68 54.218.191.139http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/website.jpg HTTP/1.1 17-1702237200/2/342_ 0.04014041480.00.013.29 217.196.1.141http/1.1www.summer-techthai.com:443POST /xmlrpc.php HTTP/1.1 18-1702-0/0/67. 0.00145246888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.001333701655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001452601344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0014521037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.001331604933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00145410733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0014530036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0014540086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0014513068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0014539010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.00133105501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0014523074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0014538010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.001364201144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0014537010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.00132647261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.001333502967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.001309403934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0014536041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0014510095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.00130956982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0042757000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0042743060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 51subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 130 seconds, (range: 5...294)index usage: 1%, cache usage: 2%total entries stored since starting: 13562total entries replaced since starting: 0total entries expired since starting: 13511total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 173 hit, 28705 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 11:39 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c933fd9afApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 05:56:27 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 1 hour 54 minutes 16 seconds Server load: 0.41 0.46 0.46 Total accesses: 8339 - Total Traffic: 108.0 MB - Total Duration: 9472526 CPU Usage: u2662.99 s5033.03 cu50047400 cs12275200 - 909000% CPU load 1.22 requests/sec - 16.1 kB/second - 13.3 kB/request - 1135.93 ms/request 4 requests currently being processed, 6 idle workers _W__C__WW.._...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685122870/15/773_ 6.36118189888390.00.0910.35 172.71.246.58http/1.1www.jrajar.com:80GET /wp-login.php HTTP/1.0 1-1685123380/11/700W 5.23007733570.00.108.89 45.79.116.95http/1.1localhost:443GET /server-status HTTP/1.1 2-1685119710/81/644_ 26.85106951700.00.567.20 45.79.116.95http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-1685122010/38/602_ 14.371106348390.00.278.54 205.169.39.104http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-content/plugins/royal-elementor-addons/assets/js/lib/in 4-1685124231/1/557C 0.00016788021.40.007.27 45.79.116.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1685121160/45/447_ 12.8818304399340.00.286.17 172.68.234.184http/1.1www.jrajar.com:80POST /wp-cron.php?doing_wp_cron=1694040985.35863304138183593750 6-1685119780/80/643_ 30.04046794630.00.707.45 205.169.39.104http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-content/plugins/royal-elementor-addons/assets/js/lib/ao 7-1685122080/35/623W 7.89107702600.00.245.82 172.71.246.58http/1.1www.jrajar.com:80POST /wp-login.php HTTP/1.0 8-1685119800/84/520W 23.63005627080.00.644.91 172.68.234.213http/1.1www.jrajar.com:80POST /wp-cron.php?doing_wp_cron=1694040987.35604691505432128906 9-1685-0/0/612. 0.0012406785610.00.0012.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1685-0/0/437. 0.0011905422600.00.005.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1685122140/36/390_ 9.92004407170.00.325.10 45.79.116.95http/1.1localhost:443GET /about HTTP/1.1 12-1685-0/0/275. 0.0063203352490.00.003.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1685-0/0/200. 0.00217902528990.00.004.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1685-0/0/213. 0.0015667182234470.00.002.81 40.77.29.203http/1.1www.siamsolarrooftop.com:443GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1 15-1685-0/0/198. 0.00216602044560.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1685-0/0/98. 0.00218101043150.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/95. 0.0036970882430.00.001.33 172.172.3.127http/1.1www.chonlateebusiness.com:80GET /test HTTP/1.0 18-1685-0/0/3. 0.004368019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.00367611391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.004354015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.00364510331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.00366531185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.00436108790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.004363010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.004360030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.004371010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.004358011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.004359012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.00435609920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.004370010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 63subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 104 seconds, (range: 0...270)index usage: 2%, cache usage: 2%total entries stored since starting: 1516total entries replaced since starting: 0total entries expired since starting: 1453total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 20 hit, 3416 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-06 22:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910cd71b92ffApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 05:07:29 +07 Restart Time: Monday, 04-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1676 Parent Server MPM Generation: 1675 Server uptime: 1 hour 5 minutes 17 seconds Server load: 0.46 0.44 0.69 Total accesses: 7577 - Total Traffic: 81.1 MB - Total Duration: 10741458 CPU Usage: u2630.45 s4993.5 cu49774500 cs12213800 - 1580000% CPU load 1.93 requests/sec - 21.2 kB/second - 11.0 kB/request - 1417.64 ms/request 4 requests currently being processed, 6 idle workers _WWC_W____........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1675280300/25/629_ 7.41008317110.00.116.90 165.232.76.155http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1675280180/27/555W 11.32008414510.00.1516.10 167.71.196.133http/1.1www.thai-pack.com:80GET //feed/ HTTP/1.0 2-1675278410/60/619W 21.38007767560.00.305.26 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 3-1675281311/13/579C 10.42008244631.40.114.68 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1675279730/34/546_ 11.86006759930.00.705.36 165.232.76.155http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-1675282290/3/557W 0.90008202710.00.024.04 27.254.96.168http/1.1www.thai-pack.com:80POST /wp-cron.php?doing_wp_cron=1693778849.64393997192382812500 6-1675282470/1/421_ 0.3808085013380.00.003.39 167.71.196.133http/1.1www.thai-pack.com:80GET / HTTP/1.0 7-1675279000/49/430_ 16.73005970030.00.533.54 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 8-1675279080/45/401_ 18.9704055783250.00.323.39 27.254.96.168http/1.1www.thai-pack.com:80POST /wp-cron.php?doing_wp_cron=1693778848.66653203964233398437 9-1675279140/46/401_ 20.400205029460.00.294.10 167.71.196.133http/1.1www.thai-pack.com:80GET //wp-includes/ID3/license.txt HTTP/1.0 10-1675-0/0/156. 0.0085401693950.00.001.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1675-0/0/325. 0.0085605780780.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1675-0/0/328. 0.0015713675230.00.002.44 198.199.121.22http/1.1localhost:443GET /server-status HTTP/1.1 13-1675-0/0/136. 0.0085502601070.00.001.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1675-0/0/264. 0.003355134076130.00.002.48 167.172.232.142http/1.1 15-1675-0/0/198. 0.0085903373530.00.001.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1675-0/0/118. 0.00100602239370.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1675-0/0/142. 0.00103502642740.00.001.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1675-0/0/113. 0.00102902380790.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1675-0/0/108. 0.00102701729480.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1675-0/0/41. 0.009720448690.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1675-0/0/101. 0.00103001277660.00.000.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1675-0/0/182. 0.0040302230500.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1675-0/0/10. 0.001003054720.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1675-0/0/3. 0.002541042940.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1675-0/0/8. 0.0025160139350.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1675-0/0/4. 0.002536045140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1675-0/0/3. 0.002542052020.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1675-0/0/2. 0.002545027020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1675-0/0/42. 0.0023140838020.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1675-0/0/97. 0.00186201481940.00.002.06 74.207.237.46http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 31-1675-0/0/7. 0.0025260102580.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1675-0/0/31. 0.0023640667250.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1675-0/0/2. 0.002548010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1675-0/0/3. 0.002531087350.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1675-0/0/3. 0.002534051520.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1675-0/0/5. 0.002528081210.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1675-0/0/5. 0.002535044850.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1675-0/0/2. 0.002540045990.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 53subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 150 seconds, (range: 4...293)index usage: 1%, cache usage: 2%total entries stored since starting: 1569total entries replaced since starting: 0total entries expired since starting: 1516total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 1 hit, 2725 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 22:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c3e0da6b1Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 00:00:36 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 6 hours 12 minutes 36 seconds Server load: 9.05 8.90 8.12 Total accesses: 166272 - Total Traffic: 1.1 GB - Total Duration: 213721069 CPU Usage: u2995.96 s5017.18 cu48737000 cs11948600 - 271000% CPU load 7.44 requests/sec - 53.3 kB/second - 7.2 kB/request - 1285.37 ms/request 14 requests currently being processed, 5 idle workers _R__CWWWWWWRCWCC...._W_........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-16526670/6/10188_ 3.370853127996160.00.0281.26 162.158.175.179http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 1-16525030/62/10035R 37.040920127790060.00.3176.88 172.71.174.195http/1.1 2-16526060/21/9921_ 15.200288124379430.00.0869.81 172.173.110.165http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 3-16524810/72/9646_ 51.5701160123808390.00.3178.57 172.71.160.119http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 4-16524431/78/9682C 55.910852121592283.80.3264.70 172.70.174.19http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 5-16526760/4/9488W 3.3600120295590.00.0162.37 172.173.110.165http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 6-16523480/99/9352W 66.8400118304950.00.4961.92 20.213.240.186http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 7-16525800/28/9454W 21.2000120088490.00.1061.18 172.69.65.224http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 8-16524100/92/9133W 61.5000115299680.00.4364.64 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 9-16524530/82/8685W 56.5500112592130.00.3162.50 172.71.160.119http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 10-16526820/1/8550W 0.8500110005630.00.0071.33 172.71.166.27http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 11-16525100/50/8090R 35.531864101019400.00.1957.54 172.173.90.228http/1.1 12-16525301/38/7919C 23.8310100599031.40.2552.58 139.144.150.45http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-16524910/71/7450W 49.410096320240.00.3347.71 107.189.31.85http/1.1www.pokaorganize.com:443POST /wp-login.php HTTP/1.1 14-16525391/39/7311C 25.780114794364883.80.1752.37 172.71.166.20http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 15-16526291/18/5982C 12.280650772339113.20.1339.50 172.173.110.210http/1.1www.leadingservice.co.th:443POST //wp-login.php HTTP/1.1 16-1652-0/0/5757. 0.005109673245500.00.0036.17 172.71.174.195http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 17-1652-0/0/5043. 0.0046064899580.00.0032.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1652-0/0/3837. 0.0012050775040.00.0024.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1652-0/0/2520. 0.0037033819780.00.0016.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-16524690/83/2223_ 55.37082131651500.00.3613.82 172.71.174.194http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 21-16525630/46/1293W 29.110019268340.00.208.27 139.144.150.45http/1.1localhost:443GET /server-status HTTP/1.1 22-16525880/31/1078_ 22.20086116380970.00.126.07 162.158.174.21http/1.1www.torrong.co.th:80POST //xmlrpc.php HTTP/1.0 23-1652-0/0/722. 0.001086126010934870.00.004.25 172.71.160.85http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 24-1652-0/0/538. 0.0010773717987810.00.002.75 167.71.196.133http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 25-1652-0/0/342. 0.00124205475740.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1652-0/0/290. 0.00123904772430.00.001.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1652-0/0/193. 0.00123203007310.00.001.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/137. 0.00108702137270.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/222. 0.0010767303309840.00.001.31 162.158.174.247http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 30-1652-0/0/103. 0.00429710451980970.00.000.44 167.71.196.133http/1.1www.nakindogtraining.com:443POST //xmlrpc.php HTTP/1.1 31-1652-0/0/108. 0.00431114931708720.00.000.51 172.70.188.83http/1.1www.chonlateeit.com:443GET /about.php HTTP/1.1 32-1652-0/0/136. 0.0043138612273450.00.000.63 23.101.127.100http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 33-1652-0/0/60. 0.00195820565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.00195800696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.00195760719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.00196310349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.00194344061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.00196517143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.00196070530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.00196330257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.00196390208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.00196450142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.00196100543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.00194714221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.00196210415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.00194317931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.001944310251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.00194229421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.00196500109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds
Found on 2023-08-31 16:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910ce24dff1aApache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:03:18 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 1 minute Server load: 4.47 4.55 5.07 Total accesses: 158937 - Total Traffic: 926.9 MB - Total Duration: 205024123 CPU Usage: u2762.9 s4881.79 cu47920000 cs11729700 - 330000% CPU load 8.8 requests/sec - 52.6 kB/second - 6.0 kB/request - 1289.97 ms/request 12 requests currently being processed, 5 idle workers W_C_RR..WW..W_W__RRCR............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164527060/8/9690W 4.0500125571140.00.0557.84 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 1-164526970/11/9533_ 5.720398120916570.00.1053.40 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 2-164527131/5/9322C 1.7200121268051.40.0349.25 139.144.150.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-164525260/50/9262_ 31.320357119649900.00.4749.58 139.196.46.20http/1.1www.siam2job.com:80POST /wp-login.php HTTP/1.0 4-164524600/70/9200R 36.150999118011320.00.4448.70 40.122.174.22http/1.1 5-164527210/1/8996R 0.772784117535780.00.0047.78 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 6-1645-0/0/8935. 0.0020803117517310.00.0053.28 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 7-1645-0/0/9003. 0.00500116484520.00.0064.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-164524840/62/8634W 31.2900109977690.00.4158.02 172.71.166.61http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 9-164524900/59/8446W 33.6500109686840.00.3945.83 139.144.150.26http/1.1localhost:443GET /server-status HTTP/1.1 10-1645-0/0/8292. 0.00540104464810.00.0040.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1645-0/0/8384. 0.00530110493210.00.0045.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-164526380/35/8020W 18.8000104236350.00.2043.13 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 13-164526390/30/7321_ 15.77054895585270.00.1541.46 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 14-164526420/34/7168W 15.620093079050.00.2452.53 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 15-164525470/45/6537_ 26.260104982536800.00.3135.92 172.69.67.119http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 16-164525490/48/6189_ 24.66064680973040.00.2837.03 167.71.185.75http/1.1 17-164525600/43/5012R 19.202163503810.00.4728.83 67.205.165.14http/1.1 18-164525660/42/3552R 23.330205746348840.00.3832.91 172.69.67.118http/1.1 19-164525721/46/2305C 25.27063928627593.80.2912.06 172.71.166.245http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 20-164525780/41/1916R 22.40057425695520.00.2311.24 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 21-1645-0/0/984. 0.0033011362750.00.005.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1645-0/0/303. 0.00134403375990.00.001.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1645-0/0/188. 0.00135402121220.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1645-0/0/205. 0.0012783692785260.00.001.78 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 25-1645-0/0/201. 0.0012597702551110.00.001.11 172.71.166.56http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 26-1645-0/0/128. 0.00137401633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0014100296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00141401155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0012945411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00128202410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00125121789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0015585000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00154264221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00154284021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00154333661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00154273821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0015579011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0015575018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0015583030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00155610118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0015566054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0015563072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00154323841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00154314171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 121subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 59 seconds, (range: 0...239)index usage: 4%, cache usage: 5%total entries stored since starting: 6102total entries replaced since starting: 0total entries expired since starting: 5981total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 27383 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c2caea573Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:24:27 +07 Restart Time: Wednesday, 30-Aug-2023 00:16:28 +07 Parent Server Config. Generation: 1644 Parent Server MPM Generation: 1643 Server uptime: 7 minutes 58 seconds Server load: 5.50 5.85 6.44 Total accesses: 5259 - Total Traffic: 37.7 MB - Total Duration: 4976057 CPU Usage: u2698.96 s4856.87 cu47807900 cs11700200 - 1.25e+7% CPU load 11 requests/sec - 80.7 kB/second - 7.3 kB/request - 946.198 ms/request 18 requests currently being processed, 0 idle workers WRWCWCRCCCCWWWWWCR................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1643197490/24/325W 6.00002689470.00.092.25 51.81.167.146http/1.1www.tafa.or.th:443GET / HTTP/1.1 1-1643198690/9/284R 4.89012533240.00.091.86 168.61.149.69http/1.1www.uniqueworkthailand.com:443 2-1643189330/42/329W 18.03003061290.00.272.33 168.61.169.70http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 3-1643178551/79/302C 31.87012943621.30.482.44 139.59.230.191http/1.1localhost:443GET /about HTTP/1.1 4-1643200260/7/304W 1.49002923620.00.032.17 168.61.169.70http/1.1www.dtacbusiness.com:80POST //wp-login.php HTTP/1.0 5-1643201291/7/281C 0.03032723713.80.011.89 128.199.195.68http/1.1localhost:443GET /server-status HTTP/1.1 6-1643178610/78/293R 33.06002781660.00.542.19 23.99.197.177http/1.1www.nptpropertythailand.com:443 7-1643201371/3/274C 0.01012386731.40.001.87 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1643179961/72/277C 29.53072695022.70.441.77 128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1643181891/74/239C 23.89022234612.70.391.59 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1643187871/44/270C 19.22002420681.30.301.87 128.199.195.68http/1.1localhost:443GET /about HTTP/1.1 11-1643189620/40/230W 15.74002047740.00.291.66 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 12-1643190010/39/235W 15.67002270690.00.181.66 134.122.89.242http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 13-1643189640/33/230W 18.54002513350.00.241.66 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 14-1643190300/39/265W 13.88002606530.00.231.94 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 15-1643190360/33/241W 13.75002244000.00.211.74 139.59.230.191http/1.1localhost:443GET /server-status HTTP/1.1 16-1643190651/39/237C 13.88002266531.40.202.07 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1643201390/0/96R 0.00001022800.00.000.67 85.215.215.172http/1.1www.chonlateebusiness.com:443 18-1643-0/0/174. 0.00562041630150.00.001.29 168.61.169.70http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 19-1643-0/0/95. 0.00962861127990.00.000.74 168.61.169.70http/1.1www.dtacbusiness.com:80POST //wp-login.php HTTP/1.0 20-1643-0/0/111. 0.002310929200.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1643-0/0/5. 0.00242222960.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1643-0/0/65. 0.001460671270.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1643-0/0/97. 0.00987441013590.00.000.80 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 149subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 75 seconds, (range: 1...281)index usage: 5%, cache usage: 6%total entries stored since starting: 227total entries replaced since starting: 0total entries expired since starting: 78total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 410 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910c68016fc1Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 30-Jun-2023 09:32:50 +07 Restart Time: Friday, 30-Jun-2023 09:31:39 +07 Parent Server Config. Generation: 1382 Parent Server MPM Generation: 1381 Server uptime: 1 minute 10 seconds Server load: 1.81 2.16 2.01 Total accesses: 302 - Total Traffic: 1.3 MB - Total Duration: 281488 CPU Usage: u2142.58 s3706.99 cu34755900 cs8297750 - 6.15e+7% CPU load 4.31 requests/sec - 18.6 kB/second - 4421 B/request - 932.079 ms/request 12 requests currently being processed, 4 idle workers CC__CWCW_WRRWC_R.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1381112511/22/22C 7.8601194511.40.100.10 104.248.140.11http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1381112731/24/24C 6.7701292112.70.050.05 143.110.218.229http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-1381112790/24/24_ 6.0900271990.00.070.07 104.131.1.32http/1.1www.spamechanicssystem.com:80GET /.git/config HTTP/1.0 3-1381114140/12/19_ 1.6400157210.00.020.06 104.131.1.32http/1.1www.spamechanicssystem.com:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-1381115211/5/16C 0.6102146993.40.010.07 104.248.140.11http/1.1localhost:443GET /server-status HTTP/1.1 5-1381114240/12/19W 2.4800135620.00.150.16 68.183.64.176http/1.1localhost:443GET /server-status HTTP/1.1 6-1381114731/13/25C 1.6701187241.40.020.10 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1381113100/25/25W 7.0200144410.00.090.09 64.227.126.135http/1.1www.spamechanicssystem.com:443GET /.vscode/sftp.json HTTP/1.1 8-1381113160/26/26_ 6.2500159320.00.090.09 164.90.222.93http/1.1localhost:443GET /about HTTP/1.1 9-1381114590/3/10W 0.016037260.00.010.02 27.254.96.168http/1.1www.siamgassaver.com:443POST /wp-cron.php?doing_wp_cron=1688092363.39802598953247070312 10-1381113280/23/23R 4.8600131300.00.070.07 104.248.140.11http/1.1localhost:443GET /about HTTP/1.1 11-1381115330/1/13R 0.0002603480.00.000.07 161.35.176.95http/1.1www.spamechanicssystem.com:443 12-1381113400/22/22W 6.4200202400.00.180.18 172.70.90.3http/1.1www.smebkk.com:80POST /xmlrpc.php HTTP/1.0 13-1381113531/20/20C 6.4501139151.40.100.10 68.183.64.176http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1381114790/13/13_ 0.66053211800.00.040.04 161.35.176.95http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 15-1381115350/1/1R 0.000240.00.000.00 40.77.167.81http/1.1www.xn--12cx2bef7bl0boq4ch6gugw SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 61subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 256 seconds, (range: 232...296)index usage: 2%, cache usage: 2%total entries stored since starting: 61total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 153 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-06-30 02:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cab5910ccab5910cd42e77a7Apache Status Apache Server Status for pop.spamechanicssystem.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 25-Oct-2022 14:07:08 +07 Restart Time: Tuesday, 25-Oct-2022 14:06:02 +07 Parent Server Config. Generation: 469 Parent Server MPM Generation: 468 Server uptime: 1 minute 5 seconds Server load: 1.61 1.03 1.05 Total accesses: 449 - Total Traffic: 7.7 MB - Total Duration: 235664 CPU Usage: u722.28 s1280.91 cu12904100 cs3103810 - 2.46e+7% CPU load 6.91 requests/sec - 120.6 kB/second - 17.5 kB/request - 524.864 ms/request 15 requests currently being processed, 0 idle workers RWCRWWRCRWRCRRC................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-468323640/16/29R 2.4600172470.00.050.35 134.209.227.71http/1.1 1-468322180/38/38W 8.6900213100.00.620.62 134.209.227.71http/1.1localhost:443GET /server-status HTTP/1.1 2-468323161/36/40C 6.0601152532.70.490.58 134.209.227.71http/1.1localhost:443GET /.git/config HTTP/1.1 3-468323900/12/44R 1.140056480.00.040.71 134.209.227.71http/1.1 4-468322450/37/37W 3.4217071430.01.051.05 172.68.234.132http/1.1www.12gobiz.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-468322600/21/21W 2.9628063300.00.620.62 172.68.234.132http/1.1www.12gobiz.com:80POST /wp-cron.php?doing_wp_cron=1666681600.09494090080261230468 6-468322660/29/29R 28.450824617690.00.910.91 194.195.241.186http/1.1 7-468322681/32/32C 5.4701161302.70.800.80 134.209.227.71http/1.1localhost:443GET /.env HTTP/1.1 8-468322780/34/34R 7.7007835296940.00.750.75 134.209.227.71http/1.1 9-468322800/36/36W 4.677096010.00.420.42 172.68.234.178http/1.1www.12gobiz.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 10-468322850/36/36R 7.0600224220.00.310.31 134.209.227.71http/1.1 11-468322871/38/38C 6.5001219532.80.490.49 134.209.227.71http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 12-468324000/8/8R 0.700011080.00.010.01 159.65.199.18http/1.1 13-468324060/18/18R 0.0600310.00.010.01 134.209.227.71http/1.1 14-468324311/9/9C 0.1000162.50.010.01 134.209.227.71http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 38subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 262 seconds, (range: 234...298)index usage: 1%, cache usage: 1%total entries stored since starting: 38total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 95 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-25 07:05
-