Domain smtp.partymanagementthailand.com
Thailand
CS LOXINFO Public Company Limited.
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: smtp.partymanagementthailand.com
Port: 80
URL: http://smtp.partymanagementthailand.comFirst seen 2023-08-03 07:51
Last seen 2024-02-02 23:17
Open for 183 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fecf5b78464Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 06:17:04 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 96 Parent Server MPM Generation: 95 Server uptime: 28 days 20 hours 15 minutes 43 seconds Server load: 2.07 2.02 2.00 Total accesses: 1852075 - Total Traffic: 23.8 GB - Total Duration: 2141174963 CPU Usage: u180.8 s108.68 cu32168.2 cs2235.83 - 1.39% CPU load .743 requests/sec - 10.0 kB/second - 13.5 kB/request - 1156.1 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03668no0yes032000 13956no0yes032000 23678no0yes131000 33671no0yes032000 Sum400 1127000 ________________________________________________________________ ____W___________________________________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-9536680/8/14816_ 2.0420160261250.00.01193.85 143.198.72.96http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-9536680/8/15305_ 3.0330139013740.00.01198.98 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x13\x01 0-9536680/6/14876_ 2.4010150319580.00.01192.76 164.92.192.25http/1.1localhost:80GET / HTTP/1.1 0-9536680/11/15065_ 2.4020145875390.00.01186.04 164.90.222.93http/1.1localhost:80\x16\x03\x01\x01\x0f\x01 0-9536680/11/14963_ 3.0510147711780.00.07185.53 159.65.138.217http/1.1localhost:443GET /login.action HTTP/1.1 0-9536680/8/15185_ 2.5110156649300.00.03188.58 138.68.163.10http/1.1localhost:443GET /login.action HTTP/1.1 0-9536680/11/14860_ 2.5125340145589130.00.03200.34 138.68.163.10http/1.1localhost:443GET /config.json HTTP/1.1 0-9536680/6/15164_ 2.4500150182120.00.03187.63 164.92.192.25http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-9536680/7/15123_ 2.07160145227020.00.01229.92 165.22.74.203http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-9536680/10/15263_ 2.4820148853520.00.01194.94 164.90.222.93http/1.1localhost:80GET /.git/config HTTP/1.1 0-9536680/10/14828_ 2.5125330154393670.00.03200.78 138.68.163.10http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-9536680/11/14840_ 3.0410147156500.00.03195.50 159.65.138.217http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-9536680/11/14709_ 3.0320137182850.00.01185.58 64.227.126.135http/1.1localhost:80GET / HTTP/1.1 0-9536680/10/14859_ 2.4625330169086700.00.01186.06 164.92.192.25http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-9536680/8/15812_ 2.4725310141620700.00.01187.83 139.144.150.45http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-9536680/8/14861_ 2.1625350165341490.00.02182.55 206.81.1.88http/1.1localhost:80GET /config.json HTTP/1.1 0-9536680/8/14910_ 3.0510143405310.00.01206.41 147.182.130.98http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-9536680/4/14966_ 2.07105144940210.00.00189.34 74.207.237.46http/1.1localhost:80GET /server-status HTTP/1.1 0-9536680/7/14789_ 3.03160160388580.00.01200.59 178.62.3.65http/1.1localhost:80GET / HTTP/1.1 0-9536680/9/15012_ 3.03130144644850.00.01193.86 178.62.3.65http/1.1localhost:80GET /login.action HTTP/1.1 0-9536680/5/15001_ 2.1425330181496160.00.01193.47 165.22.74.203http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-9536680/5/15025_ 3.03110147053990.00.02204.16 178.62.3.65http/1.1localhost:80GET /config.json HTTP/1.1 0-9536680/10/15484_ 2.1620150756300.00.03188.34 74.207.237.46http/1.1localhost:80GET /login.action HTTP/1.1 0-9536680/11/14692_ 2.47140138772100.00.03190.25 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.1 0-9536680/6/14995_ 2.4880162205980.00.03186.98 164.90.222.93http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-9536680/12/14675_ 3.0320135981730.00.01197.07 147.182.130.98http/1.1localhost:80GET / HTTP/1.1 0-9536680/6/15170_ 3.0330144713810.00.03194.56 147.182.130.98http/1.1localhost:80\x16\x03\x01\x01\x04\x01 0-9536680/9/14956_ 2.5110159195800.00.01213.36 138.68.163.10http/1.1localhost:443GET /.env HTTP/1.1 0-9536680/9/14755_ 3.0500152174910.00.01175.97 159.65.138.217http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-9536680/10/15202_ 2.1720135139190.00.03225.21 159.65.138.217http/1.1 0-9536680/8/14691_ 3.03150155579090.00.01199.17 178.62.3.65http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-9536680/12/14957_ 3.0510145815270.00.07185.26 159.65.138.217http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-9539560/11/15742_ 1.7025360138460140.00.05219.34 164.92.192.25http/1.1localhost:80GET /.env HTTP/1.1 1-9539560/4/15817_ 2.2210136849760.00.01198.69 64.227.126.135http/1.1localhost:80GET /about HTTP/1.1 1-9539560/9/15611_ 2.2210174090290.00.02199.98 64.227.126.135http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-9539560/8/15326_ 1.7200150896210.00.01189.47 138.68.163.10http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-9539560/9/15285_ 1.6910146566350.00.03197.95 139.144.150.45http/1.1localhost:443GET /.env HTTP/1.1 1-9539560/8/15663_ 2.2200134152160.00.01198.80 64.227.126.135http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-9539560/6/15357_ 1.4610172789950.00.01188.16 138.68.163.10h2localhost:443[0/0] Software caused connection abort 1-9539560/11/15196_ 1.4600165483500.00.03189.09 206.81.1.88http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-9539560/6/15341_ 1.7225350127395520.00.01211.77 138.68.163.10http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-9539560/8/14964_ 1.7180152319240.00.01188.75 164.92.192.25http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-9539560/8/15049_ 2.19120148013880.00.01204.87 178.62.3.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-9539560/9/15515_ 2.19130159268190.00.03208.76 178.62.3.65http/1.1localhost:80GET /server-status HTTP/1.1 1-9539560/6/15335_ 1.7120159504130.00.01200.57 138.68.163.10http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-9539560/9/15198_ 2.19100137016440.00.03183.07 178.62.3.65http/1.1localhost:80GET /?rest_route=/wp/v2/use
Found on 2024-02-02 23:17 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fec3818fbfaApache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:42:10 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 40 minutes 49 seconds Server load: 3.42 3.15 3.02 Total accesses: 865129 - Total Traffic: 11.7 GB - Total Duration: 1072909633 CPU Usage: u107.39 s12.35 cu14756 cs775.09 - 8.41% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1240.17 ms/request 11 requests currently being processed, 53 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 14311no13yes428008 215008no5yes725002 Sum2018 11530010 ................................_________RW___________W__W______ _______W____W___R___RWW______R__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/6891. 0.00260092123140.00.00101.02 203.170.192.183http/1.1www.chonlateeaa.com:443POST /wp-cron.php?doing_wp_cron=1704609224.54213690757751464843 0-7-0/0/7350. 0.00260112572282630.00.00102.14 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6939. 0.0026089178790990.00.00100.26 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7174. 0.00260214775847660.00.0092.54 85.208.96.210http/1.1www.chonlateeboi.com:443GET /47585lrvyeti.html HTTP/1.1 0-7-0/0/7138. 0.00260105876261220.00.0089.56 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /jwyfijs-12086litems/etidm52w.html HTTP/1.1 0-7-0/0/7275. 0.0026084188932560.00.0096.14 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/7088. 0.0026083970622910.00.00106.56 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2017idtuitems/eti HTTP/1.1 0-7-0/0/7166. 0.0026084673910630.00.0093.68 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ivxfijs-30857keti.html HTTP/1.1 0-7-0/0/7317. 0.0026090575885040.00.00143.62 40.77.167.2h2www.chonlateefbc.com:443GET /?m=cma-dishmachines-180uc-high-temp-undercounter-dishwashe 0-7-0/0/7203. 0.0026088878309230.00.0090.77 66.249.65.228http/1.1www.chonlateevip.com:443GET / HTTP/1.1 0-7-0/0/6992. 0.0026044528187048130.00.00111.98 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6758. 0.002601184189200.00.0087.93 66.249.71.36http/1.1www.mgrandstructure.com:443GET /ofpm/project-sekai-mod-apk.html HTTP/1.1 0-7-0/0/6811. 0.0026085063912670.00.0090.61 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2045idtuetidm25.html HTTP/1.1 0-7-0/0/7015. 0.0026084094751170.00.0095.78 47.128.57.61http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/uploads/2021/01/logo_Home.png HTTP/2.0 0-7-0/0/7685. 0.0026076672332400.00.0096.84 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6875. 0.0026088994028910.00.0088.35 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7000. 0.0026084175194130.00.0090.50 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /cfrfijs-30435eitems/etidm.htm HTTP/1.1 0-7-0/0/7105. 0.0026084871642070.00.0094.88 23.22.35.162http/1.1www.chonlateeboi.com:443GET /19415rbhsetidm36ts.html HTTP/1.1 0-7-0/0/7067. 0.0026091788661280.00.0088.94 185.191.171.19http/1.1www.chonlateefood.com:443GET /getid/zeo12115nheeitems HTTP/1.1 0-7-0/0/7136. 0.0026084774949870.00.0096.17 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B8%AD%E0% 0-7-0/0/7171. 0.00260845115334180.00.0099.43 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 0-7-0/0/6851. 0.00260105678741500.00.0091.77 185.191.171.19http/1.1www.chonlateeboi.com:443GET /6178zvqcetid HTTP/1.1 0-7-0/0/7407. 0.0026084486534200.00.0098.18 3.224.220.101http/1.1www.chonlateeboi.com:443GET /19448rbhsitems/etidm98arp.html HTTP/1.1 0-7-0/0/6945. 0.0026069070103160.00.0098.07 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 0-7-0/0/6996. 0.0026044092090520.00.0088.48 208.109.224.138http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7163. 0.0026084463458100.00.0091.23 47.128.57.61h2www.xn--12cx2bef7bl0boq4ch6gugw[2/2] done: stream 3, GET /wp-content/uploads/2021/01/logo_Home 0-7-0/0/6983. 0.0026084177138920.00.0099.07 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qifivak-4293sitems/etidm68.htm HTTP/1.1 0-7-0/0/7033. 0.00260123687774620.00.00120.10 149.91.122.223http/1.1www.chonlateefood.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/6856. 0.0026084776147840.00.0086.02 114.119.153.56http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9%E0%B8%B1%E0%B8%97 0-7-0/0/7160. 0.002601078931820.00.00125.06 203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704609224.08053588867187500000 0-7-0/0/6794. 0.0026084484918420.00.0098.44 3.224.220.101http/1.1www.chonlateeboi.com:443GET /30278lrvyitems/etidm57o.html HTTP/1.1 0-7-0/0/7169. 0.0026090676482950.00.0091.69 192.95.30.21http/1.1www.chonlateeseal.com:443GET /%E0%B8%84%E0%B8%B1%E0%B8%94%E0%B8%AB%E0%B8%99%E0%B8%B1%E0% 1-743110/174/6985_ 78.431078167990.01.7890.41 164.90.205.35http/1.1localhost:80GET /.DS_Store HTTP/1.1 1-743110/221/6764_ 79.40036778790750.02.6486.15 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=topperz-store-usa-minor-league-mayhem-what-s-your-8-ii- 1-743110/147/6707_ 79.1600105345730.01.4585.91 45.55.193.222http/1.1 1-743110/174/6468_ 79.370083859750.01.5785.05 159.203.182.222http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-743110/157/6641_ 79.101080194240.01.6398.38 144.126.198.24http/1.1 1-743110/236/6751_ 79.390078210150.04.2390.55 137.184.150.232http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-743110/224/6744_ 78.90036297144290.04.3787.80 45.55.193.222http/1.1 1-743110/156/6775_ 79.16184290618170.01.5089.91 138.68.133.118http/1.1 1-743110/221/6883_ 79.250060843660.01.7287.84 144.126.202.105http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-743110/140/6697R 78.401483217390.01.4692.53 144.126.198.24h2localhost:443[0/0] Software caused connection abort 1-743111/96/6418W 79.160090959530.01.1190.67 3.224.220.101http/1.1www.chonlateeboi.com:443GET /13143gzgqitems/etidm74nq.htm HTTP/1.1 1-743110/168/6952_ 79.42063078956980.01.9099.87 23.22.35.162
Found on 2024-01-07 06:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fec35831491Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 03:47:52 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 17 hours 46 minutes 31 seconds Server load: 2.52 2.61 2.65 Total accesses: 314351 - Total Traffic: 4.4 GB - Total Duration: 288964246 CPU Usage: u221.6 s13.85 cu5056.5 cs270.41 - 8.69% CPU load 4.91 requests/sec - 72.5 kB/second - 14.7 kB/request - 919.241 ms/request 15 requests currently being processed, 49 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 122317no18yes9230111 227923no2yes626000 Sum2020 15490111 ................................_R____R_R_____R__R____WR___WW___ _W____________RW_____R_WW_______................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2-0/0/3194. 0.00306742528768890.00.0047.11 194.58.121.229http/1.1www.rooffurnish.com:443POST /wp-login.php HTTP/1.1 0-2-0/0/3455. 0.003067107724901260.00.0045.28 85.208.96.202http/1.1www.krongthongsecurity.com:443GET /htygzna229132litems/etidm14ugl.html HTTP/1.1 0-2-0/0/3118. 0.00306783437593330.00.0053.55 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?mjiecaw-286155vetidm4.htm HTTP/1.1 0-2-0/0/3380. 0.00306763627408070.00.0042.71 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5341tbrmitems/etidm45 HTTP/1.1 0-2-0/0/3237. 0.00306784125511080.00.0040.44 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ufshsbr-320093fetidm39hsf HTTP/1.1 0-2-0/0/3477. 0.00306783932480400.00.0043.86 52.167.144.24h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3259. 0.00306784025454740.00.0055.68 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ajwecaw-316459jetidm8 HTTP/1.1 0-2-0/0/3286. 0.00306740226514000.00.0042.47 91.92.252.141http/1.1www.ltclevelup.com:443GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3334. 0.00306783926277530.00.0084.92 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?uuqaonh-122935detidm92hhd HTTP/1.1 0-2-0/0/3256. 0.00306783825449070.00.0042.02 3.224.220.101http/1.1www.chonlateeboi.com:443GET /11370ztiaetid.htm HTTP/1.1 0-2-0/0/3173. 0.003067101128795120.00.0038.86 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?eetvrsm-293297geti.html HTTP/1.1 0-2-0/0/3146. 0.003067407425688950.00.0040.21 66.249.69.228http/1.1www.chonlateenextbiz.com:443GET /sitemap3.xml HTTP/1.1 0-2-0/0/3096. 0.00306784525479180.00.0042.08 52.70.240.171http/1.1www.chonlateeboi.com:443GET /5335tbrmitems/etidm69fm HTTP/1.1 0-2-0/0/3367. 0.00306783736720350.00.0045.96 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?liavrsm-295332netidm4.htm HTTP/1.1 0-2-0/0/3430. 0.00306784328925500.00.0045.91 85.208.96.193http/1.1www.chonlateeadmin.com:443GET /mnbwaok-38297oeti.html HTTP/1.1 0-2-0/0/3138. 0.003067030630950.00.0040.43 195.211.77.142http/1.1localhost:443HEAD / HTTP/1.1 0-2-0/0/3141. 0.003067109829741030.00.0040.23 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?jiyvrsm-295304litems/etidm19wvl.html HTTP/1.1 0-2-0/0/3394. 0.003067122126703460.00.0044.77 52.167.144.18h2www.chonlateefbc.com:443[0/0] init 0-2-0/0/3301. 0.00306784324881610.00.0042.98 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?lmahlzs-466netid HTTP/1.1 0-2-0/0/3155. 0.003067240229467670.00.0046.16 40.77.167.255h2www.chonlateeaa.com:443[0/0] init 0-2-0/0/3247. 0.00306784224826040.00.0050.02 52.70.240.171http/1.1www.chonlateeboi.com:443GET /37327bzlnitems/etidm82rn HTTP/1.1 0-2-0/0/3261. 0.003067408127242670.00.0046.03 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /sitemap16.xml HTTP/1.1 0-2-0/0/3606. 0.00306783325294670.00.0045.78 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?vfkvrsm-295862xitems/etidm84i.html HTTP/1.1 0-2-0/0/3167. 0.00306784525092350.00.0040.86 23.22.35.162http/1.1www.chonlateeboi.com:443GET /38206ztiaetidm39m HTTP/1.1 0-2-0/0/3161. 0.00306784225364790.00.0040.26 52.70.240.171http/1.1www.chonlateeboi.com:443GET /13039ztiaitems/etidm67na HTTP/1.1 0-2-0/0/3165. 0.00306788326235840.00.0040.77 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?hiwvrsm-306404jitems/etidm1.html HTTP/1.1 0-2-0/0/3226. 0.00306789028272940.00.0051.28 40.77.167.8h2www.chonlateenextbiz.com:443GET /g2016469.shtml HTTP/2.0 0-2-0/0/3171. 0.00306783831863910.00.0070.95 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-295296detidm28ovd.htm HTTP/1.1 0-2-0/0/3109. 0.003067025398020.00.0039.01 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1 0-2-0/0/3454. 0.00306784824072460.00.0079.52 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ikfqxjd-247957setidm79vx.html HTTP/1.1 0-2-0/0/3133. 0.00306783727805250.00.0047.82 3.224.220.101http/1.1www.chonlateeboi.com:443GET /1944gcmpetidm89ugj.htm HTTP/1.1 0-2-0/0/3519. 0.003067028024720.00.0043.22 91.92.252.141http/1.1www.ltclevelup.com:80GET /wp-content/themes/include.php HTTP/1.1 1-2223170/234/2557_ 123.651019226020.02.9133.18 143.42.118.5http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2223170/201/2301R 123.39184321233420.02.6129.64 139.144.150.8h2localhost:443[0/0] Software caused connection abort 1-2223170/223/2450_ 123.600019309030.02.6433.32 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 1-2223170/201/2290_ 123.661365720092840.02.7430.63 81.94.150.189http/1.1www.krongthongsecurity.com:443GET /wp-content/plugins/wp-compress-image-optimizer/fixCss.php? 1-2223170/165/2294_ 123.770028078970.02.0534.56 178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/260/2445_ 123.75084518350250.03.6532.03 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /zxoktze-43588betidm8 HTTP/1.1 1-2223170/196/2331R 122.951419020680.02.4428.81 139.144.150.8http/1.1 1-2223170/222/2407_ 123.59084519501540.03.8533.31 23.22.35.162http/1.1www.chonlateeboi.com:443GET /28775biwxetidm98tx.html HTTP/1.1 1-2223170/221/2384R 123.225019275940.02.7832.76 217.113.194.213http/1.1www.mkandptfoods.com:443 1-2223170/191/2303_ 123.651018353620.02.3929.93 139.144.150.8http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/228/2346_ 123.651018428910.02.6834.66 128.199.62.55http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-2223170/211/2460_ 123.411019918610.02.6433.86 143.42.118.5http/1.1localhost:80GET / HTTP/1.1 1-222317<
Found on 2024-01-05 20:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fecc450854bApache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 03:31:58 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 43 Parent Server MPM Generation: 42 Server uptime: 11 days 3 hours 8 minutes 59 seconds Server load: 0.22 0.36 0.46 Total accesses: 4408856 - Total Traffic: 56.5 GB - Total Duration: 4157798784 CPU Usage: u199.63 s46.82 cu79452.5 cs4157.09 - 8.72% CPU load 4.58 requests/sec - 61.6 kB/second - 13.4 kB/request - 943.056 ms/request 5 requests currently being processed, 59 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 017105no18yes4280015 117528no2yes131000 Sum2020 5590015 _____________R____W___R___W_________________________W___________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-42171050/107/39545_ 76.04012358813800.01.11500.61 27.254.96.168http/1.1www.importantaccount.com:443POST /wp-cron.php?doing_wp_cron=1702326717.03947401046752929687 0-42171050/128/38952_ 76.0500366081370.02.49492.36 167.99.8.63http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-42171050/177/39373_ 75.9910400868330.06.07508.71 54.36.149.53http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 0-42171050/103/39342_ 75.8700389564450.01.07513.60 104.131.1.32http/1.1 0-42171050/112/39863_ 75.7000371008330.01.21567.52 161.35.27.144h2localhost:443[0/0] Software caused connection abort 0-42171050/124/38938_ 76.0400398977360.02.49493.22 178.128.151.41http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-42171050/120/39258_ 76.080892402720150.01.31494.34 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?sphecaw-206601uitems/eti.htm HTTP/1.1 0-42171050/119/40028_ 75.8800367696710.01.26502.11 161.35.27.144h2localhost:443[0/0] Software caused connection abort 0-42171050/119/38987_ 75.9500379846060.01.24510.14 161.35.27.144h2localhost:443[0/0] Software caused connection abort 0-42171050/116/39386_ 75.7300368028910.01.28502.75 139.59.230.191http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-42171050/129/39007_ 75.830862384736370.01.45474.61 159.223.108.26http/1.1 0-42171050/110/39040_ 75.9910369080820.01.33523.71 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-42171050/127/38952_ 75.7300375198440.01.36475.71 139.59.230.191http/1.1localhost:443GET /about HTTP/1.1 0-42171050/132/39129R 75.86112407551460.01.64504.32 144.126.198.24http/1.1localhost:80GET /server-status HTTP/1.1 0-42171050/118/39303_ 76.0900380322450.01.49493.75 128.199.62.55http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-42171050/118/38997_ 75.8800372037240.01.40548.52 139.59.230.191http/1.1localhost:443GET /.git/config HTTP/1.1 0-42171050/119/39969_ 75.8800375077730.01.28528.08 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /ltsgzna142244fetidm6.htm HTTP/1.1 0-42171050/120/39487_ 75.9500366756670.01.23486.36 144.126.198.24http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-42171051/146/39534W 75.7000367925080.01.52510.55 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?89627himsetidm.html HTTP/1.1 0-42171050/111/39768_ 76.050862384600130.01.56547.02 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?tsmfooj-37004zetid.htm HTTP/1.1 0-42171050/196/39196_ 75.7100364536740.02.36516.18 159.203.63.67http/1.1 0-42171050/103/39324_ 74.950893388049850.01.05507.29 54.36.149.53h2www.xn--2566-4do9ab5h1bfcjg7hg1[1/1] done: stream 1, GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B 0-42171050/112/39099R 75.951843408442430.01.21517.28 185.191.171.11http/1.1www.chonlateeadmin.com:443 0-42171050/201/38489_ 75.8710361787830.01.50477.59 144.126.198.24http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-42171050/171/39500_ 75.8900371552290.01.54523.06 104.131.1.32http/1.1 0-42171050/122/38745_ 75.7100388751980.01.65473.99 159.203.63.67h2localhost:443[0/0] Software caused connection abort 0-42171051/136/39468W 75.9900373209540.02.95588.06 167.99.8.63http/1.1localhost:80GET /server-status HTTP/1.1 0-42171050/112/38669_ 75.9910370337920.01.23512.98 167.99.8.63http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-42171050/104/39262_ 76.0900411881240.01.30526.28 178.128.151.41http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-42171050/99/39236_ 74.270825375236920.01.17506.91 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-42171050/104/39230_ 76.0400370183200.01.17496.23 144.126.198.24http/1.1localhost:80GET /login.action HTTP/1.1 0-42171050/113/38972_ 75.320880378134470.01.67541.02 159.203.63.67http/1.1 1-42175280/99/40400_ 59.290926375889300.01.13509.81 128.199.62.55h2localhost:443[0/0] Software caused connection abort 1-42175280/123/40306_ 59.6200384681990.01.61552.35 159.223.108.26http/1.1 1-42175280/90/40095_ 59.7405385604580.00.92559.71 27.254.96.168http/1.1www.importantaccount.com:443POST /wp-cron.php?doing_wp_cron=1702326717.04007792472839355468 1-42175280/88/40325_ 59.7600393767480.01.09567.22 167.99.8.63http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-42175280/98/41203_ 59.5300365683090.01.09628.09 139.59.230.191http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-42175280/103/39885_ 59.5400362748980.02.17573.51 139.59.230.191http/1.1localhost:443GET /.env HTTP/1.1 1-42175280/80/40019_ 59.7211365433400.00.90534.51 185.191.171.17http/1.1www.chonlateeadmin.com:443GET /robots.txt HTTP/1.1 1-42175280/94/40483_ 59.5310389411980.01.19515.97 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-42175280/86/40174_ 59.5010377987020.00.99505.42 159.203.63.67h2localhost:443[0/0] Software caused connection abort 1-42175280/99/40278_ 59.7600370377790.01.07514.90 144.126.198.24http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-42175280/75/40814_ 59.5310366892620.00.92538.59 159.203.63.67http/1.1 1-42175280/83/40649_ 59.3810371897560.00.96506.15 178.128.151.41http/1.1localhost:80\x16\x03\x01\x01\x04\x01 1-42175280/98/40526_ 59.7110363444820.01.13502.48 178.128.151.41http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-4217528<
Found on 2023-12-11 20:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fecd05c039fApache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:27:42 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 4 minutes 43 seconds Server load: 2.25 1.89 1.63 Total accesses: 695824 - Total Traffic: 9.7 GB - Total Duration: 517429980 CPU Usage: u74.87 s11.77 cu12013 cs653.85 - 7.37% CPU load 4.02 requests/sec - 58.5 kB/second - 14.6 kB/request - 743.622 ms/request 13 requests currently being processed, 115 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no4yes131001 330151no4yes428003 630155no5yes131001 730156no8yes725011 Sum4021 13115016 ................................................................ _______________________W_________________W_R____________R_____L_ ................................................................ _____W_____________________________W__W_____W____W__RW_________R ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0063789745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0063796045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0063780245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0063795746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00637167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0063794846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00637145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0063792346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00637107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00637104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0063770146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0063789947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0063772146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00637104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00637108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0063746846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0063770945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0063784445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0063771246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0063770946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00637046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0063749045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0063793646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0063786945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006374146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0063773844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00637722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0063796345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00637107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00637146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00637778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0063796044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0063786344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0063747946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00637150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0063767645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0063745143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00637044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00637232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0063758244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00637183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00637822744746080.00.007
Found on 2023-12-02 17:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57173c134eApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:49:44 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 2 hours 25 minutes 58 seconds Server load: 0.49 0.52 0.54 Total accesses: 10589 - Total Traffic: 162.1 MB - Total Duration: 23102645 CPU Usage: u3300.48 s5871.57 cu55530000 cs13588500 - 789000% CPU load 1.21 requests/sec - 19.0 kB/second - 15.7 kB/request - 2181.76 ms/request 6 requests currently being processed, 4 idle workers _W__..R..RRW_W.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964101610/49/938_ 28.330120637710.00.4110.31 139.144.150.45http/1.1 1-1964100330/64/896W 39.350020760210.01.2212.66 159.65.58.104http/1.1localhost:80GET /server-status HTTP/1.0 2-1964106990/1/863_ 0.82093518823070.00.0111.17 159.65.138.217http/1.1 3-1964101710/45/870_ 30.510390817899390.00.3614.02 159.65.138.217http/1.1 4-1964-0/0/774. 0.00754017035300.00.009.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1964-0/0/770. 0.00889017348200.00.008.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-196497610/87/910R 46.110019985450.01.2713.45 143.110.156.182http/1.1 7-1964-0/0/706. 0.00899017196100.00.008.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1964-0/0/799. 0.0001118022000.00.009.72 143.198.72.96http/1.1 9-196498180/83/608R 50.410112810880.00.837.45 159.65.58.104http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-196498280/80/537R 47.30008791230.00.925.90 159.65.138.217http/1.1 11-196498370/73/567W 47.211012299860.01.057.90 147.182.130.98http/1.1www.importantaccount.com:443GET / HTTP/1.1 12-196498430/74/273_ 50.98015765320.00.685.70 143.198.72.96http/1.1 13-196498500/72/307W 41.29508089430.01.375.59 139.59.182.142http/1.1www.partymanagementthailand.comGET / HTTP/1.1 14-1964-0/0/155. 0.0096903405970.00.001.84 178.62.3.65http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 15-1964-0/0/166. 0.00130903538420.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1964-0/0/63. 0.00236201069970.00.001.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1964-0/0/1. 0.002744010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1964-0/0/3. 0.0027320770.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1964-0/0/98. 0.00208818792012280.00.001.40 108.162.238.97http/1.1www.smetast.com:80GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 20-1964-0/0/89. 0.0020919421872310.00.002.90 172.68.234.187http/1.1www.chonlateefarm.com:443POST /wp-cron.php?doing_wp_cron=1700162091.11823105812072753906 21-1964-0/0/1. 0.002743010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964-0/0/100. 0.0020988731850270.00.0017.49 172.68.234.179http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1700162083.61266803741455078125 23-1964-0/0/95. 0.0021247141812190.00.002.03 172.69.214.81http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 7subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 295 seconds, (range: 293...298)index usage: 0%, cache usage: 0%total entries stored since starting: 77total entries replaced since starting: 0total entries expired since starting: 70total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5103 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57a81a0ec1Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 06:30:45 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 2 hours 28 minutes 33 seconds Server load: 0.33 0.40 0.44 Total accesses: 13263 - Total Traffic: 196.0 MB - Total Duration: 31924993 CPU Usage: u3000.57 s5760.09 cu55143800 cs13500100 - 770000% CPU load 1.49 requests/sec - 22.5 kB/second - 15.1 kB/request - 2407.07 ms/request 6 requests currently being processed, 4 idle workers _WC__.WR..R._W.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932141730/14/1099_ 3.090027303270.00.1511.34 159.65.138.217http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1932140150/39/1077W 5.200026612580.00.3514.95 162.158.174.182http/1.1www.proplustech.co.th:443GET /?page_id=W718520 HTTP/1.1 2-1932141261/25/1126C 2.1201211273179011.50.2515.59 172.69.65.245http/1.1www.proplustech.co.th:443GET /?page_id=Y161663 HTTP/1.1 3-1932139840/47/1118_ 6.350127240750.01.4425.20 159.65.138.217http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1932139950/46/1122_ 4.680127128500.01.4415.79 159.65.138.217http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-1932-0/0/1080. 0.0087148924762570.00.0016.28 162.158.174.94http/1.1www.proplustech.co.th:443GET /?page_id=I125017 HTTP/1.1 6-1932140730/30/1060W 2.640026413510.00.2816.06 159.65.138.217http/1.1localhost:80GET /server-status HTTP/1.0 7-1932140030/39/1009R 11.09367824360860.00.4611.49 74.207.237.46http/1.1 8-1932-0/0/1037. 0.00229176324998820.00.0015.61 172.69.67.4http/1.1www.proplustech.co.th:443GET /?page_id=G766203 HTTP/1.1 9-1932-0/0/848. 0.0028471318794530.00.0013.40 172.70.135.21http/1.1www.business.co.th:443POST //shop//wp-login.php HTTP/1.1 10-1932137560/95/779R 20.473143718359350.04.0311.75 172.71.167.3http/1.1 11-1932-0/0/618. 0.0086121915603880.00.009.69 172.70.130.138http/1.1www.chorsiam.com:80GET / HTTP/1.0 12-1932138130/84/627_ 10.730114377330.02.888.28 159.65.138.217http/1.1localhost:80GET /about HTTP/1.0 13-1932138220/89/401W 14.15208892660.04.477.52 162.158.102.34http/1.1www.siamerp.com:443GET / HTTP/1.1 14-1932-0/0/259. 0.0066407083130.00.003.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/3. 0.0020630210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 5subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 141 seconds, (range: 61...299)index usage: 0%, cache usage: 0%total entries stored since starting: 49total entries replaced since starting: 0total entries expired since starting: 44total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 9869 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-05 23:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5777f2aaacApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 01:37:30 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 1 hour 13 minutes 36 seconds Server load: 3.93 3.29 3.28 Total accesses: 18552 - Total Traffic: 261.1 MB - Total Duration: 76618144 CPU Usage: u3321.1 s5692.99 cu53825200 cs13127100 - 1520000% CPU load 4.2 requests/sec - 60.5 kB/second - 14.4 kB/request - 4129.91 ms/request 15 requests currently being processed, 3 idle workers _WW.WR.RW.WWWW._RWRR_W............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1895187230/85/929_ 62.430381436390740.01.1313.17 161.35.27.144http/1.1 1-1895188480/61/882W 55.330036552180.00.9313.91 139.59.182.142http/1.1www.importantaccount.com:443GET / HTTP/1.1 2-1895187400/80/881W 67.190037805740.00.9813.23 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.0 3-1895-0/0/910. 0.0019036953310.00.0013.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1895192000/24/821W 24.351037181000.00.4211.08 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=colorful-palm-tree-canvas-painting-rainbow-colour-decor 5-1895189390/61/891R 44.080135524420.00.9211.22 52.70.240.171http/1.1www.thaidaoherb.com:443 6-1895-0/0/837. 0.000035669990.00.0011.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1895192550/19/825R 22.560133302720.00.2411.56 52.70.240.171http/1.1www.krongthongsecurity.com:443 8-1895192190/28/759W 14.892029263090.00.4610.37 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=vintage-1969-gibson-eb-1-violin-bass-natural-finish-mm- 9-1895-0/0/764. 0.0013031197420.00.0011.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1895192350/27/814W 19.562033649510.00.3511.04 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=1954-gibson-eb-1-mahogany-electric-bass-musical-lot-mm- 11-1895187680/77/796W 55.891031674360.00.9810.84 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=sunset-painting-palm-tree-original-art-trees-wall-art-m 12-1895188670/65/750W 53.310030948190.00.7810.43 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gibson-eb-eb-1-bass-guitar-%3E%3E-flyguitars-mm-a9pRAyH 13-1895188690/67/749W 49.982029816320.01.1010.64 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=kate-and-laurel-sylvie-coastal-coconut-palm-tree-beach- 14-1895-0/0/806. 0.0012035122160.00.0010.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1895194350/8/797_ 4.830131610170.00.0611.06 146.190.98.165http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1895190520/38/655R 34.330026193350.00.557.98 161.35.155.246http/1.1localhost:443GET / HTTP/1.1 17-1895193270/13/617W 14.893025746430.00.208.71 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=palm-tree-sunset-solid-faced-canvas-print-mm-YJ6vWoFb H 18-1895190840/31/662R 30.132354428027300.00.509.69 161.35.27.144http/1.1 19-1895192820/25/595R 15.930125845800.00.208.31 146.190.98.165http/1.1localhost:80GET / HTTP/1.0 20-1895193420/14/519_ 11.320122804030.00.188.40 146.190.98.165http/1.1localhost:80GET /v2/_catalog HTTP/1.0 21-1895194080/7/491W 3.893017410150.00.436.88 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=pin-by-becky-williams-art-on-my-art-palm-mm-ABkPQKHZ HT 22-1895-0/0/288. 0.0011012266050.00.004.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1895-0/0/179. 0.00668010101270.00.002.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1895-0/0/256. 0.0081564911897040.00.003.52 162.158.183.226http/1.1www.siamerp.com:443GET /up.php HTTP/1.1 25-1895-0/0/141. 0.00120706130220.00.001.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1895-0/0/110. 0.00164940965481370.00.001.57 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=print-square-4x4-photo-prints-online-photo-printing-sna 27-1895-0/0/39. 0.00209401857100.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1895-0/0/6. 0.0030430353680.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/101. 0.00304103336930.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/30. 0.0029910806520.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/13. 0.0030090494500.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1895-0/0/61. 0.00304002819260.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1895-0/0/44. 0.00291501303770.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/195. 0.0026929967390860.00.002.79 36.150.60.24http/1.1www.thaiquickservice.net:443GET / HTTP/1.1 35-1895-0/0/24. 0.00300501258990.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/5. 0.0030370127750.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/101. 0.00304204152930.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/21. 0.0029680718280.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/31. 0.00360101275910.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1895-0/0/5. 0.003716041080.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1895-0/0/97. 0.00322512584050640.00.001.68 23.22.35.162http/1.1www.thaidaoherb.com:443GET /43848319153023.html HTTP/1.1 42-1895-0/0/3. 0.003729017490.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/3. 0.0037210146420.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/49. 0.00355801464770.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 750subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 16 seconds, (range: 1...49)index usage: 26%, cache usage: 34%total entries stored since starting: 10158total entries replaced since starting: 0total entries expired since starting: 9408total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 9 hit, 2793 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-26 18:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57b86c7516Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 10:29:51 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 6 hours 27 minutes 39 seconds Server load: 0.80 0.69 0.85 Total accesses: 36579 - Total Traffic: 656.6 MB - Total Duration: 44119276 CPU Usage: u2883.5 s5354.15 cu52307900 cs12766900 - 280000% CPU load 1.57 requests/sec - 28.9 kB/second - 18.4 kB/request - 1206.14 ms/request 7 requests currently being processed, 10 idle workers _R____C_CR____RWR................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1823194430/79/3129_ 33.23038535572460.01.2047.98 142.93.153.3http/1.1 1-1823194560/74/3031R 29.700935961260.01.1056.28 139.144.150.8http/1.1 2-1823194690/65/2974_ 28.390136430780.01.1147.07 206.81.1.88http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1823195830/56/2745_ 16.710133311800.01.5144.46 139.144.150.8http/1.1 4-1823200190/14/2802_ 6.100034844030.00.1535.96 139.144.150.205http/1.1 5-1823197210/43/2454_ 16.640032717550.00.3850.99 142.93.153.3http/1.1 6-1823201121/7/2501C 3.320034272762.30.0855.86 164.92.192.25http/1.1localhost:443GET / HTTP/1.1 7-1823200310/5/2451_ 2.3406283128578820.00.1339.01 178.62.73.12http/1.1 8-1823200381/17/2254C 2.570026493470.20.1348.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1823201380/2/2296R 0.040524535230.00.0235.15 164.92.192.25http/1.1 10-1823200400/13/1595_ 6.160243219147900.00.3137.77 162.243.186.177http/1.1 11-1823201440/0/1688_ 0.000021250250.00.0035.24 159.203.94.228http/1.1 12-1823201500/2/1479_ 0.69072718742540.00.0127.16 178.62.73.12http/1.1 13-1823201570/1/581_ 0.00017598820.00.0033.39 137.184.106.30http/1.1 14-1823201630/0/885_ 0.000011744220.00.0011.42 159.203.94.228http/1.1 15-1823201690/0/770W 0.00007788670.00.0012.66 206.81.1.88http/1.1localhost:80GET /server-status HTTP/1.0 16-1823201710/1/717R 0.01128588580.00.0012.43 172.69.150.84http/1.1 17-1823-0/0/470. 0.0070904971430.00.006.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/496. 0.0072804979870.00.004.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1823-0/0/76. 0.007150650510.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/312. 0.0071004156420.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1823-0/0/235. 0.00124313028580.00.004.53 178.62.73.12http/1.1 22-1823-0/0/87. 0.005230750460.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/34. 0.007110271400.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/262. 0.0072202578000.00.002.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1823-0/0/26. 0.007210308520.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1823-0/0/8. 0.00712027750.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1823-0/0/42. 0.005210279830.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1823-0/0/2. 0.00708036190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1823-0/0/52. 0.004470299600.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1823-0/0/2. 0.00707038360.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1823-0/0/98. 0.001791236330.00.001.48 172.71.131.85http/1.1www.siamerp.com:443GET /wp-content/uploads/siteorigin-widgets/sow-button-flat-8d17 32-1823-0/0/3. 0.00726010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1823-0/0/2. 0.00719050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1823-0/0/2. 0.00731010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1823-0/0/2. 0.00727120.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1823-0/0/3. 0.00729030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1823-0/0/1. 0.00734000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1823-0/0/2. 0.00733010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1823-0/0/3. 0.00723010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1823-0/0/3. 0.00724010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1823-0/0/4. 0.00720020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 95subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 94 seconds, (range: 2...270)index usage: 3%, cache usage: 4%total entries stored since starting: 7852total entries replaced since starting: 0total entries expired since starting: 7757total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 250 hit, 13452 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 03:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5770ef126eApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 22:54:29 +07 Restart Time: Tuesday, 03-Oct-2023 04:02:11 +07 Parent Server Config. Generation: 1799 Parent Server MPM Generation: 1798 Server uptime: 18 hours 52 minutes 17 seconds Server load: 1.12 0.82 0.70 Total accesses: 99428 - Total Traffic: 2.4 GB - Total Duration: 158604613 CPU Usage: u2893.5 s5294.32 cu51826800 cs12662400 - 94900% CPU load 1.46 requests/sec - 36.5 kB/second - 24.9 kB/request - 1595.17 ms/request 12 requests currently being processed, 0 idle workers WWCWWWWWRR...RC................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-17989590/43/8362W 22.4700145616380.00.56244.15 137.184.106.30http/1.1www.partymanagementthailand.comGET / HTTP/1.1 1-179813850/14/8330W 9.8710130115050.00.13182.53 164.92.192.25http/1.1www.importantaccount.com:443GET / HTTP/1.1 2-179814111/9/7904C 5.540391125754465.80.07172.34 142.93.153.3http/1.1www.importantaccount.com:443GET / HTTP/1.1 3-17985910/81/7813W 34.8810131224260.01.69222.91 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%95%E0%B9%88%E0%B8%AD%E0% 4-17984100/77/7450W 40.0100116583030.00.94219.39 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 5-17989750/40/7442W 18.9810116162540.00.51174.06 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1696348468.11303091049194335937 6-17985990/79/7341W 33.5200114402730.01.14162.31 27.254.96.168http/1.1www.importantaccount.com:443GET / HTTP/1.1 7-179815360/0/7172W 0.0010112264060.00.00147.68 27.254.96.168http/1.1www.importantaccount.com:443POST /wp-cron.php?doing_wp_cron=1696348468.65592288970947265625 8-179815450/0/6348R 0.0000107840450.00.00147.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-179815460/0/6334R 0.000099902310.00.00128.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1798-0/0/5725. 0.003131096859430.00.00179.68 167.71.48.191http/1.1 11-1798-0/0/4980. 0.0072076979530.00.00131.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1798-0/0/3689. 0.00301059635850.00.0090.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-17989850/40/3033R 25.100145936110.00.7072.64 46.101.103.192http/1.1 14-17989871/42/1955C 20.720290294570035.70.6539.72 40.77.167.25http/1.1www.1smestartup.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 15-1798-0/0/1509. 0.00300019979540.00.0033.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1798-0/0/869. 0.00302011989210.00.0021.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1798-0/0/239. 0.00501103349140.00.003.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1798-0/0/352. 0.00400105526120.00.007.08 164.92.192.25http/1.1localhost:443GET /about HTTP/1.1 19-1798-0/0/299. 0.00500905300670.00.007.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1798-0/0/70. 0.0044490926180.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1798-0/0/86. 0.00499201029550.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1798-0/0/98. 0.0050080738520.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1798-0/0/226. 0.00501004775950.00.002.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1798-0/0/211. 0.00404503012730.00.002.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1798-0/0/174. 0.00499102258600.00.002.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1798-0/0/12. 0.0049870132980.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1798-0/0/99. 0.00396521931778170.00.001.26 185.191.171.7http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 28-1798-0/0/103. 0.0049890940790.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1798-0/0/7. 0.004996099910.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1798-0/0/12. 0.0049970247870.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1798-0/0/189. 0.00400003328680.00.002.39 128.199.61.251http/1.1localhost:443GET /_all_dbs HTTP/1.1 32-1798-0/0/190. 0.00399202308920.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1798-0/0/99. 0.00399213381712710.00.001.19 149.202.65.189http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%99 34-1798-0/0/123. 0.00500001056340.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1798-0/0/125. 0.00498801403490.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1798-0/0/11. 0.0049990217480.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1798-0/0/57. 0.0050031573560.00.001.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1798-0/0/10. 0.0050020121730.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1798-0/0/9. 0.0050040129820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1798-0/0/44. 0.0050010551430.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1798-0/0/9. 0.00375740116370.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1798-0/0/12. 0.00375630172750.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1798-0/0/5. 0.0037577076270.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1798-0/0/76. 0.003757001477960.00.001.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1798-0/0/5. 0.0037583020710.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1798-0/0/104. 0.0037319547812450.00.001.54 159.192.136.230http/1.1www.importantaccount.com:443POST //xmlrpc.php HTTP/1.1 47-1798-0/0/10. 0.0037562051750.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1798-0/0/101. 0.00373072271071880.00.001.39 54.36.148.103http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2022/10/Chondesign_logo_-174-215x215.jp 49-1798-0/0/5. 0.0037581022460.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection Child</
Found on 2023-10-03 15:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c575c20e50dApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:29:58 +07 Restart Time: Tuesday, 03-Oct-2023 00:11:21 +07 Parent Server Config. Generation: 1797 Parent Server MPM Generation: 1796 Server uptime: 18 minutes 36 seconds Server load: 1.00 1.41 1.37 Total accesses: 1889 - Total Traffic: 20.0 MB - Total Duration: 2762531 CPU Usage: u2772.32 s5259.65 cu51774400 cs12651700 - 5770000% CPU load 1.69 requests/sec - 18.4 kB/second - 10.9 kB/request - 1462.43 ms/request 8 requests currently being processed, 5 idle workers WC_WR__RW...RC._._................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1796271060/2/141W 0.77102402540.00.001.53 46.101.103.192http/1.1www.partymanagementthailand.comGET / HTTP/1.1 1-1796234841/27/147C 10.55013946916.20.271.76 23.178.112.208http/1.1www.pokaorganize.com:443GET /.well-known/acme-challenge/d81okVf_1_iFdT5y80wlGjgXEAmy8Yk 2-1796226760/40/118_ 8.32001499300.00.531.12 164.90.222.93http/1.1 3-1796245170/6/141W 1.85202744340.00.072.08 104.244.77.96http/1.1www.chonlateebusiness.com:443GET /wp-login.php HTTP/1.1 4-1796246190/20/143R 7.60002942600.00.271.89 165.232.76.155http/1.1www.partymanagementthailand.comGET /about HTTP/1.0 5-1796272620/2/139_ 0.00012163760.00.001.89 167.71.48.191http/1.1localhost:80GET / HTTP/1.0 6-1796253610/21/116_ 6.27011884270.00.241.34 178.62.3.65http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 7-1796203650/71/169R 18.00112105570.00.391.47 194.127.167.79http/1.1www.nakindogtraining.com:443 8-1796261210/8/147W 3.65001867560.00.191.77 68.183.64.176http/1.1localhost:80GET /server-status HTTP/1.0 9-1796-0/0/172. 0.00111559330.00.001.98 139.144.150.23http/1.1 10-1796-0/0/53. 0.00350659610.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1796-0/0/119. 0.003201141040.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1796224900/40/44R 7.5000180790.00.150.16 164.92.192.25http/1.1www.partymanagementthailand.comGET /about HTTP/1.0 13-1796261440/2/97C 0.053411777220.00.010.87 49.83.16.143http/1.1 14-1796-0/0/28. 0.00420192560.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1796261470/10/36_ 1.4401186160.00.040.15 134.122.89.242http/1.1 16-1796-0/0/48. 0.00410321710.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1796261490/10/24_ 0.720033380.00.140.19 164.90.205.35http/1.1 18-1796-0/0/7. 0.00207016570.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 140subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 50 seconds, (range: 4...135)index usage: 4%, cache usage: 6%total entries stored since starting: 401total entries replaced since starting: 0total entries expired since starting: 261total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1014 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5708f1f7a7Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 08:39:23 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 4 hours 37 minutes 12 seconds Server load: 1.90 1.72 1.28 Total accesses: 25841 - Total Traffic: 372.0 MB - Total Duration: 33170093 CPU Usage: u2897.72 s5196.74 cu51097300 cs12501400 - 382000% CPU load 1.55 requests/sec - 22.9 kB/second - 14.7 kB/request - 1283.62 ms/request 5 requests currently being processed, 5 idle workers WW_W__..W_.._.R................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762246690/20/2227W 40.990027873690.00.1742.11 159.65.138.217http/1.1localhost:80GET /server-status HTTP/1.0 1-1762247080/16/2031W 12.710025653740.00.1636.45 202.67.13.123http/1.1www.thesungolden.com:443GET /wp-login.php HTTP/1.1 2-1762245750/33/2110_ 21.300026772550.00.3324.70 159.65.138.217http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 3-1762247370/15/1948W 8.120023458060.00.1325.76 27.254.96.168http/1.1www.thesungolden.com:443POST /wp-cron.php?doing_wp_cron=1695433163.29748797416687011718 4-1762246550/25/2105_ 14.470125107440.00.1741.02 159.65.138.217http/1.1localhost:80GET /about HTTP/1.0 5-1762247450/10/2010_ 36.720127344380.00.1124.50 159.65.138.217http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1762-0/0/1828. 0.00128024068180.00.0020.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1762-0/0/1733. 0.0036022936290.00.0021.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1762246710/21/1534W 16.640019298760.00.2318.45 5.62.34.21http/1.1www.chonlateeaa.com:443POST //wp-login.php HTTP/1.1 9-1762246130/25/1412_ 43.660118726320.00.2619.29 159.65.138.217http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 10-1762-0/0/1574. 0.00158019995720.00.0016.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1762-0/0/1215. 0.00328017132770.00.0014.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1762243630/49/766_ 26.63019598820.00.9011.99 159.65.138.217http/1.1localhost:80GET /v2/_catalog HTTP/1.0 13-1762-0/0/827. 0.0061012347680.00.0010.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762243710/52/937R 58.854103712928130.01.0015.51 196.244.4.210http/1.1www.pokaorganize.com:443 15-1762-0/0/637. 0.0033116463070.00.008.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1762-0/0/540. 0.007307087660.00.007.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/63. 0.0043530572180.00.002.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/124. 0.00434701645590.00.002.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/94. 0.0038266121059020.00.001.26 172.68.234.144http/1.1www.ptatun.or.th:80POST /wp-cron.php?doing_wp_cron=1695429335.63167810440063476562 20-1762-0/0/99. 0.00508401298300.00.004.31 65.21.232.254http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%AA 21-1762-0/0/16. 0.0054420264580.00.002.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/2. 0.005483020500.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/9. 0.005465047380.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 68subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 97 seconds, (range: 10...257)index usage: 2%, cache usage: 3%total entries stored since starting: 3200total entries replaced since starting: 0total entries expired since starting: 3132total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 124 hit, 8543 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 01:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c578c9c5235Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 09:13:25 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 5 hours 11 minutes 12 seconds Server load: 1.93 1.80 1.73 Total accesses: 29997 - Total Traffic: 507.0 MB - Total Duration: 41744496 CPU Usage: u2799.55 s5156.62 cu50866100 cs12452100 - 339000% CPU load 1.61 requests/sec - 27.8 kB/second - 17.3 kB/request - 1391.62 ms/request 2 requests currently being processed, 8 idle workers ._WW_____......__................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743-0/0/2514. 0.0022126535958720.00.0054.07 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 1-1743147000/33/2548_ 22.420189235125260.00.7237.68 184.22.232.72http/1.1www.chonlateefbc.com:80POST /wp-admin/admin-ajax.php HTTP/1.0 2-1743144030/94/2703W 41.920036297400.03.5950.92 159.65.58.104http/1.1localhost:80GET /server-status HTTP/1.0 3-1743148210/10/2533W 6.010033606540.00.1151.28 184.22.232.72http/1.1www.chonlateefbl.com:80GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 4-1743145890/54/2325_ 24.501176231594820.01.2330.94 184.22.232.72http/1.1www.chonlateeboi.com:443POST /wp-admin/admin-ajax.php HTTP/1.1 5-1743145230/82/2409_ 27.870032739980.02.2546.83 159.65.58.104http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1743147080/40/2197_ 14.980029753120.01.2438.46 159.65.58.104http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-1743148710/8/2161_ 4.690170829366370.00.2334.21 184.22.232.72http/1.1www.chonlateefbl.com:80POST /wp-admin/admin-ajax.php HTTP/1.0 8-1743147140/33/2181_ 13.781183129970560.00.9128.73 184.22.232.72http/1.1www.chonlateefbc.com:80POST /wp-admin/admin-ajax.php HTTP/1.0 9-1743-0/0/2006. 0.00218428173650.00.0026.43 172.68.242.33http/1.1www.time2hand.com:80GET /wp-content/plugins/so-widgets-bundle/icons/fontawesome/web 10-1743-0/0/1653. 0.00202169225309940.00.0025.74 124.120.27.176http/1.1www.chonlateeboi.com:443POST /wp-admin/admin-ajax.php HTTP/1.1 11-1743-0/0/1292. 0.00208020628730.00.0023.45 185.28.23.134http/1.1www.xn--12ca1al2c4cm5fzaon1x.coPOST /xmlrpc.php HTTP/1.1 12-1743-0/0/1115. 0.00194015307310.00.0022.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/921. 0.00218014174710.00.0013.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743-0/0/470. 0.0021505523300.00.007.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743146490/50/395_ 22.64105362500.00.815.61 159.65.58.104http/1.1localhost:80GET /about HTTP/1.0 16-1743146550/47/454_ 23.69106609460.01.136.84 159.65.58.104http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 17-1743-0/0/111. 0.0075001892810.00.001.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/4. 0.00758070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/5. 0.00754049620.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 50subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 81 seconds, (range: 5...272)index usage: 1%, cache usage: 2%total entries stored since starting: 5922total entries replaced since starting: 0total entries expired since starting: 5872total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 142 hit, 8280 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-19 02:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57a903393bApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:29:01 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 2 hours 1 minute 4 seconds Server load: 0.51 0.83 0.82 Total accesses: 10505 - Total Traffic: 154.9 MB - Total Duration: 14457202 CPU Usage: u2765.5 s5133.84 cu50713400 cs12419200 - 869000% CPU load 1.45 requests/sec - 21.8 kB/second - 15.1 kB/request - 1376.22 ms/request 3 requests currently being processed, 6 idle workers _.WW___._._W...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733106020/37/872_ 17.991159611282870.00.6511.87 80.248.227.21http/1.1 1-1733-0/0/885. 0.0021152012289700.00.0010.65 172.70.189.140http/1.1www.acumaticathailand.com:80GET /?author=8 HTTP/1.0 2-1733107290/23/849W 14.450012299060.00.2010.13 192.36.109.99http/1.1www.thesungolden.com:443GET / HTTP/1.1 3-1733106540/32/833W 20.220012129570.00.5510.46 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.0 4-1733103850/74/792_ 39.390110395610.00.939.71 164.92.192.25http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1733106840/31/794_ 16.260110778100.00.4816.97 108.162.226.161http/1.1www.dr-rpi.com:443GET /robots.txt HTTP/1.1 6-1733105770/43/725_ 24.261112069810.00.5011.56 164.92.192.25http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-1733-0/0/648. 0.0021408756870.00.0010.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1733107370/24/795_ 14.65065210320300.00.2411.68 128.90.184.147http/1.1www.plastandtrans.com:443HEAD /bk HTTP/1.1 9-1733-0/0/647. 0.0028389023130.00.008.01 162.158.238.60http/1.1www.siamerp.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B9%82%E0%B8%9B 10-1733107430/23/601_ 12.91007532630.00.266.87 192.36.109.99http/1.1www.thesungolden.com:80GET / HTTP/1.0 11-1733105860/36/444W 22.02005961770.00.766.71 162.158.239.44http/1.1www.siamerp.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B9%82%E0%B8%9B 12-1733-0/0/326. 0.0021304360380.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/245. 0.0020803233080.00.0013.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1733-0/0/210. 0.00125603085090.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/236. 0.00125403313960.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/139. 0.00103702192300.00.001.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/138. 0.00165602080160.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/46. 0.0014960437180.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/9. 0.003399051440.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/20. 0.0034110165770.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1733-0/0/103. 0.00264901522820.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1733-0/0/13. 0.0034040106800.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/5. 0.003410026900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/2. 0.003420020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/3. 0.007253018690.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1733-0/0/86. 0.0065441959350.00.000.99 167.71.48.191http/1.1 27-1733-0/0/34. 0.0071720178140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/5. 0.0072440380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 45subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 118 seconds, (range: 12...297)index usage: 1%, cache usage: 2%total entries stored since starting: 1464total entries replaced since starting: 0total entries expired since starting: 1419total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4478 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 19:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57b2b6f9cbApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 04:16:37 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 14 minutes 25 seconds Server load: 0.45 0.50 0.58 Total accesses: 868 - Total Traffic: 7.3 MB - Total Duration: 1121102 CPU Usage: u2859.23 s5138.17 cu50513400 cs12375700 - 7270000% CPU load 1 requests/sec - 8.7 kB/second - 8.6 kB/request - 1291.59 ms/request 1 requests currently being processed, 9 idle workers _______.W__....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720148890/4/56_ 0.7601749470.00.020.56 161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1720142570/86/86_ 39.19101168250.00.820.82 161.35.27.144http/1.1localhost:80GET /about HTTP/1.0 2-1720142650/87/87_ 45.26014351249510.00.920.92 65.21.233.213http/1.1www.1smestartup.com:443GET /tag/%E0%B8%AB%E0%B8%B1%E0%B8%A7%E0%B8%95%E0%B8%B0%E0%B8%9E 3-1720142750/85/85_ 35.5200996580.00.610.61 161.35.27.144http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-1720142760/86/86_ 40.83101298050.00.690.69 161.35.27.144http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 5-1720147190/43/65_ 18.2421625200.00.370.55 161.35.27.144http/1.1localhost:80GET / HTTP/1.0 6-1720143040/85/85_ 34.21201024850.00.590.59 161.35.27.144http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 7-1720-0/0/83. 0.003201176420.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1720143130/83/83W 42.74001325760.00.750.75 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 9-1720143720/79/79_ 37.4720930340.00.570.57 161.35.27.144http/1.1localhost:80GET / HTTP/1.0 10-1720144950/71/71_ 29.2550666510.00.510.51 65.21.233.213http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AB%E0%B8%B1%E0%B8%A7%E0%B8%95%E0%B8%B0%E0%B8%9E 11-1720-0/0/1. 0.0031010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1720-0/0/1. 0.0030010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 18subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 109 seconds, (range: 4...243)index usage: 0%, cache usage: 0%total entries stored since starting: 151total entries replaced since starting: 0total entries expired since starting: 133total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 222 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 21:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57d3b42473Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 11:07:54 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 7 hours 5 minutes 41 seconds Server load: 1.80 1.34 1.04 Total accesses: 40033 - Total Traffic: 699.1 MB - Total Duration: 55660449 CPU Usage: u2823.38 s5114.03 cu50473300 cs12367200 - 246000% CPU load 1.57 requests/sec - 28.0 kB/second - 17.9 kB/request - 1390.36 ms/request 7 requests currently being processed, 5 idle workers WW_.W_CWW_....W..._..._........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-171653120/12/3422W 8.621047935360.00.2956.38 184.22.232.72http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-json/wp/v2/users?context=view&who=authors&per_page=50&_ 1-171654090/0/3463W 0.001046709850.00.0046.20 124.120.27.176http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-json/wp/v2/taxonomies?context=edit&per_page=100&_locale 2-171650060/73/3479_ 37.221199844661240.00.9672.00 124.120.27.176http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-json/wp/v2/block-patterns/patterns?_locale=user HTTP/1. 3-1716-0/0/3261. 0.0024044568830.00.0056.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-171653050/15/3192W 11.681043458120.00.3144.73 124.120.27.176http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /2023/09/13/%e0%b8%88%e0%b8%94%e0%b8%97%e0%b8%b0%e0%b9%80%e 5-171653190/13/3132_ 11.48157341120460.00.2547.57 141.101.99.162http/1.1www.tun36.com:80GET /debug/default/view?panel=config HTTP/1.0 6-171651021/54/2868C 29.951184038937402.50.7458.75 184.22.232.72http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-json/wp/v2/blocks?context=edit&per_page=100&_locale=use 7-171653770/10/2780W 6.990037902460.00.3237.02 172.71.242.74http/1.1www.tun36.com:80GET /v2/_catalog HTTP/1.0 8-171653850/7/2625W 4.591037796630.00.0255.28 184.22.232.72http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-json/wp/v2/themes?context=edit&status=active&_locale=us 9-171653910/9/2560_ 5.310036355200.00.0248.49 165.22.74.203http/1.1localhost:80GET / HTTP/1.0 10-1716-0/0/2318. 0.00354032046560.00.0043.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716-0/0/2072. 0.00319032553510.00.0023.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1716-0/0/1405. 0.00342025545990.00.0039.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/852. 0.00356012836160.00.0016.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-171648860/81/583W 61.76007690670.00.738.22 161.35.176.95http/1.1localhost:80GET /server-status HTTP/1.0 15-1716-0/0/245. 0.0034902570530.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/612. 0.006009571950.00.008.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1716-0/0/131. 0.0034501293450.00.001.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-171649160/73/104_ 28.80118281614680.01.492.16 124.120.27.176http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /wp-json/?_fields=description%2Cgmt_offset%2Chome%2Cname%2C 19-1716-0/0/175. 0.0035301965680.00.0016.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1716-0/0/118. 0.003510871600.00.001.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1716-0/0/118. 0.003570766370.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-171649400/72/185_ 68.97002397980.00.873.09 161.35.176.95http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 23-1716-0/0/38. 0.0022201206550.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1716-0/0/21. 0.008138037670.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1716-0/0/9. 0.008136063280.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1716-0/0/76. 0.00764201550070.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1716-0/0/3. 0.008146033330.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1716-0/0/3. 0.0081550700.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1716-0/0/3. 0.0081540510.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1716-0/0/9. 0.00813704950.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1716-0/0/4. 0.0081490390.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1716-0/0/3. 0.00814802160.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1716-0/0/15. 0.0081090149050.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1716-0/0/4. 0.00814701040.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1716-0/0/6. 0.008141036240.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1716-0/0/6. 0.008122053100.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1716-0/0/61. 0.0078150977890.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1716-0/0/69. 0.00773301316420.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1716-0/0/3. 0.0081570250.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 135subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 39 seconds, (range: 2...266)index usage: 4%, cache usage: 6%total entries stored since starting: 6877total entries replaced since starting: 0total entries expired since starting: 6742total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 315 hit, 14240 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 04:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57a243620fApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 21:36:10 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 17 hours 33 minutes 55 seconds Server load: 0.75 0.55 0.65 Total accesses: 90912 - Total Traffic: 1.3 GB - Total Duration: 131447839 CPU Usage: u2704.91 s5069.55 cu50291900 cs12327500 - 99000% CPU load 1.44 requests/sec - 21.5 kB/second - 14.9 kB/request - 1445.88 ms/request 1 requests currently being processed, 8 idle workers _______.W_........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170221870/3/7746_ 0.0100107794330.00.00108.69 134.122.63.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-170218170/40/7707_ 18.1510108251090.00.35116.87 134.122.63.192http/1.1localhost:80GET /about HTTP/1.0 2-170214970/76/7435_ 34.5001110510400.00.64110.84 134.122.63.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-170218330/38/7311_ 18.780480103963350.00.3699.90 141.101.77.35http/1.1www.tun36.com:80GET /.vscode/sftp.json HTTP/1.0 4-170218400/38/6803_ 17.501437101027200.00.3299.06 172.70.46.30http/1.1www.tun36.com:80GET / HTTP/1.0 5-170221040/10/7160_ 4.291198580790.00.0693.19 134.122.63.192http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 6-170215520/72/6612_ 26.600457100462930.00.5689.77 172.71.98.96http/1.1www.tun36.com:80GET / HTTP/1.0 7-1702-0/0/6821. 0.0065368100244790.00.00101.13 107.189.4.216http/1.1www.siam2job.com:443GET /wp-login.php HTTP/1.1 8-170215890/66/6240W 21.840088644450.00.5981.84 134.122.63.192http/1.1localhost:80GET /server-status HTTP/1.0 9-170218420/35/5812_ 15.740082764510.00.3488.95 172.69.59.162http/1.1www.mgacccount.com:80POST /xmlrpc.php HTTP/1.0 10-1702-0/0/5072. 0.00978071923780.00.0080.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1702-0/0/4472. 0.00692061399190.00.0074.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1702-0/0/4112. 0.001403061850170.00.0066.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1702-0/0/2108. 0.003058032645190.00.0043.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702-0/0/1764. 0.002384135624652010.00.0026.43 162.158.106.47http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 15-1702-0/0/1167. 0.003059014904440.00.0014.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/525. 0.002331225810731050.00.008.04 67.207.85.29http/1.1 17-1702-0/0/370. 0.00304604247590.00.003.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/73. 0.0038270909090.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.00380001786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.00603801383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.0059470344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.00604504959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.0060500735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.006031077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.0060440103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.0060340121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.00552142131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.00603001402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.006057074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.0059130299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.00595001458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.0058940524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.00605601921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.00604302967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.00605503934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.006042057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.0055528722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.00605402571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.006040045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0053239060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 33subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 156 seconds, (range: 16...281)index usage: 1%, cache usage: 1%total entries stored since starting: 16061total entries replaced since starting: 0total entries expired since starting: 16028total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 397 hit, 36776 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 14:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57ba6e9500Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:59:54 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 57 minutes 43 seconds Server load: 3.78 3.57 2.76 Total accesses: 30410 - Total Traffic: 405.1 MB - Total Duration: 41812291 CPU Usage: u2868.34 s5084.17 cu50057800 cs12277600 - 349000% CPU load 1.7 requests/sec - 23.2 kB/second - 13.6 kB/request - 1374.95 ms/request 7 requests currently being processed, 5 idle workers _.WWW_.W_..._WW.._W............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685225860/33/2549_ 30.01073036761240.00.3135.93 206.189.147.109http/1.1www.chonlateemeet.com:443GET /new/ HTTP/1.1 1-1685-0/0/2555. 0.00080934350800.00.0034.44 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 2-1685225040/73/2467W 57.960032413780.00.7330.04 206.189.147.109http/1.1www.chonlateefood.com:80GET /backup/ HTTP/1.0 3-1685226540/27/2348W 19.570033084520.00.4629.89 172.71.178.178http/1.1www.tun36.com:80GET /debug/default/view?panel=config HTTP/1.0 4-1685227420/5/2275W 4.390030873490.00.0528.84 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 5-1685225350/49/2086_ 73.12070225953820.00.5126.75 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 6-1685-0/0/2275. 0.0026029259290.00.0027.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1685226330/30/2387W 26.230031975870.00.4126.47 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 8-1685225450/49/2102_ 74.10040027854260.00.5124.76 172.70.85.146http/1.1www.tun36.com:80GET /about HTTP/1.0 9-1685-0/0/2100. 0.0061029550230.00.0035.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1685-0/0/1619. 0.0068023365550.00.0028.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1685-0/0/1357. 0.0061117018536290.00.0020.53 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 12-1685226470/33/1118_ 24.020117017810.00.3113.84 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-1685226610/27/956W 19.550015451520.00.2814.23 107.189.8.33http/1.1www.mgrandstructure.com:443GET /wp-login.php HTTP/1.1 14-1685226670/29/864W 20.770012586130.00.3511.33 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 15-1685-0/0/636. 0.005819515050.00.008.19 3.29.10.88http/1.1www.dinocoffees.com:443POST /xmlrpc.php HTTP/1.1 16-1685-0/0/233. 0.0061223690490.00.002.72 162.158.175.46http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-image-default-d6 17-1685226760/27/145_ 22.84011491681340.00.272.17 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 18-1685226840/26/29W 19.6600430720.00.340.41 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 19-1685-0/0/97. 0.001468211391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0015361015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001465110331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001467131185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001536808790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0015370010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0015367030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0015378010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0015365011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0015366012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001536309920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0015377010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 103subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 70 seconds, (range: 5...269)index usage: 3%, cache usage: 4%total entries stored since starting: 4504total entries replaced since starting: 0total entries expired since starting: 4401total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 98 hit, 8231 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c574aa3796bApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 03-Sep-2023 23:41:52 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 8 hours 18 minutes 38 seconds Server load: 3.23 2.33 2.40 Total accesses: 91669 - Total Traffic: 892.4 MB - Total Duration: 154460872 CPU Usage: u2805.14 s5040.17 cu49703500 cs12196800 - 207000% CPU load 3.06 requests/sec - 30.5 kB/second - 10.0 kB/request - 1684.98 ms/request 9 requests currently being processed, 8 idle workers W_W_W__WWR_W_WW__................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674308540/7/6785W 3.7600100263630.00.0167.59 172.68.234.4http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693759312.45334410667419433593 1-1674306160/23/6703_ 12.58099598677730.00.0870.93 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693759310.98051905632019042968 2-1674304160/36/6753W 22.890098204100.00.2064.27 128.199.61.251http/1.1localhost:80GET /server-status HTTP/1.0 3-1674306510/17/6554_ 11.58040492884510.00.0366.63 172.68.234.196http/1.1www.tun36.com:80POST /wp-cron.php?doing_wp_cron=1693759312.29761695861816406250 4-1674308710/5/6372W 3.040095260030.00.0172.84 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693759312.2398 HTTP/1.0 5-1674297510/95/6205_ 63.000173591124020.00.8164.22 172.68.234.173http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693759310.3459 HTTP/1.0 6-1674300420/70/5895_ 46.610180587809270.00.6759.08 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693759310.36121106147766113281 7-1674300960/66/5734W 42.641084990520.00.5053.73 172.68.234.5http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693759311.6983 HTTP/1.0 8-1674309410/0/5518W 0.001082960490.00.0051.74 172.68.234.140http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693759311.08803701400756835937 9-1674304690/29/5517R 22.642101084415580.00.2370.67 185.220.101.161http/1.1 10-1674303290/48/5137_ 31.52092276262140.00.5362.73 172.71.182.47http/1.1www.tun36.com:80GET / HTTP/1.0 11-1674303350/45/4584W 30.442069944470.00.4039.04 172.105.121.117http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 12-1674304340/38/4225_ 19.610297867372390.00.2438.44 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 13-1674306640/16/2777W 11.650048006250.00.0721.89 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 14-1674306660/15/2631W 10.991047759500.00.0538.03 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693759311.69423389434814453125 15-1674307030/14/1824_ 8.360171234692710.00.0914.61 172.68.234.4http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693759311 HTTP/1.0 16-1674307600/12/1090_ 7.440125193690.00.036.75 128.199.61.251http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1674-0/0/986. 0.00117936424835230.00.005.48 27.254.96.168http/1.1www.focusfilmthailand.com:80POST /wp-cron.php?doing_wp_cron=1693758132.45789694786071777343 18-1674-0/0/635. 0.002316166317862710.00.003.25 172.68.234.5http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693756994.1644 HTTP/1.0 19-1674-0/0/704. 0.002330170320736250.00.002.93 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693756979.81427311897277832031 20-1674-0/0/321. 0.002526011518230.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/405. 0.002270172213660820.00.001.50 172.71.98.163http/1.1www.dr-rpi.com:443GET /wp-admin/css/colors/blue/blue.php?wall=ZWNobyAnQmxhY2sgQm9 22-1674-0/0/425. 0.002280179513439450.00.001.35 172.68.234.202http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693757029.8466 HTTP/1.0 23-1674-0/0/322. 0.002401011846910.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1674-0/0/279. 0.004424010773600.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/294. 0.004488010098660.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1674-0/0/319. 0.004485012162920.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/397. 0.0041801213491190.00.002.01 172.68.234.196http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 28-1674-0/0/225. 0.00445809096500.00.001.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/232. 0.00453309000050.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/218. 0.00503018710130.00.001.00 167.99.8.63http/1.1localhost:443GET /v2/_catalog HTTP/1.1 31-1674-0/0/190. 0.00497716337715740.00.000.53 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754332.79655790328979492187 32-1674-0/0/191. 0.00507817917633200.00.000.44 134.122.63.192http/1.1 33-1674-0/0/200. 0.00509026428295680.00.000.41 198.41.230.115http/1.1www.smetast.com:80GET / HTTP/1.0 34-1674-0/0/105. 0.00518804216670.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/100. 0.00532918455189810.00.000.20 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753980.5489 HTTP/1.0 36-1674-0/0/88. 0.00525004308510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/118. 0.00519604782180.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1674-0/0/46. 0.00547202531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.00533427385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.00540103865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.00538004242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.00533004803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.00524315754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.00522719884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 385subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 16 seconds, (range: 1...54)index usage: 13%, cache usage: 17%total entries stored since starting: 15132
Found on 2023-09-03 16:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c576f32af7cApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 20:44:32 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 2 hours 56 minutes 32 seconds Server load: 5.11 5.53 5.06 Total accesses: 69487 - Total Traffic: 577.6 MB - Total Duration: 84804554 CPU Usage: u2764.4 s4939.88 cu48691200 cs11936700 - 572000% CPU load 6.56 requests/sec - 55.8 kB/second - 8.5 kB/request - 1220.44 ms/request 10 requests currently being processed, 4 idle workers _.RWW_CWWWCWW__................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1652151430/63/4533_ 32.32056754120200.00.2637.49 172.69.67.97http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 1-1652-0/0/4459. 0.00453653762500.00.0046.97 108.162.242.111http/1.1www.tun36.com:80GET / HTTP/1.0 2-1652150910/81/4410R 43.76173552508390.00.4938.05 162.158.175.145http/1.1 3-1652151000/81/4223W 39.530051814890.00.4632.75 128.199.169.230http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 4-1652152040/40/4305W 22.720051317980.00.2334.21 172.68.234.184http/1.1www.jrajar.com:80POST /wp-cron.php?doing_wp_cron=1693489472.28676199913024902343 5-1652151630/50/4047_ 28.60091448649420.00.3431.43 128.199.169.230http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 6-1652152151/24/4069C 14.140455496861913.10.1731.47 172.173.117.242http/1.1www.ozonepluswater.net:443POST //wp-login.php HTTP/1.1 7-1652152680/10/4224W 5.871049843000.00.0431.37 172.70.247.160http/1.1www.jrajar.com:80GET /wp-login.php HTTP/1.0 8-1652151730/49/3977W 27.670047034140.00.3329.85 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.0 9-1652151790/47/3752W 25.420045630270.00.1933.13 172.69.67.97http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 10-1652151851/37/3721C 22.091046364071.40.3743.39 167.172.232.142http/1.1www.mgrandstructure.com:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-1652151930/43/3471W 22.810040580720.00.1730.82 172.69.65.121http/1.1www.siamerp.com:443POST //xmlrpc.php HTTP/1.1 12-1652152250/20/3233W 11.970039574830.00.1025.52 172.71.167.83http/1.1www.orderaccounting.com:80POST //xmlrpc.php HTTP/1.0 13-1652152330/19/3162_ 12.180138125730.00.0722.50 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1652152390/21/3339_ 13.10051540475180.00.1225.41 172.69.214.42http/1.1www.tun36.com:80GET /.vscode/sftp.json HTTP/1.0 15-1652-0/0/2178. 0.00155025728190.00.0018.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1652-0/0/2182. 0.004438726928250.00.0015.69 172.69.67.96http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 17-1652-0/0/1850. 0.0047121022515780.00.0014.01 162.158.239.44http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 18-1652-0/0/1107. 0.007192413412840.00.008.68 128.199.169.230http/1.1www.chonlateemeet.com:80POST /xmlrpc.php HTTP/1.0 19-1652-0/0/620. 0.00407437851960.00.007.34 172.68.234.170http/1.1www.chonlateeauto.com:443POST /wp-cron.php?doing_wp_cron=1693489431.02104496955871582031 20-1652-0/0/605. 0.0029708631900.00.004.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1652-0/0/277. 0.002365394819140.00.003.22 123.30.132.158http/1.1www.kncintergroup.com:443GET /wp-login.php HTTP/1.1 22-1652-0/0/149. 0.00415402888040.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1652-0/0/136. 0.00392812217730.00.001.11 162.158.90.49http/1.1www.chonlateefarm.com:443GET /wp-content/themes/chonlateedesign/js/skip-link-focus-fix.j 24-1652-0/0/72. 0.00415301718740.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1652-0/0/139. 0.00416202399250.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1652-0/0/110. 0.0061725042172870.00.000.55 172.71.167.87http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 27-1652-0/0/81. 0.00620301658530.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/47. 0.00632301000020.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/114. 0.00619411983960.00.000.70 194.169.175.26http/1.1www.dtacbusiness.com:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.0 30-1652-0/0/3. 0.007892080530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1652-0/0/11. 0.007891092740.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1652-0/0/37. 0.0078360566180.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1652-0/0/60. 0.0078180565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.0078160696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.0078120719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.0078670349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.0076704061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.0078877143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.0078430530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.0078690257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.0078750208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.0078810142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.0078460543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.0077074221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.0078570415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.0076677931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.00767910251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.0076589421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.0078860109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent re
Found on 2023-08-31 13:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5708d30bf2Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 29-Aug-2023 05:14:05 +07 Restart Time: Tuesday, 29-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1638 Parent Server MPM Generation: 1637 Server uptime: 1 hour 11 minutes 51 seconds Server load: 3.46 4.08 4.68 Total accesses: 35207 - Total Traffic: 282.0 MB - Total Duration: 45800938 CPU Usage: u2715.68 s4845.44 cu47519300 cs11626500 - 1370000% CPU load 8.17 requests/sec - 67.0 kB/second - 8.2 kB/request - 1300.9 ms/request 9 requests currently being processed, 5 idle workers W__R.WW_WW._WWW_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1637207590/90/2075W 51.490027344680.00.6317.27 198.98.51.73http/1.1www.dreamhightravel.com:443POST /wp-login.php HTTP/1.1 1-1637209080/18/2109_ 8.870127347370.00.1317.42 146.190.98.165http/1.1localhost:80GET /about HTTP/1.0 2-1637209140/22/2046_ 11.640026595000.00.4416.05 146.190.98.165http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1637209500/4/1972R 2.340025636470.00.0214.54 172.71.167.56http/1.1www.siamautomation.com:443 4-1637-0/0/1945. 0.002025143080.00.0015.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1637207730/65/1862W 40.630024429710.00.5114.49 40.122.173.134http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 6-1637209620/3/1972W 1.700025347910.00.0115.35 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.0 7-1637207930/81/1987_ 42.460025972170.01.0616.96 146.190.98.165http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-1637209560/2/1973W 0.760025108410.00.0116.65 141.101.98.198http/1.1www.ptatun.or.th:80GET /config.json HTTP/1.0 9-1637208020/71/1910W 36.240024433950.00.5915.17 104.43.165.99http/1.1www.siamgassaver.com:80POST /wp-login.php HTTP/1.0 10-1637-0/0/1785. 0.0051023482700.00.0014.46 123.6.49.18http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/siteorigin-widgets/sow-headline-default 11-1637208220/66/1665_ 35.680021429890.00.9814.98 146.190.98.165http/1.1localhost:80GET /v2/_catalog HTTP/1.0 12-1637208330/52/1666W 28.090021087430.00.7513.98 163.172.67.65http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4GET /wp-admin/js/widgets/about.php7 HTTP/1.1 13-1637208910/28/1469W 13.290019101850.00.2011.79 162.158.106.8http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 14-1637208970/30/1615W 14.420020999220.00.6913.55 104.43.165.99http/1.1www.siamsolarrooftop.com:443POST //wp-login.php HTTP/1.1 15-1637209260/22/1450_ 9.660018852700.00.2911.45 146.190.98.165http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 16-1637-0/0/1424. 0.00531017657200.00.0010.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1637-0/0/1193. 0.0029542415804780.00.008.99 167.71.226.185http/1.1www.siam2job.com:80POST /xmlrpc.php HTTP/1.0 18-1637-0/0/942. 0.00523013243090.00.007.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1637-0/0/599. 0.0052808052440.00.004.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1637-0/0/355. 0.00110704664980.00.002.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1637-0/0/155. 0.0099702000850.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1637-0/0/380. 0.009217105156570.00.002.78 40.122.173.134http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 23-1637-0/0/167. 0.009248132168920.00.001.20 172.71.158.14http/1.1www.dealaccounting.com:80GET /repeater.php HTTP/1.0 24-1637-0/0/126. 0.00101801896430.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1637-0/0/105. 0.009095491555900.00.000.77 172.71.167.56http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 26-1637-0/0/161. 0.009205472169750.00.001.16 162.158.189.193http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 27-1637-0/0/99. 0.009197031325790.00.000.64 40.122.173.134http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 105subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 101 seconds, (range: 23...259)index usage: 3%, cache usage: 4%total entries stored since starting: 1888total entries replaced since starting: 0total entries expired since starting: 1783total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 12169 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-28 22:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57f0a412e8Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 26-Aug-2023 22:56:44 +07 Restart Time: Saturday, 26-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1627 Parent Server MPM Generation: 1626 Server uptime: 18 hours 54 minutes 32 seconds Server load: 0.66 0.72 0.72 Total accesses: 149037 - Total Traffic: 1.9 GB - Total Duration: 208640356 CPU Usage: u2644.95 s4769.2 cu46999200 cs11499500 - 85900% CPU load 2.19 requests/sec - 28.8 kB/second - 13.2 kB/request - 1399.92 ms/request 1 requests currently being processed, 9 idle workers __W____.._.__..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1626307660/52/12481_ 24.4501170084830.02.01165.30 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1626307330/58/12285_ 24.9530174111100.00.76116.60 161.35.155.246http/1.1localhost:80GET / HTTP/1.0 2-1626305710/73/12435W 34.8700166982030.00.61173.04 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.0 3-1626307430/48/11721_ 25.0720166063000.00.71132.69 161.35.155.246http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 4-1626309150/21/11855_ 12.452645167739700.00.12130.24 27.254.96.168http/1.1www.krongthongsecurity.com:443POST /wp-cron.php?doing_wp_cron=1693065400.91403603553771972656 5-1626308420/32/11070_ 15.5341155620310.00.18165.41 161.35.155.246http/1.1localhost:80GET / HTTP/1.0 6-1626309970/9/10664_ 8.8620150743930.00.0999.62 161.35.155.246http/1.1localhost:80GET /about HTTP/1.0 7-1626-0/0/10647. 0.0094588149780130.00.00106.89 88.198.8.158http/1.1www.nakindogtraining.com:443GET /xmlrpc.php HTTP/1.1 8-1626-0/0/9881. 0.001240136858000.00.00116.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1626309370/16/9097_ 10.8721254129703130.00.10145.74 138.246.253.24http/1.1www.krongthongsecurity.com:443GET /robots.txt HTTP/1.1 10-1626-0/0/8285. 0.002870111976800.00.0089.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1626305960/77/7449_ 33.0610104775900.00.58141.03 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 12-1626307750/52/5961_ 26.131181893680.00.4254.68 161.35.155.246http/1.1localhost:80GET /v2/_catalog HTTP/1.0 13-1626-0/0/4099. 0.001565059526880.00.0049.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1626-0/0/3727. 0.00798145454481860.00.0048.61 67.205.12.218http/1.1www.shinsoko.co.th:443POST /xmlrpc.php HTTP/1.1 15-1626-0/0/2347. 0.004454031577690.00.0085.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1626-0/0/1003. 0.004770017846050.00.0053.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1626-0/0/1039. 0.007814013444110.00.0014.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1626-0/0/379. 0.00812805761810.00.003.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1626-0/0/307. 0.00764310894191120.00.003.67 5.188.62.76http/1.1www.chonlateenextbiz.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 20-1626-0/0/431. 0.00811006021020.00.004.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1626-0/0/176. 0.001153402516930.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1626-0/0/271. 0.00109334293548110.00.001.99 8.210.247.187http/1.1www.importantaccount.com:443POST /xmlrpc.php HTTP/1.1 23-1626-0/0/274. 0.001094204235470.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1626-0/0/13. 0.00146540174970.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1626-0/0/71. 0.00145910929490.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1626-0/0/153. 0.002949002080320.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1626-0/0/7. 0.0029711091830.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1626-0/0/192. 0.00292664373482740.00.001.48 162.158.74.96http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 29-1626-0/0/101. 0.00293063371333070.00.000.94 193.106.249.135http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 30-1626-0/0/4. 0.0029728044850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1626-0/0/100. 0.002972101357680.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1626-0/0/100. 0.002970301364570.00.000.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1626-0/0/25. 0.00296260387720.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1626-0/0/100. 0.002973301554710.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1626-0/0/4. 0.0029732042980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1626-0/0/100. 0.002972001590540.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1626-0/0/5. 0.0029725015270.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1626-0/0/99. 0.002971901387810.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1626-0/0/15. 0.00296690291650.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1626-0/0/3. 0.0029718038430.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1626-0/0/57. 0.00294730711000.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1626-0/0/4. 0.0029713040110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 110subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 83 seconds, (range: 2...219)index usage: 3%, cache usage: 5%total entries stored since starting: 26547total entries replaced since starting: 0total entries expired since starting: 26437total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 193 hit, 40829 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-26 15:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5795a92a18Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 25-Aug-2023 13:32:57 +07 Restart Time: Friday, 25-Aug-2023 04:02:14 +07 Parent Server Config. Generation: 1624 Parent Server MPM Generation: 1623 Server uptime: 9 hours 30 minutes 43 seconds Server load: 2.13 1.36 1.38 Total accesses: 91344 - Total Traffic: 1.1 GB - Total Duration: 141482892 CPU Usage: u2724.18 s4761.99 cu46859400 cs11466200 - 170000% CPU load 2.67 requests/sec - 33.9 kB/second - 12.7 kB/request - 1548.9 ms/request 1 requests currently being processed, 9 idle workers .__W__.__..__._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1623-0/0/7122. 0.00320108836860.00.0079.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-16239220/70/7095_ 34.8211106541510.00.5480.55 167.99.8.63http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-162311130/38/7023_ 50.9810107048300.00.2581.53 167.99.8.63http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-162312430/24/6599W 10.8000103543560.00.1578.44 167.99.8.63http/1.1localhost:80GET /server-status HTTP/1.0 4-162312800/21/6538_ 36.961442101832570.00.1071.31 181.174.125.214http/1.1www.pennungmarket.com:80POST /wp-login.php HTTP/1.0 5-162312990/25/6571_ 12.280442101789530.00.1877.22 34.133.106.26http/1.1www.ltclevelup.com:443POST /wp-login.php HTTP/1.1 6-1623-0/0/6613. 0.0033098186640.00.0071.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-162313320/20/6372_ 7.72050299548980.00.1357.70 34.133.106.26http/1.1www.ltclevelup.com:443POST /wp-login.php HTTP/1.1 8-16236990/92/6068_ 75.70057492848060.01.6269.89 172.70.34.112http/1.1www.mgacccount.com:80GET /inc.php HTTP/1.0 9-1623-0/0/5495. 0.0016082170080.00.0051.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1623-0/0/5365. 0.0053080246470.00.0076.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-162313670/15/4787_ 6.22163876877780.00.0948.95 162.158.78.134http/1.1www.mgacccount.com:80GET /file.php.suspected HTTP/1.0 12-16237210/91/3694_ 69.810059301360.01.6042.84 167.99.8.63http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-1623-0/0/3103. 0.005047626690.00.0034.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-162313690/15/2191_ 4.562131435850.00.1331.78 167.99.8.63http/1.1localhost:80GET /about HTTP/1.0 15-1623-0/0/1972. 0.00458030590500.00.0026.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1623-0/0/1435. 0.00548022424160.00.0020.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1623-0/0/1050. 0.00400016485270.00.0012.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1623-0/0/379. 0.0052904639300.00.007.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1623-0/0/82. 0.00329201319910.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1623-0/0/201. 0.00306402913850.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1623-0/0/299. 0.00563804320610.00.003.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1623-0/0/109. 0.0049972958632670.00.0047.01 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 23-1623-0/0/206. 0.00563502767690.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1623-0/0/11. 0.005647054660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1623-0/0/258. 0.00564303998830.00.002.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1623-0/0/52. 0.00543901451750.00.000.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1623-0/0/57. 0.00525901534020.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1623-0/0/9. 0.0056200143050.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1623-0/0/99. 0.00563001467630.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1623-0/0/8. 0.005627077360.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1623-0/0/101. 0.0051662821083740.00.000.70 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 32-1623-0/0/7. 0.005611051430.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1623-0/0/99. 0.00515212671338230.00.000.72 162.158.204.201http/1.1www.khlangkaew.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 34-1623-0/0/13. 0.0056150130570.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1623-0/0/101. 0.0051667431493350.00.001.39 172.70.243.123http/1.1www.proplustech.co.th:443POST //xmlrpc.php HTTP/1.1 36-1623-0/0/7. 0.005628056410.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1623-0/0/5. 0.005622012380.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1623-0/0/4. 0.005648016770.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1623-0/0/7. 0.005633060070.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1623-0/0/5. 0.00562306570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1623-0/0/99. 0.0051292422099250.00.001.65 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 42-1623-0/0/4. 0.005616079130.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1623-0/0/2. 0.005642017500.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1623-0/0/4. 0.005617052890.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1623-0/0/4. 0.005618056260.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1623-0/0/9. 0.00525607476510.00.0045.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1623-0/0/3. 0.005624044010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1623-0/0/5. 0.005613073100.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1623-0/0/2. 0.005641024990.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-08-25 06:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c577a029375Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 24-Aug-2023 15:53:21 +07 Restart Time: Thursday, 24-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1621 Parent Server MPM Generation: 1620 Server uptime: 11 hours 51 minutes 10 seconds Server load: 2.67 2.46 2.48 Total accesses: 134441 - Total Traffic: 1.6 GB - Total Duration: 198265089 CPU Usage: u2704.51 s4769.84 cu46754700 cs11442500 - 136000% CPU load 3.15 requests/sec - 39.3 kB/second - 12.5 kB/request - 1474.74 ms/request 5 requests currently being processed, 5 idle workers WWW.__.__.W_C..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-162045030/80/10421W 45.1200152429710.00.77101.15 172.71.170.32http/1.1www.mbaaccount.com:80GET /wp-includes/library.php.suspected HTTP/1.0 1-162046800/34/10241W 19.2600153781480.00.22110.10 172.70.210.141http/1.1www.dr-rpi.com:443POST /wp-login.php HTTP/1.1 2-162045870/61/10040W 33.5600147722160.00.43108.89 118.174.64.18http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /product-category/%e0%b8%9b%e0%b8%a5%e0%b8%b2%e0%b8%97%e0%b 3-1620-0/0/10051. 0.00140145793750.00.00118.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-162046230/51/9748_ 28.630552143602810.00.39100.44 118.174.64.18http/1.1 5-162046440/58/9634_ 28.050764141395990.00.37165.35 172.70.91.76http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 6-1620-0/0/8768. 0.005763127816440.00.00109.09 118.174.64.18http/1.1 7-162044910/70/8504_ 40.8900123215490.00.48135.70 46.101.103.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-162046290/58/8687_ 31.1001125114530.00.38143.13 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1620-0/0/8287. 0.00700124198000.00.0073.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-162045110/81/7599W 47.0000112672460.00.53125.86 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 11-162046310/36/6416_ 25.29056396882670.00.3366.26 118.174.64.18http/1.1 12-162047001/36/6023C 15.490870931442116.00.3362.24 172.177.232.193http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 13-1620-0/0/4396. 0.00482063978730.00.0049.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1620-0/0/3816. 0.00332051933550.00.0036.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1620-0/0/3363. 0.00190051599040.00.0041.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1620-0/0/2029. 0.0052653729655350.00.0017.49 172.233.243.108http/1.1www.seasabithailand.com:80GET /2017 HTTP/1.0 17-1620-0/0/1618. 0.00547423689780.00.0014.40 172.68.234.185http/1.1www.biztaste.com:80GET /category/type-b/ HTTP/1.0 18-1620-0/0/649. 0.0014264208547720.00.006.27 172.70.242.155http/1.1www.mbaaccount.com:80POST /xmlrpc.php HTTP/1.0 19-1620-0/0/621. 0.001635010422440.00.005.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1620-0/0/474. 0.0014037316949710.00.006.49 172.71.242.215http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 21-1620-0/0/176. 0.0014062202690900.00.001.76 172.70.189.114http/1.1www.khlangkaew.com:443GET /wp-content/cache/autoptimize/css/autoptimize_4142ae401266d 22-1620-0/0/245. 0.00252604472040.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1620-0/0/57. 0.0024360867220.00.004.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1620-0/0/205. 0.00254502291510.00.001.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1620-0/0/36. 0.0025090652020.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1620-0/0/45. 0.0024310741510.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1620-0/0/143. 0.00243002091270.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1620-0/0/295. 0.00229704403930.00.003.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1620-0/0/21. 0.0025150416100.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1620-0/0/21. 0.0025430486250.00.001.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1620-0/0/124. 0.00249301787180.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1620-0/0/17. 0.0025160346470.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1620-0/0/170. 0.00253603280050.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1620-0/0/113. 0.00253501720760.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1620-0/0/20. 0.0025110347420.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1620-0/0/16. 0.0025200370370.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1620-0/0/115. 0.00253801534960.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1620-0/0/156. 0.00249002050370.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1620-0/0/209. 0.00249602869090.00.001.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1620-0/0/36. 0.0025340698300.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1620-0/0/213. 0.00251803712390.00.001.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1620-0/0/90. 0.00252201340380.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1620-0/0/106. 0.00250002337720.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1620-0/0/100. 0.00253301321280.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1620-0/0/100. 0.00217310011620700.00.002.18 172.177.232.193http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 46-1620-0/0/40. 0.0025230721870.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1620-0/0/67. 0.00230201161070.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1620-0/0/13. 0.0025140259300.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1620-0/0/107. 0.00254201512200.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-08-24 08:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c574141b399Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 23-Aug-2023 09:06:35 +07 Restart Time: Wednesday, 23-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1618 Parent Server MPM Generation: 1617 Server uptime: 5 hours 4 minutes 22 seconds Server load: 3.84 3.27 3.12 Total accesses: 63214 - Total Traffic: 664.3 MB - Total Duration: 89843149 CPU Usage: u2765.09 s4752.9 cu46536400 cs11390000 - 317000% CPU load 3.46 requests/sec - 37.2 kB/second - 10.8 kB/request - 1421.25 ms/request 6 requests currently being processed, 5 idle workers RW._.._.___.WW..W....R............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1617142630/37/5194R 31.55185573374910.00.3646.54 172.68.146.6http/1.1 1-1617141970/71/4889W 51.980070589090.00.4992.26 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 2-1617-0/0/5026. 0.0043071561140.00.0047.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1617143180/35/4825_ 31.00086268475980.00.3545.15 172.68.146.6http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 4-1617-0/0/4946. 0.0017066575650.00.0050.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1617-0/0/4756. 0.0039069319700.00.0042.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1617143600/34/4620_ 27.44085665349470.00.2843.33 172.68.66.89http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 7-1617-0/0/4314. 0.001099461389610.00.0042.53 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 8-1617143950/27/4135_ 24.300057745690.00.3742.85 68.183.64.176http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1617141250/83/3925_ 85.330054869280.00.5637.33 68.183.64.176http/1.1localhost:80GET /v2/_catalog HTTP/1.0 10-1617141310/84/3652_ 87.08086551269960.00.6443.06 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 11-1617-0/0/3236. 0.0042044159900.00.0030.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1617144590/15/2928W 10.110042424430.00.0730.01 172.68.66.88http/1.1www.chonlateeit.com:443POST //xmlrpc.php HTTP/1.1 13-1617144040/27/1973W 18.140028666580.00.2517.17 172.70.46.3http/1.1www.tun36.com:80GET /repeater.php HTTP/1.0 14-1617-0/0/1712. 0.0019024532340.00.0014.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1617-0/0/1085. 0.001699817374040.00.0013.07 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 16-1617144710/15/796W 10.950012668750.00.1010.75 68.183.64.176http/1.1localhost:80GET /server-status HTTP/1.0 17-1617-0/0/680. 0.0026010663400.00.009.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1617-0/0/301. 0.003404371580.00.002.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1617-0/0/103. 0.004601467000.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1617-0/0/7. 0.00310112760.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1617145040/14/95R 9.80201317360.00.070.62 205.185.120.195http/1.1 22-1617-0/0/7. 0.0038091090.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1617-0/0/3. 0.0014163020200.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1617-0/0/1. 0.0014169000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1617-0/0/2. 0.0014165011730.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1617-0/0/3. 0.0014161029740.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 154subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 43 seconds, (range: 1...259)index usage: 5%, cache usage: 7%total entries stored since starting: 6415total entries replaced since starting: 0total entries expired since starting: 6261total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 7 hit, 17048 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-23 02:05 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c575cbf92c6Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 21-Aug-2023 17:49:11 +07 Restart Time: Monday, 21-Aug-2023 14:17:12 +07 Parent Server Config. Generation: 1612 Parent Server MPM Generation: 1611 Server uptime: 3 hours 31 minutes 58 seconds Server load: 3.50 3.81 3.84 Total accesses: 81676 - Total Traffic: 926.1 MB - Total Duration: 101603982 CPU Usage: u2717.24 s4731.62 cu46270100 cs11323100 - 453000% CPU load 6.42 requests/sec - 74.6 kB/second - 11.6 kB/request - 1243.99 ms/request 5 requests currently being processed, 7 idle workers _W_.__.WW.__WW_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1611273560/71/5713_ 45.251171224840.00.4662.74 167.99.184.41http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1611275630/8/5542W 3.760069896590.00.0354.04 172.71.175.55http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 2-1611275000/26/5588_ 13.83055668480000.01.1859.59 162.158.170.155http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 3-1611-0/0/5353. 0.0011066927480.00.0060.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1611273690/66/5286_ 41.420167870540.00.5246.05 167.99.184.41http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1611275150/22/5152_ 13.45188163130370.00.1359.11 172.68.234.160http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1692614949.00452899932861328125 6-1611-0/0/5102. 0.0019064119260.00.0075.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1611273880/67/4959W 43.370062536470.00.4854.52 167.99.184.41http/1.1localhost:80GET /server-status HTTP/1.0 8-1611274010/60/4719W 41.380059071020.00.3558.90 172.70.46.206http/1.1www.acumaticathailand.com:80GET /wp-admin/dropdown.php HTTP/1.0 9-1611-0/0/4595. 0.0035157486360.00.0050.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1611274210/53/4685_ 36.77068959775110.00.3248.22 172.71.167.237http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 11-1611274400/40/4295_ 27.740187453498880.00.2337.42 172.70.210.180http/1.1www.torrong.com:80POST /xmlrpc.php HTTP/1.0 12-1611274480/43/3941W 28.500049174460.00.2860.86 162.158.170.99http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 13-1611274550/42/3592W 27.640044516590.00.3435.79 172.71.167.237http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 14-1611274610/44/3092_ 31.511186040364060.00.2929.96 172.70.211.53http/1.1www.chonlateefarm.com:443POST /xmlrpc.php HTTP/1.1 15-1611-0/0/2257. 0.0011569829833250.00.0022.02 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 16-1611-0/0/1493. 0.0015046819045050.00.0029.55 199.195.253.110http/1.1www.emba35.com:443GET /wp-login.php HTTP/1.1 17-1611-0/0/1103. 0.00318014677130.00.0013.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1611-0/0/1065. 0.00336013557360.00.0010.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1611-0/0/492. 0.002915345268810.00.005.29 172.71.175.28http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 20-1611-0/0/260. 0.0030402413800.00.004.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1611-0/0/285. 0.0033302199220.00.002.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1611-0/0/463. 0.0032905039920.00.005.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1611-0/0/164. 0.0030501634280.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1611-0/0/286. 0.0033002473310.00.003.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1611-0/0/60. 0.003110385400.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1611-0/0/184. 0.001377501938180.00.001.73 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1611-0/0/327. 0.0031503713160.00.003.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1611-0/0/243. 0.0032602394040.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1611-0/0/36. 0.003390174380.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1611-0/0/251. 0.001262922872120.00.002.67 106.15.38.206http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 31-1611-0/0/111. 0.001538321091780.00.000.90 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 32-1611-0/0/126. 0.001518751335930.00.001.19 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 33-1611-0/0/147. 0.0031001685170.00.005.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1611-0/0/151. 0.0013301888970.00.002.70 185.196.220.26http/1.1www.dinocoffees.com:80GET /wp-content/plugins/profilegrid-user-profiles-groups-and-co 35-1611-0/0/17. 0.0033521761850.00.000.32 35.89.64.107http/1.1www.cnb.co.th:443GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3 H 36-1611-0/0/99. 0.00208822966620.00.001.00 172.71.166.230http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 37-1611-0/0/53. 0.003090227080.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1611-0/0/39. 0.003270262840.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1611-0/0/68. 0.002360823640.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1611-0/0/29. 0.003190213080.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1611-0/0/23. 0.003200134650.00.000.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1611-0/0/39. 0.003250253090.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1611-0/0/41. 0.003130305830.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1611-0/0/27. 0.003380221680.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1611-0/0/44. 0.003070435880.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1611-0/0/43. 0.003220293110.00.001.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1611-0/0/24. 0.00324089750.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1611-0/0/11. 0.00331057130.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1611-0/0/1. 0.00343240.00.000.00 34.220.208.149http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferr
Found on 2023-08-21 10:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5772d32169Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 19-Aug-2023 22:48:02 +07 Restart Time: Saturday, 19-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1601 Parent Server MPM Generation: 1600 Server uptime: 18 hours 45 minutes 48 seconds Server load: 6.49 5.70 4.87 Total accesses: 473673 - Total Traffic: 4.9 GB - Total Duration: 724804769 CPU Usage: u2956.13 s4750.65 cu45722800 cs11171100 - 84200% CPU load 7.01 requests/sec - 75.9 kB/second - 10.8 kB/request - 1530.18 ms/request 18 requests currently being processed, 4 idle workers WRWWR_WWCWR_RWWW_WW_RR............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1600225640/34/28792W 17.5500433327990.00.53295.71 172.69.65.250http/1.1www.time2hand.com:80GET //wp-content/themes/pridmag/db.php?u HTTP/1.0 1-1600223200/90/28755R 57.0901084428408120.00.74296.61 52.36.220.100http/1.1 2-1600224480/63/27954W 40.9600426531140.00.55329.80 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 3-1600223800/74/27713W 50.07011414784970.00.68315.36 172.70.90.72http/1.1www.singkansard.com:443GET /wp-content/uploads/2019/11/18-215x215.jpg HTTP/1.1 4-1600223860/78/27078R 47.930195403001290.00.69260.91 40.77.12.103http/1.1www.thaiquickservice.net:443 5-1600225480/42/26903_ 22.880199405144380.00.44284.55 172.70.90.136http/1.1www.singkansard.com:443GET /wp-content/uploads/2019/11/16-215x215.jpg HTTP/1.1 6-1600223950/74/27259W 49.8000412245850.00.98281.72 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-1600224050/76/26434W 49.3200401725460.00.66270.47 141.101.98.60http/1.1www.farmoflove.com:80POST /wp-login.php HTTP/1.0 8-1600223321/89/26000C 58.07014133956263010.50.99310.48 172.71.222.209http/1.1www.khlangkaew.com:443GET /wp-content/plugins/td-cloud-library/assets/css/tdb_main.cs 9-1600224650/58/25166W 34.8300383286450.00.41289.94 27.254.96.168http/1.1www.chonlateevip.com:443POST /wp-cron.php?doing_wp_cron=1692460081.83814191818237304687 10-1600224570/57/24281R 34.750379369735110.00.79244.76 76.221.186.129http/1.1www.wealneosupply.com:443 11-1600223340/89/23537_ 59.010687356908770.00.65233.88 162.158.2.33http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 12-1600224720/56/22769R 37.2800350708850.00.44233.88 172.70.91.82http/1.1www.singkansard.com:443 13-1600225350/43/21539W 28.5410323108570.00.38216.71 66.249.74.7http/1.1www.12gobiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%A9 14-1600226370/2/19801W 0.8420307611480.00.04191.82 159.65.58.104http/1.1www.chonlateevip.com:443GET /.vscode/sftp.json HTTP/1.1 15-1600226020/12/18708W 7.2600289106250.00.08180.66 86.38.225.76http/1.1www.summer-techthai.com:443POST //xmlrpc.php HTTP/1.1 16-1600226090/15/15671_ 6.880405244550070.00.15198.87 172.70.91.14http/1.1www.singkansard.com:443GET /wp-content/uploads/2019/11/17-215x215.jpg HTTP/1.1 17-1600224110/70/13166W 48.8400202565070.00.62127.21 108.162.226.205http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 18-1600226110/14/10378W 8.6500161155380.00.11124.30 138.68.163.10http/1.1localhost:80GET /server-status HTTP/1.0 19-1600226250/8/7753_ 5.7901238123172200.00.0670.52 162.158.238.50http/1.1www.siamerp.com:443GET /tag/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3 20-1600226440/2/6015R 1.43096394836930.00.0160.41 172.70.90.47http/1.1www.singkansard.com:443 21-1600226450/1/4187R 0.61061768504000.00.0142.52 172.71.166.46http/1.1 22-1600-0/0/3487. 0.00502554956828240.00.0037.04 172.71.166.240http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 23-1600-0/0/2993. 0.005200050581900.00.0026.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1600-0/0/1950. 0.00501959433022470.00.0019.43 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 25-1600-0/0/1550. 0.005199027431110.00.0017.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1600-0/0/1024. 0.008610018020390.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1600-0/0/573. 0.008618010916890.00.005.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1600-0/0/253. 0.00859905349510.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1600-0/0/203. 0.00860104335330.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1600-0/0/193. 0.00862004186880.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1600-0/0/329. 0.00850305730970.00.007.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1600-0/0/137. 0.00860803147530.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1600-0/0/91. 0.00845601967430.00.003.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1600-0/0/141. 0.00860703233850.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1600-0/0/130. 0.00858402747280.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1600-0/0/27. 0.00861901364630.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1600-0/0/86. 0.00861302641510.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1600-0/0/40. 0.00861101572150.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1600-0/0/37. 0.00861201523990.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1600-0/0/113. 0.00850502530290.00.004.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1600-0/0/57. 0.00850601733960.00.004.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1600-0/0/37. 0.005133501431370.00.000.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1600-0/0/39. 0.005132101613950.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1600-0/0/29. 0.005136601232370.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1600-0/0/100. 0.00512089842442900.00.000.72 108.162.242.104http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 46-1600-0/0/37. 0.005131101507310.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1600-0/0/110. 0.00511737602580430.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 48-1600-0/0/23. 0.005137401163420.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1600-0/0/25. 0.005132901164760.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSecond
Found on 2023-08-19 15:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c577c97af60Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 18-Aug-2023 21:49:16 +07 Restart Time: Friday, 18-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1598 Parent Server MPM Generation: 1597 Server uptime: 17 hours 47 minutes 4 seconds Server load: 3.33 4.02 4.69 Total accesses: 446904 - Total Traffic: 4.6 GB - Total Duration: 681468954 CPU Usage: u2779.52 s4692.28 cu45391700 cs11080200 - 88200% CPU load 6.98 requests/sec - 75.9 kB/second - 10.9 kB/request - 1524.87 ms/request 4 requests currently being processed, 9 idle workers __WW__._.WW.____.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1597108420/5/27521_ 2.7611408469040.00.04259.27 139.144.150.26http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1597108590/2/27140_ 1.550859409839760.00.01254.67 193.106.196.237http/1.1www.npaccounting.co.th:443POST //xmlrpc.php HTTP/1.1 2-1597106960/42/26482W 29.8700400667710.00.44325.10 139.144.150.26http/1.1localhost:80GET /server-status HTTP/1.0 3-1597105300/78/26687W 50.0200398870110.01.00271.78 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 4-1597107020/42/26057_ 29.220648389637080.00.45282.63 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 5-1597105430/79/25864_ 54.111341386757110.00.80261.86 40.113.240.70http/1.1www.bannongsaischool.com:443POST //xmlrpc.php HTTP/1.1 6-1597-0/0/25666. 0.00220386747830.00.00257.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1597105710/74/24936_ 49.3000378866500.00.82268.43 35.171.144.152http/1.1www.importantaccount.com:80GET / HTTP/1.0 8-1597-0/0/24472. 0.0013219366930960.00.00239.27 35.171.144.152http/1.1www.importantaccount.com:443GET / HTTP/1.1 9-1597105590/75/23306W 53.1500351524670.00.79288.87 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 10-1597105780/65/22848W 46.5600342619840.00.72229.80 172.71.130.51http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST /xmlrpc.php HTTP/1.0 11-1597-0/0/21521. 0.00980322983890.00.00218.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1597106210/62/20246_ 38.721686306247730.00.67259.76 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 13-1597106370/61/19736_ 43.371822297531310.00.73203.56 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 14-1597106500/64/16674_ 41.690768254820030.00.63181.74 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 15-1597107470/36/15198_ 24.510615238933220.00.37206.07 172.71.123.7http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST /wp-login.php HTTP/1.0 16-1597-0/0/13004. 0.004440203440320.00.00148.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1597-0/0/11934. 0.003960185554040.00.00124.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1597-0/0/9183. 0.004410146691950.00.0083.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1597-0/0/7867. 0.004320129652140.00.0084.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1597-0/0/6594. 0.004560107960110.00.0077.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1597-0/0/5747. 0.00436088509290.00.0046.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1597-0/0/3932. 0.00455065454250.00.0050.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1597-0/0/3353. 0.00446056000710.00.0029.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1597-0/0/1846. 0.00359030340330.00.0013.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1597-0/0/1699. 0.0017484227133200.00.0014.48 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 26-1597-0/0/1234. 0.0018853821922830.00.009.25 172.70.162.212http/1.1www.tun36.com:80GET /login.action HTTP/1.0 27-1597-0/0/898. 0.00435013529880.00.0010.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1597-0/0/297. 0.0042706390320.00.003.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1597-0/0/499. 0.0045707830690.00.004.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1597-0/0/109. 0.0043802128540.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1597-0/0/209. 0.0045404569110.00.003.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1597-0/0/282. 0.0044705194930.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1597-0/0/167. 0.0039803815640.00.002.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1597-0/0/234. 0.0045304030640.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1597-0/0/345. 0.0018511076581550.00.002.59 193.106.196.237http/1.1www.npaccounting.co.th:443POST //xmlrpc.php HTTP/1.1 36-1597-0/0/345. 0.0043105461800.00.002.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1597-0/0/416. 0.0041007639390.00.002.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1597-0/0/225. 0.0045903677610.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1597-0/0/392. 0.001778307072230.00.003.28 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 40-1597-0/0/428. 0.001865158000860.00.003.07 172.71.178.136http/1.1www.tun36.com:80GET /.DS_Store HTTP/1.0 41-1597-0/0/61. 0.004420990680.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1597-0/0/111. 0.0043903138350.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1597-0/0/281. 0.0035504729580.00.002.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1597-0/0/100. 0.0043702206820.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1597-0/0/152. 0.001895412815910.00.001.79 172.70.91.11http/1.1www.tun36.com:80GET /server-status HTTP/1.0 46-1597-0/0/121. 0.0046202158600.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1597-0/0/283. 0.0044004804790.00.001.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1597-0/0/71. 0.0046101318470.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1597-0/0/131. 0.0044502496950.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection
Found on 2023-08-18 14:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c579f3736edApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 17-Aug-2023 19:21:09 +07 Restart Time: Thursday, 17-Aug-2023 16:36:02 +07 Parent Server Config. Generation: 1595 Parent Server MPM Generation: 1594 Server uptime: 2 hours 45 minutes 7 seconds Server load: 5.70 5.44 5.38 Total accesses: 74835 - Total Traffic: 699.2 MB - Total Duration: 101312668 CPU Usage: u2680.27 s4635.82 cu45056100 cs10991500 - 566000% CPU load 7.55 requests/sec - 72.3 kB/second - 9.6 kB/request - 1353.81 ms/request 9 requests currently being processed, 6 idle workers WWWW_.____CWW_CW.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1594134350/10/4813W 6.250064312590.00.0642.93 172.71.250.129http/1.1www.accprogress.com:80POST /xmlrpc.php HTTP/1.0 1-1594134670/2/4661W 0.380062274480.00.0039.71 142.93.86.83http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /xmlrpc.php HTTP/1.1 2-1594133940/28/4716W 16.912063591820.00.1143.10 172.68.234.138http/1.1www.accprogress.com:80POST /wp-cron.php?doing_wp_cron=1692274867.31028008460998535156 3-1594132170/98/4584W 51.870062278180.01.8245.09 172.68.234.138http/1.1www.accprogress.com:80GET /category/type-b/ HTTP/1.0 4-1594132260/99/4642_ 55.00053460998950.00.5949.18 172.71.182.200http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 5-1594-0/0/4456. 0.00344160549260.00.0039.13 172.71.166.214http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 6-1594132900/64/4263_ 39.24093257651270.00.3541.04 172.70.175.213http/1.1www.chorsiam.com:80POST //xmlrpc.php HTTP/1.0 7-1594133030/59/4158_ 33.25053455978330.00.4034.83 172.71.166.214http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 8-1594133240/57/4185_ 31.04046256663600.00.2840.27 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 9-1594133550/44/3955_ 21.200052756390.00.2136.39 138.197.88.136http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1594133611/45/4287C 23.290057437852.70.2540.08 46.101.103.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 11-1594133670/42/3866W 22.230051968550.00.2737.27 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 12-1594134020/18/3400W 10.980045664990.00.0825.83 138.197.88.136http/1.1localhost:80GET /server-status HTTP/1.0 13-1594134100/22/3316_ 10.65081245333510.00.1935.42 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 14-1594134171/21/3382C 11.530832467660413.90.1529.21 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 15-1594134190/17/2833W 8.970038690330.00.0823.87 172.69.64.228http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 16-1594-0/0/2510. 0.006975234477260.00.0023.90 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 17-1594-0/0/1426. 0.00369018637790.00.0017.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1594-0/0/1186. 0.0021042315583020.00.0011.65 172.71.182.169http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 19-1594-0/0/840. 0.00565011701290.00.008.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1594-0/0/378. 0.0063105035510.00.006.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1594-0/0/342. 0.00114604420180.00.004.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1594-0/0/206. 0.00112732554750.00.003.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1594-0/0/139. 0.00116302542710.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1594-0/0/184. 0.00115102802770.00.004.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1594-0/0/236. 0.009797623427320.00.001.75 172.68.234.164http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1692273888.91179299354553222656 26-1594-0/0/368. 0.0087110805124200.00.002.74 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 27-1594-0/0/78. 0.0011530929920.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1594-0/0/14. 0.0011620339710.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1594-0/0/132. 0.009866391945310.00.000.65 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 30-1594-0/0/8. 0.0011520405800.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1594-0/0/20. 0.0011380470770.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1594-0/0/21. 0.0011260535400.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1594-0/0/107. 0.009819661734180.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 34-1594-0/0/13. 0.0011610388640.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1594-0/0/123. 0.00103601920040.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1594-0/0/210. 0.00113702782140.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1594-0/0/174. 0.00102402511550.00.001.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1594-0/0/9. 0.0011550317150.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1594-0/0/21. 0.0011410504390.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1594-0/0/111. 0.009825061752710.00.000.62 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 41-1594-0/0/127. 0.00110201756830.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1594-0/0/114. 0.00114901776980.00.000.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1594-0/0/93. 0.00100001647580.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1594-0/0/19. 0.0011440421680.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1594-0/0/7. 0.0011590248140.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1594-0/0/99. 0.009909041420550.00.000.51 162.158.162.246http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 47-1594-0/0/3. 0.001156094030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 150subcaches: 32
Found on 2023-08-17 12:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57198e4ceaApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 17:52:23 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 13 hours 50 minutes 10 seconds Server load: 6.14 5.46 4.92 Total accesses: 460249 - Total Traffic: 3.7 GB - Total Duration: 670701597 CPU Usage: u2852.18 s4664.07 cu44697400 cs10893200 - 112000% CPU load 9.24 requests/sec - 77.3 kB/second - 8.4 kB/request - 1457.26 ms/request 11 requests currently being processed, 5 idle workers W_.__WW_R_WCW....WWWW............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1588174350/35/25461W 21.9500362237490.00.22214.85 172.71.174.214http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 1-1588175110/11/25519_ 6.670644359039750.00.04205.56 172.71.170.83http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 2-1588-0/0/25121. 0.009726361599160.00.00196.84 162.158.174.180http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST /xmlrpc.php HTTP/1.1 3-1588173800/60/24649_ 35.4600360044580.00.26225.00 178.62.3.65http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1588175210/5/24677_ 3.280561356105260.00.04199.14 45.79.83.159http/1.1 5-1588172460/94/24346W 57.1700353269040.00.54174.85 178.62.3.65http/1.1localhost:80GET /server-status HTTP/1.0 6-1588173980/63/23971W 38.0400346115060.00.23182.99 172.71.170.83http/1.1www.chonlateecamping.com:80POST //wp-login.php HTTP/1.0 7-1588172640/82/24185_ 50.640971344051770.00.44164.90 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 8-1588174120/43/22901R 27.0300329264420.00.35173.03 172.70.175.12http/1.1 9-1588174530/36/22890_ 20.5900331283890.00.16169.29 66.249.71.44http/1.1www.xn--12cbt1cxdh6e8ac5x.com:8GET /wp-content/uploads/cropped-favicon-192x192.jpg HTTP/1.0 10-1588172810/77/22057W 46.8300319766540.00.36155.60 20.127.78.238http/1.1www.tkadvicesystem.com:443POST //wp-login.php HTTP/1.1 11-1588174601/34/21706C 20.540666317645666.70.14169.91 213.152.187.210http/1.1www.kncintergroup.com:443POST /xmlrpc.php HTTP/1.1 12-1588172890/84/21277W 50.3300308361950.00.38175.95 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 13-1588-0/0/20501. 0.001300294324450.00.00162.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1588-0/0/19841. 0.001140292214870.00.00226.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1588-0/0/18171. 0.00551205264317910.00.00148.01 172.70.134.194http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 16-1588-0/0/17324. 0.00860250287660.00.00130.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1588173040/78/15311W 48.0800227770720.00.41210.76 172.71.167.89http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 18-1588173100/83/13687W 51.9500203644060.00.4099.95 162.158.174.146http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 19-1588173160/77/11196W 49.4600165891340.00.4292.33 172.70.134.195http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 20-1588173220/84/8732_ 51.630548134479190.00.4063.15 172.69.95.66http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 21-1588-0/0/6407. 0.00381073796134780.00.0050.99 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 22-1588-0/0/5249. 0.003787453980588380.00.0048.08 172.68.234.164http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1692179350.52252793312072753906 23-1588-0/0/3779. 0.00380447159341980.00.0031.27 162.158.175.12http/1.1www.chonlateecamping.com:80POST //xmlrpc.php HTTP/1.0 24-1588-0/0/3268. 0.00381667152366930.00.0023.50 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 25-1588-0/0/2590. 0.00378570543024480.00.0018.39 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 26-1588-0/0/1421. 0.004014021319340.00.0013.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1588-0/0/1034. 0.004026015503660.00.007.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1588-0/0/806. 0.005850013495190.00.006.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1588-0/0/580. 0.006259110009260.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1588-0/0/319. 0.00620605306840.00.006.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1588-0/0/392. 0.00602106441090.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1588-0/0/83. 0.002800301652280.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1588-0/0/112. 0.002799602871870.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1588-0/0/101. 0.002796801881510.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1588-0/0/129. 0.002796902345130.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1588-0/0/18. 0.00280010652620.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1588-0/0/109. 0.00277818242613860.00.000.66 172.70.189.100http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 38-1588-0/0/100. 0.00392268141804300.00.000.65 172.70.135.128http/1.1www.chonlateefarm.com:443POST //wp-login.php HTTP/1.1 39-1588-0/0/90. 0.003925401630980.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1588-0/0/16. 0.00394040679680.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1588-0/0/14. 0.00394200608390.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1588-0/0/12. 0.00394160649130.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1588-0/0/12. 0.00394260608070.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1588-0/0/25. 0.00393830787580.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1588-0/0/17. 0.00394140616270.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1588-0/0/12. 0.00394290602590.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1588-0/0/10. 0.00394240621060.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1588-0/0/11. 0.00394330570430.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1588-0/0/12. 0.00394310584220.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of mill
Found on 2023-08-16 10:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57d4c69e2bApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 02:47:59 +07 Restart Time: Wednesday, 16-Aug-2023 00:24:35 +07 Parent Server Config. Generation: 1588 Parent Server MPM Generation: 1587 Server uptime: 2 hours 23 minutes 24 seconds Server load: 14.18 15.84 15.49 Total accesses: 108339 - Total Traffic: 626.8 MB - Total Duration: 207489571 CPU Usage: u3069.11 s4710.33 cu44435200 cs10822200 - 642000% CPU load 12.6 requests/sec - 74.6 kB/second - 5.9 kB/request - 1915.19 ms/request 21 requests currently being processed, 9 idle workers _WWRWWW.___WWCWRCWWC__WW.WRRW.___................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1587184560/87/4515_ 69.930083472240.00.4127.18 146.190.98.165http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1587189700/14/4502W 11.950083583700.00.0924.84 172.71.175.87http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 2-1587188690/33/4441W 26.430082557730.00.1625.81 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 3-1587184940/72/4375R 61.93057180405400.00.4125.41 192.169.244.239http/1.1www.xn--12ca1al2c4cm5fzaon1x.co 4-1587187860/42/4356W 32.810080534620.01.9426.25 74.207.237.114http/1.1www.partymanagementthailand.comGET / HTTP/1.1 5-1587189830/13/4428W 10.350081813140.00.0826.22 40.83.42.130http/1.1www.chonlateebusiness.com:443POST //xmlrpc.php HTTP/1.1 6-1587188070/41/4412W 29.941080756140.00.1624.52 40.83.35.60http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 7-1587-0/0/4142. 0.001078155920.00.0024.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1587186510/57/4339_ 47.550146381099380.00.2627.46 162.158.174.176http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 9-1587185030/79/4278_ 62.020080399950.00.3824.01 146.190.98.165http/1.1localhost:80GET / HTTP/1.0 10-1587188150/40/4238_ 31.55079377826110.00.1922.64 172.69.65.198http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 11-1587190240/8/4270W 6.481078410210.00.0524.70 172.71.174.156http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 12-1587190320/6/4002W 4.340074044050.00.0221.70 172.69.64.248http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 13-1587186651/60/4030C 45.060119475455177.20.2722.96 40.78.153.9http/1.1www.dinocoffees.com:443POST //xmlrpc.php HTTP/1.1 14-1587188480/35/3900W 28.170072107500.00.1821.62 40.78.158.54http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 15-1587189340/20/3896R 15.99079672531380.00.1024.58 162.158.174.212http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 16-1587184461/83/3860C 69.110072367250.20.4120.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1587190480/5/3781W 3.190071624000.00.0123.92 162.158.175.100http/1.1www.altaccount.com:80POST //xmlrpc.php HTTP/1.0 18-1587190570/4/3603W 3.140068493650.00.1421.21 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.0 19-1587189421/21/3505C 15.650914664337010.80.0820.67 20.127.78.238http/1.1www.tafa.or.th:443POST //wp-login.php HTTP/1.1 20-1587188920/31/3273_ 25.560107063221500.00.2319.36 172.69.64.254http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 21-1587185650/65/3014_ 52.870061065020.00.3017.28 146.190.98.165http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 22-1587189430/19/2647W 14.500052459090.00.0814.33 172.173.116.204http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 23-1587185040/74/2611W 61.211053648200.00.3814.56 172.71.167.206http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 24-1587-0/0/2477. 0.003050576260.00.0013.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1587190630/4/2111W 2.760043879260.00.0111.63 172.71.166.186http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 26-1587186770/58/2048R 42.740119242772530.00.2711.48 20.169.206.229http/1.1www.bannongsaischool.com:443 27-1587190720/5/1853R 3.010039125140.00.029.56 172.69.64.248http/1.1www.rooffurnish.com:443 28-1587187110/52/1473W 41.840031858150.01.2810.82 172.69.67.154http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 29-1587-0/0/1118. 0.000025870420.00.006.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1587190740/4/970_ 3.120021741180.00.026.82 146.190.98.165http/1.1localhost:80GET /about HTTP/1.0 31-1587187300/48/714_ 40.580118616428260.00.254.01 213.136.93.170http/1.1www.krongthongsecurity.com:443POST /xmlrpc.php HTTP/1.1 32-1587190750/5/401_ 2.910010082780.00.012.24 146.190.98.165http/1.1localhost:80GET /v2/_catalog HTTP/1.0 33-1587-0/0/277. 0.007813887485690.00.001.72 172.69.67.154http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 34-1587-0/0/88. 0.0037302371750.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1587-0/0/152. 0.0042004490560.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1587-0/0/239. 0.0025217805748490.00.001.27 172.71.174.124http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 229subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 50 seconds, (range: 0...169)index usage: 8%, cache usage: 10%total entries stored since starting: 5484total entries replaced since starting: 0total entries expired since starting: 5255total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 64 hit, 22152 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-15 19:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c571f097a94Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 14:52:07 +07 Restart Time: Thursday, 03-Aug-2023 14:51:31 +07 Parent Server Config. Generation: 1539 Parent Server MPM Generation: 1538 Server uptime: 35 seconds Server load: 3.20 3.45 3.48 Total accesses: 267 - Total Traffic: 1.8 MB - Total Duration: 215098 CPU Usage: u2386.99 s4238.58 cu40999400 cs9907550 - 1.45e+8% CPU load 7.63 requests/sec - 53.2 kB/second - 7.0 kB/request - 805.61 ms/request 10 requests currently being processed, 4 idle workers _WW.R.W_W_.RR.R_WW................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-15385570/24/24_ 9.4001199230.00.130.13 143.42.118.5http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-15385580/21/21W 10.0500213780.00.180.18 172.70.143.59http/1.1www.ptatun.or.th:80GET /wp-login.php HTTP/1.0 2-15387080/13/20W 2.6000132380.00.060.10 172.70.174.84http/1.1www.proplustech.co.th:443POST //wp-login.php HTTP/1.1 3-1538-0/0/7. 0.0022043590.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-15385800/15/15R 8.450739169630.00.190.19 165.232.76.155http/1.1 5-1538-0/0/6. 0.0021062150.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-15386110/22/22W 7.5600173080.00.140.14 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-15386130/10/10_ 5.8201114920.00.080.08 207.154.240.169http/1.1 8-15386240/17/17W 8.6800177670.00.180.18 167.172.232.142http/1.1localhost:80GET /server-status HTTP/1.0 9-15386260/20/20_ 6.8300133980.00.110.11 167.172.232.142http/1.1 10-1538-0/0/9. 0.0010078260.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-15386380/20/20R 5.120099940.00.090.09 164.90.222.93http/1.1www.partymanagementthailand.comGET /.env HTTP/1.0 12-15386520/21/21R 5.1401102690.00.130.13 139.144.150.23http/1.1 13-1538-0/0/3. 0.001908800.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-15386610/12/12R 6.440649128430.00.100.10 139.144.150.23http/1.1 15-15386730/14/14_ 2.940067400.00.100.10 165.22.74.203http/1.1www.partymanagementthailand.comGET /_all_dbs HTTP/1.0 16-15386750/9/9W 4.210095720.00.050.05 94.228.114.37http/1.1www.pokaorganize.com:443GET /wp-login.php HTTP/1.1 17-15386760/11/11W 4.890096970.00.080.08 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 18-1538-0/0/6. 0.009052250.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 39subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 279 seconds, (range: 268...294)index usage: 1%, cache usage: 1%total entries stored since starting: 39total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 165 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-03 07:51
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 203.170.192.183
Domain: smtp.partymanagementthailand.com
Port: 443
URL: https://smtp.partymanagementthailand.comFirst seen 2023-08-03 07:51
Last seen 2024-02-02 09:01
Open for 183 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fec29996948Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 16:01:25 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 6 hours 4 seconds Server load: 2.07 2.02 2.00 Total accesses: 1847950 - Total Traffic: 23.8 GB - Total Duration: 2141104345 CPU Usage: u214.78 s116.8 cu32089.3 cs2210.25 - 1.42% CPU load .757 requests/sec - 10.2 kB/second - 13.5 kB/request - 1158.64 ms/request 3 requests currently being processed, 125 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no2yes032002 229661no1yes329001 329394no1yes032001 529374no1yes032001 Sum405 3125005 ________________________________................................ ___________________W_R____R_____________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/40/14788_ 13.3300160260950.00.14193.77 143.198.72.96http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/39/15282_ 13.1710139013330.00.11198.96 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/36/14849_ 13.3210150309430.00.16192.73 143.198.72.96http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/34/15027_ 13.3300145874900.00.08185.96 167.172.232.142http/1.1localhost:443GET /about HTTP/1.1 0-92293730/33/14931_ 13.1520147711670.00.15185.42 178.128.151.41http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/30/15157_ 13.3120156649120.00.12188.53 178.62.3.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/28/14828_ 13.3210145588370.00.13200.23 161.35.190.56http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/31/15138_ 13.3310150182030.00.07187.57 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-92293730/30/15097_ 13.3100145226800.00.07229.87 143.198.72.96http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/38/15232_ 13.1510148853320.00.15194.87 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/39/14799_ 13.3310154393230.00.09200.68 143.198.72.96http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/35/14808_ 13.3310147156120.00.08195.45 164.90.222.93http/1.1localhost:80GET /config.json HTTP/1.1 0-92293730/44/14675_ 13.3120137182730.00.14185.50 164.92.192.25http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/36/14827_ 13.2910169086490.00.09186.02 164.90.222.93http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/32/15778_ 13.3310141615000.00.09187.75 134.122.89.242http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/37/14829_ 12.9610165341190.00.08182.47 139.144.150.45h2localhost:443[0/0] Software caused connection abort 0-92293730/45/14884_ 13.3210143404980.00.12206.38 144.126.198.24http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/37/14944_ 13.3210144939930.00.12189.30 164.92.192.25http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/29/14757_ 13.3120160388150.00.05200.53 164.92.192.25http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/36/14981_ 13.3300144639340.00.13193.81 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-92293730/38/14975_ 13.3210181495860.00.15193.41 139.144.150.45http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/33/14998_ 13.3310147053740.00.09204.07 178.62.3.65http/1.1localhost:443GET /about HTTP/1.1 0-92293730/37/15455_ 13.3120150748550.00.15188.27 134.122.89.242http/1.1localhost:443GET / HTTP/1.1 0-92293730/33/14664_ 13.2900138765130.00.13190.18 164.92.192.25http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-92293730/43/14967_ 13.3310162205830.00.10186.87 142.93.153.3http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/37/14640_ 13.3220135981630.00.13196.98 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/30/15137_ 13.2910144713450.00.05194.49 161.35.155.246http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/35/14920_ 13.3220159187410.00.05213.30 144.126.198.24http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/35/14722_ 13.2910152174350.00.11175.92 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-92293730/28/15176_ 13.3300135139110.00.08225.13 161.35.190.56http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/42/14661_ 13.2100155572970.00.06199.14 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/31/14921_ 13.2810145814970.00.15185.14 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-92-0/0/15731. 0.00424710138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00424710136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00424710174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00424710150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00424710146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00424710134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00424710172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00424710165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00424710127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00424710152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00424710148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00424710159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00424710159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189.
Found on 2024-02-02 09:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fec9592e273Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 08:26:03 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 22 hours 24 minutes 42 seconds Server load: 3.41 2.89 2.64 Total accesses: 789502 - Total Traffic: 10.7 GB - Total Duration: 962221099 CPU Usage: u316.6 s22.22 cu13326.1 cs698.67 - 8.6% CPU load 4.73 requests/sec - 67.1 kB/second - 14.2 kB/request - 1218.77 ms/request 7 requests currently being processed, 121 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425no7yes131007 111360no2yes329000 216287no1yes032000 316453no23yes3290018 Sum4033 71210025 ______________________________W______________R________W___W_____ ________________________________________R______R______R_________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-784250/202/6090_ 126.522083661430.02.7590.28 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 0-784250/213/6565_ 126.4521161118450.02.2386.69 162.243.186.177http/1.1localhost:80GET /server-status HTTP/1.1 0-784250/183/6087_ 125.840072862250.02.3690.66 207.154.240.169h2localhost:443[0/0] Software caused connection abort 0-784250/220/6428_ 126.531070419450.02.4183.40 162.243.186.177http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/202/6147_ 126.522067286630.02.1579.43 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-784250/273/6519_ 126.261078647410.03.7185.87 138.197.88.136http/1.1localhost:80GET / HTTP/1.1 0-784250/211/6318_ 126.362059342240.02.6697.07 159.65.138.217http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/203/6361_ 126.532068237730.02.2783.12 164.92.192.25http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-784250/264/6378_ 126.512063260310.02.70125.55 137.184.106.30http/1.1localhost:80GET /.git/config HTTP/1.1 0-784250/250/6293_ 126.153072255780.02.7180.95 192.53.126.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-784250/187/6048_ 125.731076897820.02.1077.31 159.203.94.228http/1.1 0-784250/198/6004_ 126.512076045410.02.3978.21 165.22.74.203http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-784250/215/6074_ 126.400453864410.02.6280.55 139.144.150.23http/1.1localhost:80GET /server-status HTTP/1.1 0-784250/212/6277_ 126.541082370980.02.5184.80 41.216.188.92http/1.1www.hotlineservicethailand.com:GET /.well-known/acme-challenge/cloud.php HTTP/1.1 0-784250/191/6710_ 126.54185057346270.02.2786.69 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /anpkawv-41665citems/eti HTTP/1.1 0-784250/268/6043_ 126.541083769760.02.5778.91 161.35.27.144http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-784250/215/6211_ 126.480065117980.02.3781.04 139.144.150.23http/1.1localhost:80GET /.git/config HTTP/1.1 0-784250/210/6361_ 126.541059751990.02.2182.59 139.59.182.142http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-784250/203/6366_ 126.531062600790.02.2181.01 128.199.62.55http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-784250/188/6124_ 125.60089969230350.02.5386.36 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-784250/284/6401_ 126.361090790670.02.7988.99 139.59.182.142h2localhost:443[0/0] Software caused connection abort 0-784250/187/6095_ 126.290071650100.02.1582.87 128.199.62.55http/1.1 0-784250/188/6668_ 126.492074227090.02.3288.88 139.144.150.23http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-784250/213/6178_ 126.512063664110.02.2889.23 138.197.88.136http/1.1localhost:80GET /.git/config HTTP/1.1 0-784250/268/6079_ 125.862105675840670.02.9376.37 161.35.27.144h2localhost:443[0/0] Software caused connection abort 0-784250/187/6195_ 126.570058133390.02.1280.24 161.35.27.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-784250/208/6226_ 126.522057269080.02.3490.22 138.197.88.136http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-784250/206/6202_ 126.44244571114490.02.65110.76 104.192.3.74http/1.1www.uniqueworkthailand.com:443GET /wp-json/wp/v2/users/1 HTTP/1.1 0-784250/209/6145_ 126.442054722140.02.2977.66 206.81.1.88http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-784250/304/6403_ 126.531073245630.03.41116.55 137.184.106.30http/1.1localhost:80GET /config.json HTTP/1.1 0-784251/184/6095W 126.390067867840.02.2189.87 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ajdsvcw-119899qetidm.html HTTP/1.1 0-784250/201/6402_ 126.400065751040.02.5782.33 165.22.74.203http/1.1localhost:80GET /login.action HTTP/1.1 1-7113600/178/6282_ 106.290073426620.01.9581.52 162.243.186.177http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7113600/216/6080_ 106.300067247270.02.4977.45 162.243.186.177http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-7113600/190/6065_ 106.0201293910290.02.2678.49 165.232.76.155h2localhost:443[0/0] Software caused connection abort 1-7113600/172/5732_ 106.29184576535510.02.3376.16 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /acxxpcs-25597ketidm95np.html HTTP/1.1 1-7113600/172/5984_ 106.190075766560.01.9988.76 165.232.76.155http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-7113600/167/6040_ 105.941065211850.02.0479.51 137.184.162.65h2localhost:443[0/0] Software caused connection abort 1-7113600/154/6086_ 105.900065795430.01.7877.02 128.199.62.55http/1.1 1-7113600/171/6170_ 106.042077025830.02.8182.66 159.203.94.228h2localhost:443[0/0] Software caused connection abort 1-7113600/185/6132_ 106.120056112720.02.3379.05 137.184.106.30http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-7113600/171/6089_ 106.30084770239150.01.8085.03 185.191.171.9http/1.1www.chonlateeadmin.com:443GET /btqitgo-40210detid HTTP/1.1 1-7113600/166/5882_ 106.220105176775520.02.1384.34 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /eitkawv-41695gitems/etidm72rv HTTP/1.1 1-7113600/163/6397_ 106.290059409770.01.8992.62 161.35.27.144http/1.1localhost:443GET /about HTTP/1.1 1-7113600/183/6117_ 106.171079954920.02.1782.62 139.59.182.142http/1.1localhost:443
Found on 2024-01-07 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fec83a5b126Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 23:25:55 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 hours 24 minutes 34 seconds Server load: 3.75 3.79 3.40 Total accesses: 240453 - Total Traffic: 3.5 GB - Total Duration: 192229936 CPU Usage: u82.8 s5.84 cu3895.6 cs208.8 - 8.69% CPU load 4.98 requests/sec - 75.8 kB/second - 15.2 kB/request - 799.449 ms/request 10 requests currently being processed, 86 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 030686no19yes5270012 132728no1yes131000 229460no19yes4280016 Sum3039 10860028 _____W___R______W___R____W_______________R______________________ _____W_W_______________WR_______................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0306860/71/2679_ 31.930021681470.00.7840.82 139.144.150.23http/1.1localhost:443GET /.git/config HTTP/1.1 0-0306860/69/2952_ 31.790020742750.00.7539.25 138.68.163.10http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-0306860/52/2623_ 31.96057732964510.00.5847.65 20.163.30.95http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 0-0306860/60/2857_ 31.901021056130.00.6236.44 159.203.63.67http/1.1localhost:443GET /about HTTP/1.1 0-0306860/64/2743_ 31.810021491840.00.7834.22 159.203.44.43http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0306861/65/3006W 31.470021661830.00.7537.94 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?ubxaonh-311409kitems/eti HTTP/1.1 0-0306860/59/2760_ 31.960021078440.00.6449.73 159.203.63.67http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-0306860/57/2751_ 31.881021908800.00.7336.17 159.203.63.67http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-0306860/55/2807_ 31.940020816530.00.6278.66 159.223.108.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0306860/71/2753R 31.791020899010.00.8935.63 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 0-0306860/58/2694_ 31.670024471730.00.6233.06 138.68.163.10http/1.1localhost:80GET /.git/config HTTP/1.1 0-0306860/48/2612_ 31.670021113440.00.5233.97 164.90.222.93http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-0306860/59/2595_ 31.921021078030.00.5435.97 164.90.205.35http/1.1localhost:443GET /.env HTTP/1.1 0-0306860/56/2899_ 31.800105421821350.00.6639.83 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?fdjqgmy-161192witems/eti HTTP/1.1 0-0306860/57/2935_ 31.820023970210.00.6139.89 142.93.64.15http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0306860/56/2695_ 31.670021063190.00.6335.35 164.90.205.35http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-0306861/54/2604W 31.800021396290.00.6233.90 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?iexvrsm-229kitems/etidm80 HTTP/1.1 0-0306860/55/2927_ 31.930021333220.00.5839.15 159.203.63.67http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0306860/63/2814_ 31.82058920798230.00.7737.12 20.163.30.95http/1.1www.12gobiz.com:443POST //xmlrpc.php HTTP/1.1 0-0306860/64/2658_ 31.800022723220.00.6740.13 137.184.150.232http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-0306860/71/2720R 31.871020778190.00.8739.21 3.224.220.101http/1.1www.chonlateeadmin.com:443 0-0306860/66/2750_ 31.960021776960.00.7340.00 139.144.150.23http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-0306860/56/3089_ 31.790020755370.00.6539.62 142.93.64.15http/1.1localhost:80GET /config.json HTTP/1.1 0-0306860/51/2621_ 31.921020309180.00.5734.82 164.90.222.93http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-0306860/62/2661_ 31.940721286750.00.5634.31 137.184.150.232http/1.1localhost:443GET /server-status HTTP/1.1 0-0306861/67/2641W 31.750020734980.01.0534.37 85.208.96.201http/1.1www.chonlateeboi.com:443GET /22097mydseti.html HTTP/1.1 0-0306860/65/2718_ 31.94084120592520.00.6244.99 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?xnaadej-14232netidm17kan HTTP/1.1 0-0306860/59/2715_ 31.820020780710.00.6865.10 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-0306860/55/2606_ 31.960020988560.00.5832.81 164.90.222.93http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0306860/57/2947_ 31.960020133420.00.5773.58 164.90.205.35http/1.1localhost:443GET /.git/config HTTP/1.1 0-0306860/58/2634_ 31.94067420931300.00.7041.69 185.191.171.8http/1.1www.chonlateefood.com:443GET /getid/vak14971khxaitems HTTP/1.1 0-0306860/95/2984_ 31.36087220975420.00.8436.60 185.70.94.16http/1.1www.dtacsme.com:443GET /wp-json HTTP/1.1 1-0327280/10/2119_ 5.14184616024210.00.0927.94 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?hqwggdh-292754jitems/etid.html HTTP/1.1 1-0327280/8/1903_ 5.142015801950.00.0924.62 142.93.64.15http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0327280/16/2042_ 5.181016135420.00.1428.39 139.144.150.23http/1.1localhost:443GET /.env HTTP/1.1 1-0327280/15/1910_ 4.982015557550.00.1725.56 137.184.150.232http/1.1localhost:443GET / HTTP/1.1 1-0327280/14/1942_ 5.111015511540.00.1830.02 142.93.64.15http/1.1localhost:80GET /config.json HTTP/1.1 1-0327280/10/1950_ 5.15184615313620.00.1126.01 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?pievrsm-236ritems/etidm7.html HTTP/1.1 1-0327280/9/1955_ 5.01185015874850.00.1024.11 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?uetvrsm-32013gitems/eti.htm HTTP/1.1 1-0327280/12/2025_ 5.002105415746110.00.1327.39 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?ziovrsm-32460betidm3.htm HTTP/1.1 1-0327280/11/1990_ 5.151015904640.00.1027.84 164.90.222.93http/1.1localhost:443GET /config.json HTTP/1.1 1-0327280/10/1924R 5.042015459960.00.1025.17 20.163.30.95http/1.1www.12gobiz.com:443 1-0327280/14/1932_ 5.062015193010.00.1228.53 164.90.205.35http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-0327280/12/2070_ 5.041016343460.00.0828.95 159.203.44.43http/1.1localhost:80GET /.env HTTP/1.1 1-0327280/11/1977_ 5.151104916018240.00.0826.12 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?wt
Found on 2024-01-05 16:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fec1b2ece11Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 22:40:12 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 22 hours 17 minutes 14 seconds Server load: 1.32 1.67 1.40 Total accesses: 4322955 - Total Traffic: 55.5 GB - Total Duration: 4091422139 CPU Usage: u206.57 s46.08 cu77797.2 cs4073.16 - 8.7% CPU load 4.58 requests/sec - 61.6 kB/second - 13.5 kB/request - 946.441 ms/request 12 requests currently being processed, 52 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03068no27yes8240021 17820no5yes428000 Sum2032 12520021 _______WW__R___W____RW__W___W________R________________R_____R_R_ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-4030680/170/39048_ 106.2300355434470.01.87494.12 137.184.162.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-4030680/160/38393_ 105.7900362081680.01.70484.88 144.126.202.105http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-4030680/162/38803_ 105.9700397237770.01.77497.51 159.65.58.104http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-4030680/173/38845_ 106.2300385662530.01.83507.97 159.223.102.13http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-4030680/165/39340_ 106.1700366030800.01.80561.27 165.22.74.203http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-4030680/149/38406_ 106.1600395162890.01.69485.82 167.172.232.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-4030680/145/38727_ 106.070964399124610.01.71487.90 157.55.39.61h2www.chonlateefbc.com:443GET /sitemap262.xml HTTP/2.0 0-4030681/165/39484W 106.0800363901800.01.85495.63 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?nrghgeq-26234tetidm15aet.htm HTTP/1.1 0-4030681/163/38471W 106.0300376281580.01.77503.85 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?405163himsitems/etidm HTTP/1.1 0-4030680/147/38892_ 105.8000364403240.01.60497.03 137.184.222.107http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-4030680/171/38456_ 106.2300380394280.01.78467.51 159.203.182.222http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-4030680/156/38528R 106.0300364303850.01.68517.75 207.154.240.169http/1.1localhost:443GET /about HTTP/1.1 0-4030680/165/38388_ 105.9700371232640.01.86468.92 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /impgzna63669citems/etidm94 HTTP/1.1 0-4030680/173/38583_ 106.0400400535380.01.92497.19 104.236.193.132http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-4030680/157/38804_ 106.1800376507000.01.86487.86 162.243.161.105http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-4030681/169/38476W 105.8400368505420.01.87541.93 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?oxtzkxl-17005gitems/eti HTTP/1.1 0-4030680/152/39443_ 106.0800371429200.01.59521.92 162.243.161.105http/1.1localhost:80GET /.git/config HTTP/1.1 0-4030680/173/38940_ 106.2301232362559210.01.90480.03 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?oismlcv-13651fetidm17b.htm HTTP/1.1 0-4030680/161/38985_ 106.1600363849900.01.73503.60 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-4030680/163/39265_ 106.0900379873330.01.74512.60 137.184.222.107http/1.1localhost:80GET /config.json HTTP/1.1 0-4030680/165/38647R 105.9300358106490.01.94509.59 23.22.35.162http/1.1 0-4030681/150/38815W 106.0900384530570.01.69501.25 159.65.58.104http/1.1localhost:443GET /server-status HTTP/1.1 0-4030680/170/38564_ 106.1601123403342770.01.99510.95 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?lpsmlcv-17002fetidm88ycf.htm HTTP/1.1 0-4030680/153/37876_ 105.850895357934180.01.67470.90 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mmrszzn-15261eitems/eti.htm HTTP/1.1 0-4030681/150/38921W 105.8300367269530.01.73516.61 94.156.68.28http/1.1www.chonlateepro.com:443POST //xmlrpc.php HTTP/1.1 0-4030680/173/38201_ 106.180859384417400.01.97467.35 185.191.171.9http/1.1www.chonlateeboi.com:443GET /30322xhlfetid HTTP/1.1 0-4030680/160/38903_ 106.1101106368716120.01.87580.26 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?rmghlzs-14538tetid.htm HTTP/1.1 0-4030680/162/38151_ 106.1600366596950.01.54507.09 207.154.240.169http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-4030681/153/38742W 105.8400407812250.01.69520.12 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?riyvbri-43996letid.htm HTTP/1.1 0-4030680/151/38611_ 106.0400371530010.01.66499.90 137.184.222.107http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-4030680/154/38728_ 105.9200366490440.01.62490.45 164.90.222.93http/1.1localhost:80GET /config.json HTTP/1.1 0-4030680/125/38411_ 106.1600374436400.01.39533.79 159.65.58.104http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-4078200/75/39617_ 38.6410370073600.00.71501.00 165.22.74.203http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-4078200/55/39534_ 38.5610378285710.00.51543.27 178.128.151.41http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-4078200/54/39318_ 38.5710379936990.00.55546.62 161.35.155.246http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-4078200/55/39574_ 38.6100388078170.00.57558.26 159.223.102.13http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-4078200/52/40347_ 38.5100359739320.00.60613.22 178.128.151.41http/1.1localhost:80GET /.git/config HTTP/1.1 1-4078200/58/39156R 37.7919945357126270.00.64560.14 167.172.232.142http/1.1 1-4078200/56/39245_ 38.6410360404300.00.68525.66 159.65.58.104http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-4078200/72/39694_ 38.5800384109230.00.73506.41 144.126.202.105http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-4078200/55/39443_ 38.6301230372645500.00.55497.50 185.191.171.11http/1.1www.chonlateeadmin.com:443GET /yznemnz-32225aeti.html HTTP/1.1 1-4078200/53/39506_ 38.6511118364794080.00.57505.97 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?mcqapuc-49841detidm6 HTTP/1.1 1-4078200/49/40068_ 38.6501093360619470.00.57529.91 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?inloazi-3817yetidm.html HTTP/1.1 1-4078200/65/39859_ 38.3900364656670.00.
Found on 2023-12-11 15:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31215d9fec215d9fec521bdadbApache Status Apache Server Status for smtp.partymanagementthailand.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 03-Dec-2023 00:27:49 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 13 Parent Server MPM Generation: 12 Server uptime: 2 days 4 minutes 50 seconds Server load: 2.63 1.98 1.66 Total accesses: 696079 - Total Traffic: 9.7 GB - Total Duration: 517470300 CPU Usage: u76.16 s11.94 cu12013 cs653.85 - 7.37% CPU load 4.02 requests/sec - 58.5 kB/second - 14.6 kB/request - 743.407 ms/request 15 requests currently being processed, 113 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 230046no12yes527006 330151no4yes032003 630155no18yes3293010 730156no11yes725005 Sum4045 151133024 ................................................................ __R______________W_W_R________W_________________________________ ................................................................ ___W_W_____________W_______________W_____________R_W________WRRR ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-11-0/0/6120. 0.0064389745702590.00.0080.74 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?nfcvrsm-174850petid HTTP/1.1 0-11-0/0/6137. 0.0064396045051780.00.0087.11 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /rnkzjan-48078xetidm7 HTTP/1.1 0-11-0/0/6135. 0.0064380245118030.00.0083.07 45.135.232.36http/1.1www.chonlateemeet.com:443GET /xmlrpc.php?rsd HTTP/1.1 0-11-0/0/6274. 0.0064395746583870.00.0083.69 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263312re4eb9b28fd.htm HTTP/1.1 0-11-0/0/6457. 0.00643167545896890.00.00166.04 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6198. 0.0064394846411090.00.0081.68 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6089. 0.00643145272750.00.0081.67 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 0-11-0/0/6544. 0.0064392346770410.00.0088.94 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%5C/chonlateemeet.com%5C/wp-admin%5C/authorize-application 0-11-0/0/6100. 0.00643107046057170.00.0079.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?biqvrsm-174812ditems/etidm2.html HTTP/1.1 0-11-0/0/5935. 0.00643104146876440.00.0080.50 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.0064370146020430.00.0079.53 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6094. 0.0064389947482310.00.0085.92 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qzfvrsm-178103setidm16dm.html HTTP/1.1 0-11-0/0/5975. 0.0064372146130810.00.0077.60 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /ezxpmsv-7297ketidm45rm.html HTTP/1.1 0-11-0/0/5975. 0.00643104145711490.00.00105.16 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6032. 0.00643108747191360.00.0084.02 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dfsvrsm-278450fitems/etid.html HTTP/1.1 0-11-0/0/6112. 0.0064346846974750.00.00141.21 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/5965. 0.0064370945692610.00.0079.80 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/6174. 0.0064384445484700.00.0084.16 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?ffuvrsm-174842hitems/etid.html HTTP/1.1 0-11-0/0/6227. 0.0064371246174540.00.0080.63 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /zesrolg-29340fetid HTTP/1.1 0-11-0/0/6152. 0.0064370946863670.00.00115.32 45.135.232.36http/1.1www.chonlateemeet.com:443GET /?p=1729 HTTP/1.1 0-11-0/0/5857. 0.00643046921890.00.0077.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/modal- 0-11-0/0/6099. 0.0064349045291450.00.0086.86 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 0-11-0/0/6146. 0.0064393646157170.00.0083.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 0-11-0/0/6015. 0.0064386945532740.00.0078.49 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2635mywgitems/etidm HTTP/1.1 0-11-0/0/6826. 0.006434146251660.00.00103.96 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/gm 0-11-0/0/5963. 0.0064373844468900.00.0079.27 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b9%81%e0%b8%81%e0%b8%a5%e0%b9%80%e0%b8%a5%e0%b8%ad%e0% 0-11-0/0/6281. 0.00643722046932230.00.0092.56 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zbgpcov138618tba44 HTTP/1.1 0-11-0/0/6041. 0.0064396345000940.00.0094.60 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 0-11-0/0/6153. 0.00643107344538880.00.0080.53 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /xcepcov263052r5809a4 HTTP/1.1 0-11-0/0/5951. 0.00643146944553090.00.0089.08 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/18-scaled.jpg HTTP/1.1 0-11-0/0/6075. 0.00643778645921790.00.0079.24 45.135.232.36http/1.1www.chonlateemeet.com:443GET /%e0%b8%ab%e0%b9%89%e0%b8%ad%e0%b8%87%e0%b8%9b%e0%b8%a3%e0% 0-11-0/0/5938. 0.0064396044418990.00.0080.77 45.135.232.36http/1.1www.chonlateemeet.com:443GET /embed/ HTTP/1.1 1-11-0/0/5727. 0.0064386344900110.00.0079.24 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?yznvrsm-174783aitems/etidm92lm.htm HTTP/1.1 1-11-0/0/5821. 0.0064347946160200.00.0075.06 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5749. 0.00643150744489260.00.0076.87 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/6039. 0.0064367645209590.00.0089.71 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /jvcslix-25866petidm79wip HTTP/1.1 1-11-0/0/5840. 0.0064345143951340.00.00113.49 170.64.130.230http/1.1www.happy-carrent.com:443POST //xmlrpc.php HTTP/1.1 1-11-0/0/5834. 0.00643044140570.00.0086.73 47.128.42.90http/1.1www.mkandptfoods.com:80GET /wp-content/uploads/2023/01/MK-co-03.png HTTP/1.1 1-11-0/0/5907. 0.00643232444922520.00.0074.14 45.135.232.36http/1.1www.chonlateemeet.com:443GET / HTTP/1.1 1-11-0/0/5836. 0.0064358244674920.00.0083.50 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?xmeoazi-2090retidm50kzr HTTP/1.1 1-11-0/0/5992. 0.00643183944909190.00.0088.38 45.135.232.36http/1.1www.chonlateemeet.com:443GET /wp-content/uploads/2023/08/13-scaled.jpg HTTP/1.1 1-11-0/0/5705. 0.00643822744746080.00.00
Found on 2023-12-02 17:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c573d3b96f9Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:03:55 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 1 hour 40 minutes 10 seconds Server load: 0.43 0.35 0.40 Total accesses: 7602 - Total Traffic: 98.7 MB - Total Duration: 17088781 CPU Usage: u3147.15 s5834.96 cu55529000 cs13588200 - 1150000% CPU load 1.26 requests/sec - 16.8 kB/second - 13.3 kB/request - 2247.93 ms/request 6 requests currently being processed, 6 idle workers CWC_C__C___..W.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-196474651/2/736C 0.000117052851.40.008.41 144.126.202.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-196467120/49/725W 27.420017291130.01.4110.54 144.126.202.105http/1.1localhost:443GET /server-status HTTP/1.1 2-196464651/82/712C 35.410116109732.60.949.80 159.203.44.43http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-196463980/81/695_ 32.950114089470.02.7210.87 144.126.202.105http/1.1localhost:443GET /about HTTP/1.1 4-196468431/43/659C 15.090114575351.30.648.51 139.144.150.205http/1.1localhost:443GET /.env HTTP/1.1 5-196465450/71/642_ 33.360114750250.00.767.32 139.144.150.205http/1.1localhost:443GET /login.action HTTP/1.1 6-196474560/3/667_ 0.020114770620.00.008.99 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 7-196474731/1/588C 0.010214006871.30.006.55 139.144.150.205http/1.1localhost:443GET /.git/config HTTP/1.1 8-196470780/27/616_ 10.470014377240.00.357.28 144.126.202.105http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-196474800/0/516_ 0.000011274090.00.006.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-196474820/0/357_ 0.00005440930.00.003.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1964-0/0/395. 0.0096908961830.00.005.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1964-0/0/98. 0.007425362830490.00.001.86 162.158.222.250http/1.1www.acumaticathailand.com:80GET /z.php HTTP/1.0 13-196462560/92/185W 37.77005161480.02.083.39 172.71.150.134http/1.1www.proplustech.co.th:443GET /?page_id=K1094627 HTTP/1.1 14-1964-0/0/3. 0.00968011450.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1964-0/0/3. 0.00970026240.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1964-0/0/5. 0.009460157710.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 6subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 291 seconds, (range: 288...295)index usage: 0%, cache usage: 0%total entries stored since starting: 43total entries replaced since starting: 0total entries expired since starting: 37total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3782 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57ba5d7127Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:08:13 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 6 minutes Server load: 0.25 0.29 0.29 Total accesses: 48536 - Total Traffic: 897.2 MB - Total Duration: 94148048 CPU Usage: u2999.18 s5760.71 cu55152300 cs13502200 - 210000% CPU load 1.48 requests/sec - 28.0 kB/second - 18.9 kB/request - 1939.76 ms/request 6 requests currently being processed, 4 idle workers C_CCC__..C.._.W................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193260541/25/4081C 5.601184321621.40.26116.35 206.81.1.88http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-193260850/23/4009_ 8.080177849300.00.1351.09 198.199.121.22http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-193261421/19/4018C 4.371176867222.60.1153.93 139.144.96.150http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-193254411/93/3889C 21.410077162101.311.3368.91 139.144.96.150http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 4-193262121/11/3929C 0.171076322621.30.0362.32 198.199.121.22http/1.1localhost:443GET /about HTTP/1.1 5-193262530/0/3640_ 0.000146266994170.00.0044.62 172.70.143.45http/1.1www.tun36.com:80POST /wp-cron.php?doing_wp_cron=1699250847.55477404594421386718 6-193255770/75/3633_ 15.350171314090.00.9257.28 198.199.121.22http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 7-1932-0/0/3516. 0.00215070991930.00.0092.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1932-0/0/3266. 0.00214063649440.00.0054.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-193259761/33/2882C 6.310155414891.30.2034.74 139.144.96.150http/1.1localhost:443GET /about HTTP/1.1 10-1932-0/0/2588. 0.006135949380080.00.0042.00 172.71.99.86http/1.1www.bizproceed.com:80GET /simple.php HTTP/1.0 11-1932-0/0/1995. 0.00162040035970.00.0029.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-193259890/31/1886_ 9.50052534580440.00.2933.67 172.71.182.190http/1.1www.bizproceed.com:80GET /chosen.php HTTP/1.0 13-1932-0/0/1733. 0.00132037525450.00.00116.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-193259970/31/921W 5.700017601420.00.1910.02 206.81.1.88http/1.1localhost:443GET /server-status HTTP/1.1 15-1932-0/0/468. 0.00202007032580.00.004.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/349. 0.00235705526000.00.002.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/250. 0.00235802763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00320607137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00385502780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00385605022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0038460690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00385002695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.003048192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.003851029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00370301528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00333002033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00314501828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00129080140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00128970108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 188 seconds, (range: 57...295)index usage: 0%, cache usage: 0%total entries stored since starting: 367total entries replaced since starting: 0total entries expired since starting: 357total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 28302 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5716396748Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 03:36:07 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 3 hours 12 minutes 13 seconds Server load: 2.33 2.93 3.33 Total accesses: 52055 - Total Traffic: 741.2 MB - Total Duration: 271569133 CPU Usage: u3208.1 s5658.11 cu53843400 cs13132600 - 581000% CPU load 4.51 requests/sec - 65.8 kB/second - 14.6 kB/request - 5216.97 ms/request 19 requests currently being processed, 5 idle workers WW_WC_W_WCWWR_RCCWWWW_..........W.......C......... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-189557380/43/2255W 18.8410108132500.00.3430.71 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=tree-of-life-canvas-print-canvas-art-by-tanielle-mm-6z7 1-189560510/5/2143W 0.8600108779890.00.0430.16 162.243.186.177http/1.1www.yadaacc168.co.th:443GET / HTTP/1.1 2-189554630/62/2121_ 28.2701108399160.00.9331.20 142.93.158.96http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 3-189560590/11/2187W 0.0520106725380.00.0331.01 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=the-tree-of-life-canvas-wall-art-by-gustav-mm-DBM3L6U1 4-189557461/33/2033C 15.1210106828962.60.2333.72 142.93.158.96http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-189555220/43/2140_ 28.5900105563340.00.5627.77 134.122.89.242http/1.1localhost:443GET /about HTTP/1.1 6-189559220/8/2085W 0.3100104604140.00.1930.35 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?trusted-MSO.xml HTTP/1.1 7-189548400/77/2010_ 49.4300103071140.01.0827.82 159.203.63.67http/1.1localhost:443GET /about HTTP/1.1 8-189555280/42/1958W 31.270097607270.00.5626.98 134.122.89.242http/1.1localhost:443GET /server-status HTTP/1.1 9-189557481/34/2056C 12.05094794974171.20.5228.30 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m2613297277.html HTTP/1.1 10-189557870/34/2042W 17.010096495790.00.3828.12 3.224.220.101http/1.1www.thaidaoherb.com:443GET /43848315121834.html HTTP/1.1 11-189556140/28/1891W 19.2119097163200.00.4128.41 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?lakes-ASN.xml HTTP/1.1 12-189558040/33/1950R 15.93066695849360.00.3827.69 23.22.35.162http/1.1www.krongthongsecurity.com:443 13-189558260/29/1814_ 11.240148790451630.00.3925.52 52.70.240.171http/1.1www.thaidaoherb.com:443GET /43848315124714.html HTTP/1.1 14-189558490/25/1935R 16.4100100476080.00.3125.18 162.243.161.105http/1.1localhost:443GET /about HTTP/1.1 15-189551091/62/1954C 32.890195036331.40.6033.10 134.122.89.242http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-189551111/82/1801C 49.101088747801.30.7722.54 142.93.158.96http/1.1localhost:443GET /about HTTP/1.1 17-189559350/18/1741W 3.991084979540.00.1224.25 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=twilight-tree-of-life-canvas-print-canvas-art-by-mm-gbr 18-189560670/1/1724W 0.007085340930.00.0024.44 27.254.96.168http/1.1www.yadaacc168.co.th:443POST /wp-cron.php?doing_wp_cron=1698352560.29064798355102539062 19-189560730/4/1521W 0.004084565090.00.0120.59 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=tree-of-life-wall-art-tree-of-life-canvas-mm-Bb9DlPi0 H 20-189560870/3/1475W 0.003077540630.00.0021.07 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=mua-huawei-watch-gt-2019-bluetooth-smartwatch-longer-la 21-189560980/2/1391_ 0.000073119800.00.0019.28 159.203.63.67http/1.1localhost:443GET /v2/_catalog HTTP/1.1 22-1895-0/0/954. 0.00296055132690.00.0013.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1895-0/0/1052. 0.00328066140500.00.0014.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1895-0/0/939. 0.00306052652160.00.0013.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1895-0/0/742. 0.00295050815960.00.0010.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1895-0/0/715. 0.00324040102070.00.0010.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1895-0/0/484. 0.00177032991170.00.006.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1895-0/0/383. 0.00314029355210.00.005.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/595. 0.00144034643710.00.007.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1895-0/0/382. 0.00251124009730.00.004.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1895-0/0/378. 0.00305027554720.00.004.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-189551650/66/541W 40.761036810670.00.877.47 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=los-huawei-watch-y-watch-pro-llegan-a-espa%C3%B1a-mm-18 33-1895-0/0/358. 0.00316024023640.00.004.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/485. 0.00302026996880.00.008.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1895-0/0/183. 0.0031809135190.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/278. 0.00322020456110.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/273. 0.00308015420740.00.003.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/172. 0.0030907214030.00.003.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/176. 0.005809598860.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-189552291/77/138C 42.89005325651.40.901.82 162.243.161.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 41-1895-0/0/121. 0.0030404496740.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1895-0/0/44. 0.0030001329400.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/87. 0.0018306315840.00.001.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/92. 0.0032003849330.00.007.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1895-0/0/89. 0.0030705996930.00.000.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1895-0/0/16. 0.002850298370.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1895-0/0/20. 0.002500560060.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1895-0/0/96. 0.0032508615040.00.001.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1895-0/0/35. 0.0015101397580.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds
Found on 2023-10-26 20:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57da735c6eApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 06:52:55 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 2 hours 50 minutes 42 seconds Server load: 0.70 0.54 0.43 Total accesses: 10658 - Total Traffic: 133.1 MB - Total Duration: 11620647 CPU Usage: u2855.69 s5344.96 cu52298900 cs12765100 - 635000% CPU load 1.04 requests/sec - 13.3 kB/second - 12.8 kB/request - 1090.32 ms/request 14 requests currently being processed, 2 idle workers CWCCCCCCWC_R_CCC.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182321631/21/968C 0.14109529361.40.0211.15 64.227.126.135http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 1-182320490/47/1048W 8.380010836540.00.1512.23 159.203.182.222http/1.1www.yadaacc168.co.th:443GET /v2/_catalog HTTP/1.1 2-182320831/32/1037C 5.420111923911.30.1513.73 64.227.126.135http/1.1localhost:443GET /config.json HTTP/1.1 3-182318671/57/881C 18.77109667081.40.9015.09 164.90.222.93http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-182319241/51/917C 10.790011695691.40.1810.12 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-182314001/87/700C 20.90018436041.40.608.72 138.68.163.10http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 6-182321731/3/902C 0.620010721711.30.0110.38 164.90.222.93http/1.1localhost:443GET /config.json HTTP/1.1 7-182319581/46/821C 15.90019001981.31.7011.99 138.68.163.10http/1.1localhost:443GET /.git/config HTTP/1.1 8-182319890/49/683W 12.57006192800.00.207.93 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 9-182321071/23/684C 2.95016870531.30.197.39 164.90.222.93http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-182319980/48/501_ 14.12004897340.03.3310.93 64.227.126.135http/1.1localhost:443GET /.env HTTP/1.1 11-182321800/3/357R 0.6506493411800.00.003.38 159.203.182.222http/1.1www.yadaacc168.co.th:443GET /debug/default/view?panel=config HTTP/1.1 12-182321820/6/306_ 0.02003781550.00.002.70 164.90.222.93http/1.1localhost:443GET /.env HTTP/1.1 13-182321941/3/21C 0.0010121111.30.000.20 138.68.163.10http/1.1localhost:443GET /.env HTTP/1.1 14-182322001/1/201C 0.00122199491.30.001.69 164.90.222.93http/1.1localhost:443GET /.git/config HTTP/1.1 15-182322021/1/6C 0.00122421.30.000.02 64.227.126.135http/1.1localhost:443GET /.git/config HTTP/1.1 16-1823-0/0/198. 0.00741802524510.00.001.74 188.116.22.119http/1.1www.tkadvicesystem.com:80GET /OLD/ HTTP/1.0 17-1823-0/0/101. 0.0081620991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0074225051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.0080920144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0073987821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.0081630300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.0081660210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.008176050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.00817501095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 98subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 137 seconds, (range: 52...293)index usage: 3%, cache usage: 4%total entries stored since starting: 2814total entries replaced since starting: 0total entries expired since starting: 2716total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 73 hit, 3815 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-10 23:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5714a2f0afApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 04-Oct-2023 00:15:03 +07 Restart Time: Wednesday, 04-Oct-2023 00:11:05 +07 Parent Server Config. Generation: 1800 Parent Server MPM Generation: 1799 Server uptime: 3 minutes 58 seconds Server load: 2.37 2.16 1.49 Total accesses: 654 - Total Traffic: 5.1 MB - Total Duration: 902701 CPU Usage: u2893.32 s5296.9 cu51830300 cs12663200 - 2.71e+7% CPU load 2.75 requests/sec - 22.1 kB/second - 8.0 kB/request - 1380.28 ms/request 11 requests currently being processed, 5 idle workers C_CC_RCW_CC_CC..W.._.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1799110771/9/46C 0.0901636631.40.020.34 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-179984210/56/56_ 28.420421762950.00.410.41 162.158.62.4http/1.1www.thaidocuments.com:80POST /wp-login.php HTTP/1.0 2-179989011/53/56C 20.5501556973.60.700.72 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 3-1799111131/13/31C 0.4700279571.30.020.14 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 4-179984270/66/66_ 28.9200786410.00.490.49 74.207.237.46http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 5-1799111310/2/39R 0.0000601440.00.000.42 45.55.193.222http/1.1localhost:80GET /_all_dbs HTTP/1.0 6-1799101561/31/38C 11.8800424063.60.180.23 128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1 7-1799101580/28/34W 12.7700454140.00.160.20 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 8-1799105800/12/15_ 6.5900230210.00.100.11 142.93.153.3http/1.1localhost:80GET /.env HTTP/1.0 9-1799111371/5/8C 0.010133821.40.010.01 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1799111431/2/5C 0.001029761.40.000.02 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1799111530/1/5_ 0.000122490.00.000.02 143.42.118.5http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 12-179985741/45/45C 24.0400791041.40.360.36 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-179985751/53/53C 30.46014138329821.10.460.46 192.99.15.29http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%81%E0%B8%A7 14-1799-0/0/22. 0.001180402450.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1799-0/0/1. 0.00232000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-179985890/46/46W 24.5500717960.00.370.37 172.70.230.59http/1.1www.makeregist.com:80POST /wp-login.php HTTP/1.0 17-1799-0/0/31. 0.00560533510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1799-0/0/5. 0.00200078280.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-179986180/52/52_ 22.6900852240.00.330.33 74.207.237.114http/1.1localhost:80GET /config.json HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 118subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 125 seconds, (range: 61...286)index usage: 4%, cache usage: 5%total entries stored since starting: 118total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 235 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-03 17:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57928711c4Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 00:30:05 +07 Restart Time: Tuesday, 03-Oct-2023 00:11:21 +07 Parent Server Config. Generation: 1797 Parent Server MPM Generation: 1796 Server uptime: 18 minutes 44 seconds Server load: 0.91 1.38 1.36 Total accesses: 1998 - Total Traffic: 20.4 MB - Total Duration: 2780414 CPU Usage: u2763.16 s5257.82 cu51774400 cs12651700 - 5730000% CPU load 1.78 requests/sec - 18.6 kB/second - 10.5 kB/request - 1391.6 ms/request 10 requests currently being processed, 5 idle workers CR_CC_W_W_W.CC.C._................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1796271061/7/146C 2.11002448281.40.211.74 134.122.89.242http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1796234840/33/153R 10.63113946980.00.271.77 139.144.150.23http/1.1 2-1796226760/49/127_ 8.42011499470.00.541.13 164.90.222.93http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1796245171/16/151C 2.74012793833.60.092.10 134.122.89.242http/1.1localhost:443GET /server-status HTTP/1.1 4-1796246191/30/153C 8.53089929607314.90.291.92 172.70.175.230http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 5-1796272620/8/145_ 1.04012183720.00.011.90 139.144.150.23http/1.1localhost:443GET /about HTTP/1.1 6-1796253610/32/127W 6.32001884410.00.251.35 164.90.205.35http/1.1localhost:443GET /server-status HTTP/1.1 7-1796273360/4/173_ 0.80002121560.00.011.47 167.71.48.191http/1.1localhost:80GET /telescope/requests HTTP/1.0 8-1796261210/16/155W 3.77001867740.00.201.78 46.101.103.192http/1.1www.partymanagementthailand.comGET / HTTP/1.1 9-1796273920/1/173_ 0.00011559350.00.001.98 164.90.222.93http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 10-1796273980/4/57W 0.0000659670.00.000.38 144.126.198.24http/1.1www.partymanagementthailand.comGET /about HTTP/1.1 11-1796-0/0/119. 0.003901141040.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1796224901/44/48C 8.3200196431.40.170.18 164.90.222.93http/1.1localhost:443GET /v2/_catalog HTTP/1.1 13-1796261441/8/103C 0.11101777311.30.010.88 164.90.222.93http/1.1localhost:443GET /about HTTP/1.1 14-1796-0/0/28. 0.00490192560.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1796261471/22/48C 1.4900186331.40.060.16 164.90.205.35http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1796-0/0/48. 0.00480321710.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1796261490/23/37_ 1.440046370.00.160.21 68.183.64.176http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 18-1796-0/0/7. 0.00215016570.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 142subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 54 seconds, (range: 9...146)index usage: 5%, cache usage: 6%total entries stored since starting: 408total entries replaced since starting: 0total entries expired since starting: 266total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1065 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-02 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c572ce17dc8Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 05:37:29 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 1 hour 35 minutes 18 seconds Server load: 0.59 0.46 0.49 Total accesses: 8398 - Total Traffic: 84.1 MB - Total Duration: 10121033 CPU Usage: u2799.22 s5183.29 cu51090400 cs12499800 - 1110000% CPU load 1.47 requests/sec - 15.1 kB/second - 10.3 kB/request - 1205.17 ms/request 9 requests currently being processed, 1 idle workers W_.CCWCC.CCW...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762117660/88/737W 33.84008975560.00.626.62 172.71.122.12http/1.1www.khlangkaew.com:443GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B8%97%E0%B8%B5%E0%B9%88 1-1762120640/48/662_ 14.49017709150.00.377.94 128.199.195.68http/1.1localhost:443GET /v2/_catalog HTTP/1.1 2-1762-0/0/740. 0.001563438510640.00.006.66 132.145.78.163http/1.1www.happy-carrent.com:80GET /wp-content/plugins/wp-email.php HTTP/1.0 3-1762123151/23/604C 9.4214736817395.50.227.14 139.59.65.144http/1.1www.tspaccount.net:443GET /config.json HTTP/1.1 4-1762123231/23/742C 13.81008248052.70.297.08 128.199.195.68http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1762123250/24/812W 11.090010477870.00.237.30 128.199.195.68http/1.1localhost:443GET /server-status HTTP/1.1 6-1762120731/48/611C 17.57007474531.30.374.59 128.199.195.68http/1.1localhost:443GET /about HTTP/1.1 7-1762124301/15/588C 8.7213966857385.60.156.20 139.59.65.144http/1.1www.tspaccount.net:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 8-1762-0/0/525. 0.0046806713770.00.005.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1762119061/68/408C 22.89014954121.40.764.70 128.199.195.68http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1762120971/44/616C 21.4903937983635.50.395.13 139.59.65.144http/1.1www.tspaccount.net:443GET /telescope/requests HTTP/1.1 11-1762121120/44/262W 16.48003102210.00.423.14 139.59.65.144http/1.1www.tspaccount.net:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 12-1762-0/0/54. 0.0017230282130.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/381. 0.00122304988590.00.003.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/298. 0.00179203815530.00.002.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/233. 0.00118602434370.00.002.49 139.144.150.45http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 16-1762-0/0/98. 0.00176301709330.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/19. 0.0017470123810.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/8. 0.001780032160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 63subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 162 seconds, (range: 8...299)index usage: 2%, cache usage: 2%total entries stored since starting: 941total entries replaced since starting: 0total entries expired since starting: 878total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 5 hit, 2482 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-22 22:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5722097163Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 14:37:10 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 10 hours 34 minutes 57 seconds Server load: 0.85 1.10 1.18 Total accesses: 66526 - Total Traffic: 1.3 GB - Total Duration: 100556865 CPU Usage: u2864.66 s5174.06 cu50883500 cs12455300 - 166000% CPU load 1.75 requests/sec - 36.5 kB/second - 20.9 kB/request - 1511.54 ms/request 3 requests currently being processed, 7 idle workers _WW___.___C....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-174352760/75/5430_ 45.98265886256950.04.11129.38 172.68.234.213http/1.1www.time2hand.com:80POST /wp-cron.php?doing_wp_cron=1695109026.85838603973388671875 1-174356130/27/5395W 15.390081030110.00.37130.64 184.22.232.72http/1.1www.chonlateefbc.com:80POST /wp-admin/admin-ajax.php HTTP/1.0 2-174354380/53/5404W 22.950081462560.00.71104.87 139.59.182.142http/1.1localhost:443GET /server-status HTTP/1.1 3-174352560/72/5271_ 46.594075849300.01.01103.30 139.59.182.142http/1.1localhost:443GET / HTTP/1.1 4-174354970/52/5078_ 19.631176968450.00.40100.85 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-174358110/6/4968_ 4.140073556630.00.02122.04 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 6-1743-0/0/4791. 0.00134068332180.00.0090.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-174353000/63/4484_ 34.241166636640.01.0789.29 139.59.182.142http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 8-174357110/20/4437_ 7.551171125100.00.3174.78 139.59.182.142http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-174353070/61/3948_ 38.382159559602100.00.9470.23 172.70.142.76http/1.1www.time2hand.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 10-174353131/54/3667C 47.220056303411.40.3469.24 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1743-0/0/2900. 0.00796048324080.00.0056.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/2752. 0.003111541362120.00.0062.86 162.158.166.36http/1.1www.accprogress.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 13-1743-0/0/2119. 0.00742034698790.00.0042.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743-0/0/1501. 0.00719022161460.00.0027.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/1108. 0.00491016150400.00.0022.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/1029. 0.00748014192240.00.0023.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/349. 0.0080004090960.00.006.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/328. 0.0079903222810.00.004.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/105. 0.0079801808530.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/89. 0.007970622100.00.002.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/37. 0.0095140505240.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/110. 0.00950001868340.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/55. 0.0093000741120.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/139. 0.00951101688780.00.001.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1743-0/0/41. 0.0095080648490.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/43. 0.0095090740610.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/12. 0.0094880286800.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743-0/0/150. 0.00886201644400.00.002.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1743-0/0/13. 0.0094980440100.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/12. 0.0094970325260.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743-0/0/197. 0.00855513975970.00.005.21 139.144.150.205http/1.1localhost:80GET /.DS_Store HTTP/1.0 32-1743-0/0/80. 0.00950501026530.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743-0/0/98. 0.00873323392384530.00.001.28 35.164.89.242http/1.1www.ckt-trading.com:443GET / HTTP/1.1 34-1743-0/0/14. 0.0094860415030.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/20. 0.0094870499850.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743-0/0/48. 0.0093070579330.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1743-0/0/14. 0.0095060314670.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/13. 0.0095040388600.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/119. 0.00947701026510.00.002.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743-0/0/99. 0.00949601279860.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1743-0/0/2. 0.0015049078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.0015054041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.00150250128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.00148530756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.0015061000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.0015024080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.0015037050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.0015060010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.0015036025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-09-19 07:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c571fd7e904Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:24:00 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 1 hour 56 minutes 3 seconds Server load: 0.88 0.93 0.82 Total accesses: 10144 - Total Traffic: 148.8 MB - Total Duration: 13813186 CPU Usage: u2813.98 s5144.72 cu50713200 cs12419200 - 907000% CPU load 1.46 requests/sec - 21.9 kB/second - 15.0 kB/request - 1361.71 ms/request 8 requests currently being processed, 5 idle workers W__CWW_WWCW__..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733106020/1/836W 0.480010814240.00.0011.22 134.122.89.242http/1.1localhost:443GET /server-status HTTP/1.1 1-1733101340/83/875_ 38.790011981340.00.6810.32 134.122.89.242http/1.1localhost:443GET /about HTTP/1.1 2-1733102750/64/820_ 29.13039011626610.00.959.76 142.93.153.3http/1.1www.tspaccount.net:443GET /config.json HTTP/1.1 3-1733102371/55/800C 25.300011557871.40.609.91 134.122.89.242http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1733103850/38/756W 18.89109679070.00.309.08 178.128.187.183http/1.1www.siwapower.com:80POST /wp-login.php HTTP/1.0 5-1733105200/9/758W 2.900010264070.06.5216.33 142.93.153.3http/1.1www.tspaccount.net:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 6-1733105770/9/691_ 2.460110211528740.00.0311.09 172.70.85.81http/1.1www.mgacccount.com:80POST /wp-login.php HTTP/1.0 7-1733101840/77/634W 34.42008612060.00.5710.02 27.254.96.168http/1.1www.siwapower.com:80POST /wp-cron.php?doing_wp_cron=1694892240.46382904052734375000 8-1733102580/62/767W 28.41109899870.00.4211.36 172.71.161.148http/1.1www.lawbizeasy.com:80POST /wp-login.php HTTP/1.0 9-1733102691/62/614C 30.1913168320895.50.507.41 142.93.153.3http/1.1www.tspaccount.net:443GET /telescope/requests HTTP/1.1 10-1733102820/55/573W 27.13007154660.00.536.55 172.68.234.133http/1.1www.lawbizeasy.com:80POST /wp-cron.php?doing_wp_cron=1694892240.26473402976989746093 11-1733105860/4/412_ 3.54016125280550.00.136.09 49.232.138.60http/1.1www.1smestartup.com:443GET /?author=28 HTTP/1.1 12-1733106260/0/316_ 0.00004061270.00.003.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/243. 0.0095503211470.00.0013.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1733-0/0/210. 0.0095603085090.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/236. 0.0095403313960.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/139. 0.0073602192300.00.001.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/138. 0.00135502080160.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/46. 0.0011960437180.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/9. 0.003099051440.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/20. 0.0031110165770.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1733-0/0/103. 0.00234801522820.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1733-0/0/13. 0.0031040106800.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/5. 0.003110026900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/2. 0.003119020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/3. 0.006952018690.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1733-0/0/86. 0.0062431959350.00.000.99 167.71.48.191http/1.1 27-1733-0/0/34. 0.0068720178140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/5. 0.0069430380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 42subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 151 seconds, (range: 1...296)index usage: 1%, cache usage: 1%total entries stored since starting: 1419total entries replaced since starting: 0total entries expired since starting: 1377total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4346 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 19:22 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57e7f72d99Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 06:43:42 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 2 hours 41 minutes 30 seconds Server load: 0.40 0.85 0.86 Total accesses: 11845 - Total Traffic: 161.3 MB - Total Duration: 13048405 CPU Usage: u2780.19 s5117.76 cu50517100 cs12376600 - 649000% CPU load 1.22 requests/sec - 17.0 kB/second - 13.9 kB/request - 1101.6 ms/request 3 requests currently being processed, 5 idle workers _._W...__CR_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720215950/24/942_ 7.82085311593530.00.2616.05 162.158.245.66http/1.1www.siamautomation.com:443GET /wp-admin.bak HTTP/1.1 1-1720-0/0/983. 0.0085011144380.00.0014.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1720214990/40/892_ 19.55109622140.00.389.32 162.243.186.177http/1.1localhost:443GET /about HTTP/1.1 3-1720213400/77/947W 38.18009864140.00.7110.15 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 4-1720-0/0/981. 0.002975111670410.00.0022.24 162.158.245.47http/1.1www.siamautomation.com:443GET /public.bak HTTP/1.1 5-1720-0/0/787. 0.0011608490350.00.008.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1720-0/0/825. 0.0098139054390.00.009.22 162.158.245.67http/1.1www.siamautomation.com:443GET /wp-admin.tar.gz HTTP/1.1 7-1720212840/89/865_ 45.71119647990.00.6511.42 162.243.186.177http/1.1localhost:443GET /v2/_catalog HTTP/1.1 8-1720212900/91/714_ 47.96118399270.01.019.98 162.243.186.177http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 9-1720214181/58/798C 29.26019409091.40.5810.36 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1720216010/22/653R 6.9825626911250.00.197.93 162.158.245.48http/1.1www.siamautomation.com:443 11-1720214240/61/556_ 27.58215724090.00.466.85 162.243.186.177http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 12-1720-0/0/323. 0.0017602832730.00.003.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1720-0/0/243. 0.0048102646570.00.001.86 213.202.211.149http/1.1www.dreamhightravel.com:80GET /.wp-cli/admin.php HTTP/1.0 14-1720-0/0/265. 0.0086002878410.00.002.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1720-0/0/160. 0.004499071425970.00.001.91 213.202.211.149http/1.1www.dreamhightravel.com:443GET /public/install.php HTTP/1.1 16-1720-0/0/322. 0.005026644201200.00.003.82 104.43.236.172http/1.1www.nptpropertythailand.com:443GET /repeater.php HTTP/1.1 17-1720-0/0/170. 0.00191301503340.00.005.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/106. 0.00377701291690.00.001.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/41. 0.0037850403400.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/131. 0.003101173848380.00.001.42 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 21-1720-0/0/40. 0.0037830364570.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/2. 0.0037760370.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/97. 0.003098199556150.00.000.99 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 24-1720-0/0/2. 0.0037730120.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 104subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 62 seconds, (range: 0...184)index usage: 3%, cache usage: 4%total entries stored since starting: 2506total entries replaced since starting: 0total entries expired since starting: 2402total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5051 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 23:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c578e6ec646Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 12:55:20 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 8 hours 53 minutes 8 seconds Server load: 0.89 0.95 1.03 Total accesses: 52870 - Total Traffic: 1.0 GB - Total Duration: 78868090 CPU Usage: u2752.77 s5100.54 cu50480100 cs12368500 - 197000% CPU load 1.65 requests/sec - 33.2 kB/second - 20.1 kB/request - 1491.74 ms/request 3 requests currently being processed, 8 idle workers ___W___..R_..C._.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716152660/43/4399_ 15.521066680700.00.7279.66 207.154.240.169http/1.1localhost:443GET /about HTTP/1.1 1-1716149930/75/4472_ 21.62456264641050.010.0772.29 108.162.226.84http/1.1www.singkansard.com:443POST /wp-login.php HTTP/1.1 2-1716150220/69/4542_ 23.431061345030.01.1689.49 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1716154150/3/4147W 1.420065958140.00.02123.60 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 4-1716151120/61/4090_ 20.161059664220.01.2760.75 207.154.240.169http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-1716154210/2/3992_ 0.994125157764910.00.0168.49 162.158.170.92http/1.1www.altaccount.com:80POST /wp-login.php HTTP/1.0 6-1716154230/2/3598_ 1.101152933970.00.0377.18 207.154.240.169http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 7-1716-0/0/3630. 0.005054156410.00.0067.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1716-0/0/3322. 0.006050458910.00.0071.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1716154480/1/3421R 0.006353489410.00.0062.92 198.13.62.122http/1.1 10-1716149150/71/2860_ 22.02441542212480.01.3155.53 172.68.234.215http/1.1www.altaccount.com:80POST /wp-cron.php?doing_wp_cron=1694584515.57766008377075195312 11-1716-0/0/2857. 0.0028146213460.00.0044.74 162.158.204.212http/1.1www.xn--72czo5brcr3a6b0cwf.com:GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-8ce6 12-1716-0/0/2133. 0.007033990190.00.0056.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716149321/76/1250C 27.850020709141.42.3424.32 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1716-0/0/951. 0.00469014224920.00.0014.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716149560/75/543_ 56.09407503370.01.469.87 207.154.240.169http/1.1localhost:443GET / HTTP/1.1 16-1716-0/0/863. 0.00247347412542540.00.0014.28 107.189.7.244http/1.1www.thai-pack.com:443POST /wp-login.php HTTP/1.1 17-1716-0/0/302. 0.00248904143610.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/341. 0.00311904999570.00.005.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/291. 0.0031735824132860.00.0018.11 172.71.98.165http/1.1www.altaccount.com:80GET /simple.php HTTP/1.0 20-1716-0/0/124. 0.00540801047940.00.003.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1716-0/0/124. 0.0054870766470.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/188. 0.00549502398000.00.003.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1716-0/0/135. 0.00521812476370.00.002.10 184.22.232.72http/1.1www.chonlateepr.com:443GET /wp-content/plugins/jeg-elementor-kit/lib/jeg-framework/ass 24-1716-0/0/21. 0.0014585037670.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1716-0/0/9. 0.0014583063280.00.000.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1716-0/0/76. 0.001408801550070.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1716-0/0/3. 0.0014593033330.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1716-0/0/3. 0.00146020700.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1716-0/0/3. 0.00146010510.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1716-0/0/9. 0.001458404950.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1716-0/0/4. 0.00145960390.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1716-0/0/3. 0.001459502160.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1716-0/0/15. 0.00145560149050.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1716-0/0/4. 0.001459401040.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1716-0/0/6. 0.0014588036240.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1716-0/0/6. 0.0014569053100.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1716-0/0/61. 0.00142610977890.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1716-0/0/69. 0.001417901316420.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1716-0/0/3. 0.00146040250.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 93subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 111 seconds, (range: 4...279)index usage: 3%, cache usage: 4%total entries stored since starting: 9638total entries replaced since starting: 0total entries expired since starting: 9545total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 376 hit, 17907 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 05:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c574ac21705Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 11-Sep-2023 00:11:00 +07 Restart Time: Monday, 11-Sep-2023 00:10:54 +07 Parent Server Config. Generation: 1704 Parent Server MPM Generation: 1703 Server uptime: 5 seconds Server load: 2.28 2.20 1.57 Total accesses: 30 - Total Traffic: 288 kB - Total Duration: 27417 CPU Usage: u2584.27 s5045.49 cu50297000 cs12328600 - 1.25e+9% CPU load 6 requests/sec - 57.6 kB/second - 9.6 kB/request - 913.9 ms/request 6 requests currently being processed, 6 idle workers _CWW____RR_C...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1703117590/3/3_ 1.111127290.00.040.04 134.122.34.144http/1.1localhost:443GET /about HTTP/1.1 1-1703117771/5/5C 1.020020730.20.010.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1703117790/7/7W 2.150062340.00.050.05 172.173.124.185http/1.1www.nakindogtraining.com:443GET /Gecko.php HTTP/1.1 3-1703117810/3/3W 1.110026370.00.030.03 134.122.34.144http/1.1localhost:443GET /server-status HTTP/1.1 4-1703117840/2/2_ 1.101046840.00.030.03 172.173.124.185http/1.1www.nakindogtraining.com:80GET //Gecko.php HTTP/1.0 5-1703118220/3/3_ 1.101026470.00.070.07 172.70.55.88http/1.1www.siamautomation.com:443POST /xmlrpc.php HTTP/1.1 6-1703118290/1/1_ 1.080142325590.00.030.03 134.122.63.192http/1.1 7-1703118350/1/1_ 0.991101420280.00.000.00 134.122.63.192http/1.1 8-1703118730/1/1R 0.87190918140.00.020.02 172.173.124.185http/1.1www.nakindogtraining.com:443GET /sites/all/libraries/elfinder/connectors/php/connector.php 9-1703118790/1/1R 0.001120.00.000.00 162.158.78.172http/1.1www.chonlateeit.com:443 10-1703118850/1/1_ 0.000120.00.000.00 134.122.63.192http/1.1 11-1703118921/2/2C 0.000141.40.000.00 134.122.34.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 5subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 295 seconds, (range: 293...298)index usage: 0%, cache usage: 0%total entries stored since starting: 5total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 23 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 17:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c576e0b4ff5Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 14:37:50 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 10 hours 35 minutes 39 seconds Server load: 1.72 1.09 1.19 Total accesses: 89939 - Total Traffic: 1.3 GB - Total Duration: 139060616 CPU Usage: u2667.89 s5037.33 cu50089800 cs12284000 - 164000% CPU load 2.36 requests/sec - 35.9 kB/second - 15.2 kB/request - 1546.17 ms/request 8 requests currently being processed, 7 idle workers WW____W_WW_WWC_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685136380/19/7310W 6.92260109438880.00.1598.10 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 1-1685135800/38/7048W 10.75270106241770.00.19102.75 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1694072243.42863011360168457031 2-1685134660/71/6896_ 28.5400107750010.00.4787.07 178.62.3.65http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-1685136470/24/6608_ 6.8512104348640.00.2487.11 172.70.90.108http/1.1www.altaccount.com:80POST /xmlrpc.php HTTP/1.0 4-1685134730/74/6566_ 27.6201399722760.00.8686.24 178.62.3.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1685135870/43/6215_ 18.46042293113200.00.3588.57 159.203.94.228http/1.1www.tspaccount.net:443GET /.DS_Store HTTP/1.1 6-1685135890/39/6039W 16.990089897230.00.4384.53 178.62.3.65http/1.1localhost:443GET /server-status HTTP/1.1 7-1685136040/41/6330_ 11.490196076320.00.22100.43 178.62.3.65http/1.1localhost:443GET /about HTTP/1.1 8-1685136240/28/5934W 9.990098981290.00.2085.93 172.68.10.154http/1.1www.anumotanaboon.com:443GET /%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B9%80%E0%B8%AA%E0%B8%A3%E0% 9-1685137090/4/5947W 2.2116087909520.00.0291.18 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 10-1685137330/2/4947_ 0.85138175738510.00.0282.74 159.203.94.228http/1.1www.tspaccount.net:443GET /login.action HTTP/1.1 11-1685137430/1/4473W 0.006068476610.00.0078.69 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 12-1685137530/1/3895W 0.330060066880.00.0153.49 159.203.94.228http/1.1www.tspaccount.net:443GET /.env HTTP/1.1 13-1685137621/1/3620C 0.000256892211.40.0094.36 178.62.3.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1685137680/1/2635_ 0.000443249130.00.0034.26 172.71.98.221http/1.1www.orderaccounting.com:80POST /xmlrpc.php HTTP/1.0 15-1685-0/0/2268. 0.001138139930090.00.0033.02 185.220.101.60http/1.1www.uniqueworkthailand.com:443POST /xmlrpc.php HTTP/1.1 16-1685-0/0/1091. 0.002382020448370.00.0015.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/707. 0.00204619116270.00.0013.17 172.71.114.131http/1.1www.biz9nar.com:80POST /xmlrpc.php HTTP/1.0 18-1685-0/0/339. 0.00201906612700.00.003.13 68.178.151.138http/1.1www.chonlateevip.com:80POST /xmlrpc.php HTTP/1.0 19-1685-0/0/261. 0.00202903724250.00.002.39 69.163.162.4http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 20-1685-0/0/137. 0.00549701953360.00.001.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/186. 0.00566803156990.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/198. 0.00564803504330.00.002.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1685-0/0/143. 0.00541801843480.00.002.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/40. 0.0056670480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/6. 0.00566602870.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/93. 0.00519601895550.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0035641011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0035643012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.003563909920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0035654010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 209subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 40 seconds, (range: 1...130)index usage: 7%, cache usage: 9%total entries stored since starting: 13040total entries replaced since starting: 0total entries expired since starting: 12831total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 186 hit, 20556 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 07:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57220427ecApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 00:24:02 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 9 hours 47 seconds Server load: 3.55 3.10 3.73 Total accesses: 107869 - Total Traffic: 969.4 MB - Total Duration: 200473900 CPU Usage: u2879.94 s5047.04 cu49711700 cs12198900 - 191000% CPU load 3.32 requests/sec - 30.6 kB/second - 9.2 kB/request - 1858.49 ms/request 12 requests currently being processed, 6 idle workers __WCWW__W__WWWCWWW................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674136320/42/7638_ 20.89056123923300.00.2572.34 162.158.170.21http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-content/themes/sydney/fonts/fontawesome-webfont.woff2?v 1-1674135830/40/7554_ 25.2701585121977780.00.1674.15 172.68.234.205http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693761840.35784411430358886718 2-1674138180/23/7592W 13.5010121710880.00.0367.58 172.68.234.178http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693761840.6803 HTTP/1.0 3-1674130561/87/7388C 43.7100115559201.40.7970.48 161.35.190.56http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1674131750/76/7218W 40.1000118466510.00.4077.20 172.68.234.141http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693761841.79693007469177246093 5-1674137770/28/6990W 12.9200112976000.00.2067.42 172.68.234.205http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693761841.7264 HTTP/1.0 6-1674132480/74/6633_ 38.57041107979590.00.5662.29 162.158.170.216http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-content/plugins/so-widgets-bundle/icons/elegantline/fon 7-1674138300/23/6506_ 13.76042106299240.00.0857.01 162.158.170.148http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-content/themes/sydney/js/scripts.js?ver=5.7.9 HTTP/1.1 8-1674132650/71/6282W 41.1010104606770.00.3455.39 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693761840.49642109870910644531 9-1674132770/73/6341_ 40.8701535107206290.00.2574.48 172.68.234.205http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693761840.18720006942749023437 10-1674135850/40/5857_ 23.3408397263240.00.2965.76 162.158.171.24http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /wp-content/plugins/so-widgets-bundle/icons/fontawesome/web 11-1674132830/72/5347W 37.250090649470.00.4642.47 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693761841.9161 HTTP/1.0 12-1674136410/37/4953W 21.810088967580.00.1142.17 172.68.234.204http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693761841.24155998229980468750 13-1674137900/25/3524W 14.730068903820.00.0425.51 172.68.234.139http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693761841.40837001800537109375 14-1674138321/21/3345C 13.5402733691969916.00.0741.25 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 15-1674136430/33/2494W 17.780053608240.00.2118.63 172.68.234.140http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693761841.0552 HTTP/1.0 16-1674138940/19/1603W 10.491040993180.00.038.63 172.68.234.178http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693761840.8692 HTTP/1.0 17-1674142070/4/1408W 0.030036592600.00.027.01 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 18-1674-0/0/1098. 0.00668162931038530.00.005.36 172.68.234.140http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693761171.12147307395935058593 19-1674-0/0/1003. 0.00689029778940.00.004.10 172.71.211.24http/1.1www.jrajar.com:80GET /xmlrpc.php HTTP/1.0 20-1674-0/0/665. 0.00684171821903600.00.002.42 172.68.234.202http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693761155.1676 HTTP/1.0 21-1674-0/0/639. 0.00714020624930.00.005.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1674-0/0/662. 0.00672164320582880.00.005.25 172.68.234.140http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693761166.932 HTTP/1.0 23-1674-0/0/521. 0.0049954417388520.00.001.70 172.68.234.124http/1.1www.chonlateecamping.com:80POST /wp-cron.php?doing_wp_cron=1693761341.63468098640441894531 24-1674-0/0/407. 0.00743114783580.00.001.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/408. 0.00737013729230.00.001.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1674-0/0/499. 0.00624017569860.00.001.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/597. 0.0066436719491060.00.002.48 172.68.234.215http/1.1www.jbbgarment.com:80POST /wp-cron.php?doing_wp_cron=1693761176.14163899421691894531 28-1674-0/0/388. 0.0052397913430650.00.002.24 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693761316.52178001403808593750 29-1674-0/0/264. 0.002250010118200.00.000.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/242. 0.00222709347090.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/218. 0.00226108681730.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1674-0/0/238. 0.00216009099800.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1674-0/0/257. 0.002177010218160.00.000.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/173. 0.00215906377810.00.000.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/100. 0.00785818455189810.00.000.20 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753980.5489 HTTP/1.0 36-1674-0/0/88. 0.00777904308510.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/118. 0.00772504782180.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1674-0/0/46. 0.00800202531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.00786327385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.00793003865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.00790904242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.00785904803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.00777215754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.00775619884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory
Found on 2023-09-03 17:22 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c570d39a79cApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 22:05:02 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 4 hours 17 minutes 2 seconds Server load: 2.70 3.46 3.70 Total accesses: 104939 - Total Traffic: 834.3 MB - Total Duration: 126454013 CPU Usage: u2754 s4942.85 cu48706300 cs11940600 - 393000% CPU load 6.8 requests/sec - 55.4 kB/second - 8.1 kB/request - 1205.02 ms/request 9 requests currently being processed, 6 idle workers CW_CRRCR_____WW................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1652221051/75/6779C 43.391080525331.40.4153.21 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1652222940/16/6656W 8.910079934990.00.1261.13 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 2-1652222210/35/6554_ 26.39057577913680.00.2453.33 172.173.110.210http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 3-1652220801/91/6425C 51.92064677853833.80.4848.04 162.158.175.53http/1.1www.chonlateeplus.com:443POST //xmlrpc.php HTTP/1.1 4-1652220930/74/6515R 46.86149676900230.00.4549.45 172.70.85.21http/1.1 5-1652222030/38/6245R 23.671131274540650.00.2847.24 172.71.166.59http/1.1www.chonlateeauto.com:443 6-1652221431/60/6126C 36.96160473133755.90.4145.22 170.81.229.126http/1.1www.spamechanicssystem.com:443GET /xmlrpc.php HTTP/1.1 7-1652223060/11/6303R 9.111112574640370.00.2145.58 172.173.110.210http/1.1www.leadingservice.co.th:443 8-1652223530/2/6071_ 1.46098971630910.00.0245.98 172.71.166.58http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 9-1652222120/37/5757_ 24.64152569309960.00.2748.38 172.173.110.210http/1.1www.leadingservice.co.th:443POST //xmlrpc.php HTTP/1.1 10-1652223380/10/5641_ 5.07134368735360.00.0656.50 52.167.144.137http/1.1www.pndintertrade.com:443GET /wp-sitemap-taxonomies-category-1.xml HTTP/1.1 11-1652222670/20/5335_ 11.81060762462840.00.1343.32 172.70.162.212http/1.1www.rooffurnish.com:443GET /author/admin/ HTTP/1.1 12-1652223210/13/4978_ 11.19042859656650.00.0337.93 172.173.117.242http/1.1www.ozonepluswater.net:443POST //wp-login.php HTTP/1.1 13-1652222740/17/4767W 11.770167157282370.00.1133.73 46.148.206.226http/1.1www.thaiquickservice.net:443GET / HTTP/1.0 14-1652223610/1/4708W 0.000056493230.00.0039.45 198.41.242.197http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 15-1652-0/0/3479. 0.00103041032640.00.0027.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1652-0/0/3519. 0.003638042170790.00.0025.81 172.173.117.242http/1.1www.ozonepluswater.net:443POST //wp-login.php HTTP/1.1 17-1652-0/0/2852. 0.00562033989920.00.0021.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1652-0/0/1806. 0.0041994721895910.00.0015.16 172.71.166.59http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 19-1652-0/0/1019. 0.00602212453000.00.009.99 172.70.42.6http/1.1www.chonlateecamping.com:80GET //.well-known/index.php HTTP/1.0 20-1652-0/0/723. 0.0064109755770.00.006.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1652-0/0/431. 0.0063306709710.00.004.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1652-0/0/197. 0.0054903602060.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1652-0/0/236. 0.004095153586960.00.001.81 162.158.175.53http/1.1www.chonlateeplus.com:443POST //xmlrpc.php HTTP/1.1 24-1652-0/0/170. 0.004149463070160.00.000.95 198.41.242.196http/1.1www.chonlateecoffee.com:80POST //xmlrpc.php HTTP/1.0 25-1652-0/0/237. 0.0042903635010.00.001.06 104.248.94.25http/1.1www.pokaorganize.com:80POST /xmlrpc.php HTTP/1.0 26-1652-0/0/174. 0.0050303130330.00.001.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1652-0/0/180. 0.004123282878920.00.001.02 172.173.117.242http/1.1www.ozonepluswater.net:443POST //wp-login.php HTTP/1.1 28-1652-0/0/47. 0.001115301000020.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/114. 0.001102411983960.00.000.70 194.169.175.26http/1.1www.dtacbusiness.com:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.0 30-1652-0/0/3. 0.0012722080530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1652-0/0/11. 0.0012721092740.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1652-0/0/37. 0.00126660566180.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1652-0/0/60. 0.00126480565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.00126460696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.00126420719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.00126970349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.00125004061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.00127177143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.00126730530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.00126990257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.00127050208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.00127110142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.00126760543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.00125374221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.00126870415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.00124977931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.001250910251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.00124889421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.00127160109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all
Found on 2023-08-31 15:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57c0fef916Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 29-Aug-2023 06:16:23 +07 Restart Time: Tuesday, 29-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1638 Parent Server MPM Generation: 1637 Server uptime: 2 hours 14 minutes 9 seconds Server load: 3.67 3.24 3.22 Total accesses: 54808 - Total Traffic: 441.1 MB - Total Duration: 68970788 CPU Usage: u2738.45 s4847.9 cu47527700 cs11628700 - 735000% CPU load 6.81 requests/sec - 56.1 kB/second - 8.2 kB/request - 1258.41 ms/request 9 requests currently being processed, 4 idle workers CW.__CWCW...RW.._R._.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1637253311/4/3467C 2.910899437425214.10.0428.03 104.43.165.99http/1.1www.siamsolarrooftop.com:443POST //wp-login.php HTTP/1.1 1-1637251790/69/3497W 36.230043670180.00.4727.55 162.158.175.53http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 2-1637-0/0/3354. 0.001041944020.00.0025.68 159.203.94.228http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1637252140/43/3213_ 22.84029340431720.00.3123.92 35.219.66.183http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 4-1637252910/24/3167_ 10.87069839813280.00.5124.33 138.199.29.141http/1.1www.chonlateebusiness.com:443POST //xmlrpc.php HTTP/1.1 5-1637253021/16/3138C 7.710040201531.40.0824.73 159.203.94.228http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1637253380/5/3192W 1.660040187310.00.0524.77 185.220.100.254http/1.1www.ozonepluswater.net:443POST /xmlrpc.php HTTP/1.1 7-1637252401/38/3072C 19.06046939127485.80.2924.94 31.220.62.90http/1.1www.nadapool.com:443GET /xmlrpc.php HTTP/1.1 8-1637253400/6/3205W 1.210039457930.00.1026.82 159.203.94.228http/1.1localhost:443GET /server-status HTTP/1.1 9-1637-0/0/2866. 0.0088035645510.00.0022.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1637-0/0/2841. 0.0011145935596790.00.0022.63 172.173.94.217http/1.1www.hotlineservicethailand.com:POST //xmlrpc.php HTTP/1.1 11-1637-0/0/2547. 0.00209032420230.00.0021.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1637251080/84/2502R 42.8501030927710.00.5720.34 40.122.173.134http/1.1www.chonlateedesign.com:443 13-1637251140/93/2394W 41.780030085740.00.6619.51 172.173.94.217http/1.1www.hotlineservicethailand.com:POST //xmlrpc.php HTTP/1.1 14-1637-0/0/2333. 0.00166029559410.00.0019.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1637-0/0/1938. 0.00206024632170.00.0014.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1637251260/86/1974_ 45.85073324132550.00.9615.66 40.122.173.134http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 17-1637251280/89/1741R 43.9201422057220.00.8814.01 138.199.29.141http/1.1www.chonlateebusiness.com:443 18-1637-0/0/1266. 0.009017068640.00.0010.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1637251400/95/898_ 44.63041811330300.01.737.84 23.97.205.210http/1.1www.focusfilmthailand.com:80POST /wp-login.php HTTP/1.0 20-1637-0/0/556. 0.004625206875420.00.003.87 27.254.96.168http/1.1www.smtts.co.th:443POST /wp-cron.php?doing_wp_cron=1693264119.51109409332275390625 21-1637-0/0/260. 0.00140403162520.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1637-0/0/473. 0.00141106136220.00.003.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1637-0/0/217. 0.00197602660720.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1637-0/0/224. 0.0018866142797940.00.001.98 172.71.166.31http/1.1www.siamautomation.com:443POST //wp-login.php HTTP/1.1 25-1637-0/0/203. 0.0018764142462110.00.001.85 142.93.96.84http/1.1www.pokaorganize.com:443GET /xmlrpc.php HTTP/1.1 26-1637-0/0/171. 0.00208802254790.00.005.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1637-0/0/99. 0.0046577031325790.00.000.64 40.122.173.134http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 125subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 83 seconds, (range: 6...232)index usage: 4%, cache usage: 5%total entries stored since starting: 3298total entries replaced since starting: 0total entries expired since starting: 3173total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 17359 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-28 23:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5755e08bf4Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 28-Aug-2023 04:16:58 +07 Restart Time: Monday, 28-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1633 Parent Server MPM Generation: 1632 Server uptime: 14 minutes 44 seconds Server load: 5.49 5.62 5.09 Total accesses: 7161 - Total Traffic: 40.1 MB - Total Duration: 9483952 CPU Usage: u2767.37 s4832.58 cu47175300 cs11540400 - 6640000% CPU load 8.1 requests/sec - 46.4 kB/second - 5.7 kB/request - 1324.39 ms/request 11 requests currently being processed, 5 idle workers CCCCC_C_W_W__.W.WW................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-163217141/7/411C 3.44049455617614.60.032.31 23.99.195.226http/1.1www.spamechanicssystem.com:443POST //wp-login.php HTTP/1.1 1-163216671/22/415C 12.35005645971.40.082.27 139.59.65.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-163216121/39/433C 22.00005282851.30.192.26 139.59.65.144http/1.1localhost:443GET /about HTTP/1.1 3-163215121/80/417C 47.85005433512.70.322.35 139.59.65.144http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-163217361/2/398C 2.230213559805029.90.032.24 172.71.166.163http/1.1www.siamautomation.com:443GET / HTTP/1.1 5-163215270/78/412_ 44.3504625045560.00.342.24 162.158.175.72http/1.1www.altaccount.com:80POST //wp-login.php HTTP/1.0 6-163216741/21/419C 12.0405955552503.80.072.04 172.69.67.40http/1.1www.chonlateebranding.com:443POST //xmlrpc.php HTTP/1.1 7-163215650/53/381_ 30.42005095020.00.252.05 139.59.65.144http/1.1localhost:443GET /v2/_catalog HTTP/1.1 8-163215180/77/401W 46.82005315330.00.412.18 74.249.250.179http/1.1www.thefixup333.com:443POST //wp-login.php HTTP/1.1 9-163216190/39/379_ 22.8705305119260.00.181.93 162.158.175.35http/1.1www.siamerp.com:443POST //wp-login.php HTTP/1.1 10-163215350/67/382W 40.21005292940.00.321.99 209.97.169.60http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.0 11-163216790/19/386_ 10.8506115004190.00.072.73 209.97.169.60http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.0 12-163217430/0/352_ 0.0003744594960.00.002.58 162.158.175.72http/1.1www.altaccount.com:80POST //wp-login.php HTTP/1.0 13-1632-0/0/350. 0.003810474509330.00.002.03 172.69.64.232http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 14-163215410/72/197W 41.18002598810.00.400.94 139.59.65.144http/1.1localhost:443GET /server-status HTTP/1.1 15-1632-0/0/229. 0.00338813014040.00.001.19 172.69.64.232http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 16-163216200/31/156W 18.80001943920.00.201.04 172.68.146.52http/1.1www.torrong.co.th:80POST //xmlrpc.php HTTP/1.0 17-163216340/35/232W 18.82003072620.00.181.13 172.69.64.232http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 18-1632-0/0/289. 0.002078263814430.00.001.77 172.69.64.232http/1.1www.jrajar.com:80POST //xmlrpc.php HTTP/1.0 19-1632-0/0/224. 0.0033603120930.00.001.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1632-0/0/98. 0.002118251266630.00.000.56 74.249.250.179http/1.1www.thefixup333.com:443POST //wp-login.php HTTP/1.1 21-1632-0/0/100. 0.0021001194340.00.000.51 159.203.86.52http/1.1www.nakindogtraining.com:80GET /wp-login.php HTTP/1.0 22-1632-0/0/100. 0.002006171379990.00.000.44 209.97.169.60http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 102subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 59 seconds, (range: 0...293)index usage: 3%, cache usage: 4%total entries stored since starting: 337total entries replaced since starting: 0total entries expired since starting: 235total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 10 hit, 1469 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-27 21:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5749d27c82Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 26-Aug-2023 22:00:27 +07 Restart Time: Saturday, 26-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1627 Parent Server MPM Generation: 1626 Server uptime: 17 hours 58 minutes 15 seconds Server load: 1.18 1.43 1.28 Total accesses: 144427 - Total Traffic: 1.8 GB - Total Duration: 202426043 CPU Usage: u2723.2 s4791.36 cu46997200 cs11499100 - 90400% CPU load 2.23 requests/sec - 29.6 kB/second - 13.3 kB/request - 1401.58 ms/request 5 requests currently being processed, 6 idle workers ___W_WRW__..C..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1626275390/91/12031_ 49.5600163688180.00.67159.78 206.81.1.88http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1626277750/34/11879_ 20.7911557168615190.00.25113.00 213.152.187.235http/1.1www.wealneosupply.com:443POST /xmlrpc.php HTTP/1.1 2-1626278010/29/12024_ 17.740551161703450.00.23169.44 157.90.136.242http/1.1www.focusfilmthailand.com:443GET /wp-content/themes/seotheme/about.php HTTP/1.1 3-1626276040/69/11276W 42.3520159809110.00.61129.15 27.254.96.168http/1.1www.wealneosupply.com:443POST /wp-cron.php?doing_wp_cron=1693062025.24112010002136230468 4-1626275450/87/11434_ 46.1810162128700.00.60126.05 167.94.146.51http/1.1 5-1626279220/0/10690W 0.0000150532310.00.00161.95 157.90.136.242http/1.1www.focusfilmthailand.com:443GET /wp-content/themes/seotheme/about.php.suspected HTTP/1.1 6-1626278610/12/10280R 6.6710145307910.00.1096.44 89.187.168.89http/1.1 7-1626278910/6/10309W 3.1300144937900.00.05103.97 206.81.1.88http/1.1localhost:443GET /server-status HTTP/1.1 8-1626276900/63/9543_ 36.0601465132348420.00.54112.76 162.158.86.65http/1.1www.anumotanaboon.com:443GET / HTTP/1.1 9-1626275460/94/8886_ 52.880839126942840.00.73144.39 89.187.168.89http/1.1www.mkandptfoods.com:443GET /wp-content/themes/corporate_works/downloader.php?file_down 10-1626-0/0/8109. 0.003350109590160.00.0088.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1626-0/0/7107. 0.0055465100582240.00.00138.28 157.90.136.242http/1.1www.focusfilmthailand.com:443GET /votes.php.suspected HTTP/1.1 12-1626276101/74/5790C 41.510079863172.50.4853.55 167.94.146.51http/1.1localhost:443GET /favicon.ico HTTP/1.1 13-1626-0/0/4061. 0.0097359658944680.00.0049.22 172.70.223.165http/1.1www.siamerp.com:443POST //xmlrpc.php HTTP/1.1 14-1626-0/0/3628. 0.0084058853203900.00.0047.96 77.222.61.114http/1.1www.ltclevelup.com:443POST /xmlrpc.php HTTP/1.1 15-1626-0/0/2347. 0.001077031577690.00.0085.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1626-0/0/1003. 0.001394017846050.00.0053.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1626-0/0/1039. 0.004437013444110.00.0014.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1626-0/0/379. 0.00475105761810.00.003.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1626-0/0/307. 0.00426710894191120.00.003.67 5.188.62.76http/1.1www.chonlateenextbiz.com:443POST /wp-login.php?wp_lang=en_US HTTP/1.1 20-1626-0/0/431. 0.00473306021020.00.004.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1626-0/0/176. 0.00815802516930.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1626-0/0/271. 0.0075564293548110.00.001.99 8.210.247.187http/1.1www.importantaccount.com:443POST /xmlrpc.php HTTP/1.1 23-1626-0/0/274. 0.00756504235470.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1626-0/0/13. 0.00112770174970.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1626-0/0/71. 0.00112140929490.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1626-0/0/153. 0.002611402080320.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1626-0/0/7. 0.0026334091830.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1626-0/0/192. 0.00258904373482740.00.001.48 162.158.74.96http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 29-1626-0/0/101. 0.00259303371333070.00.000.94 193.106.249.135http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 30-1626-0/0/4. 0.0026351044850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1626-0/0/100. 0.002634401357680.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1626-0/0/100. 0.002632601364570.00.000.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1626-0/0/25. 0.00262500387720.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1626-0/0/100. 0.002635601554710.00.000.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1626-0/0/4. 0.0026355042980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1626-0/0/100. 0.002634301590540.00.001.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1626-0/0/5. 0.0026348015270.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1626-0/0/99. 0.002634201387810.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1626-0/0/15. 0.00262920291650.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1626-0/0/3. 0.0026341038430.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1626-0/0/57. 0.00260970711000.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1626-0/0/4. 0.0026336040110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 351subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 36 seconds, (range: 0...182)index usage: 12%, cache usage: 16%total entries stored since starting: 25197total entries replaced since starting: 0total entries expired since starting: 24846total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 187 hit, 39546 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-26 14:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c576cad72a6Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 25-Aug-2023 15:48:55 +07 Restart Time: Friday, 25-Aug-2023 04:02:14 +07 Parent Server Config. Generation: 1624 Parent Server MPM Generation: 1623 Server uptime: 11 hours 46 minutes 41 seconds Server load: 1.57 1.49 2.06 Total accesses: 120513 - Total Traffic: 1.5 GB - Total Duration: 178007350 CPU Usage: u2622.51 s4754.65 cu46871800 cs11469100 - 138000% CPU load 2.84 requests/sec - 38.1 kB/second - 13.4 kB/request - 1477.08 ms/request 9 requests currently being processed, 3 idle workers WC_CW.._.R_.WWW.W................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1623102840/58/9359W 31.9700136931700.00.3899.77 172.69.214.222http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 1-1623102161/56/9273C 32.0801134823661.40.48174.52 161.35.190.56http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1623104500/21/9164_ 13.1801670133762690.00.14110.86 162.158.86.105http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 3-1623105071/8/8781C 5.390535130229537.20.06155.69 52.176.98.184http/1.1www.nakindogtraining.com:443POST //xmlrpc.php HTTP/1.1 4-1623105690/1/8455W 0.6510126679510.00.01103.04 172.68.234.174http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1692953334.65510606765747070312 5-1623-0/0/8723. 0.0031547128235380.00.0096.10 37.1.219.226http/1.1www.plastandtrans.com:443GET /data.php.suspected HTTP/1.1 6-1623-0/0/8608. 0.00320123162710.00.0086.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1623102270/68/8323_ 34.630350124478420.01.8278.81 172.71.210.172http/1.1www.smetast.com:80GET / HTTP/1.0 8-1623-0/0/8000. 0.00310116906840.00.0089.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1623101390/75/7452R 43.1720528106577260.00.6570.53 129.211.124.173http/1.1 10-1623103920/38/6991_ 21.3811102233510.00.2491.89 161.35.190.56http/1.1localhost:443GET /v2/_catalog HTTP/1.1 11-1623-0/0/6339. 0.0028097140790.00.0066.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1623105190/7/4975W 4.090073873470.00.0755.80 37.1.219.226http/1.1www.plastandtrans.com:443GET /tool.php HTTP/1.1 13-1623105330/7/4344W 4.500063274700.00.0747.65 52.176.98.184http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 14-1623105390/8/3173W 3.920042517070.00.1740.25 172.68.234.167http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 15-1623-0/0/2386. 0.0033035760470.00.0029.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1623105510/6/2217W 4.250031686240.00.0437.60 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 17-1623-0/0/1422. 0.001113021150240.00.0017.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1623-0/0/544. 0.0010777426479500.00.008.29 144.126.202.105http/1.1 19-1623-0/0/96. 0.00118701403020.00.001.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1623-0/0/299. 0.009574234145130.00.002.45 142.93.12.220http/1.1www.pennungmarket.com:443GET /wp-content/plugins/wp-pimple/class.php.suspected?wall=dmFy 21-1623-0/0/299. 0.001379704320610.00.003.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1623-0/0/109. 0.00131552958632670.00.0047.01 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 23-1623-0/0/206. 0.001379402767690.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1623-0/0/11. 0.0013806054660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1623-0/0/258. 0.001380203998830.00.002.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1623-0/0/52. 0.001359801451750.00.000.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1623-0/0/57. 0.001341801534020.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1623-0/0/9. 0.00137790143050.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1623-0/0/99. 0.001378901467630.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1623-0/0/8. 0.0013786077360.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1623-0/0/101. 0.00133242821083740.00.000.70 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 32-1623-0/0/7. 0.0013770051430.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1623-0/0/99. 0.001331012671338230.00.000.72 162.158.204.201http/1.1www.khlangkaew.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 34-1623-0/0/13. 0.00137740130570.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1623-0/0/101. 0.00133247431493350.00.001.39 172.70.243.123http/1.1www.proplustech.co.th:443POST //xmlrpc.php HTTP/1.1 36-1623-0/0/7. 0.0013787056410.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1623-0/0/5. 0.0013781012380.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1623-0/0/4. 0.0013807016770.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1623-0/0/7. 0.0013792060070.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1623-0/0/5. 0.001378206570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1623-0/0/99. 0.00132872422099250.00.001.65 146.190.93.191http/1.1www.eecbusiness.com:80POST //xmlrpc.php HTTP/1.0 42-1623-0/0/4. 0.0013775079130.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1623-0/0/2. 0.0013801017500.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1623-0/0/4. 0.0013776052890.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1623-0/0/4. 0.0013777056260.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1623-0/0/9. 0.001341507476510.00.0045.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1623-0/0/3. 0.0013783044010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1623-0/0/5. 0.0013772073100.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1623-0/0/2. 0.0013800024990.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection
Found on 2023-08-25 08:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c573072109dApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 24-Aug-2023 16:41:59 +07 Restart Time: Thursday, 24-Aug-2023 04:02:11 +07 Parent Server Config. Generation: 1621 Parent Server MPM Generation: 1620 Server uptime: 12 hours 39 minutes 48 seconds Server load: 1.68 2.07 1.98 Total accesses: 145224 - Total Traffic: 1.8 GB - Total Duration: 211264405 CPU Usage: u2635.91 s4742.96 cu46758900 cs11443500 - 128000% CPU load 3.19 requests/sec - 42.0 kB/second - 13.2 kB/request - 1454.75 ms/request 5 requests currently being processed, 6 idle workers __CW_._W.W_W_..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-162081470/91/11291_ 38.100492162569730.00.99115.02 172.71.135.78http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 1-162081720/76/11040_ 38.3800163740370.01.80124.60 165.232.76.155http/1.1localhost:443GET /v2/_catalog HTTP/1.1 2-162083801/16/10807C 7.2200156820261.40.22119.85 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-162083130/39/10787W 20.3600153847560.00.65133.01 124.120.218.205http/1.1www.cnb.co.th:443POST /wp-admin/admin-ajax.php HTTP/1.1 4-162083360/29/10573_ 12.000659153500970.02.11135.01 172.68.234.228http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81 5-1620-0/0/10460. 0.00221388151423780.00.00175.27 172.68.234.197http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 6-162083950/19/9503_ 5.8201525138512160.00.11137.91 172.71.135.91http/1.1www.thaidocuments.com:80GET /wp-content/themes/generatepress/footer2.php?2344 HTTP/1.0 7-162084060/15/9156W 3.8610130940760.00.09153.33 172.68.234.168http/1.1www.thaidocuments.com:80POST /wp-cron.php?doing_wp_cron=1692870118.54041790962219238281 8-1620-0/0/9324. 0.00150132431680.00.00153.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-162082290/67/8897W 31.0900132384140.03.1384.82 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 10-162082750/54/8123_ 26.5300118463510.00.90135.02 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 11-162082620/57/6976W 31.0300102742720.00.9773.41 172.68.234.140http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B8%AB%E0%B8%99%E0%B8%B1 12-162084270/7/6610_ 3.7400100171060.00.0573.24 165.232.76.155http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 13-1620-0/0/4888. 0.00256069773320.00.0054.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1620-0/0/3991. 0.00257053975830.00.0038.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1620-0/0/3567. 0.00313054106610.00.0044.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1620-0/0/2307. 0.00197032824820.00.0038.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1620-0/0/1862. 0.0039127305230.00.0017.34 205.169.39.139http/1.1www.nakindogtraining.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a 18-1620-0/0/751. 0.00209417719802050.00.009.20 124.120.218.205http/1.1www.cnb.co.th:443GET /wp-admin/admin-ajax.php?_panelsnonce=21464c964d&action=so_ 19-1620-0/0/720. 0.002123104111783150.00.006.52 172.70.90.246http/1.1www.chonlateecoffee.com:80POST /xmlrpc.php HTTP/1.0 20-1620-0/0/481. 0.00236606995120.00.007.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1620-0/0/207. 0.00229002983270.00.002.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1620-0/0/249. 0.00237404497850.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1620-0/0/59. 0.0023780869440.00.004.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1620-0/0/217. 0.00235302370240.00.001.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1620-0/0/41. 0.0023730677220.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1620-0/0/45. 0.0053490741510.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1620-0/0/143. 0.00534802091270.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1620-0/0/295. 0.00521504403930.00.003.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1620-0/0/21. 0.0054330416100.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1620-0/0/21. 0.0054610486250.00.001.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1620-0/0/124. 0.00541101787180.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1620-0/0/17. 0.0054340346470.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1620-0/0/170. 0.00545403280050.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1620-0/0/113. 0.00545301720760.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1620-0/0/20. 0.0054290347420.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1620-0/0/16. 0.0054380370370.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1620-0/0/115. 0.00545601534960.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1620-0/0/156. 0.00540802050370.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1620-0/0/209. 0.00541402869090.00.001.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1620-0/0/36. 0.0054520698300.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1620-0/0/213. 0.00543603712390.00.001.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1620-0/0/90. 0.00544001340380.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1620-0/0/106. 0.00541802337720.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1620-0/0/100. 0.00545101321280.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1620-0/0/100. 0.00509110011620700.00.002.18 172.177.232.193http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 46-1620-0/0/40. 0.0054410721870.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1620-0/0/67. 0.00522001161070.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1620-0/0/13. 0.0054320259300.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1620-0/0/107. 0.00546001512200.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milli
Found on 2023-08-24 09:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57a287bbc6Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 23-Aug-2023 12:36:05 +07 Restart Time: Wednesday, 23-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1618 Parent Server MPM Generation: 1617 Server uptime: 8 hours 33 minutes 53 seconds Server load: 3.66 3.02 2.79 Total accesses: 114970 - Total Traffic: 2.0 GB - Total Duration: 175326852 CPU Usage: u2668.8 s4727.6 cu46563300 cs11396400 - 188000% CPU load 3.73 requests/sec - 68.9 kB/second - 18.5 kB/request - 1524.98 ms/request 4 requests currently being processed, 7 idle workers _._W___..C.....WW__............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1617325410/51/8842_ 57.571599133943130.00.57148.59 52.165.25.155http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.0 1-1617-0/0/8454. 0.00250127815200.00.00164.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1617326400/29/8417_ 19.061717126692840.00.24126.28 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 3-1617327400/23/8236W 11.1400120901980.00.20105.62 192.53.126.23http/1.1localhost:443GET /server-status HTTP/1.1 4-1617325960/39/8256_ 21.020743120972990.00.25135.61 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 5-1617327420/24/8169_ 10.7710123622580.00.26140.93 192.53.126.23http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-1617325810/45/7554_ 52.0900113056560.00.33100.59 192.53.126.23http/1.1localhost:443GET /about HTTP/1.1 7-1617-0/0/7307. 0.00140109477170.00.00140.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1617-0/0/6957. 0.00290110955090.00.00108.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1617327631/19/6701C 9.1800106460591.40.0899.31 192.53.126.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1617-0/0/5982. 0.001869590942500.00.00117.69 162.158.95.32http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 11-1617-0/0/5694. 0.0022083827540.00.00110.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1617-0/0/5435. 0.0023079246680.00.0097.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1617-0/0/4105. 0.002065238930.00.0058.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1617-0/0/3426. 0.0032051962990.00.0040.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1617324890/62/2606W 58.170041894020.03.2548.88 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 16-16173130/19/2126W 9.170034410760.00.2633.86 52.165.25.155http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.0 17-16173230/20/1666_ 7.071125567780.00.2533.28 192.53.126.23http/1.1localhost:443GET /v2/_catalog HTTP/1.1 18-16173290/19/1058_ 7.52067014758660.00.1520.31 52.165.25.155http/1.1www.xn--12cacvb1pma4c0b3jmdh.coPOST /xmlrpc.php HTTP/1.0 19-1617-0/0/731. 0.001500011751310.00.0013.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1617-0/0/422. 0.00149205679440.00.004.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1617-0/0/267. 0.00150604227440.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1617-0/0/227. 0.003706133500510.00.002.37 172.68.189.147http/1.1www.chonlateecoffee.com:80GET /wp-content/uploads/2020/05/discount-covid-19-768x186.jpg H 23-1617-0/0/138. 0.0037085662359330.00.001.16 172.71.170.68http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 24-1617-0/0/106. 0.00603801818290.00.001.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1617-0/0/209. 0.0057564653847680.00.00195.19 23.128.248.31http/1.1www.pokaorganize.com:443POST /xmlrpc.php HTTP/1.1 26-1617-0/0/26. 0.0060300835950.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1617-0/0/60. 0.00604801211280.00.000.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1617-0/0/21. 0.0060440818080.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1617-0/0/236. 0.0057007095059360.00.007.32 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 30-1617-0/0/174. 0.0057416033578820.00.001.25 128.199.178.187http/1.1www.summer-techthai.com:443POST //xmlrpc.php HTTP/1.1 31-1617-0/0/36. 0.0060070923430.00.000.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1617-0/0/55. 0.00604901218490.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1617-0/0/25. 0.0060420840020.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1617-0/0/107. 0.00599601848420.00.001.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1617-0/0/81. 0.00587702114220.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1617-0/0/198. 0.00603703069830.00.002.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1617-0/0/145. 0.0057706982460780.00.001.22 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 38-1617-0/0/17. 0.0060460723980.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1617-0/0/113. 0.00603101897280.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1617-0/0/146. 0.00600902309170.00.001.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1617-0/0/125. 0.00605401699080.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1617-0/0/22. 0.0060470792060.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1617-0/0/116. 0.00602902573190.00.000.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1617-0/0/12. 0.0060530525780.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1617-0/0/23. 0.0060340597740.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1617-0/0/107. 0.00603501643860.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1617-0/0/10. 0.0092980482090.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1617-0/0/13. 0.0092810549400.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1617-0/0/11. 0.0093090564000.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child<
Found on 2023-08-23 05:34 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5787f854e5Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 21-Aug-2023 19:27:30 +07 Restart Time: Monday, 21-Aug-2023 14:17:12 +07 Parent Server Config. Generation: 1612 Parent Server MPM Generation: 1611 Server uptime: 5 hours 10 minutes 17 seconds Server load: 5.85 5.72 5.16 Total accesses: 131861 - Total Traffic: 1.2 GB - Total Duration: 155101476 CPU Usage: u2810.44 s4756.13 cu46289400 cs11327600 - 310000% CPU load 7.08 requests/sec - 69.8 kB/second - 9.9 kB/request - 1176.25 ms/request 11 requests currently being processed, 7 idle workers WW__RRW_.RCW.W____WW.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-161141990/11/9191W 8.4110107672170.00.1986.40 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 1-161142410/2/8845W 0.6100104420910.00.0079.02 108.162.227.92http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 2-161142480/1/8981_ 1.0901116103724390.00.0082.00 108.162.226.100http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 3-161140280/90/8576_ 65.240587102593970.00.5480.94 141.101.86.79http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 4-161140490/78/8543R 54.3701101707090.00.5467.74 141.98.102.235http/1.1www.dinocoffees.com:443 5-161140590/68/8226R 51.33098495671500.00.6180.03 40.77.28.77http/1.1www.ddkserviceandtransport.com: 6-161142180/6/8216W 5.580097089410.00.0598.51 139.59.182.142http/1.1localhost:443GET /server-status HTTP/1.1 7-161141220/50/7968_ 35.550094200070.00.4574.24 139.59.182.142http/1.1localhost:443GET /v2/_catalog HTTP/1.1 8-1611-0/0/7803. 0.001136192762690.00.0080.15 108.162.226.149http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 9-161142540/1/7422R 0.52154186816600.00.0070.42 185.220.100.245http/1.1www.chonlateedesign.com:443 10-161140211/84/7599C 66.380090484681.40.7668.12 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-161142600/0/6671W 0.000079320280.00.0053.19 172.70.246.61http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 12-1611-0/0/6370. 0.001126074701570.00.0076.53 108.162.226.101http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 13-161142660/0/5850W 0.000069349070.00.0053.76 108.162.226.100http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 14-161140430/76/4933_ 61.88055360163780.00.6844.31 40.77.28.77http/1.1www.ddkserviceandtransport.com:POST //xmlrpc.php HTTP/1.1 15-161140790/61/3827_ 54.440170747806410.00.7432.15 65.21.232.254http/1.1www.1smestartup.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 16-161141320/46/2780_ 34.410033522050.00.3638.01 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 17-161141460/45/2266_ 30.41087327151390.00.4220.96 173.236.176.131http/1.1www.dreamhightravel.com:443POST /wp-login.php HTTP/1.1 18-161142720/0/1998W 0.000023917970.00.0016.77 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1692620849.66109704971313476562 19-161142780/0/609W 0.00006727020.00.006.03 141.101.86.80http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 20-1611-0/0/541. 0.00109405197420.00.006.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1611-0/0/395. 0.00111103312590.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1611-0/0/662. 0.009676077025370.00.006.23 202.28.32.5http/1.1www.summer-techthai.com:443POST //xmlrpc.php HTTP/1.1 23-1611-0/0/364. 0.009632403568040.00.003.35 40.122.165.81http/1.1www.eecproject.com:80POST //wp-login.php HTTP/1.0 24-1611-0/0/348. 0.00102003167730.00.003.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1611-0/0/243. 0.0098502283090.00.001.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1611-0/0/192. 0.00109202021190.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1611-0/0/328. 0.00111403713160.00.003.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1611-0/0/246. 0.00110402432050.00.001.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1611-0/0/136. 0.0096111217810.00.001.14 212.60.12.87http/1.1www.siamsolarrooftop.com:443GET /wp-content/plugins/contact-form-7/includes/css/styles.css? 30-1611-0/0/266. 0.00108203013320.00.002.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1611-0/0/209. 0.009272012071240.00.001.42 40.122.165.81http/1.1www.eecbusiness.com:80POST //wp-login.php HTTP/1.0 32-1611-0/0/130. 0.00110101369300.00.001.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1611-0/0/148. 0.00111001685170.00.005.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1611-0/0/154. 0.00110201960660.00.002.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1611-0/0/22. 0.0010950140400.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1611-0/0/100. 0.0011130966630.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1611-0/0/153. 0.009638161246040.00.001.42 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 38-1611-0/0/138. 0.009607281375760.00.002.02 202.28.32.5http/1.1www.summer-techthai.com:443POST //xmlrpc.php HTTP/1.1 39-1611-0/0/71. 0.0011050837000.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1611-0/0/34. 0.0010980255410.00.001.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1611-0/0/77. 0.0010300695600.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1611-0/0/39. 0.0062240253090.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1611-0/0/41. 0.0062120305830.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1611-0/0/27. 0.0062370221680.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1611-0/0/44. 0.0062060435880.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1611-0/0/43. 0.0062210293110.00.001.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1611-0/0/24. 0.006223089750.00.000.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1611-0/0/11. 0.006230057130.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1611-0/0/1. 0.006242240.00.000.00 34.220.208.149http/1.1www.cnb.co.th:443GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/a SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSu
Found on 2023-08-21 12:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c574a7dbb37Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 19-Aug-2023 22:51:26 +07 Restart Time: Saturday, 19-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1601 Parent Server MPM Generation: 1600 Server uptime: 18 hours 49 minutes 13 seconds Server load: 5.54 5.73 5.05 Total accesses: 475436 - Total Traffic: 4.9 GB - Total Duration: 727623349 CPU Usage: u2848.46 s4727.5 cu45723800 cs11171400 - 84000% CPU load 7.02 requests/sec - 75.9 kB/second - 10.8 kB/request - 1530.43 ms/request 11 requests currently being processed, 6 idle workers __CWW_W_W_W_WWR..WW............................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1600230760/10/28886_ 6.400550434882340.00.03296.55 162.158.2.33http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 1-1600226990/89/28854_ 64.620915429970070.00.72297.57 172.71.250.135http/1.1www.anumotanaboon.com:443GET /.git/config HTTP/1.1 2-1600227971/64/28055C 45.9400428029521.40.47330.67 178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1600229640/35/27796W 22.6600415976360.00.26316.11 108.162.226.205http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 4-1600230170/24/27165W 13.3100404309600.00.16261.62 172.70.91.14http/1.1www.siamautomation.com:443GET /wp-admin/cloud.php HTTP/1.1 5-1600229730/31/26996_ 20.000704406659910.00.21285.30 108.162.226.204http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 6-1600229010/44/27350W 32.7900413754520.00.36282.41 159.203.86.52http/1.1www.thefixup333.com:443GET /wp-login.php HTTP/1.1 7-1600227720/70/26527_ 52.300802403258430.00.54271.26 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 8-1600229840/29/26055W 19.7100396449200.00.25310.87 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 9-1600230290/22/25266_ 14.240795384856650.00.17290.72 172.69.65.249http/1.1www.time2hand.com:80GET /wp-admin/css/colors/blue/uploader.php HTTP/1.0 10-1600228170/56/24379W 41.1600371334170.00.41245.53 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 11-1600228180/57/23604_ 41.080618358094830.00.35234.30 172.71.166.215http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 12-1600230940/4/22831W 2.4600351558130.00.02234.36 172.69.65.187http/1.1www.time2hand.com:80GET //wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog. 13-1600230450/20/21615W 13.8100324371100.00.12217.31 162.158.2.32http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 14-1600228330/59/19870R 40.621694308674680.00.39192.25 86.38.225.76http/1.1 15-1600-0/0/18779. 0.00500290393110.00.00181.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1600-0/0/15756. 0.0033863246026330.00.00199.54 172.69.65.249http/1.1www.time2hand.com:80GET //wp-content/themes/classic/inc/casper.php HTTP/1.0 17-1600228340/56/13251W 40.2300203993460.00.44127.99 178.62.73.12http/1.1localhost:443GET /server-status HTTP/1.1 18-1600226810/92/10473W 66.2000162703000.00.70125.02 172.71.166.12http/1.1www.chonlateecoffee.com:80GET //wp-admin/images/revision.php HTTP/1.0 19-1600-0/0/7767. 0.001050123364800.00.0070.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1600-0/0/6111. 0.001861996217540.00.0061.28 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 21-1600-0/0/4236. 0.0094069352690.00.0043.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1600-0/0/3487. 0.00523054956828240.00.0037.04 172.71.166.240http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 23-1600-0/0/2993. 0.005404050581900.00.0026.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1600-0/0/1950. 0.00522459433022470.00.0019.43 40.77.12.103http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 25-1600-0/0/1550. 0.005403027431110.00.0017.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1600-0/0/1024. 0.008814018020390.00.008.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1600-0/0/573. 0.008822010916890.00.005.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1600-0/0/253. 0.00880305349510.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1600-0/0/203. 0.00880504335330.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1600-0/0/193. 0.00882404186880.00.001.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1600-0/0/329. 0.00870705730970.00.007.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1600-0/0/137. 0.00881203147530.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1600-0/0/91. 0.00866001967430.00.003.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1600-0/0/141. 0.00881103233850.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1600-0/0/130. 0.00878802747280.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1600-0/0/27. 0.00882301364630.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1600-0/0/86. 0.00881702641510.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1600-0/0/40. 0.00881501572150.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1600-0/0/37. 0.00881601523990.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1600-0/0/113. 0.00870902530290.00.004.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1600-0/0/57. 0.00871001733960.00.004.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1600-0/0/37. 0.005154001431370.00.000.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1600-0/0/39. 0.005152501613950.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1600-0/0/29. 0.005157101232370.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1600-0/0/100. 0.00514129842442900.00.000.72 108.162.242.104http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 46-1600-0/0/37. 0.005151501507310.00.000.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1600-0/0/110. 0.00513777602580430.00.000.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 48-1600-0/0/23. 0.005157901163420.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1600-0/0/25. 0.005153301164760.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqM
Found on 2023-08-19 15:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c579b9ae316Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 18-Aug-2023 21:26:40 +07 Restart Time: Friday, 18-Aug-2023 04:02:12 +07 Parent Server Config. Generation: 1598 Parent Server MPM Generation: 1597 Server uptime: 17 hours 24 minutes 28 seconds Server load: 6.11 5.53 4.94 Total accesses: 437676 - Total Traffic: 4.5 GB - Total Duration: 668086545 CPU Usage: u2860.27 s4714.14 cu45386800 cs11078900 - 90100% CPU load 6.98 requests/sec - 75.7 kB/second - 10.8 kB/request - 1526.44 ms/request 13 requests currently being processed, 4 idle workers _WR._WWCCWWWW._C.W_W.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-159779570/2/26949_ 1.720696400453150.00.01250.94 172.68.210.70http/1.1www.yuritrading.com:80POST //xmlrpc.php HTTP/1.0 1-159774600/90/26648W 58.0000402493310.00.75247.55 138.68.163.10http/1.1localhost:443GET /server-status HTTP/1.1 2-159779650/0/25950R 0.0000392709610.00.00318.80 172.172.123.141http/1.1www.1smestartup.com:443 3-1597-0/0/26154. 0.00240391064470.00.00265.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-159776700/49/25489_ 33.5801003381414170.00.45276.02 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 5-159775900/70/25283W 46.7700378645830.00.71252.97 162.158.106.94http/1.1www.smetast.com:80POST /xmlrpc.php HTTP/1.0 6-159775960/58/25145W 37.8400379021650.00.52247.70 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-159773881/99/24412C 67.96011983714082316.01.25262.61 172.172.123.141http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 8-159774731/99/24004C 60.6209313600514913.40.77232.93 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 9-159775190/91/22848W 55.7600345342750.00.70283.79 193.106.196.237http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 10-159776930/42/22352W 29.8900335086600.00.35224.51 172.68.234.181http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1692368799.42437195777893066406 11-159775980/65/21219W 43.6600318689240.00.45215.29 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 12-159778650/17/19818W 10.8810300444280.00.12251.91 162.158.239.17http/1.1www.chorsiam.com:80GET /wp-login.php HTTP/1.0 13-1597-0/0/19321. 0.0018718291825700.00.00199.10 188.166.187.50http/1.1www.thairuamthaiparty.com:443POST /xmlrpc.php HTTP/1.1 14-159774980/82/16347_ 54.090989250318350.00.84178.36 54.36.149.84http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%9F%E0%B8%B4%E0%B8%A5 15-159776421/55/14916C 35.4800234688541.40.41202.76 138.68.163.10http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1597-0/0/12846. 0.00250201237990.00.00146.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-159778660/16/11624W 11.4500180737900.00.13120.31 193.106.196.237http/1.1www.npaccounting.co.th:443POST //xmlrpc.php HTTP/1.1 18-159778810/17/9068_ 11.3600144987150.00.1482.24 193.187.88.196http/1.1www.tkadvicesystem.com:80GET / HTTP/1.0 19-159778870/15/7717W 8.8602559127716560.00.1682.33 162.158.239.40http/1.1www.business.co.th:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 20-1597-0/0/6588. 0.00210107890090.00.0077.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1597-0/0/5738. 0.0030088386040.00.0046.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1597-0/0/3830. 0.001661063890290.00.0049.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1597-0/0/3251. 0.001732054483040.00.0028.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1597-0/0/1810. 0.001744029787380.00.0013.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1597-0/0/1599. 0.001720025658060.00.0013.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1597-0/0/1136. 0.001662020470140.00.008.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1597-0/0/891. 0.001735013442950.00.0010.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1597-0/0/287. 0.00166006251710.00.003.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1597-0/0/496. 0.00165507792230.00.004.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1597-0/0/103. 0.00162802008360.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1597-0/0/206. 0.00174004517220.00.003.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1597-0/0/278. 0.00143511835110800.00.002.39 172.172.123.141http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 33-1597-0/0/148. 0.00172403504410.00.002.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1597-0/0/231. 0.00172103956500.00.001.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1597-0/0/246. 0.00173104934770.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1597-0/0/337. 0.0014436225289270.00.002.60 23.234.244.180http/1.1www.chonlateenextbiz.com:80POST /xmlrpc.php HTTP/1.0 37-1597-0/0/400. 0.00165807411650.00.002.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1597-0/0/223. 0.0014578613626800.00.001.74 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 39-1597-0/0/293. 0.00143323445526250.00.002.15 172.70.174.59http/1.1www.siamautomation.com:443GET / HTTP/1.1 40-1597-0/0/328. 0.00172906437850.00.002.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1597-0/0/56. 0.0017180883380.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1597-0/0/106. 0.00171603020510.00.000.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1597-0/0/244. 0.00146110104145820.00.002.37 172.172.40.176http/1.1www.1smestartup.com:443POST //xmlrpc.php HTTP/1.1 44-1597-0/0/94. 0.00170602075860.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1597-0/0/52. 0.00173401336210.00.000.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1597-0/0/120. 0.00173702158590.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1597-0/0/279. 0.00172504741700.00.001.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1597-0/0/70. 0.00173301318460.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1597-0/0/126. 0.00174602471910.00.001.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds requir
Found on 2023-08-18 14:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c571c1dfe29Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 17-Aug-2023 18:42:02 +07 Restart Time: Thursday, 17-Aug-2023 16:36:02 +07 Parent Server Config. Generation: 1595 Parent Server MPM Generation: 1594 Server uptime: 2 hours 5 minutes 59 seconds Server load: 4.32 3.99 4.00 Total accesses: 55403 - Total Traffic: 564.9 MB - Total Duration: 74685184 CPU Usage: u2719.32 s4635 cu45046700 cs10989000 - 741000% CPU load 7.33 requests/sec - 76.5 kB/second - 10.4 kB/request - 1348.04 ms/request 9 requests currently being processed, 6 idle workers _.CC___WWWW.R_W_C................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-159485230/34/3632_ 22.14097748401910.00.2633.05 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 1-1594-0/0/3480. 0.0017046691550.00.0032.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-159485361/34/3568C 19.14068247979013.80.2235.89 172.69.65.33http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 3-159483801/71/3510C 36.160047913291.40.5137.17 137.184.162.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-159486160/13/3547_ 5.11046046052110.00.0836.96 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 5-159483050/90/3360_ 55.290045777080.00.5931.99 137.184.162.65http/1.1localhost:443GET /about HTTP/1.1 6-159486280/10/3227_ 7.470043227790.00.0934.40 137.184.150.232http/1.1localhost:80GET /info.php HTTP/1.0 7-159483890/69/3101W 36.680042227910.00.6328.34 137.184.162.65http/1.1localhost:443GET /server-status HTTP/1.1 8-159484420/53/3246W 34.490043738290.00.3432.42 146.190.90.35http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4GET /wp-login.php HTTP/1.1 9-159483970/63/2877W 36.160038625480.00.3529.99 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 10-159484280/50/3258W 34.050043118710.00.3833.23 107.179.49.202http/1.1www.thaicarsale.com:80POST //xmlrpc.php HTTP/1.0 11-1594-0/0/2950. 0.0014040002310.00.0030.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-159484480/57/2552R 33.881034140780.00.3620.29 172.71.254.194http/1.1 13-159484870/44/2467_ 27.12075733705990.00.2730.33 172.71.254.46http/1.1www.business.co.th:443POST //xmlrpc.php HTTP/1.1 14-159484930/42/2550W 24.360034967510.00.2423.92 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 15-159486360/8/1988_ 4.08055127563130.00.0318.16 162.158.94.187http/1.1www.tun36.com:80POST /xmlrpc.php HTTP/1.0 16-159486421/8/1721C 5.84085724216468.40.0619.04 137.184.162.200http/1.1www.chonlateebusiness.com:443POST /wp-login.php HTTP/1.1 17-1594-0/0/1160. 0.001259014999620.00.0015.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1594-0/0/835. 0.003005010709310.00.009.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1594-0/0/749. 0.003149010283180.00.007.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1594-0/0/325. 0.00314804138290.00.005.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1594-0/0/297. 0.0029717163660250.00.004.47 162.158.162.204http/1.1www.torrong.co.th:80POST /wp-login.php HTTP/1.0 22-1594-0/0/146. 0.00312901646650.00.002.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1594-0/0/114. 0.00314601986810.00.000.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1594-0/0/176. 0.00298002547570.00.004.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1594-0/0/133. 0.00314101855080.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1594-0/0/171. 0.00300702203060.00.001.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1594-0/0/71. 0.0034740778140.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1594-0/0/4. 0.0035960109090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1594-0/0/15. 0.0035650247080.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1594-0/0/2. 0.0036000111050.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1594-0/0/6. 0.0035850154700.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1594-0/0/3. 0.0035970120560.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1594-0/0/5. 0.0035880135640.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1594-0/0/2. 0.0035990110260.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1594-0/0/7. 0.0035810178460.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1594-0/0/100. 0.0034086661343910.00.000.96 167.71.221.18http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 37-1594-0/0/8. 0.0035820158590.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1594-0/0/4. 0.0035910132230.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1594-0/0/6. 0.0035840165210.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1594-0/0/7. 0.0035800176040.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1594-0/0/1. 0.003608000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1594-0/0/10. 0.0035720220190.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1594-0/0/3. 0.003598078100.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1594-0/0/4. 0.0035930107800.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1594-0/0/5. 0.0035860145420.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 208subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 30 seconds, (range: 0...224)index usage: 7%, cache usage: 9%total entries stored since starting: 5059total entries replaced since starting: 0total entries expired since starting: 4851total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 58 hit, 6901 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-17 11:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c57284c74e3Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 19:37:02 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 15 hours 34 minutes 48 seconds Server load: 4.38 4.70 4.76 Total accesses: 511152 - Total Traffic: 4.0 GB - Total Duration: 737944942 CPU Usage: u2617.55 s4592.15 cu44721400 cs10899800 - 99200% CPU load 9.11 requests/sec - 75.2 kB/second - 8.2 kB/request - 1443.69 ms/request 8 requests currently being processed, 7 idle workers _R__WW_W__W_CRW................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1588303090/6/28683_ 3.600418404723540.00.02242.48 172.71.167.205http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 1-1588302270/37/28672R 22.631481400560510.00.12225.70 162.158.174.63http/1.1 2-1588302860/12/28293_ 7.970765404625550.00.07219.31 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 3-1588301140/93/27769_ 47.960893401238750.00.31245.50 162.158.175.211http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 4-1588301520/68/27755W 33.3800396194710.00.59219.62 172.71.166.211http/1.1www.mbaaccount.com:80POST //xmlrpc.php HTTP/1.0 5-1588301590/65/27387W 33.7100393644700.00.25194.18 172.69.65.97http/1.1www.torrong.com:80POST //wp-login.php HTTP/1.0 6-1588301680/61/27020_ 30.720361385994310.00.20202.94 172.71.167.84http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 7-1588302460/25/27024W 17.9600381977410.00.22188.67 172.71.167.84http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 8-1588301760/57/25880_ 27.7800368640620.00.19195.07 146.190.160.11http/1.1localhost:443GET /about HTTP/1.1 9-1588302550/23/25615_ 11.780492367100200.00.08187.03 172.71.166.151http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 10-1588302640/21/24969W 14.0100358400300.00.11175.69 146.190.160.11http/1.1localhost:443GET /server-status HTTP/1.1 11-1588302700/21/24260_ 13.121650352119350.00.10187.10 172.71.166.151http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 12-1588303171/3/23864C 1.4800340672491.40.01193.35 146.190.160.11http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-1588303230/4/22922R 2.372564326409690.00.01176.50 172.71.174.232http/1.1 14-1588303310/3/22237W 1.9400323485280.00.01242.94 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 15-1588-0/0/19934. 0.0023495287707470.00.00159.98 172.71.167.84http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 16-1588-0/0/18793. 0.001330269027820.00.00141.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1588-0/0/16640. 0.007670245450450.00.00220.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1588-0/0/14598. 0.00622879215630480.00.00105.58 162.158.174.62http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 19-1588-0/0/11774. 0.001000903173354360.00.0098.01 162.158.175.213http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 20-1588-0/0/9270. 0.002387690141187680.00.0067.53 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 21-1588-0/0/6881. 0.0024710104101000.00.0054.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1588-0/0/5447. 0.00296984183403370.00.0049.42 172.69.67.141http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 23-1588-0/0/3881. 0.00311349260819430.00.0031.86 172.71.167.160http/1.1www.rooffurnish.com:443POST //xmlrpc.php HTTP/1.1 24-1588-0/0/3464. 0.00295040654889270.00.0024.62 172.70.55.119http/1.1www.mgacccount.com:80POST //xmlrpc.php HTTP/1.0 25-1588-0/0/2603. 0.003099043115360.00.0018.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1588-0/0/1503. 0.002965022439080.00.0013.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1588-0/0/1034. 0.0010304015503660.00.007.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1588-0/0/806. 0.0012128013495190.00.006.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1588-0/0/580. 0.0012537110009260.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1588-0/0/319. 0.001248505306840.00.006.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1588-0/0/392. 0.001230006441090.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1588-0/0/83. 0.003428101652280.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1588-0/0/112. 0.003427402871870.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1588-0/0/101. 0.003424601881510.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1588-0/0/129. 0.003424702345130.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1588-0/0/18. 0.00342790652620.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1588-0/0/109. 0.00340608242613860.00.000.66 172.70.189.100http/1.1www.tun36.com:80POST //xmlrpc.php HTTP/1.0 38-1588-0/0/100. 0.00455058141804300.00.000.65 172.70.135.128http/1.1www.chonlateefarm.com:443POST //wp-login.php HTTP/1.1 39-1588-0/0/90. 0.004553301630980.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1588-0/0/16. 0.00456820679680.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1588-0/0/14. 0.00456980608390.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1588-0/0/12. 0.00456940649130.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1588-0/0/12. 0.00457040608070.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1588-0/0/25. 0.00456610787580.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1588-0/0/17. 0.00456920616270.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1588-0/0/12. 0.00457070602590.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1588-0/0/10. 0.00457020621060.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1588-0/0/11. 0.00457110570430.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1588-0/0/12. 0.00457090584220.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection Child<
Found on 2023-08-16 12:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c579c3e62f4Apache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 16-Aug-2023 04:11:50 +07 Restart Time: Wednesday, 16-Aug-2023 04:02:13 +07 Parent Server Config. Generation: 1589 Parent Server MPM Generation: 1588 Server uptime: 9 minutes 37 seconds Server load: 9.71 8.60 11.74 Total accesses: 4380 - Total Traffic: 36.4 MB - Total Duration: 7954090 CPU Usage: u2871.74 s4648.89 cu44472500 cs10833200 - 9590000% CPU load 7.59 requests/sec - 64.5 kB/second - 8.5 kB/request - 1816 ms/request 15 requests currently being processed, 6 idle workers WWC.__.WWCWR..W.W___RRWRW_........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-158823450/20/251W 16.19004347720.00.132.06 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 1-158820820/67/258W 55.18004614020.00.452.19 40.78.153.9http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 2-158819931/82/239C 65.17004399601.40.691.91 139.144.150.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1588-0/0/213. 0.001303957950.00.001.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-158821320/54/254_ 39.51015654570510.00.402.12 172.71.166.97http/1.1www.smetast.com:80POST //wp-login.php HTTP/1.0 5-158820140/70/184_ 58.20019903363030.00.561.54 45.55.7.5http/1.1www.chonlateepro.com:443GET /wp-content/uploads/2017/ HTTP/1.1 6-1588-0/0/250. 0.00404466040.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-158820390/77/231W 57.06004181190.00.651.93 194.180.49.177http/1.1www.chonlateedesign.com:443GET /wp-content/plugins/ninja-forms/readme.txt HTTP/1.1 8-158823150/26/190W 15.57103293000.00.141.69 40.78.158.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 9-158822161/36/233C 23.42004085070.20.241.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-158822250/29/233W 22.57004211690.00.232.10 162.158.106.228http/1.1www.chonlateetravel.com:80POST //xmlrpc.php HTTP/1.0 11-158820590/70/188R 55.20012743630650.00.541.68 163.5.169.27http/1.1www.uniqueworkthailand.com:443 12-1588-0/0/180. 0.00303274350.00.001.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1588-0/0/200. 0.001703646760.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-158822350/27/196W 20.76003641240.00.211.88 172.71.154.15http/1.1www.chonlateeauto.com:443GET /wp-content/plugins/classic-editor/index.php HTTP/1.1 15-1588-0/0/205. 0.001603720670.00.001.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-158822450/29/183W 22.08003287680.00.231.46 139.144.150.26http/1.1localhost:443GET /server-status HTTP/1.1 17-158822510/30/128_ 19.03013832020950.00.150.98 40.77.90.110http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 18-158822590/28/127_ 21.66002057530.00.200.99 139.144.150.26http/1.1localhost:443GET /about HTTP/1.1 19-158822600/29/105R 20.27012641947290.00.170.86 27.254.96.168http/1.1 20-158823960/11/178R 7.05003392430.00.091.43 162.158.166.220http/1.1www.chonlateeit.com:443 21-158822660/24/65R 18.1009251344470.00.180.67 40.77.90.110http/1.1www.thaiquickservice.net:443 22-158822770/24/24W 20.1800715680.00.190.19 172.69.65.122http/1.1www.jrajar.com:80POST //wp-login.php HTTP/1.0 23-158822880/28/28R 19.8400540630.00.220.22 20.169.206.229http/1.1www.bannongsaischool.com:443 24-158822960/24/24W 19.9500576230.00.170.17 172.71.174.212http/1.1www.chonlateecoffee.com:80POST //wp-login.php HTTP/1.0 25-158823970/10/13_ 6.9601845254380.00.060.08 172.71.154.234http/1.1www.chonlateeit.com:443GET /wp-content/rxr.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 217subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 41 seconds, (range: 1...142)index usage: 7%, cache usage: 9%total entries stored since starting: 376total entries replaced since starting: 0total entries expired since starting: 159total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 453 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-15 21:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3122706c5722706c5706ad830aApache Status Apache Server Status for smtp.partymanagementthailand.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 03-Aug-2023 14:52:10 +07 Restart Time: Thursday, 03-Aug-2023 14:51:31 +07 Parent Server Config. Generation: 1539 Parent Server MPM Generation: 1538 Server uptime: 39 seconds Server load: 3.35 3.47 3.49 Total accesses: 351 - Total Traffic: 2.1 MB - Total Duration: 246494 CPU Usage: u2398.89 s4241.59 cu40999400 cs9907550 - 1.31e+8% CPU load 9 requests/sec - 56.2 kB/second - 6.2 kB/request - 702.262 ms/request 18 requests currently being processed, 11 idle workers WCC_C__C_W__WCCCC_RWWRRWR____..................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-15385570/25/25W 9.4200199260.00.130.13 207.154.240.169http/1.1www.partymanagementthailand.comGET /debug/default/view?panel=config HTTP/1.1 1-15385581/26/26C 11.8300249771.40.190.19 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-15387081/17/24C 4.0601160991.30.080.12 167.172.232.142http/1.1localhost:443GET /about HTTP/1.1 3-15387290/4/11_ 1.14073266070.00.020.06 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 4-15385801/20/20C 9.3400203591.40.200.20 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-15387390/1/7_ 0.000162170.00.000.04 139.144.150.23http/1.1localhost:443GET /about HTTP/1.1 6-15386110/28/28_ 9.050731203350.00.180.18 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 7-15386131/14/14C 6.8313391353015.00.100.10 207.154.240.169http/1.1www.partymanagementthailand.comGET /.vscode/sftp.json HTTP/1.1 8-15386240/22/22_ 8.7101177790.00.190.19 143.42.118.5http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 9-15386260/24/24W 6.8500134040.00.110.11 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 10-15387450/4/13_ 1.04027399070.00.020.07 138.68.163.10http/1.1www.partymanagementthailand.comGET /about HTTP/1.1 11-15386380/24/24_ 5.1301100020.00.090.09 139.144.150.23http/1.1localhost:443GET /about HTTP/1.1 12-15386520/26/26W 6.7200134270.00.160.16 172.70.247.188http/1.1www.solucare.co.th:80POST /wp-login.php HTTP/1.0 13-15387541/3/6C 0.00018871.40.000.01 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-15386611/16/16C 8.3403471656010.00.120.12 207.154.240.169http/1.1www.partymanagementthailand.comGET /about HTTP/1.1 15-15386731/18/18C 3.781087412.70.160.16 167.172.232.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 16-15386751/21/21C 5.0903731125715.00.080.08 159.69.91.132http/1.1www.partymanagementthailand.comGET / HTTP/1.1 17-15386760/15/15_ 5.6800112340.00.090.09 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 18-15387550/2/8R 0.000152280.00.000.04 139.144.150.23http/1.1localhost:443GET /v2/_catalog HTTP/1.1 19-15387630/2/2W 0.000050.00.000.00 139.144.150.23http/1.1localhost:443GET /server-status HTTP/1.1 20-15387720/0/0W 0.000000.00.000.00 172.70.174.84http/1.1www.proplustech.co.th:443POST //wp-login.php HTTP/1.1 21-15387790/0/0R 0.000000.00.000.00 159.69.91.132http/1.1 22-15387850/0/0R 0.000000.00.000.00 23-15387880/0/0W 0.000000.00.000.00 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 24-15387970/0/0R 0.000000.00.000.00 25-15387990/1/1_ 0.000120.00.000.00 167.172.232.142http/1.1localhost:80GET /config.json HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 47subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 277 seconds, (range: 265...296)index usage: 1%, cache usage: 2%total entries stored since starting: 47total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 182 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-03 07:51
-