LeakIX - Host smtp.leadingservice.co.th

Domain smtp.leadingservice.co.th

Thailand

CS LOXINFO Public Company Limited.

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: smtp.leadingservice.co.th
Port: 80
URL: http://smtp.leadingservice.co.th

First seen 2022-10-24 06:12
Last seen 2024-02-02 09:03
Open for 466 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e476192b7d455da

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 16:03:56 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  28 days 6 hours 2 minutes 35 seconds
Server load: 2.00 2.00 2.00
Total accesses: 1848159 - Total Traffic: 23.8 GB - Total Duration: 2141104500
CPU Usage: u215.7 s116.9 cu32089.3 cs2210.25 - 1.42% CPU load
.757 requests/sec - 10.2 kB/second - 13.5 kB/request - 1158.51 ms/request
3 requests currently being processed, 125 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes032000
229661no0yes329000
329394no0yes032000
529374no0yes032000
Sum400 3125000

________________________________................................
_____________W______R_____R_____________________________________
................................________________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/42/14790_
13.5220160260950.00.15193.77
167.99.8.63http/1.1localhost:443GET / HTTP/1.1

0-92293730/40/15283_
13.50170139013330.00.11198.96
167.99.184.41http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/38/14851_
13.451300150309430.00.16192.73
167.172.232.142http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/35/15028_
13.39160145874910.00.09185.96
128.199.61.251http/1.1localhost:80GET /about HTTP/1.1

0-92293730/34/14932_
13.4710147711680.00.15185.42
207.154.240.169h2localhost:443[0/0] Software caused connection abort

0-92293730/33/15160_
13.6200156649130.00.12188.53
144.126.198.24http/1.1localhost:80GET /v2/_catalog HTTP/1.1

0-92293730/29/14829_
13.481300145588370.00.13200.23
164.92.192.25http/1.1localhost:443GET /config.json HTTP/1.1

0-92293730/32/15139_
13.331290150182030.00.07187.57
161.35.155.246h2localhost:443[0/0] Software caused connection abort

0-92293730/31/15098_
13.4310145226860.00.07229.87
167.99.8.63h2localhost:443[0/0] Software caused connection abort

0-92293730/39/15233_
13.391280148853400.00.15194.87
139.59.182.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-92293730/40/14800_
13.3520154393240.00.09200.68
164.92.192.25h2localhost:443[0/0] Software caused connection abort

0-92293730/36/14809_
13.47250147156130.00.08195.45
161.35.155.246http/1.1localhost:443GET / HTTP/1.1

0-92293730/45/14676_
13.4310137182730.00.14185.50
139.144.150.23http/1.1

0-92293730/37/14828_
13.50250169086490.00.09186.02
167.99.184.41http/1.1localhost:80GET / HTTP/1.1

0-92293730/32/15778_
13.33210141615000.00.09187.75
134.122.89.242http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/40/14832_
13.481310165341200.00.09182.48
161.35.155.246http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/46/14885_
13.481320143404980.00.12206.38
164.92.192.25http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/37/14944_
13.321330144939930.00.12189.30
164.92.192.25http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/29/14757_
13.3117160388310.00.05200.53
164.90.222.93h2localhost:443[0/0] Software caused connection abort

0-92293730/38/14983_
13.4310144639340.00.14193.81
159.89.83.196h2localhost:443[0/0] Software caused connection abort

0-92293730/41/14978_
13.481330181495860.00.17193.43
161.35.155.246http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/33/14998_
13.331300147053740.00.09204.07
178.62.3.65http/1.1localhost:443GET /about HTTP/1.1

0-92293730/41/15459_
13.6300150748560.00.17188.29
144.126.198.24http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/34/14665_
13.3530138765140.00.14190.19
74.207.237.114http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/44/14968_
13.50230162205830.00.10186.87
167.99.184.41http/1.1localhost:80GET /about HTTP/1.1

0-92293730/39/14642_
13.4810135981640.00.15197.00
104.131.1.32http/1.1

0-92293730/33/15140_
13.5140144713450.00.07194.51
139.144.150.23http/1.1localhost:443GET / HTTP/1.1

0-92293730/38/14923_
13.4800159187420.00.06213.30
164.90.222.93http/1.1

0-92293730/39/14726_
13.50190152174360.00.11175.93
167.99.184.41http/1.1localhost:80GET /.env HTTP/1.1

0-92293730/28/15176_
13.33160135139110.00.08225.13
161.35.190.56http/1.1localhost:80GET /.env HTTP/1.1

0-92293730/43/14662_
13.4510155573040.00.06199.14
139.144.150.23http/1.1

0-92293730/33/14923_
13.4800145814970.00.17185.16
161.35.155.246http/1.1localhost:443GET /_all_dbs HTTP/1.1

1-92-0/0/15731.
0.00426210138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.00426210136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.00426210174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.00426210150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.00426210146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.00426210134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.00426210172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.00426210165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.00426210127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.00426210152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.00426210148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.00426210159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.00426210159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15189.
0.00426210137016410.00.00183.04
159.223.102.13http/1.1localhost:80

Found on 2024-02-02 09:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e47619267127c63

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 13:13:56 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  2 days 3 hours 12 minutes 35 seconds
Server load: 3.00 3.06 3.07
Total accesses: 856466 - Total Traffic: 11.6 GB - Total Duration: 1062739782
CPU Usage: u324.09 s23.4 cu14405.2 cs756.42 - 8.41% CPU load
4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1240.84 ms/request
14 requests currently being processed, 50 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
014738no13yes626007
14311no4yes824001
229763yes2no00000
Sum3119 1450008

________WW___R________R_R__R______W______WWR_____R__RW__W_______
.......G...................G....................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-7147380/266/6818_
134.991103990464700.03.65100.07
159.203.94.228h2localhost:443[0/0] Software caused connection abort

0-7147380/217/7270_
134.741104871748320.02.13101.25
143.110.218.229h2localhost:443[0/0] Software caused connection abort

0-7147380/300/6856_
135.380078254870.03.2199.09
139.59.65.144http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-7147380/243/7077_
134.88037275264970.02.5891.37
143.110.218.229http/1.1

0-7147380/502/7061_
134.78049775742930.03.6488.74
139.59.65.144h2localhost:443[0/0] Software caused connection abort

0-7147380/235/7213_
135.440106386138400.03.0995.47
3.224.220.101http/1.1www.chonlateeboi.com:443GET /1316zypyitems/etidm9.html HTTP/1.1

0-7147380/259/6997_
135.00146270029340.03.24105.40
66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=todas-as-temporadas-de-ficheiros-secretos-est%C3%A3o-di

0-7147380/248/7086_
135.380073262850.02.6992.54
104.248.3.173http/1.1localhost:443GET / HTTP/1.1

0-7147381/217/7254W
115.84453068213780.02.73142.87
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-7147381/256/7061W
134.170077754780.02.7689.67
52.70.240.171http/1.1www.chonlateeboi.com:443GET /26567tobeetidm49ve.html HTTP/1.1

0-7147380/420/6911_
135.361103982130690.04.47110.80
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /triemnz-41216vitems/etidm37gev.html HTTP/1.1

0-7147380/246/6688_
134.420109783699650.03.0487.09
144.126.198.24h2localhost:443[0/0] Software caused connection abort

0-7147380/238/6724_
135.41035663348870.02.6788.26
91.92.247.158http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1

0-7147380/235/6936R
135.23132794219480.02.9094.60
91.92.247.158http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1

0-7147380/259/7585_
135.440071668760.02.8395.89
161.35.27.144http/1.1localhost:80GET /.DS_Store HTTP/1.1

0-7147380/275/6785_
134.79143993405330.02.3987.20
139.144.150.205h2localhost:443[0/0] Software caused connection abort

0-7147380/242/6924_
135.41081272309560.02.9589.63
110.44.119.226http/1.1www.siamsolarrooftop.com:443POST /wp-login.php HTTP/1.1

0-7147380/240/7033_
133.951265971197670.02.7494.14
139.59.65.144http/1.1

0-7147380/241/6991_
135.220103188143570.02.5988.12
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /gmvemnz-41151iitems/etidm71tz.htm HTTP/1.1

0-7147380/271/7025_
134.58075274427100.02.8295.13
144.126.198.24h2localhost:443[0/0] Software caused connection abort

0-7147380/246/7049_
134.9100112209350.02.7196.75
159.203.94.228h2localhost:443[0/0] Software caused connection abort

0-7147380/239/6772_
134.63189778236990.02.5090.79
139.144.150.205h2localhost:443[0/0] Software caused connection abort

0-7147380/259/7326R
135.202085943080.03.0796.99
66.249.73.132http/1.1

0-7147380/249/6865_
134.89133969475680.02.7097.16
144.126.198.24http/1.1

0-7147380/237/6782R
134.79389091562090.03.0586.33
3.224.220.101http/1.1www.chonlateeboi.com:443GET /31831qbkeitems/etidm11he HTTP/1.1

0-7147380/289/7093_
135.410063013560.03.9090.40
206.81.1.88http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-7147380/237/6900_
135.230076489390.03.0298.06
161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-7147380/259/6941R
134.53335087206680.02.97119.26
52.167.144.201h2www.thesungolden.com:443[1/0] schedule: stream 1, GET /g732307.shtml

0-7147380/234/6783_
135.271775543420.02.4085.19
161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.1

0-7147380/228/7075_
133.720106478409010.02.44124.14
159.203.94.228h2localhost:443[0/0] Software caused connection abort

0-7147380/197/6707_
135.410084101850.02.0897.31
139.59.65.144http/1.1localhost:443GET /about HTTP/1.1

0-7147380/256/7090_
134.88153975933010.02.8890.67
143.110.218.229h2localhost:443[0/0] Software caused connection abort

1-743110/20/6831_
10.100077275450.00.1288.75
161.35.27.144http/1.1localhost:80GET / HTTP/1.1

1-743110/73/6616_
9.540106077844470.00.9784.48
139.59.65.144h2localhost:443[0/0] Software caused connection abort

1-743111/22/6582W
10.0310104430740.00.1784.62
82.223.222.75http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-login.php HTTP/1.1

1-743110/22/6316_
10.240082217590.00.1783.64
139.144.150.205http/1.1

1-743110/24/6508_
10.120079299160.00.2797.02
144.126.198.24h2localhost:443[0/0] Software caused connection abort

1-743110/26/6541_
10.391077435780.00.2286.54
139.59.65.144http/1.1localhost:443GET / HTTP/1.1

1-743110/33/6553_
10.350089475620.00.3383.75
206.81.1.88http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

1-743110/27/6646_
9.881100689889910.00.2088.60
3.224.220.101http/1.1www.chonlateeboi.com:443GET /46343sabfetidm10lf.html HTTP/1.1

1-743110/23/6685_
10.320059900780.00.2686.38
161.35.176.95h2localhost:443[0/0] Software caused connection abort

1-743111/17/6574W
9.460082362100.00.1191.18
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /szhemnz-41189uetidm62.html HTTP/1.1

1-743111/12/6334W
5.8493085426250.00.1289.68
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

1-743110/21/6805_
10.0101378159380.00.1798.15
143.110.218.229http/1.1

1-743110/20/6583_
10.09142793450230.00.2587.89
161.35.176.95http/1.1

1-7

Found on 2024-01-07 06:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e47619202887c19

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 05-Jan-2024 22:35:09 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  12 hours 33 minutes 48 seconds
Server load: 2.77 2.54 2.49
Total accesses: 223055 - Total Traffic: 3.2 GB - Total Duration: 179266388
CPU Usage: u147.29 s8.74 cu3522.42 cs190.09 - 8.55% CPU load
4.93 requests/sec - 74.3 kB/second - 15.1 kB/request - 803.687 ms/request
8 requests currently being processed, 56 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
012776no5yes626001
112906no4yes230001
Sum209 856002

RW_____WR_______R___________W________________________R____R_____
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0127760/115/2432R
79.481105319929980.01.4937.54
178.62.3.65h2localhost:443[0/0] Software caused connection abort

0-0127761/100/2534W
79.070018822180.01.2131.30
138.68.133.118http/1.1localhost:80GET /server-status HTTP/1.1

0-0127760/113/2375_
78.90095631050500.01.3844.77
167.99.182.39h2localhost:443[0/0] Software caused connection abort

0-0127760/105/2595_
79.960105519241340.01.2633.58
52.70.240.171http/1.1www.chonlateeboi.com:443GET /697biwxitems/eti HTTP/1.1

0-0127760/115/2509_
79.40084019603830.01.3831.33
178.62.3.65http/1.1

0-0127760/120/2784_
79.39084419675920.01.5735.05
66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?eejvrsm-6257wetidm.html HTTP/1.1

0-0127760/164/2447_
79.970719311270.01.5929.96
128.199.62.55http/1.1localhost:80GET /server-status HTTP/1.1

0-0127761/122/2512W
78.890020036970.01.6532.93
158.220.123.227http/1.1www.summer-techthai.com:443GET /?item=ara%C5%84a-1328734 HTTP/1.1

0-0127760/122/2533R
79.301105519037050.01.6166.47
52.70.240.171http/1.1

0-0127760/129/2505_
78.710122119051200.01.7432.41
144.126.198.24h2localhost:443[0/0] Software caused connection abort

0-0127760/112/2461_
79.91184522523550.01.4230.29
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /wxlmeuk-1387yitems/etidm HTTP/1.1

0-0127760/115/2387_
79.920019087150.01.4031.13
128.199.62.55http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-0127760/106/2355_
79.861019272010.01.3233.18
138.68.133.118http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-0127760/127/2679_
78.900137420092780.01.5835.44
185.191.171.15http/1.1www.chonlateenextbiz.com:443GET /uftriw/the-biggest-dick-ever-nude.html HTTP/1.1

0-0127760/114/2706_
79.561022212350.01.6337.07
134.122.34.144h2localhost:443[0/0] Software caused connection abort

0-0127760/116/2438_
79.811019362400.01.4832.54
128.199.62.55http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-0127760/111/2374R
79.28199119564320.01.4231.21
165.232.76.155http/1.1

0-0127760/114/2562_
78.67098319351920.01.4335.40
31.184.236.34http/1.1

0-0127760/113/2573_
79.2801018874440.01.3733.85
144.126.198.24h2localhost:443[0/0] Software caused connection abort

0-0127760/111/2415_
79.910020991560.01.3929.75
128.199.62.55http/1.1localhost:80GET /v2/_catalog HTTP/1.1

0-0127760/113/2481_
79.8001119163310.01.3835.76
134.122.34.144http/1.1

0-0127760/125/2489_
79.580020123070.01.4636.30
143.42.118.5h2localhost:443[0/0] Software caused connection abort

0-0127760/122/2751_
79.85139618891020.01.5934.36
81.19.137.127http/1.1www.pennungmarket.com:80POST /xmlrpc.php HTTP/1.1

0-0127760/109/2400_
78.18084718459260.01.3631.98
144.126.198.24http/1.1

0-0127760/115/2412_
78.681223319486390.01.4031.58
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ixxmeuk-48147kitems/etidm.htm HTTP/1.1

0-0127760/114/2425_
79.561018795070.01.5331.45
165.232.76.155http/1.1

0-0127760/119/2357_
79.29184418584390.01.6730.26
178.62.3.65h2localhost:443[0/0] Software caused connection abort

0-0127760/98/2491_
79.950018927220.01.1762.30
138.68.133.118http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-0127761/117/2379W
79.070019036750.01.4830.12
188.165.232.135http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95

0-0127760/118/2709_
79.591018395600.01.3870.80
128.199.62.55http/1.1localhost:80GET / HTTP/1.1

0-0127760/115/2388_
79.700019030230.01.4037.66
165.232.76.155h2localhost:443[0/0] Software caused connection abort

0-0127760/104/2708_
79.341109119070100.01.3133.01
144.126.198.24http/1.1

1-0129060/109/1917_
71.1321714548010.01.4325.36
165.232.76.155h2localhost:443[0/0] Software caused connection abort

1-0129060/114/1703_
70.982106014044180.01.4122.22
85.208.96.193http/1.1www.1smestartup.com:443GET /tag/%E0%B8%95%E0%B8%A3%E0%B8%A7%E0%B8%88%E0%B8%AA%E0%B8%AD

1-0129060/108/1823_
71.271105514458640.01.3025.52
144.126.198.24h2localhost:443[0/0] Software caused connection abort

1-0129060/113/1716_
71.342014128920.01.4322.80
138.68.133.118http/1.1localhost:80GET / HTTP/1.1

1-0129060/109/1733_
71.510013876570.01.3327.21
138.68.133.118http/1.1localhost:80GET /v2/_catalog HTTP/1.1

1-0129060/105/1747_
70.39185013884030.01.2323.42
66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?cuhaonh-233703uitems/eti.htm HTTP/1.1

1-0129060/108/1772_
71.431014188980.01.3421.90
167.99.182.39http/1.1localhost:443GET / HTTP/1.1

1-0129060/110/1760_
71.05084814205850.02.4823.13
207.154.240.169http/1.1

1-0129060/93/1795_
71.422014357470.01.1924.30
128.199.62.55http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

1-0129060/156/1743_
71.22187913988780.01.5122.91
165.232.76.155h2localhost:443[0/0] Software caused connection abort

1-0129060/104/1726_
71.29184813626760.01.2925.99
207.154.240.169http/1.1

1-0129060/113/1809_
71.31068814740750.01.4624.36
144.126.198.24http/1.1

1-0129060/175/1792_
70.900014275000.01.6423.65
178.62.3.65http/1.1

1-0129060/99/1722_
71.31091113888330.01.2223.37
165.232.76.155http/1.1

1-0129060/134/1801_
71.30184914603290.01.4825.04
66.249.72.67http/1.1www.chonlateeadmin.com:443GE

Found on 2024-01-05 15:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e4761929a961f1e

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Tuesday, 12-Dec-2023 00:43:54 ICT
Restart Time: Friday, 01-Dec-2023 00:22:58 ICT
Parent Server Config. Generation: 43
Parent Server MPM Generation: 42
Server uptime:  11 days 20 minutes 56 seconds
Server load: 0.68 0.72 0.88
Total accesses: 4365356 - Total Traffic: 56.0 GB - Total Duration: 4125477267
CPU Usage: u179.66 s46.13 cu78638.1 cs4114.73 - 8.72% CPU load
4.59 requests/sec - 61.7 kB/second - 13.5 kB/request - 945.049 ms/request
12 requests currently being processed, 116 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
113923no0yes329000
213703no1yes428000
313704no0yes329000
513924no1yes230000
Sum402 12116000

................................___R___________________R______W_
W_R__________R_______________W________RW______________W_________
................................_R______________W_______________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-42-0/0/39438.
0.001122847358265920.00.00499.50
195.201.83.132http/1.1www.thesungolden.com:443GET /tzeu2e/samsung-pm983-firmware-ssd.html HTTP/1.1

0-42-0/0/38824.
0.001122882365500810.00.00489.86
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?148874rxilitems/etid.html HTTP/1.1

0-42-0/0/39196.
0.001122888400205990.00.00502.64
52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?193658rxilitems/etid.html HTTP/1.1

0-42-0/0/39239.
0.0011220388973120.00.00512.53
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /hmozycz95752bitems/etidm24uzb.html HTTP/1.1

0-42-0/0/39751.
0.001122943369260050.00.00566.31
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?xwmqxjd-31418zitems/etid.html HTTP/1.1

0-42-0/0/38814.
0.0011221126398202220.00.00490.73
195.201.83.132http/1.1www.thesungolden.com:443GET /tzeu2e/samsung-pm983-firmware-ssd.html HTTP/1.1

0-42-0/0/39138.
0.0011220402069420.00.00493.03
66.249.64.42http/1.1www.thaidaoherb.com:443GET /godsend/godsend.php?ite/prp100531hvortidm195232.html HTTP/

0-42-0/0/39909.
0.0011221216367066320.00.00500.86
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?cqrqxjd-76039eitems/etidm97pd HTTP/1.1

0-42-0/0/38868.
0.0011220379085210.00.00508.90
52.230.152.217http/1.1www.chonlateedesign.com:80GET /web-promote/ HTTP/1.1

0-42-0/0/39270.
0.001122595367326990.00.00501.47
144.76.67.250http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /tag/year-2566-financial-statement-closure-%E0%B8%AD%E0%B8%

0-42-0/0/38878.
0.0011221386384025070.00.00473.15
66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?udnhgeq-42075aitems/eti HTTP/1.1

0-42-0/0/38930.
0.0011220368421470.00.00522.38
188.165.241.181http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97

0-42-0/0/38825.
0.001122878374403580.00.00474.36
3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?153446rxilitems/etidm22u.html HTTP/1.1

0-42-0/0/38997.
0.0011221051406855700.00.00502.68
66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bgutmjj-25052hetid.htm HTTP/1.1

0-42-0/0/39185.
0.0011221165379639030.00.00492.25
66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?rwkiejy-29618xetidm10ejx.htm HTTP/1.1

0-42-0/0/38879.
0.001122892371377940.00.00547.12
52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?150861rxilitems/etidm68.htm HTTP/1.1

0-42-0/0/39850.
0.0011221109374331580.00.00526.81
66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?wfpzslq-39373cetidm.html HTTP/1.1

0-42-0/0/39367.
0.0011221223366063800.00.00485.13
40.77.167.235h2www.chonlateeaa.com:443[1/1] done: stream 1, GET /sitemap880.xml

0-42-0/0/39388.
0.001122900367170330.00.00509.03
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?jwyqxjd-76098letid.htm HTTP/1.1

0-42-0/0/39657.
0.001122869383840280.00.00545.46
66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?lgetrge-7980retid HTTP/1.1

0-42-0/0/39000.
0.001122870363770880.00.00513.82
66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?unnupca-40515aitems/eti HTTP/1.1

0-42-0/0/39221.
0.0011220387436970.00.00506.24
52.230.152.217http/1.1www.wealneosupply.com:80GET /robots.txt HTTP/1.1

0-42-0/0/38987.
0.0011221431406414790.00.00516.07
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?166920rxiletidm11arp.htm HTTP/1.1

0-42-0/0/38288.
0.0011221451361154300.00.00476.08
188.165.241.181http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97

0-42-0/0/39329.
0.0011221225370519850.00.00521.52
66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?tmmlbze-40358zetidm7.htm HTTP/1.1

0-42-0/0/38623.
0.0011220387982390.00.00472.33
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /impzycz95727citems/etidm36vz HTTP/1.1

0-42-0/0/39332.
0.0011220372505250.00.00585.11
130.255.166.82http/1.1www.1smestartup.com:80GET / HTTP/1.1

0-42-0/0/38557.
0.001122858369705720.00.00511.75
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?skhqxjd-15553uitems/eti HTTP/1.1

0-42-0/0/39158.
0.001122564411240670.00.00524.98
40.77.111.208http/1.1www.ddkserviceandtransport.com:GET /wp-json/wp/v2/users/ HTTP/1.1

0-42-0/0/39137.
0.001122890374606560.00.00505.74
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-340952ditems/etidm68ovd.html HTTP/1.1

0-42-0/0/39126.
0.001122885369584480.00.00495.06
188.165.241.181http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97

0-42-0/0/38859.
0.001122849377556310.00.00539.35
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?mqbqxjd-33643oitems/etidm HTTP/1.1

1-42139230/46/40007_
36.0300373149030.00.51505.87
128.199.195.68http/1.1localhost:443GET /.env HTTP/1.1

1-42139230/47/39903_
34.8911106381282880.00.59547.83
134.122.89.242http/1.1

1-42139230/92/39716_
35.65011383106990.05.30555.70
134.122.89.242h2localhost:443[0/0] Software caused connection abort

1-42139230/57/39959R
35.9711194391515680.00.67563.21
165.22.74.203http/1.1

1-42139230/112/40799_
35.6000363164820.06.20623.80
139.144.150.8h2localhost:443[0/0] Software caused connection abort

1-42139230/49/39509_
35.9710360478460.00.67564.64
128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-42139230/88/39650_
34.221844363338740.00.89530.48
206.81.1.88http/1.1

1-42139230/61/40067_
34.8501387206250.00.94511.33
164.90.205.35h2localhost:443[0/0] Software caused connection abort

1-42139230/46/39807_
36.0300375629570.00.53501.72
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /impzycz265351cetidm88vz.html HTTP/1.1

1-42139230/59/39896_
35.52114368109110.00.93510.71
128.199.195.68http/1.1localhost:443GET /server-status HTTP/1.1

Found on 2023-12-11 17:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e476192055d93cd

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Tuesday, 21-Nov-2023 00:27:23 ICT
Restart Time: Monday, 20-Nov-2023 10:17:03 ICT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime:  14 hours 10 minutes 20 seconds
Server load: 2.16 1.81 1.40
Total accesses: 74051 - Total Traffic: 1.0 GB - Total Duration: 66322991
CPU Usage: u26.11 s4.03 cu849.43 cs61.85 - 1.85% CPU load
1.45 requests/sec - 21.2 kB/second - 14.6 kB/request - 895.639 ms/request
15 requests currently being processed, 113 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
15488no7yes329001
25506no3yes230002
35745no3yes032000
45747no17yes10220110
Sum4030 151130113

................................___________________W__W_______W_
__________________________W___W_________________________________
__RR_W__W____W___RR_W___W_W_____................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/482.
0.009669413315570.00.005.19
40.77.167.8h2www.nakindogtraining.com:443[0/0] init

0-1-0/0/439.
0.009665572796940.00.003.95
103.102.234.145http/1.1

0-1-0/0/496.
0.009669522531710.00.004.93
185.191.171.18http/1.1www.chonlateefood.com:443GET /getidm4/qof9246oeoqitems.htm HTTP/1.1

0-1-0/0/491.
0.009668532924970.00.006.72
104.250.134.50http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.1

0-1-0/0/545.
0.0096611383432290.00.006.83
142.93.96.84http/1.1www.ckt-trading.com:443GET /xmlrpc.php HTTP/1.1

0-1-0/0/529.
0.0096610262495580.00.005.73
95.138.178.251http/1.1

0-1-0/0/567.
0.009668123480120.00.008.08
40.77.167.8h2www.nakindogtraining.com:443[1/1] done: stream 1, GET /wzy.php?opera-RENEW.xml

0-1-0/0/513.
0.00966802647900.00.006.42
203.170.192.183http/1.1www.12gobiz.com:80POST /wp-cron.php?doing_wp_cron=1700500273.43055605888366699218

0-1-0/0/469.
0.0096610393499550.00.005.14
5.101.157.215h2www.spamechanicssystem.com:443[0/0] init

0-1-0/0/537.
0.0096602643260.00.006.23
203.170.192.183http/1.1www.chonlateeboi.com:443POST /wp-cron.php?doing_wp_cron=1700500212.06381297111511230468

0-1-0/0/604.
0.009666732808620.00.006.01
85.208.96.194http/1.1www.chonlateeboi.com:443GET /22937oswzeti.html HTTP/1.1

0-1-0/0/580.
0.0096612553713670.00.0015.24
40.77.167.8h2www.nakindogtraining.com:443GET /wzy.php?opera-RENEW.xml HTTP/2.0

0-1-0/0/482.
0.0096611132630210.00.005.41
203.170.192.183http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-1-0/0/549.
0.0096602829680.00.004.85
52.167.144.222h2www.chonlateefbc.com:443[1/1] read: stream 0,  

0-1-0/0/455.
0.0096602575370.00.005.52
5.101.157.215h2www.spamechanicssystem.com:443[0/0] init

0-1-0/0/491.
0.009669274175990.00.007.74
5.101.157.215h2www.spamechanicssystem.com:443[0/0] init

0-1-0/0/527.
0.0096603229430.00.006.02
5.101.157.215http/1.1www.spamechanicssystem.com:443POST /wp-login.php HTTP/2.0

0-1-0/0/560.
0.009667933043610.00.004.46
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /wp-head.php HTTP/1.1

0-1-0/0/566.
0.0096602614520.00.0012.00
85.209.176.20http/1.1www.chonlateebusiness.com:80GET /wp-content/uploads/elementor/css/class_api.php HTTP/1.1

0-1-0/0/699.
0.009665893112350.00.0012.95
5.101.157.215h2www.spamechanicssystem.com:443[1/1] done: stream 1, POST /wp-login.php

0-1-0/0/449.
0.009665533508100.00.007.44
180.76.132.38http/1.1www.thaiquickservice.net:443POST /wp-login.php HTTP/1.1

0-1-0/0/527.
0.009663392008000.00.007.08
85.208.96.197http/1.1www.mkandptfoods.com:443GET /m5681840617.html HTTP/1.1

0-1-0/0/534.
0.009667023751060.00.004.61
66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mifcvxg-3925setidm.html HTTP/1.1

0-1-0/0/442.
0.009666993179410.00.006.11
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /wp-conflg.php HTTP/1.1

0-1-0/0/559.
0.009667073562600.00.0012.77
5.101.157.215http/1.1www.spamechanicssystem.com:443GET /wp-login.php HTTP/2.0

0-1-0/0/540.
0.0096642781480.00.006.36
5.255.231.141http/1.1www.seasabithailand.com:443GET /wp-theme/index.php HTTP/1.1

0-1-0/0/497.
0.0096602739420.00.004.52
85.209.176.20http/1.1www.chonlateebusiness.com:80GET /.well-known/acme-challenge/class_api.php HTTP/1.1

0-1-0/0/593.
0.0096602381270.00.004.94
52.167.144.222h2www.chonlateefbc.com:443[0/0] init

0-1-0/0/470.
0.0096602781600.00.009.65
50.62.144.122http/1.1www.xn--12ca1al2c4cm5fzaon1x.coGET /wp-login.php HTTP/1.1

0-1-0/0/534.
0.009666893402230.00.008.03
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /.well-known/class.api.php HTTP/1.1

0-1-0/0/519.
0.0096653571120.00.008.85
203.170.192.183http/1.1www.ckt-trading.com:443POST /wp-cron.php?doing_wp_cron=1700500207.71665501594543457031

0-1-0/0/490.
0.009667202331380.00.008.21
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /wp-content/uploads/elementor/css/class_api.php HTTP/1.1

1-154880/14/433_
4.51534831850450.00.153.99
207.46.13.151h2www.mkandptfoods.com:443GET /m73112651081.shtm HTTP/2.0

1-154880/9/324_
4.57102278950.00.083.38
161.35.190.56http/1.1www.leadingservice.co.th:80GET /debug/default/view?panel=config HTTP/1.1

1-154880/12/449_
4.39131291942670.00.103.38
167.99.8.63h2localhost:443[0/0] Software caused connection abort

1-154880/7/316_
4.48602077990.00.063.59
3.16.111.66http/1.1localhost:80GET /.well-known/acme-challenge/8O9dRGwqO9_tIeEbEFt2hwsLfLYv82g

1-154880/7/334_
4.46831611980640.00.043.39
164.92.192.25http/1.1www.chonlateefbc.com:443GET /.DS_Store HTTP/1.1

1-154880/17/353_
4.57002036800.00.175.30
134.122.89.242http/1.1localhost:80GET /login.action HTTP/1.1

1-154880/19/383_
4.32533201925830.00.153.91
159.223.102.13http/1.1www.chonlateefbc.com:80GET /v2/_catalog HTTP/1.1

1-154880/9/329_
4.253101576550.00.235.23
95.217.109.26http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A

1-154880/8/317_
4.57002299560.00.033.73
64.227.126.135http/1.1www.leadingservice.co.th:80GET /login.action HTTP/1.1

1-154880/14/418_
4.45002101490.00.144.48
207.154.240.169http/1.1

1-154880/11/553_
4.31001733760.00.0515.36
46.101.103.192http/1.1

1-154880/16/498_
4.36301935090.00.184.45
95.217.109.26http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A

1-154880/11/324_
4.51302282780.00.122.90
178.62.73.12http/1.1localhost

Found on 2023-11-20 17:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3135aa71ed35aa71edf81df6b0

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Saturday, 23-Sep-2023 15:50:54 +07
Restart Time: Saturday, 23-Sep-2023 04:02:11 +07
Parent Server Config. Generation: 1763
Parent Server MPM Generation: 1762
Server uptime:  11 hours 48 minutes 43 seconds
Server load: 0.75 0.72 0.70
Total accesses: 81003 - Total Traffic: 1.4 GB - Total Duration: 113968557
CPU Usage: u2813.37 s5181.16 cu51121600 cs12506200 - 150000% CPU load
1.9 requests/sec - 34.3 kB/second - 18.0 kB/request - 1406.97 ms/request
2 requests currently being processed, 8 idle workers
__.___..W__._R....................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1762259680/27/6407_
33.661087731250.00.43123.79
178.128.151.41http/1.1localhost:80GET /v2/_catalog HTTP/1.0

1-1762257860/58/6249_
9.832087371650.00.36115.71
178.128.151.41http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0

2-1762-0/0/6281.
0.00101087010290.00.00106.84
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

3-1762258990/41/6037_
9.150260379076090.00.5691.16
40.77.167.65http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89

4-1762258640/40/5922_
9.311179438410.00.42103.00
167.172.20.95http/1.1

5-1762258730/54/5955_
8.71184386517880.00.5983.56
27.254.96.168http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1695459051.75831604003906250000

6-1762-0/0/5412.
0.0099178583980.00.00116.35
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.0

7-1762-0/0/5225.
0.009134475304100.00.0076.74
107.189.31.85http/1.1www.ozonepluswater.net:443GET /wp-login.php HTTP/1.1

8-1762259200/39/5130W
39.870073274060.00.6791.47
178.128.151.41http/1.1localhost:80GET /server-status HTTP/1.0

9-1762256000/82/4575_
50.802164446480.01.0765.22
178.128.151.41http/1.1localhost:80GET /about HTTP/1.0

10-1762258800/46/4219_
6.122060337860.00.4770.88
167.172.20.95http/1.1

11-1762-0/0/4176.
0.00112059466380.00.0081.41
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

12-1762259830/33/3441_
3.860146449080.00.5778.32
178.128.151.41http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

13-1762259890/32/2985R
4.383040660560.00.2343.58
178.128.151.41http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0

14-1762-0/0/2369.
0.00878035259270.00.0039.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

15-1762-0/0/1966.
0.00882029539570.00.0035.54
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

16-1762-0/0/1500.
0.001930019788200.00.0027.08
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-1762-0/0/717.
0.0034768059024920.00.0012.96
51.222.15.45http/1.1www.dreamhightravel.com:443POST /wp-login.php HTTP/1.1

18-1762-0/0/581.
0.00385609942760.00.0014.23
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-1762-0/0/571.
0.00387309155650.00.009.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-1762-0/0/287.
0.00364503843590.00.008.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

21-1762-0/0/129.
0.00386201475090.00.005.46
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-1762-0/0/171.
0.00386804890960.00.0010.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-1762-0/0/52.
0.0038600474820.00.002.08
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-1762-0/0/222.
0.00331212073823280.00.004.21
27.254.96.168http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1POST /wp-cron.php?doing_wp_cron=1695455740.35536909103393554687

25-1762-0/0/30.
0.0053760173950.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-1762-0/0/100.
0.0048643911376730.00.001.11
150.230.93.233http/1.1www.ozonepluswater.net:443GET /wp-login.php HTTP/1.1

27-1762-0/0/3.
0.0011234096260.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-1762-0/0/4.
0.00112310111560.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-1762-0/0/58.
0.00111560579870.00.000.70
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-1762-0/0/100.
0.00107857711412600.00.001.40
51.79.24.51http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1

31-1762-0/0/3.
0.00112270124930.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-1762-0/0/4.
0.0011244079740.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-1762-0/0/4.
0.00112190129440.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-1762-0/0/4.
0.00112210108370.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-1762-0/0/9.
0.00112280178550.00.000.15
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-1762-0/0/6.
0.00112120134700.00.000.03
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-1762-0/0/2.
0.0011250570.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-1762-0/0/3.
0.0011232086730.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-1762-0/0/1.
0.0011249000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-1762-0/0/84.
0.001081802081880.00.001.29
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

41-1762-0/0/1.
0.0011248000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

42-1762-0/0/8.
0.00111970123820.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 85subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 90 seconds, (range: 2...229)index usage: 3%, cache usage: 3%total entries stored since starting: 13206total entries replaced since starting: 0total entries expired since starting: 13121total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 520 hit, 24683 misstotal removes since starting: 0 hit, 0 miss

Found on 2023-09-23 08:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3135aa71ed35aa71ed4219b530

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 21-Sep-2023 09:29:38 +07
Restart Time: Thursday, 21-Sep-2023 09:29:16 +07
Parent Server Config. Generation: 1754
Parent Server MPM Generation: 1753
Server uptime:  22 seconds
Server load: 1.06 1.28 1.12
Total accesses: 221 - Total Traffic: 2.1 MB - Total Duration: 89439
CPU Usage: u2666.47 s5142.21 cu50978400 cs12475900 - 2.88e+8% CPU load
10 requests/sec - 99.7 kB/second - 9.9 kB/request - 404.701 ms/request
4 requests currently being processed, 16 idle workers
____.W_______C_C..C____...........................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1753150830/13/13_
1.28059951720.00.250.25
104.236.193.132http/1.1

1-1753150840/15/15_
0.560053980.00.340.34
104.236.193.132http/1.1

2-1753150940/15/15_
2.930058060.00.040.04
68.183.64.176http/1.1www.leadingservice.co.th:80GET /_all_dbs HTTP/1.0

3-1753151030/20/20_
1.03026917450.00.040.04
27.254.96.168http/1.1www.pndintertrade.com:80POST /wp-cron.php?doing_wp_cron=1695263378.18589806556701660156

4-1753-0/0/11.
0.002077350.00.000.24
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

5-1753151300/10/10W
0.900046450.00.290.29
104.131.1.32http/1.1localhost:80GET /server-status HTTP/1.0

6-1753152370/3/8_
2.590168261880.00.010.02
124.120.35.241http/1.1www.chonlateefbc.com:80POST /wp-admin/admin-ajax.php HTTP/1.0

7-1753151380/16/16_
1.50047627980.00.050.05
172.71.98.54http/1.1www.rooffurnish.com:443GET /wp-content/themes/ccx/ HTTP/1.1

8-1753152440/4/8_
0.730031590.00.010.03
68.183.64.176http/1.1www.leadingservice.co.th:80GET /login.action HTTP/1.0

9-1753152460/2/8_
0.70067885860.00.010.06
179.43.191.18http/1.1www.nptpropertythailand.com:443GET /img/xmrlpc.php HTTP/1.1

10-1753151560/10/10_
1.730057530.00.160.16
68.183.64.176http/1.1www.leadingservice.co.th:80GET /server-status HTTP/1.0

11-1753151620/10/10_
1.14060826710.00.080.08
35.90.82.109http/1.1www.pndintertrade.com:80GET / HTTP/1.0

12-1753151730/9/9_
1.31055730850.00.080.08
27.254.96.168http/1.1www.thaidaoherb.com:443POST /wp-cron.php?doing_wp_cron=1695263377.94303393363952636718

13-1753151771/9/9C
2.470119867716.40.100.10
52.167.144.55http/1.1www.thaidaoherb.com:443GET /robots.txt HTTP/1.1

14-1753151810/8/8_
0.940042200.00.100.10
104.131.1.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

15-1753151911/10/10C
1.300028640.20.070.07
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

16-1753-0/0/6.
0.0000100.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-1753-0/0/10.
0.001040010.00.000.03
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

18-1753152091/10/10C
1.10053833037.70.020.02
137.184.222.107http/1.1www.leadingservice.co.th:443GET /.env HTTP/1.1

19-1753152110/9/9_
2.28041655040.00.110.11
137.184.106.30http/1.1

20-1753152620/1/1_
0.000000.00.000.00
104.236.193.132http/1.1

21-1753152680/3/3_
0.001070.00.000.00
104.131.1.32http/1.1localhost:80GET /v2/_catalog HTTP/1.0

22-1753152690/2/2_
0.000160.00.000.00
137.184.106.30http/1.1


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 32subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 287 seconds, (range: 277...298)index usage: 1%, cache usage: 1%total entries stored since starting: 32total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 82 misstotal removes since starting: 0 hit, 0 miss

Found on 2023-09-21 02:28

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3135aa71ed35aa71edf93b692a

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Monday, 24-Oct-2022 13:14:09 +07
Restart Time: Monday, 24-Oct-2022 13:14:02 +07
Parent Server Config. Generation: 448
Parent Server MPM Generation: 447
Server uptime:  7 seconds
Server load: 2.70 3.05 2.49
Total accesses: 38 - Total Traffic: 124 kB - Total Duration: 15829
CPU Usage: u638.21 s1255.04 cu12793300 cs3075860 - 2.27e+8% CPU load
5.43 requests/sec - 17.7 kB/second - 3341 B/request - 416.553 ms/request
6 requests currently being processed, 2 idle workers
_W_CWRCR..........................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-44731530/7/7_
1.070239780.00.020.02
178.128.43.0http/1.1localhost:80GET /info.php HTTP/1.0

1-44731540/2/2W
1.220025840.00.050.05
172.105.91.134http/1.1www.leadingservice.co.th:443GET / HTTP/1.1

2-44731560/11/11_
0.620113400.00.020.02
178.128.43.0http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-44731671/3/3C
1.370128362.20.020.02
139.177.198.221http/1.1localhost:443GET / HTTP/1.1

4-44731760/4/4W
1.020020960.00.010.01
178.128.43.0http/1.1localhost:80GET /server-status HTTP/1.0

5-44732020/6/6R
0.550010860.00.010.01
134.209.227.71http/1.1www.leadingservice.co.th:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-44732040/3/3_
0.940119050.00.000.00
178.128.43.0http/1.1localhost:80GET / HTTP/1.0

7-44732190/2/2R
0.000020.00.000.00
134.209.227.71http/1.1www.leadingservice.co.th:80GET /.git/config HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 5subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 298 seconds, (range: 298...299)index usage: 0%, cache usage: 0%total entries stored since starting: 5total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 9 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-24 06:12

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 203.170.192.183
Domain: smtp.leadingservice.co.th
Port: 443
URL: https://smtp.leadingservice.co.th

First seen 2022-10-24 06:12
Last seen 2024-02-01 21:26
Open for 465 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e47619292989ba0

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 02-Feb-2024 04:26:58 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 93
Parent Server MPM Generation: 92
Server uptime:  27 days 18 hours 25 minutes 37 seconds
Server load: 2.05 2.04 2.00
Total accesses: 1843044 - Total Traffic: 23.8 GB - Total Duration: 2140668888
CPU Usage: u167.98 s102.72 cu32089.3 cs2210.25 - 1.44% CPU load
.768 requests/sec - 10.4 kB/second - 13.5 kB/request - 1161.49 ms/request
2 requests currently being processed, 126 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
029373no0yes131000
229661no0yes032000
329394no0yes032000
529374no0yes131000
Sum400 2126000

____________________W___________................................
________________________________________________________________
................................R_______________________________
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-92293730/1/14749_
0.074540160256510.00.00193.63
159.203.182.222http/1.1localhost:80GET / HTTP/1.1

0-92293730/0/15243_
0.004530138991490.00.00198.85
164.92.84.255h2localhost:443[0/0] Software caused connection abort

0-92293730/1/14814_
0.074530150305980.00.00192.57
159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-92293730/0/14993_
0.004500145868920.00.00185.87
45.55.193.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/1/14899_
0.084490147705700.00.00185.27
159.203.182.222http/1.1localhost:80GET /.DS_Store HTTP/1.1

0-92293730/0/15127_
0.004490156637760.00.00188.41
144.126.198.24http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/1/14801_
0.084470145560300.00.00200.10
159.203.182.222http/1.1localhost:80GET /config.json HTTP/1.1

0-92293730/1/15108_
0.084460150176580.00.00187.50
159.203.182.222http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/0/15067_
0.004460145202600.00.00229.80
159.223.102.13http/1.1localhost:80GET /.DS_Store HTTP/1.1

0-92293730/0/15194_
0.004450148852630.00.00194.72
159.203.44.43http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-92293730/0/14760_
0.004210154280280.00.00200.59
167.99.8.63h2localhost:443[0/0] Software caused connection abort

0-92293730/1/14774_
0.104150147100270.00.00195.37
167.99.8.63http/1.1localhost:443GET /about HTTP/1.1

0-92293730/1/14632_
0.104120137181620.00.00185.36
167.99.8.63http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/0/14791_
0.004120169077040.00.00185.93
139.144.96.150http/1.1localhost:443GET /login.action HTTP/1.1

0-92293730/0/15746_
0.004100141537700.00.00187.66
167.172.20.95http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

0-92293730/1/14793_
0.104040165338170.00.00182.39
167.99.8.63http/1.1localhost:443GET /telescope/requests HTTP/1.1

0-92293730/0/14839_
0.004020143397110.00.00206.26
139.144.96.150http/1.1localhost:443GET / HTTP/1.1

0-92293730/0/14907_
0.0000144873350.00.00189.18
128.199.195.68h2localhost:443[0/0] Software caused connection abort

0-92293730/0/14728_
0.0000160242950.00.00200.48
128.199.195.68http/1.1

0-92293730/1/14946_
0.2100144636720.00.00193.68
128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293731/0/14937W
0.0000181440860.00.00193.26
128.199.195.68http/1.1localhost:443GET /server-status HTTP/1.1

0-92293730/0/14965_
0.008080146988040.00.00203.98
139.144.150.23http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

0-92293730/0/15418_
0.008080150747980.00.00188.12
139.144.150.23h2localhost:443[0/0] Software caused connection abort

0-92293730/0/14631_
0.008080138763900.00.00190.05
139.144.150.23http/1.1localhost:443GET /.env HTTP/1.1

0-92293730/0/14924_
0.008080162204730.00.00186.78
159.203.44.43http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-92293730/0/14603_
0.008080135973320.00.00196.85
134.122.34.144http/1.1localhost:443GET /.git/config HTTP/1.1

0-92293730/0/15107_
0.008080144712670.00.00194.45
64.227.126.135http/1.1localhost:443GET /about HTTP/1.1

0-92293730/0/14885_
0.008080159153040.00.00213.24
139.144.150.23http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

0-92293730/0/14687_
0.008080152163290.00.00175.81
178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-92293730/0/15148_
0.008080135099350.00.00225.04
164.92.84.255http/1.1localhost:443GET /_all_dbs HTTP/1.1

0-92293730/0/14619_
0.008080155554030.00.00199.08
159.203.44.43http/1.1localhost:443GET /.DS_Store HTTP/1.1

0-92293730/0/14890_
0.008080145814070.00.00184.99
178.62.73.12http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

1-92-0/0/15731.
0.008030138364770.00.00219.29
137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1

1-92-0/0/15813.
0.008030136849580.00.00198.68
139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15602.
0.008030174090190.00.00199.96
159.203.44.43h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15318.
0.008030150896030.00.00189.46
164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

1-92-0/0/15276.
0.008030146566320.00.00197.93
159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1

1-92-0/0/15655.
0.008030134151790.00.00198.79
139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1

1-92-0/0/15351.
0.008030172789920.00.00188.15
159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1

1-92-0/0/15185.
0.008030165483380.00.00189.07
64.227.126.135h2localhost:443[0/0] Software caused connection abort

1-92-0/0/15335.
0.008030127395500.00.00211.76
134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/14956.
0.008030152319130.00.00188.74
159.203.44.43http/1.1localhost:443GET / HTTP/1.1

1-92-0/0/15041.
0.008030148013860.00.00204.86
164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1

1-92-0/0/15506.
0.008030159268070.00.00208.73
139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1

1-92-0/0/15329.
0.008030159504030.00.00200.56
45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1

1-92-0/0/15189.

Found on 2024-02-01 21:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e476192a6382904

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 07-Jan-2024 11:45:08 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 8
Parent Server MPM Generation: 7
Server uptime:  2 days 1 hour 43 minutes 47 seconds
Server load: 3.10 2.88 2.72
Total accesses: 833357 - Total Traffic: 11.3 GB - Total Duration: 1032273198
CPU Usage: u309.69 s22.45 cu14056 cs737.82 - 8.45% CPU load
4.65 requests/sec - 66.1 kB/second - 14.2 kB/request - 1238.69 ms/request
6 requests currently being processed, 58 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
016374yes3no00000
131206no6yes428101
229763no6yes230005
Sum3115 658106

G...................G...G.......___________WW_____W__________W__
_____________W____________W_____................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-7163741/334/6551G
182.6547087321310.04.6096.41
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-7-0/0/7053.
0.003884864235680.00.0099.11
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /eitkawv-13875gitems/etidm.htm HTTP/1.1

0-7-0/0/6556.
0.0038076524630.00.0095.89
54.186.174.90http/1.1localhost:443GET /modules/.git/config HTTP/1.1

0-7-0/0/6834.
0.003883973518460.00.0088.79
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?gfchsbr-333781petidm46t HTTP/1.1

0-7-0/0/6559.
0.003895474139030.00.0085.10
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /rkgxsgj-27408tetidm84ext.htm HTTP/1.1

0-7-0/0/6978.
0.003863384471470.00.0092.39
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ijnecaw-308615aeti.html HTTP/1.1

0-7-0/0/6738.
0.003884168369350.00.00102.15
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /njckawv-18902pitems/etidm96a.html HTTP/1.1

0-7-0/0/6838.
0.003884671606760.00.0089.85
185.191.171.14http/1.1www.chonlateeadmin.com:443GET /rvgitgo-4528tetidm73eit HTTP/1.1

0-7-0/0/7037.
0.003884366715850.00.00140.14
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?zqaggdh-287234netidm56mdn HTTP/1.1

0-7-0/0/6805.
0.0038075434310.00.0086.91
154.40.58.51http/1.1www.tkadvicesystem.com:80GET /wp-content/plugins/wp-mlm/js/custom.js HTTP/1.1

0-7-0/0/6491.
0.003884780490450.00.00106.34
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /kfzxsgj-42741mitems/etidm54.htm HTTP/1.1

0-7-0/0/6442.
0.0037105781888170.00.0084.05
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /qnfkawv-13861sitems/etidm16 HTTP/1.1

0-7-0/0/6486.
0.003868660477520.00.0085.58
52.167.144.190h2www.chonlateefbl.com:443GET /bath-body-works-2023-haunted-castle-luminary-871982.html H

0-7-0/0/6701.
0.003866390197780.00.0091.70
148.72.211.177http/1.1www.chonlateekeyman.com:443POST /wp-login.php HTTP/1.1

0-7-0/0/7326.
0.003883969746530.00.0093.06
52.70.240.171http/1.1www.chonlateeboi.com:443GET /1310yytxitems/etidm43k.html HTTP/1.1

0-7-0/0/6510.
0.003884788465600.00.0084.81
52.70.240.171http/1.1www.chonlateeboi.com:443GET /21293hevyetidm58.html HTTP/1.1

0-7-0/0/6682.
0.003820370739740.00.0086.69
217.34.133.56http/1.1www.xn--12cf1cddmk0fho2ci6he1a9GET /wp-login.php HTTP/1.1

0-7-0/0/6793.
0.003828769725410.00.0091.40
51.15.17.105http/1.1www.pentorproperty.com:80GET /.well-known/pki-validation/x.php HTTP/1.1

0-7-0/0/6750.
0.003884686251620.00.0085.52
23.22.35.162http/1.1www.chonlateeboi.com:443GET /7052khrritems/etidm9.html HTTP/1.1

0-7-0/0/6754.
0.003867772792400.00.0092.31
154.40.58.51http/1.1www.tkadvicesystem.com:443GET /wp-content/plugins/wp-mlm/js/custom.js HTTP/1.1

0-7163741/267/6802G
141.331365096015760.03.4294.03
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-7-0/0/6533.
0.003867976228870.00.0088.29
85.208.96.206http/1.1www.chonlateefood.com:443GET /getid/dts38899csrtitems HTTP/1.1

0-7-0/0/7067.
0.003883384242990.00.0093.93
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /eftxsgj-27473geti.html HTTP/1.1

0-7-0/0/6616.
0.003783867185760.00.0094.45
23.22.35.162http/1.1www.chonlateeboi.com:443GET /38903ztiaetidm51ha.html HTTP/1.1

0-7163741/320/6544G
171.37285081336470.05.0883.27
94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP

0-7-0/0/6804.
0.003847061437680.00.0086.49
51.77.66.84http/1.1www.emba35.com:443POST /wp-login.php HTTP/1.1

0-7-0/0/6663.
0.003884274790590.00.0095.03
66.249.73.11http/1.1www.chonlateeadmin.com:443GET /trust.php?hneadej-56960retid.htm HTTP/1.1

0-7-0/0/6682.
0.003884285351900.00.00116.28
47.128.61.3h2www.seasabithailand.com:443GET /wp-theme/index.php?hl=xim-xbox HTTP/2.0

0-7-0/0/6549.
0.003884673699920.00.0082.78
52.70.240.171http/1.1www.chonlateeboi.com:443GET /43530gzgqetid.htm HTTP/1.1

0-7-0/0/6847.
0.003883776532610.00.00121.71
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /lkaxsgj-1896netidm98yxn.htm HTTP/1.1

0-7-0/0/6510.
0.003883775565700.00.0095.23
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /uwjxsgj-27411witems/etidm.htm HTTP/1.1

0-7-0/0/6834.
0.003885073873630.00.0087.79
66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?vnsadej-379868fetidm57i.htm HTTP/1.1

1-7312060/239/6705_
127.142276361730.02.8586.92
178.62.73.12http/1.1localhost:80\x16\x03\x01\x01\x1c\x01

1-7312060/193/6442_
127.86584676973600.02.8082.22
23.22.35.162http/1.1www.chonlateeboi.com:443GET /24043oqmiitems/etidm HTTP/1.1

1-7312060/248/6460_
127.5540102412310.02.9983.30
167.71.185.75http/1.1localhost:80GET /.DS_Store HTTP/1.1

1-7312060/224/6201_
127.86584181358650.02.8482.25
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /eitkawv-4619getidm.html HTTP/1.1

1-7312060/232/6384_
127.705108678472390.02.8595.48
52.70.240.171http/1.1www.chonlateeboi.com:443GET /11029yytxitems/etidm27 HTTP/1.1

1-7312060/188/6411_
127.981109376509270.03.4285.16
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /fjukawv-15202hetid HTTP/1.1

1-7312060/244/6495_
127.431072358810.03.3182.87
162.243.184.251h2localhost:443[0/0] Software caused connection abort

1-7312060/193/6512_
127.355088679960.02.2686.96
89.190.156.61http/1.1localhost:80POST /boaform/admin/formLogin HTTP/1.1

1-7312060/247/6535_
127.93386759052960.03.1984.59
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ondkawv-15185qeti.html HTTP/1.1

1-7312060/247/6471_
127.981110781618700.03.1889.88
23.22.35.162http/1.1www.chonlateeboi.com:443GET /24098oqmiitems/etid.html HTTP/1.1

1-7312060/232/6260_
127.4541280055890.02.6988.76
52.167.144.182h2www.chonlateeadmin.com:443[0/0] read: stream 0,  

1-7

Found on 2024-01-07 04:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e476192b5f4adbc

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Friday, 05-Jan-2024 23:40:19 ICT
Restart Time: Friday, 05-Jan-2024 10:01:20 ICT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  13 hours 38 minutes 58 seconds
Server load: 2.98 3.19 3.32
Total accesses: 245949 - Total Traffic: 3.6 GB - Total Duration: 196551266
CPU Usage: u175.01 s10.83 cu3895.6 cs208.8 - 8.73% CPU load
5.01 requests/sec - 75.9 kB/second - 15.2 kB/request - 799.155 ms/request
8 requests currently being processed, 88 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
030686no10yes230007
132728no4yes329000
229460no5yes329000
Sum3019 888007

____________W_______________W____W_____________________R__R_____
W_______R___________________W___................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306860/133/2741_
64.38084522257120.01.6441.68
167.99.184.41h2localhost:443[0/0] Software caused connection abort

0-0306860/115/2998_
64.880021108650.01.2539.75
167.99.184.41http/1.1localhost:80GET /.git/config HTTP/1.1

0-0306860/117/2688_
64.67176133484420.01.3548.43
162.243.161.105http/1.1localhost:80\x16\x03\x01\x01\x1c\x01

0-0306860/126/2923_
64.981021477420.01.3237.14
139.144.150.45http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-0306860/133/2812_
64.752022105810.01.8535.30
162.243.161.105http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

0-0306860/127/3068_
64.93229522236800.01.5138.70
202.95.9.249http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1

0-0306860/117/2818_
64.870021497840.01.3550.43
162.243.161.105http/1.1localhost:80GET /_all_dbs HTTP/1.1

0-0306860/129/2823_
64.942104922416360.01.5737.00
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?eztvrsm-85947gitems/etidm.htm HTTP/1.1

0-0306860/110/2862_
64.671021283800.01.3479.37
144.126.202.105http/1.1localhost:80GET / HTTP/1.1

0-0306860/126/2808_
64.971021356190.01.5836.31
144.126.202.105http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-0306860/119/2755_
65.020024928790.01.3133.75
162.243.161.105http/1.1localhost:80GET /config.json HTTP/1.1

0-0306860/107/2671_
64.880321643810.01.2334.69
159.203.63.67http/1.1localhost:80GET /server-status HTTP/1.1

0-0306861/119/2655W
64.841021486340.01.2636.69
66.249.71.1http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0043073268.html HTTP/1.1

0-0306860/115/2958_
64.910022275300.01.3340.50
139.144.150.45http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

0-0306860/110/2988_
64.90083924435890.01.3240.60
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ptmggdh-130184zetid.htm HTTP/1.1

0-0306860/114/2753_
64.79064021501980.01.3436.06
52.70.240.171http/1.1www.chonlateeboi.com:443GET /22054ebqoetidm98g HTTP/1.1

0-0306860/107/2657_
65.03084621986770.01.2834.56
3.224.220.101http/1.1www.chonlateeboi.com:443GET /27685igjiitems/etidm20 HTTP/1.1

0-0306860/103/2975_
64.860021766740.01.2939.85
40.77.167.53h2www.thaidaoherb.com:443[0/0] init

0-0306860/110/2861_
64.74057221229790.01.2637.61
66.249.77.227http/1.1www.chonlateefbc.com:443GET /?m=evo-x-intake-upgrades-road-race-engineering-mm-ADKzqkSZ

0-0306860/129/2723_
64.88060723186520.01.6641.11
192.99.15.185http/1.1www.12gobiz.com:80GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A

0-0306860/126/2775_
64.92083821207950.01.5939.94
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oukaonh-121759xetidm30bhx HTTP/1.1

0-0306860/126/2810_
65.020104722225900.01.3940.66
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?cervrsm-11013eitems/etidm96.htm HTTP/1.1

0-0306860/109/3142_
65.04084621181860.01.2040.18
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ithqgmy-217381uitems/eti HTTP/1.1

0-0306860/103/2673_
65.03067220762590.01.2135.45
185.191.171.10http/1.1www.chonlateefood.com:443GET /getid/zyo21787tapyitems HTTP/1.1

0-0306860/113/2712_
64.710021657970.01.1434.89
40.77.167.53h2www.thaidaoherb.com:443[1/1] done: stream 1, GET /tctqyu/ogg278708gdba6b9eb7057.html

0-0306860/128/2702_
64.761021146400.01.7735.09
159.203.63.67http/1.1localhost:80GET / HTTP/1.1

0-0306860/125/2778_
65.00158821004680.01.3645.73
20.163.30.95http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1

0-0306860/126/2782_
64.98185221293370.01.5465.96
52.70.240.171http/1.1www.chonlateeboi.com:443GET /27688igjietidm20yin HTTP/1.1

0-0306861/105/2656W
64.880021348460.01.4333.66
20.163.30.95http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1

0-0306860/109/2999_
65.030020586370.01.1374.14
162.243.161.105http/1.1localhost:80GET /telescope/requests HTTP/1.1

0-0306860/126/2702_
64.78184421500480.01.7342.73
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wttqgmy-321889getidm.html HTTP/1.1

0-0306860/158/3047_
64.81164021434010.01.5637.32
20.163.30.95http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1

1-0327280/70/2179_
36.920016491100.00.7828.62
159.203.63.67http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at

1-0327281/68/1963W
36.820016186720.00.7825.31
192.99.15.185http/1.1www.12gobiz.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A

1-0327280/70/2096_
36.850016567220.00.7729.02
161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-0327280/71/1966_
36.82171715951560.00.9026.30
85.208.96.207http/1.1www.chonlateefood.com:443GET /items/hhw47561khxatid.html HTTP/1.1

1-0327280/79/2007_
36.842015970020.01.0030.84
144.126.202.105http/1.1localhost:80GET /telescope/requests HTTP/1.1

1-0327280/70/2010_
36.842105515770760.00.7926.70
3.224.220.101http/1.1www.chonlateeboi.com:443GET /22064ebqoitems/etidm75qef.html HTTP/1.1

1-0327280/69/2015_
36.760016322320.00.8324.84
161.35.155.246http/1.1localhost:443GET / HTTP/1.1

1-0327280/58/2071_
36.842016202990.00.7127.98
159.203.63.67http/1.1localhost:80GET /login.action HTTP/1.1

1-0327280/69/2048_
36.821105716372670.00.8228.57
66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?kuhaonh-78231uitems/eti HTTP/1.1

1-0327280/69/1983_
36.880015861020.00.7725.85
159.203.63.67http/1.1localhost:80GET /.git/config HTTP/1.1

1-0327280/67/1985_
36.732015619540.00.7329.14
144.126.202.105http/1.1localhost:80GET /v2/_catalog HTTP/1.1

1-0327280/65/2123_
36.802016775510.00.6929.55
139.144.150.45http/1.1localhost:80

Found on 2024-01-05 16:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e476192a1820732

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Sunday, 24-Dec-2023 04:43:51 ICT
Restart Time: Sunday, 24-Dec-2023 04:42:07 ICT
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 minute 44 seconds
Server load: 2.27 1.09 0.74
Total accesses: 330 - Total Traffic: 2.8 MB - Total Duration: 1658123
CPU Usage: u7.05 s1.26 cu.04 cs.32 - 8.34% CPU load
3.17 requests/sec - 28.0 kB/second - 8.8 kB/request - 5024.62 ms/request
53 requests currently being processed, 75 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
116536no9yes1220000
216554no14yes1022103
316556no28yes239014
416558no13yes824200
Sum4064 5375317

................................WW_____W___W__W____W__W___R_WWWR
W_W__WW_W_W_W____WW___________W_WWWWWWWWWWWWW_W_WW_WWWW_W___W__W
WW___W___________W____W__WWW____................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

1-0165361/1/1W
0.5351018460.00.030.03
23.22.35.162http/1.1www.chonlateeboi.com:443GET /4392idtuetidm76yin.htm HTTP/1.1

1-0165361/0/0W
0.00130317900.00.000.00
3.224.220.101http/1.1www.chonlateeboi.com:443GET /36512idtuitems/etidm31iix.html HTTP/1.1

1-0165360/4/4_
1.1918488490.00.020.02
167.99.8.63http/1.1localhost:80\x16\x03\x01\x01\n

1-0165360/1/1_
0.3013690102660.00.010.01
207.46.13.31h2www.chonlateeaa.com:443[1/1] done: stream 1, GET /?s=xtrend-18inch-100g-marley-hair-sy

1-0165360/4/4_
1.190651107610.00.000.00
143.110.218.229http/1.1localhost:80\x16\x03\x01\x01\b\x01

1-0165360/2/2_
1.2010318090.00.020.02
134.122.89.242http/1.1localhost:80GET / HTTP/1.1

1-0165361/2/2W
0.990094550.00.010.01
3.224.220.101http/1.1www.chonlateeboi.com:443GET /33276idtuetidm5.htm HTTP/1.1

1-0165360/2/2_
1.2900377080.00.010.01
134.122.89.242http/1.1localhost:80GET /about HTTP/1.1

1-0165360/3/3_
0.931257025710.00.030.03
188.164.198.107http/1.1www.ss-cool.com:443POST /xmlrpc.php HTTP/1.1

1-0165360/3/3_
1.05215212161760.00.000.00
203.170.192.183http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

1-0165361/5/5W
0.8060270.00.000.00
23.22.35.162http/1.1www.chonlateeboi.com:443GET /33164idtuitems/etidm4.html HTTP/1.1

1-0165360/3/3_
1.20108080.00.020.02
147.182.130.98http/1.1localhost:80GET / HTTP/1.1

1-0165360/4/4_
0.74120200.00.020.02
40.77.167.132h2www.chonlateepr.com:443GET /srgeoy/ditec0023455767.html HTTP/2.0

1-0165361/0/0W
0.00230314960.00.000.00
3.224.220.101http/1.1www.chonlateeboi.com:443GET /11797idtuitems/etidm46 HTTP/1.1

1-0165360/1/1_
0.76101020.00.000.00
207.154.240.169h2localhost:443[0/0] Software caused connection abort

1-0165360/2/2_
1.3000507690.00.030.03
143.110.218.229http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1

1-0165360/1/1_
1.2902047533160.00.010.01
62.65.188.98http/1.1www.nadapool.com:443POST /wp-login.php HTTP/1.1

1-0165360/1/1_
0.600425242520.00.010.01
40.73.4.118http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4POST /wp-login.php HTTP/1.1

1-0165361/1/1W
0.337000.00.000.00
52.70.240.171http/1.1www.chonlateeboi.com:443GET /41519idtuetidm44xu.html HTTP/1.1

1-0165360/4/4_
1.261013410.00.030.03
139.144.150.8http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-0165360/2/2_
1.121000.00.010.01
159.65.138.217h2localhost:443[0/0] Software caused connection abort

1-0165361/0/0W
0.0040000.00.000.00
52.70.240.171http/1.1www.chonlateeboi.com:443GET /41591idtuetidm96ru.html HTTP/1.1

1-0165360/4/4_
1.160000.00.050.05
23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xleyynk17872ritems/etidm50kyr.html HTTP/1.1

1-0165360/7/7_
1.150440.00.090.09
159.65.138.217h2localhost:443[0/0] Software caused connection abort

1-0165360/4/4_
1.300000.00.030.03
134.122.89.242http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1

1-0165360/4/4R
0.603000.00.030.03
85.208.96.200http/1.1www.chonlateeadmin.com:443GET /rzgismm-4554tetid.htm HTTP/1.1

1-0165360/5/5_
1.300000.00.020.02
159.65.138.217http/1.1localhost:443GET /v2/_catalog HTTP/1.1

1-0165361/2/2W
0.8518000.00.020.02
23.22.35.162http/1.1www.chonlateeboi.com:443GET /47964idtuetidm1.htm HTTP/1.1

1-0165361/1/1W
0.3657000.00.020.02
52.70.240.171http/1.1www.chonlateeboi.com:443GET /4431idtuitems/etidm52lu.htm HTTP/1.1

1-0165361/1/1W
0.68007360.00.020.02
159.65.138.217http/1.1localhost:443GET /server-status HTTP/1.1

1-0165360/2/2R
1.19206770.00.010.01
52.70.240.171http/1.1www.chonlateeboi.com:443

2-0165541/1/1W
0.4545022890.00.000.00
3.224.220.101http/1.1www.chonlateeboi.com:443GET /35046idtuetidm94y.htm HTTP/1.1

2-0165540/4/4_
0.850225822810.00.010.01
185.191.171.15http/1.1www.chonlateefood.com:443GET /items/nwc611qgowtidm7.html HTTP/1.1

2-0165541/2/2W
0.8548000.00.040.04
52.70.240.171http/1.1www.chonlateeboi.com:443GET /4387idtuitems/etidm HTTP/1.1

2-0165540/5/5_
1.440000.00.050.05
40.77.167.126h2www.chonlateeaa.com:443[0/0] init

2-0165540/3/3_
1.142180018310.00.060.06
52.167.144.216h2www.chonlateepr.com:443[0/0] init

2-0165541/2/2W
0.893606970.00.020.02
3.224.220.101http/1.1www.chonlateeboi.com:443GET /36556idtuetidm3 HTTP/1.1

2-0165541/4/4W
1.26407510.00.030.03
3.224.220.101http/1.1www.chonlateeboi.com:443GET /41500idtuetidm3 HTTP/1.1

2-0165540/4/4_
1.6810314510.00.040.04
139.144.150.8http/1.1localhost:80GET /v2/_catalog HTTP/1.1

2-0165541/1/1W
0.7331023920.00.000.00
3.224.220.101http/1.1www.chonlateeboi.com:443GET /47916idtuetidm1.htm HTTP/1.1

2-0165540/3/3_
1.5910312650.00.010.01
52.70.240.171http/1.1www.krongthongsecurity.com:443GET /cljyynk17877witems/etidm19 HTTP/1.1

2-0165541/1/1W
0.8844000.00.030.03
23.22.35.162http/1.1www.chonlateeboi.com:443GET /14165idtuetidm98.html HTTP/1.1

2-0165540/3/3_
1.700000.00.050.05
159.65.138.217http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

2-0165541/1/1W
0.2641090.00.010.01
52.70.240.171http/1.1www.chonlateeboi.com:443GET /18656idtuitems/etidm51oid.html HTTP/1.1

2-0165540/2/2_
0.52061913560.00.010.01
159.65.138.217h2localhost:443[0/0] Software caused connection abort

2-0165540/5/5_
1.6540<

Found on 2023-12-23 21:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e476192ed54aae4

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Monday, 11-Dec-2023 22:05:00 ICT
Restart Time: Friday, 01-Dec-2023 00:22:58 ICT
Parent Server Config. Generation: 41
Parent Server MPM Generation: 40
Server uptime:  10 days 21 hours 42 minutes 2 seconds
Server load: 0.79 0.81 0.76
Total accesses: 4309936 - Total Traffic: 55.3 GB - Total Duration: 4078543930
CPU Usage: u345.81 s53.13 cu77400.1 cs4053.4 - 8.69% CPU load
4.57 requests/sec - 61.6 kB/second - 13.5 kB/request - 946.312 ms/request
11 requests currently being processed, 53 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
115762no3yes527000
219850no2yes626001
Sum205 1153001

................................__W_______________R_____RR_____R
_____R___W__WW____________R____W................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-40-0/0/38878.
0.007431086353679360.00.00492.26
66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bvuiejy-49076hetid.htm HTTP/1.1

0-40-0/0/38233.
0.00743892360697770.00.00483.18
185.191.171.7http/1.1www.chonlateeadmin.com:443GET /qffxpcs-9779setidm.html HTTP/1.1

0-40-0/0/38641.
0.007431142395648790.00.00495.74
66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?dpwmlcv-34622jetidm7.htm HTTP/1.1

0-40-0/0/38672.
0.007431278384108220.00.00506.13
66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?hqadpkr-13904netidm77u.htm HTTP/1.1

0-40-0/0/39175.
0.00743863364373250.00.00559.48
66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xzqrxma-19406detidm2.htm HTTP/1.1

0-40-0/0/38257.
0.00743904393554450.00.00484.13
66.249.64.228http/1.1www.chonlateefood.com:443GET /mds.php?items/omd38936mssgtidm302512.html HTTP/1.1

0-40-0/0/38582.
0.00743891395392530.00.00486.19
66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?tombcsr-36692zetid.htm HTTP/1.1

0-40-0/0/39319.
0.007430362478090.00.00493.78
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /nruewrv214084hitems/etidm8.html HTTP/1.1

0-40-0/0/38308.
0.007430374766030.00.00502.08
3.224.220.101http/1.1www.krongthongsecurity.com:443GET /kirewrv214107eitems/etidm HTTP/1.1

0-40-0/0/38745.
0.00743929362803240.00.00495.43
66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?rykzslq-35078xetidm5.htm HTTP/1.1

0-40-0/0/38285.
0.00743979378862620.00.00465.73
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?nzcqgmy-83850petid.htm HTTP/1.1

0-40-0/0/38372.
0.00743938362487770.00.00516.07
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?alpqgmy-56407citems/etidm69ny HTTP/1.1

0-40-0/0/38223.
0.00743869369719710.00.00467.06
66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?siycvmt-51901litems/etid.html HTTP/1.1

0-40-0/0/38410.
0.00743872398854190.00.00495.27
66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?gfzkqbs-42971mitems/eti.htm HTTP/1.1

0-40-0/0/38647.
0.00743868374463820.00.00486.00
66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?txmkqbs-15008zetidm64g.htm HTTP/1.1

0-40-0/0/38307.
0.00743921366961220.00.00540.06
66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bpumlcv-26586hetidm52och HTTP/1.1

0-40-0/0/39291.
0.007431054370329790.00.00520.33
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?otdqgmy-57565qitems/etidm73 HTTP/1.1

0-40-0/0/38767.
0.007431139360945400.00.00478.13
66.249.71.67http/1.1www.chonlateefood.com:443GET /mds.php?item/ple40679zwtltidm34863.html HTTP/1.1

0-40-0/0/38824.
0.007431101362426410.00.00501.87
23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?287203bogqitems/etidm HTTP/1.1

0-40-0/0/39102.
0.007431041378589970.00.00510.86
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?vzkqgmy-49798xetidm30i HTTP/1.1

0-40-0/0/38482.
0.00743933356542710.00.00507.65
39.105.120.190http/1.1www.12gobiz.com:80GET ///?author=1 HTTP/1.1

0-40-0/0/38665.
0.007431562383184470.00.00499.56
114.119.145.123http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B8%9B%E0%B8%A5%E0%B8%B2

0-40-0/0/38394.
0.00743929401553900.00.00508.96
66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?vzorxma-7002betidm40imb HTTP/1.1

0-40-0/0/37723.
0.00743885356269120.00.00469.24
52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?vzkqgmy-108350xitems/etidm88i.html HTTP/1.1

0-40-0/0/38771.
0.00743854365882580.00.00514.88
66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?woflbze-5833seti.html HTTP/1.1

0-40-0/0/38028.
0.00743857382854140.00.00465.39
66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?gtocvxg-16035betid.htm HTTP/1.1

0-40-0/0/38743.
0.00743863367273790.00.00578.39
114.119.145.123http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B8%9B%E0%B8%A5%E0%B8%B2

0-40-0/0/37989.
0.00743759365263690.00.00505.55
66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /eqxniod-12003kitems/eti HTTP/1.1

0-40-0/0/38589.
0.00743908406197240.00.00518.42
66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zfssgbd-40780fitems/etid.html HTTP/1.1

0-40-0/0/38460.
0.007431191369965810.00.00498.24
3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?ddsqgmy-78900fetidm2.htm HTTP/1.1

0-40-0/0/38574.
0.007431125364990100.00.00488.83
66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xbcnuow-30534petid.htm HTTP/1.1

0-40-0/0/38286.
0.007431370310540.00.00532.40
66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=progressive-protein-aggregation-in-prpf31-patient-retin

1-40157620/270/39502_
186.1910369073380.03.30499.78
137.184.150.232http/1.1localhost:80GET /telescope/requests HTTP/1.1

1-40157620/255/39440_
186.480872377374390.03.05542.30
23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?vmkhlzs-40230xetidm16i.htm HTTP/1.1

1-40157621/259/39218W
186.1210379036660.03.17545.45
66.249.71.67http/1.1www.chonlateefood.com:443GET /mds.php?item/nec8879ddfetidm67898.html HTTP/1.1

1-40157620/276/39483_
186.170975387346190.03.31557.26
52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?378038himsitems/etidm68y.html HTTP/1.1

1-40157620/272/40248_
186.4310358795890.03.45612.05
159.65.58.104http/1.1localhost:443GET /server-status HTTP/1.1

1-40157620/259/39061_
185.820976355688280.03.12559.03
192.95.30.21http/1.1www.1smestartup.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%81

1-40157620/265/39144_
186.240712359606980.03.20524.42
217.113.194.105http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%9F%E0%B8%B4%E0%B8%A5

1-40157620/276/39579_
186.4310382973600.03.16505.14
159.65.58.104http/1.1localhost:443GET /login.action HTTP/1.1

1-40157620/280/39344_
186.440944371843030.03.43496.39
66.249.64.228http/1.1www.chonlateefood.com:443GET /mds.php?getidm7/est888scggitems.htm HTTP/1.1

1-40157620/253/39417_
186.3100363932710.03.27

Found on 2023-12-11 15:04

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb317e4761927e476192a664c516

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 203.170.192.183)

Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
Server MPM: event
Server Built: Oct 15 2023 18:16:43

Current Time: Tuesday, 21-Nov-2023 00:27:32 ICT
Restart Time: Monday, 20-Nov-2023 10:17:03 ICT
Parent Server Config. Generation: 2
Parent Server MPM Generation: 1
Server uptime:  14 hours 10 minutes 29 seconds
Server load: 2.31 1.84 1.42
Total accesses: 74195 - Total Traffic: 1.0 GB - Total Duration: 66396916
CPU Usage: u26.67 s4.12 cu849.43 cs61.85 - 1.85% CPU load
1.45 requests/sec - 21.2 kB/second - 14.6 kB/request - 894.897 ms/request
4 requests currently being processed, 124 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
15488no7yes131001
25506no3yes032002
35745no3yes131000
45747no20yes2300013
Sum4033 41240016

................................____________W___________________
________________________________________W_______________________
__R______W______________________................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1-0/0/482.
0.009749413315570.00.005.19
40.77.167.8h2www.nakindogtraining.com:443[0/0] init

0-1-0/0/439.
0.009745572796940.00.003.95
103.102.234.145http/1.1

0-1-0/0/496.
0.009749522531710.00.004.93
185.191.171.18http/1.1www.chonlateefood.com:443GET /getidm4/qof9246oeoqitems.htm HTTP/1.1

0-1-0/0/491.
0.009748532924970.00.006.72
104.250.134.50http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.1

0-1-0/0/545.
0.0097411383432290.00.006.83
142.93.96.84http/1.1www.ckt-trading.com:443GET /xmlrpc.php HTTP/1.1

0-1-0/0/529.
0.0097410262495580.00.005.73
95.138.178.251http/1.1

0-1-0/0/567.
0.009748123480120.00.008.08
40.77.167.8h2www.nakindogtraining.com:443[1/1] done: stream 1, GET /wzy.php?opera-RENEW.xml

0-1-0/0/513.
0.00974802647900.00.006.42
203.170.192.183http/1.1www.12gobiz.com:80POST /wp-cron.php?doing_wp_cron=1700500273.43055605888366699218

0-1-0/0/469.
0.0097410393499550.00.005.14
5.101.157.215h2www.spamechanicssystem.com:443[0/0] init

0-1-0/0/537.
0.0097402643260.00.006.23
203.170.192.183http/1.1www.chonlateeboi.com:443POST /wp-cron.php?doing_wp_cron=1700500212.06381297111511230468

0-1-0/0/604.
0.009746732808620.00.006.01
85.208.96.194http/1.1www.chonlateeboi.com:443GET /22937oswzeti.html HTTP/1.1

0-1-0/0/580.
0.0097412553713670.00.0015.24
40.77.167.8h2www.nakindogtraining.com:443GET /wzy.php?opera-RENEW.xml HTTP/2.0

0-1-0/0/482.
0.0097411132630210.00.005.41
203.170.192.183http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0%

0-1-0/0/549.
0.0097402829680.00.004.85
52.167.144.222h2www.chonlateefbc.com:443[1/1] read: stream 0,  

0-1-0/0/455.
0.0097402575370.00.005.52
5.101.157.215h2www.spamechanicssystem.com:443[0/0] init

0-1-0/0/491.
0.009749274175990.00.007.74
5.101.157.215h2www.spamechanicssystem.com:443[0/0] init

0-1-0/0/527.
0.0097403229430.00.006.02
5.101.157.215http/1.1www.spamechanicssystem.com:443POST /wp-login.php HTTP/2.0

0-1-0/0/560.
0.009747933043610.00.004.46
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /wp-head.php HTTP/1.1

0-1-0/0/566.
0.0097402614520.00.0012.00
85.209.176.20http/1.1www.chonlateebusiness.com:80GET /wp-content/uploads/elementor/css/class_api.php HTTP/1.1

0-1-0/0/699.
0.009745893112350.00.0012.95
5.101.157.215h2www.spamechanicssystem.com:443[1/1] done: stream 1, POST /wp-login.php

0-1-0/0/449.
0.009745533508100.00.007.44
180.76.132.38http/1.1www.thaiquickservice.net:443POST /wp-login.php HTTP/1.1

0-1-0/0/527.
0.009743392008000.00.007.08
85.208.96.197http/1.1www.mkandptfoods.com:443GET /m5681840617.html HTTP/1.1

0-1-0/0/534.
0.009747023751060.00.004.61
66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mifcvxg-3925setidm.html HTTP/1.1

0-1-0/0/442.
0.009746993179410.00.006.11
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /wp-conflg.php HTTP/1.1

0-1-0/0/559.
0.009747073562600.00.0012.77
5.101.157.215http/1.1www.spamechanicssystem.com:443GET /wp-login.php HTTP/2.0

0-1-0/0/540.
0.0097442781480.00.006.36
5.255.231.141http/1.1www.seasabithailand.com:443GET /wp-theme/index.php HTTP/1.1

0-1-0/0/497.
0.0097402739420.00.004.52
85.209.176.20http/1.1www.chonlateebusiness.com:80GET /.well-known/acme-challenge/class_api.php HTTP/1.1

0-1-0/0/593.
0.0097402381270.00.004.94
52.167.144.222h2www.chonlateefbc.com:443[0/0] init

0-1-0/0/470.
0.0097402781600.00.009.65
50.62.144.122http/1.1www.xn--12ca1al2c4cm5fzaon1x.coGET /wp-login.php HTTP/1.1

0-1-0/0/534.
0.009746893402230.00.008.03
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /.well-known/class.api.php HTTP/1.1

0-1-0/0/519.
0.0097453571120.00.008.85
203.170.192.183http/1.1www.ckt-trading.com:443POST /wp-cron.php?doing_wp_cron=1700500207.71665501594543457031

0-1-0/0/490.
0.009747202331380.00.008.21
85.209.176.20http/1.1www.chonlateebusiness.com:443GET /wp-content/uploads/elementor/css/class_api.php HTTP/1.1

1-154880/14/433_
4.51234831850450.00.153.99
161.35.155.246h2localhost:443[0/0] Software caused connection abort

1-154880/9/324_
4.57402278950.00.083.38
161.35.190.56http/1.1www.leadingservice.co.th:80GET /debug/default/view?panel=config HTTP/1.1

1-154880/12/449_
4.39431291942670.00.103.38
167.99.8.63h2localhost:443[0/0] Software caused connection abort

1-154880/8/317_
4.57302078000.00.063.59
134.122.89.242http/1.1localhost:80GET /.git/config HTTP/1.1

1-154880/7/334_
4.46431611980640.00.043.39
162.243.186.177http/1.1

1-154880/18/354_
4.62131372068170.00.175.31
164.92.192.25http/1.1www.chonlateefbc.com:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

1-154880/21/385_
4.62101925840.00.153.92
138.68.163.10http/1.1localhost:443GET /_all_dbs HTTP/1.1

1-154880/9/329_
4.251101576550.00.235.23
95.217.109.26http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A

1-154880/8/317_
4.57402299560.00.033.73
64.227.126.135http/1.1www.leadingservice.co.th:80GET /login.action HTTP/1.1

1-154880/15/419_
4.61302101490.00.154.48
207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-154880/11/553_
4.31401733760.00.0515.36
46.101.103.192http/1.1

1-154880/17/499_
4.6306331941420.00.184.45
159.203.103.215http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /wp-login.php HTTP/1.1

1-154881/12/325W
4.60002282780.00.122.90
162.243.186.177http/1.1localhost:443

Found on 2023-11-20 17:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3135aa71ed35aa71ed6d4ba827

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Saturday, 23-Sep-2023 15:24:28 +07
Restart Time: Saturday, 23-Sep-2023 04:02:11 +07
Parent Server Config. Generation: 1763
Parent Server MPM Generation: 1762
Server uptime:  11 hours 22 minutes 17 seconds
Server load: 0.68 0.72 0.83
Total accesses: 77859 - Total Traffic: 1.4 GB - Total Duration: 111395207
CPU Usage: u2756.59 s5179.57 cu51120800 cs12506100 - 155000% CPU load
1.9 requests/sec - 34.7 kB/second - 18.3 kB/request - 1430.73 ms/request
7 requests currently being processed, 3 idle workers
C_W_.W_CRWC.......................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1762240031/69/6094C
16.67075684571308.60.54120.60
172.70.142.18http/1.1www.dr-rpi.com:443GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-644c

1-1762238690/83/5967_
17.47076684962180.03.29113.20
172.70.142.252http/1.1www.dr-rpi.com:443GET /wp-content/uploads/siteorigin-widgets/sow-image-default-17

2-1762243900/0/6080W
0.000085392470.00.00105.28
172.70.142.208http/1.1www.dr-rpi.com:443GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-5880

3-1762239800/71/5767_
17.22070877171770.03.3788.63
172.70.142.199http/1.1www.dr-rpi.com:443GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-ac0c

4-1762-0/0/5749.
0.0050078701200.00.00100.74
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

5-1762242180/42/5659W
9.400083914930.00.3579.24
167.71.48.191http/1.1localhost:443GET /server-status HTTP/1.1

6-1762238870/80/5224_
21.320076933330.02.30114.49
167.71.48.191http/1.1localhost:443GET /about HTTP/1.1

7-1762243081/17/4959C
6.8501165728952132.80.1473.25
172.70.142.63http/1.1www.dr-rpi.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%

8-1762243190/16/4858R
3.450170568620.00.0588.35
31.186.11.174http/1.1

9-1762239890/69/4395W
14.330062641350.00.5763.08
172.69.214.87http/1.1www.siamerp.com:443GET /tag/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%83%E0%B8%8A

10-1762241541/56/4130C
10.850059908841.40.4770.07
167.71.48.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

11-1762-0/0/4054.
0.00317058897230.00.0080.12
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

12-1762-0/0/3218.
0.00336044506780.00.0075.39
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

13-1762-0/0/2818.
0.00337039544170.00.0041.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

14-1762-0/0/2269.
0.00343034584460.00.0039.15
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

15-1762-0/0/1964.
0.00135129539550.00.0035.54
66.249.79.35http/1.1www.tafa.or.th:443GET /wp-content/plugins/ultimate-member/assets/css/um-fileuploa

16-1762-0/0/1500.
0.00345019788200.00.0027.08
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-1762-0/0/717.
0.0018908059024920.00.0012.96
51.222.15.45http/1.1www.dreamhightravel.com:443POST /wp-login.php HTTP/1.1

18-1762-0/0/581.
0.00227109942760.00.0014.23
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

19-1762-0/0/571.
0.00228809155650.00.009.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

20-1762-0/0/287.
0.00205903843590.00.008.16
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

21-1762-0/0/129.
0.00227701475090.00.005.46
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

22-1762-0/0/171.
0.00228304890960.00.0010.80
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

23-1762-0/0/52.
0.0022750474820.00.002.08
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

24-1762-0/0/222.
0.00172612073823280.00.004.21
27.254.96.168http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1POST /wp-cron.php?doing_wp_cron=1695455740.35536909103393554687

25-1762-0/0/30.
0.0037900173950.00.000.45
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

26-1762-0/0/100.
0.0032793911376730.00.001.11
150.230.93.233http/1.1www.ozonepluswater.net:443GET /wp-login.php HTTP/1.1

27-1762-0/0/3.
0.009648096260.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

28-1762-0/0/4.
0.0096450111560.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

29-1762-0/0/58.
0.0095700579870.00.000.70
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

30-1762-0/0/100.
0.0092007711412600.00.001.40
51.79.24.51http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1

31-1762-0/0/3.
0.0096410124930.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

32-1762-0/0/4.
0.009658079740.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

33-1762-0/0/4.
0.0096330129440.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

34-1762-0/0/4.
0.0096350108370.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

35-1762-0/0/9.
0.0096420178550.00.000.15
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

36-1762-0/0/6.
0.0096260134700.00.000.03
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

37-1762-0/0/2.
0.009664570.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

38-1762-0/0/3.
0.009646086730.00.000.01
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

39-1762-0/0/1.
0.009663000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

40-1762-0/0/84.
0.00923302081880.00.001.29
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

41-1762-0/0/1.
0.009662000.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

42-1762-0/0/8.
0.0096110123820.00.000.04
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 129subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 61 seconds, (range: 1...182)index usage: 4%, cache usage: 5%total entries stored since starting: 12698total entries replaced since starting: 0total entries expired since starting: 12569total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 503 hit, 23778 misstotal removes since starting: 0 hit, 0 miss

Found on 2023-09-23 08:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3135aa71ed35aa71ed5658e89a

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Thursday, 21-Sep-2023 09:29:46 +07
Restart Time: Thursday, 21-Sep-2023 09:29:16 +07
Parent Server Config. Generation: 1754
Parent Server MPM Generation: 1753
Server uptime:  30 seconds
Server load: 1.22 1.31 1.13
Total accesses: 265 - Total Traffic: 2.3 MB - Total Duration: 107934
CPU Usage: u2667.82 s5142.6 cu50978400 cs12475900 - 2.12e+8% CPU load
8.83 requests/sec - 80.2 kB/second - 9.1 kB/request - 407.298 ms/request
4 requests currently being processed, 11 idle workers
_W__.__C.__.C._...__._W...........................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-1753150830/16/16_
2.87056482930.00.260.26
104.236.193.132http/1.1www.leadingservice.co.th:443GET /debug/default/view?panel=config HTTP/1.1

1-1753150840/17/17W
1.160064590.00.350.35
137.184.106.30http/1.1localhost:443GET /server-status HTTP/1.1

2-1753150940/17/17_
3.60267171520.00.060.06
172.69.214.101http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2

3-1753151030/22/22_
1.57153828210.00.050.05
137.184.222.107http/1.1www.leadingservice.co.th:443GET /telescope/requests HTTP/1.1

4-1753-0/0/11.
0.0010077350.00.000.24
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

5-1753151300/12/12_
1.46255857670.00.300.30
137.184.222.107http/1.1www.leadingservice.co.th:443GET /config.json HTTP/1.1

6-1753152370/4/9_
3.2802463107480.00.100.11
165.227.64.216http/1.1

7-1753151381/20/20C
2.040138413.30.060.06
178.255.149.135http/1.1localhost:443GET / HTTP/1.1

8-1753-0/0/10.
0.005031620.00.000.03
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

9-1753152460/6/12_
0.711185920.00.020.06
137.184.106.30http/1.1localhost:443GET /v2/_catalog HTTP/1.1

10-1753151560/12/12_
2.262168020.00.170.17
137.184.106.30http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

11-1753-0/0/11.
0.006026720.00.000.08
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

12-1753151731/12/12C
1.330030891.40.080.08
137.184.106.30http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

13-1753-0/0/11.
0.000077430.00.000.11
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

14-1753151810/10/10_
0.961042220.00.100.10
137.184.106.30http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1

15-1753-0/0/10.
0.007028640.00.000.07
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

16-1753-0/0/6.
0.0080100.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

17-1753-0/0/10.
0.009040010.00.000.03
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

18-1753152090/12/12_
1.111133050.00.030.03
137.184.106.30http/1.1localhost:443GET /about HTTP/1.1

19-1753152110/12/12_
3.37145376920.00.120.12
137.184.222.107http/1.1www.leadingservice.co.th:443GET /?rest_route=/wp/v2/users/ HTTP/1.1

20-1753-0/0/2.
0.003010.00.000.00
127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0

21-1753152680/7/7_
0.4814679440.00.010.01
104.236.193.132http/1.1www.leadingservice.co.th:443GET /about HTTP/1.1

22-1753152690/4/4W
0.020090.00.010.01
212.38.40.215http/1.1www.importantaccount.com:443GET /wp-login.php HTTP/1.1


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 37subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 280 seconds, (range: 269...299)index usage: 1%, cache usage: 1%total entries stored since starting: 37total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 100 misstotal removes since starting: 0 hit, 0 miss

Found on 2023-09-21 02:28

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3135aa71ed35aa71ed6c1c29f1

Apache Status

Apache Server Status for smtp.leadingservice.co.th (via 27.254.96.168)

Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33
Server MPM: prefork
Server Built: May  6 2022 15:05:21

Current Time: Monday, 24-Oct-2022 13:14:16 +07
Restart Time: Monday, 24-Oct-2022 13:14:02 +07
Parent Server Config. Generation: 448
Parent Server MPM Generation: 447
Server uptime:  13 seconds
Server load: 2.48 3.00 2.47
Total accesses: 153 - Total Traffic: 350 kB - Total Duration: 22996
CPU Usage: u641.02 s1255.84 cu12793300 cs3075860 - 1.22e+8% CPU load
11.8 requests/sec - 26.9 kB/second - 2342 B/request - 150.301 ms/request
17 requests currently being processed, 0 idle workers
CRRCCWRRCCWCCRCCR.................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-44731531/27/27C
1.321240341.30.040.04
212.71.255.211http/1.1localhost:443GET /about HTTP/1.1

1-44731540/6/6R
1.730142180.00.130.13
139.177.198.221http/1.1

2-44731560/27/27R
0.790013690.00.030.03
139.177.198.221http/1.1

3-44731671/11/11C
1.490128492.70.030.03
139.177.198.221http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1

4-44731761/19/19C
1.561039822.70.030.03
212.71.255.211http/1.1localhost:443GET /.env HTTP/1.1

5-44732020/13/13W
0.610010970.00.020.02
139.177.198.221http/1.1localhost:443GET /server-status HTTP/1.1

6-44732040/24/24R
1.020119350.00.020.02
139.162.161.56http/1.1

7-44732190/6/6R
0.46018710.00.010.01
139.177.198.221http/1.1

8-44732271/7/7C
0.921118531.30.020.02
212.71.255.211http/1.1localhost:443GET /config.json HTTP/1.1

9-44732291/5/5C
0.41117561.30.010.01
212.71.255.211http/1.1localhost:443GET /login.action HTTP/1.1

10-44732430/1/1W
0.000020.00.000.00
172.70.250.40http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87

11-44732501/2/2C
0.020162.70.000.00
139.177.198.221http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

12-44732521/1/1C
0.010122.80.000.00
139.177.198.221http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1

13-44732630/1/1R
0.010230.00.000.00
172.105.91.134http/1.1www.leadingservice.co.th:443

14-44732651/1/1C
0.010242.70.000.00
139.177.198.221http/1.1localhost:443GET /.env HTTP/1.1

15-44732711/1/1C
0.010242.70.000.00
139.177.198.221http/1.1localhost:443GET /info.php HTTP/1.1

16-44732770/1/1R
0.010240.00.000.00
139.177.198.221http/1.1localhost:443GET /.DS_Store HTTP/1.1


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 291...298)index usage: 0%, cache usage: 0%total entries stored since starting: 9total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 83 misstotal removes since starting: 0 hit, 0 miss

Found on 2022-10-24 06:12

Create report

Domain summary

smtp.leadingservice.co.th 17

1 recorded

IP summary

203.170.192.183 1 27.254.96.168 1

2 recorded