Domain smtp.wealneosupply.com
Thailand
CS LOXINFO Public Company Limited.
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-25 06:31
Last seen 2024-02-02 03:10
Open for 464 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e1676c772b3e3Apache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 10:10:41 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 9 minutes 20 seconds Server load: 2.00 2.01 2.00 Total accesses: 1845180 - Total Traffic: 23.8 GB - Total Duration: 2140724401 CPU Usage: u186.75 s109.58 cu32089.3 cs2210.25 - 1.43% CPU load .763 requests/sec - 10.3 kB/second - 13.5 kB/request - 1160.17 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes131000 329394no0yes032000 529374no0yes032000 Sum400 1127000 ________________________________................................ _______W________________________________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/14/14762_ 5.10510160256560.00.01193.64 139.144.150.205h2localhost:443[0/0] Software caused connection abort 0-92293730/13/15256_ 5.0870139008970.00.03198.89 159.89.83.196h2localhost:443[0/0] Software caused connection abort 0-92293730/20/14833_ 5.9820150306350.00.05192.62 159.89.83.196http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/15/15008_ 5.13510145868980.00.01185.89 143.198.72.96http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/15/14913_ 5.149920147705900.00.05185.32 46.101.103.192http/1.1 0-92293730/14/15141_ 5.5920156642950.00.02188.43 139.144.150.45http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-92293730/12/14812_ 4.699800145587210.00.03200.13 143.198.72.96http/1.1 0-92293730/12/15119_ 5.9810150176790.00.03187.53 159.89.83.196http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/20/15087_ 5.13460145223170.00.02229.82 159.223.102.13http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-92293730/19/15213_ 5.95580148852880.00.08194.80 159.223.102.13http/1.1localhost:443GET / HTTP/1.1 0-92293730/17/14777_ 5.0910154280510.00.02200.61 142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/18/14791_ 4.8619380147116930.00.01195.38 147.182.168.210http/1.1 0-92293730/20/14651_ 5.96480137181880.00.04185.40 159.223.102.13http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/22/14813_ 5.12610169077180.00.04185.97 159.223.102.13http/1.1 0-92293730/17/15763_ 5.5910141543220.00.06187.72 139.144.150.45http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/19/14811_ 5.58470165338320.00.04182.43 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/18/14857_ 5.249780143397190.00.02206.28 192.53.126.23http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/20/14927_ 5.58450144891060.00.04189.22 139.144.150.205http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/16/14744_ 5.95540160243170.00.02200.49 159.223.102.13http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/20/14965_ 5.779810144636800.00.04193.72 46.101.103.192http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/13/14950_ 5.9850181446090.00.02193.28 159.89.83.196http/1.1localhost:443GET / HTTP/1.1 0-92293730/18/14983_ 5.95500147004850.00.02204.00 159.223.102.13http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/19/15437_ 5.149900150748210.00.05188.17 46.101.103.192h2localhost:443[0/0] Software caused connection abort 0-92293730/15/14646_ 5.779820138763960.00.01190.06 46.101.103.192http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/18/14942_ 5.24580162204880.00.02186.79 192.53.126.23http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/15/14618_ 5.13100135973720.00.03196.88 159.89.83.196h2localhost:443[0/0] Software caused connection abort 0-92293730/14/15121_ 5.1020144712730.00.01194.46 143.198.72.96http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/16/14901_ 5.95490159153260.00.01213.26 159.223.102.13http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/19/14706_ 5.769890152163350.00.04175.85 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 0-92293730/16/15164_ 5.58470135117430.00.03225.07 139.144.150.205http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/22/14641_ 5.5840155554210.00.02199.10 139.144.150.45http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/15/14905_ 5.059890145814300.00.02185.01 178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-92-0/0/15731. 0.00214260138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00214260136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00214260174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00214260150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00214260146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00214260134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00214260172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00214260165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00214260127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00214260152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00214260148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00214260159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00214260159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00214260137016410.00.00183.04 159.223.1
Found on 2024-02-02 03:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e1676af1fe15eApache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 09:55:01 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 23 hours 53 minutes 40 seconds Server load: 2.44 2.56 2.61 Total accesses: 808723 - Total Traffic: 10.9 GB - Total Duration: 994896471 CPU Usage: u625.99 s39.5 cu13326.1 cs698.67 - 8.52% CPU load 4.69 requests/sec - 66.6 kB/second - 14.2 kB/request - 1230.21 ms/request 5 requests currently being processed, 59 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 08425yes4no00000 111360yes1no00000 216287no3yes230001 316453no4yes329002 Sum4212 559003 ..................G.......G...................G................. ______________W_W____________________________R___R_________W____ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/6217. 0.007684784769800.00.0091.80 3.224.220.101http/1.1www.chonlateeboi.com:443GET /26297tbrmeti.html HTTP/1.1 0-7-0/0/6706. 0.007735062012640.00.0088.41 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=v-neck-sweater-vest-3-ii-JMlKELuJ HTTP/1.1 0-7-0/0/6217. 0.007785073926040.00.0092.07 40.77.167.35h2www.xn--12cx2bef7bl0boq4ch6gugw[10/10] done: stream 19, GET /wp-includes/js/jquery/jquery-migr 0-7-0/0/6530. 0.007791771209250.00.0084.76 85.208.96.204http/1.1www.chonlateeadmin.com:443GET /tliqmyr-5154vetid.htm HTTP/1.1 0-7-0/0/6264. 0.007792568251940.00.0080.97 52.70.240.171http/1.1www.chonlateeboi.com:443GET /17438beacitems/etidm12s.html HTTP/1.1 0-7-0/0/6639. 0.0077131679627020.00.0088.28 114.119.159.109http/1.1www.chonlateevip.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%84 0-7-0/0/6444. 0.007784260277750.00.0098.64 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ztoitgo-32798bitems/etidm77m.html HTTP/1.1 0-7-0/0/6504. 0.007786269263150.00.0085.21 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ntcitgo-26026petid HTTP/1.1 0-7-0/0/6498. 0.007784364244250.00.00126.92 40.77.167.35h2www.xn--12cx2bef7bl0boq4ch6gugw[4/4] done: stream 7, GET /wp-content/plugins/woocommerce/asset 0-7-0/0/6424. 0.007783573118690.00.0082.53 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ftuitgo-32778hetid.htm HTTP/1.1 0-7-0/0/6163. 0.007735077923870.00.0078.61 40.77.167.35h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /wp-content/plugins/gallery-by-supsys 0-7-0/0/6128. 0.003824139779400880.00.0079.98 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6195. 0.007735954714040.00.0082.03 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=tie-clips-270-for-sale-on-1stdibs-art-deco-1-ii-gegxOgS 0-7-0/0/6411. 0.007785183353950.00.0086.22 40.77.167.35h2www.xn--12cx2bef7bl0boq4ch6gugw[7/7] done: stream 13, GET /wp-content/themes/chonlateedesign/j 0-7-0/0/6829. 0.003736184861818480.00.0087.96 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6171. 0.007794185896820.00.0080.54 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mbbitgo-26155oitems/etidm HTTP/1.1 0-7-0/0/6346. 0.007783866034030.00.0082.50 114.119.159.109http/1.1www.chonlateevip.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%84 0-7-0/0/6479. 0.0077105764153540.00.0084.31 52.167.144.228h2www.xn--12cx2bef7bl0boq4ch6gugw[8/8] done: stream 15, GET /wp-includes/js/wp-emoji-release.min 0-784251/329/6492G 197.83158063682100.03.8682.65 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6254. 0.007783770090720.00.0087.82 40.77.167.35h2www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fra 0-7-0/0/6535. 0.007590894215590.00.0090.61 3.224.220.101http/1.1www.chonlateeboi.com:443GET /26217tbrmitems/eti.htm HTTP/1.1 0-7-0/0/6217. 0.007758872621420.00.0084.30 43.241.70.75http/1.1www.nakindogtraining.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/6781. 0.0075117378503180.00.0090.43 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ebtitgo-26147getidm.html HTTP/1.1 0-7-0/0/6310. 0.007733564721610.00.0090.79 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=22-hornet-rifle-lever-action-i-AqQjyjS3 HTTP/1.1 0-7-0/0/6224. 0.007785976756490.00.0078.19 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /rtgitgo-16826titems/etid.html HTTP/1.1 0-7-0/0/6328. 0.007783959077100.00.0081.94 52.70.240.171http/1.1www.chonlateeboi.com:443GET /34270hevyetidm60c HTTP/1.1 0-784251/299/6317G 183.771118057969620.03.5091.38 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6326. 0.007784779255910.00.00112.22 23.22.35.162http/1.1www.chonlateeboi.com:443GET /21533beacetidm30.html HTTP/1.1 0-7-0/0/6253. 0.007784968019080.00.0078.90 40.77.167.35h2www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.9.2 HT 0-7-0/0/6519. 0.007785274106320.00.00117.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /32957khrretidm81.html HTTP/1.1 0-7-0/0/6210. 0.007775568865500.00.0091.28 131.153.240.162http/1.1www.chonlateebusiness.com:443GET /comments/feed/ HTTP/1.1 0-7-0/0/6518. 0.007783471385070.00.0083.93 3.224.220.101http/1.1www.chonlateeboi.com:443GET /13050idtuetid.htm HTTP/1.1 1-7-0/0/6466. 0.0024442274721740.00.0084.07 51.15.59.15http/1.1www.happy-carrent.com:443POST /xmlrpc.php HTTP/1.1 1-7-0/0/6249. 0.0024445268360270.00.0079.42 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=5501-seminary-rd-unit-2305s-falls-church-va-22041-5-ii- 1-7-0/0/6212. 0.00244959100680970.00.0080.31 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /pveitgo-24936retidm30cir.htm HTTP/1.1 1-7-0/0/5977. 0.0024484377800350.00.0079.41 52.167.144.137h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /8pcpoe/best-cursive-fonts-for-tattoo 1-7-0/0/6152. 0.0024484376922630.00.0092.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /42454qecvetidm79w HTTP/1.1 1-7-0/0/6223. 0.0024484766598140.00.0081.75 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ntcitgo-35802petid.htm HTTP/1.1 1-7-0/0/6251. 0.00244219370593040.00.0079.56 52.70.240.171http/1.1www.chonlateeboi.com:443GET /19075oqmiitems/etidm HTTP/1.1 1-7-0/0/6319. 0.0024488579594730.00.0084.70 52.167.144.186h2www.happy-carrent.com:443GET /wp-content/uploads/2018/09/Page-02-1024x410.jpg HTTP/2.0 1-7-0/0/6288. 0.00244114057278660.00.0081.40 52.167.144.186h2www.happy-carrent.com:443[1/1] done: stream 1, GET /wp-content/uploads/2018/09/Page-02-1 1-7-0/0/6224. 0.0024430979955160.00.0086.70 163.172.106.185http/1.1</
Found on 2024-01-07 02:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e1676071c9371Apache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Tuesday, 12-Dec-2023 04:17:04 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 44 Parent Server MPM Generation: 43 Server uptime: 11 days 3 hours 54 minutes 6 seconds Server load: 1.51 0.99 0.77 Total accesses: 4420171 - Total Traffic: 56.6 GB - Total Duration: 4165868236 CPU Usage: u91.08 s42.02 cu79757.4 cs4172.6 - 8.72% CPU load 4.58 requests/sec - 61.6 kB/second - 13.4 kB/request - 942.468 ms/request 10 requests currently being processed, 118 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031012no1yes032001 131030no2yes428000 431190no7yes329003 531192no11yes329008 Sum4021 101180012 _______________________________________W__________RW__________W_ ................................................................ _________W______W_______W___________________W_________W_R_______ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-43310120/13/39710_ 5.3210361011830.00.14502.44 64.227.126.135http/1.1localhost:443GET /.env HTTP/1.1 0-43310120/12/39110_ 5.283842367125590.00.16494.08 66.249.64.228http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?silmlcv-17763yitems/eti HTTP/1.1 0-43310120/12/39573_ 4.9620402280660.00.13510.90 203.170.192.183http/1.1www.chonlateeboi.com:443POST /wp-cron.php?doing_wp_cron=1702329414.18342995643615722656 0-43310120/13/39527_ 5.321707390723490.00.16515.66 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?zosbopr-36620fetid.htm HTTP/1.1 0-43310120/10/40054_ 5.263929372832700.00.07569.54 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?uqjqxjd-48575wetidm20hd.html HTTP/1.1 0-43310120/8/39107_ 5.330662400038970.00.12495.22 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?233495spgdetidm43pd.html HTTP/1.1 0-43310120/9/39425_ 5.292848404401800.00.12496.06 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?wfpzslq-14881cetidm43js.html HTTP/1.1 0-43310120/11/40212_ 5.3110368855300.00.13504.04 162.243.184.251http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-43310120/6/39189_ 4.1131797381217950.00.11512.36 114.119.129.24http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 0-43310120/11/39565_ 5.1240369118760.00.10504.82 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /jrqewrv121624ditems/etidm10wed.html HTTP/1.1 0-43310120/9/39180_ 4.2510385780460.00.12476.39 46.101.103.192http/1.1localhost:80GET /.env HTTP/1.1 0-43310120/11/39206_ 5.2730370185130.00.10525.47 64.227.126.135http/1.1localhost:443GET /server-status HTTP/1.1 0-43310120/10/39133_ 5.1340376952040.00.09477.76 165.22.74.203http/1.1localhost:443GET / HTTP/1.1 0-43310120/13/39313_ 5.1630408718180.00.15506.27 46.101.103.192http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-43310120/3/39475_ 4.9900381390130.00.02495.48 161.35.190.56http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-43310120/10/39164_ 5.1338374482520.00.09550.27 64.227.126.135http/1.1localhost:443GET /server-status HTTP/1.1 0-43310120/11/40135_ 5.1620376112340.00.15529.78 165.22.74.203http/1.1localhost:443GET /about HTTP/1.1 0-43310120/10/39652_ 5.1330367829150.00.08488.07 45.55.193.222http/1.1localhost:80GET /.env HTTP/1.1 0-43310120/6/39701_ 4.9320369277410.00.06512.29 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-43310120/7/39923_ 5.1630385680570.00.05548.81 115.245.68.131http/1.1www.yougame.in.th:80GET ///?author=2 HTTP/1.1 0-43310120/13/39375_ 5.1630366035510.00.28518.21 164.92.192.25http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-43310120/9/39505_ 5.224842389324870.00.11509.48 115.245.68.131http/1.1www.yougame.in.th:443GET /?author=2 HTTP/1.1 0-43310120/12/39264_ 5.2630409495190.00.13519.13 159.203.44.43http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-43310120/10/38670_ 5.1340362933700.00.09479.71 128.199.62.55http/1.1localhost:80GET /.git/config HTTP/1.1 0-43310120/8/39667_ 5.2830373193760.00.07524.93 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 0-43310120/10/38934_ 5.134676389765080.00.15475.91 66.249.71.4http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?iwbrxij-8315oitems/eti.htm HTTP/1.1 0-43310120/10/39632_ 5.1620374230870.00.10589.86 128.199.62.55http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-43310120/9/38842_ 5.13310371446190.00.07514.81 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 0-43310120/9/39426_ 5.2010412923910.00.07528.10 159.203.44.43http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-43310120/12/39405_ 5.2210376215220.00.11509.05 161.35.190.56http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-43310120/11/39402_ 5.220896371191830.00.07498.19 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?xwmqxjd-43638zetidm92k.htm HTTP/1.1 0-43310120/11/39138_ 5.0130379311410.00.12543.00 164.92.192.25http/1.1localhost:80GET /login.action HTTP/1.1 1-43310300/13/40550_ 4.583877376880110.00.14511.42 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?213435spgditems/etidm.htm HTTP/1.1 1-43310300/12/40466_ 4.7840385715270.00.10554.46 162.243.184.251h2localhost:443[0/0] Software caused connection abort 1-43310300/9/40255_ 5.024655387317470.00.11561.45 66.249.64.228http/1.1www.chonlateefood.com:443GET /mds.php?items/tyi30101mynstidm184.html HTTP/1.1 1-43310300/7/40483_ 5.1050394790840.00.06569.05 165.22.74.203http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-43310300/9/41342_ 5.1050366675860.00.08629.55 64.227.126.135http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-43310300/12/40051_ 5.0140363796090.00.11575.27 64.227.126.135http/1.1localhost:443GET / HTTP/1.1 1-43310300/13/40175_ 5.0121290366386740.00.11536.15 115.245.68.131http/1.1www.yougame.in.th:443GET /?author=2 HTTP/1.1 1-43310301/8/40708W 4.8000390407390.00.10518.10 66.249.71.67http/1.1www.chonlateefood.com:443GET /mds.php?item/laa30119aogatidm45349.html HTTP/1.1 1-43310300/10/40337_ 4.8941179378996210.00.10507.13 115.245.68.131http/1.1www.yougame.in.th:443GET /?author=1 HTTP/1.1 1-43310300/10/40425_ 5.124846371224920.00.10516.49 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?yprasnc-33291eitems/eti HTTP/1.1 1-43310300/10/40970_ 4.9700367771430.00.09540.26 159.203.44.43http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-43310300/10/40807_ 4
Found on 2023-12-11 21:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e1676687416b5Apache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 25-Nov-2023 00:29:47 ICT Restart Time: Friday, 24-Nov-2023 14:51:08 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 9 hours 38 minutes 39 seconds Server load: 1.58 1.50 1.54 Total accesses: 80037 - Total Traffic: 1.2 GB - Total Duration: 42581532 CPU Usage: u50.65 s5.3 cu1189.91 cs70.87 - 3.79% CPU load 2.31 requests/sec - 35.0 kB/second - 15.2 kB/request - 532.023 ms/request 12 requests currently being processed, 116 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 05771no0yes131000 15930no2yes527001 35783no2yes527000 75934no0yes131000 Sum404 12116001 ___________W_____________________W_________R_R_W_______R________ ................................_____R___R________________RR___W ................................................................ ................................_________________R______________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-257710/24/682_ 9.12204959150.00.238.74 154.28.229.30http/1.1 0-257710/32/740_ 9.79003815480.00.237.71 146.70.165.230h2www.twinbuilt.co.th:443[0/0] Software caused connection abort 0-257710/28/780_ 9.89103948930.00.208.32 34.170.19.142http/1.1www.yougameservices.com:80GET /wp-login.php HTTP/1.1 0-257710/28/689_ 9.6427904528980.00.298.27 45.128.38.247h2localhost:443[0/0] Software caused connection abort 0-257710/26/852_ 9.8918614297430.00.1510.00 66.249.75.193http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?dmwszzn-614jetidm4.htm HTTP/1.1 0-257710/26/776_ 9.79204714820.00.1911.10 178.128.151.41http/1.1localhost:443GET / HTTP/1.1 0-257710/23/831_ 9.70004044670.00.208.70 31.184.236.42http/1.1 0-257710/37/784_ 9.82204293920.00.219.57 178.128.151.41http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-257710/28/714_ 9.89104583710.00.158.25 144.126.198.24http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-257710/20/714_ 9.86293974330.00.127.80 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 0-257710/25/986_ 9.65204491370.00.1422.89 139.144.150.205http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-257711/25/750W 9.59004936700.00.129.11 139.144.150.45http/1.1www.wealneosupply.com:443GET /about HTTP/1.1 0-257710/31/719_ 9.90113323937290.00.2916.61 139.144.150.45http/1.1www.wealneosupply.com:443GET /.vscode/sftp.json HTTP/1.1 0-257710/28/777_ 8.80203917810.00.178.21 178.128.151.41http/1.1 0-257710/33/768_ 9.91004178400.00.1811.83 50.62.176.221http/1.1www.chonlateepr.com:443POST /wp-content/themes/twentytwentyone/assets/sass/css.php HTT 0-257710/22/838_ 9.03084012270.00.3811.11 50.62.176.221h2www.chonlateepr.com:443[1/1] done: stream 1, POST /wp-content/themes/twentytwentyone/a 0-257710/22/780_ 9.71304480460.00.1111.34 65.154.226.169http/1.1 0-257710/25/893_ 9.56003744030.00.2231.27 178.128.151.41h2localhost:443[0/0] Software caused connection abort 0-257710/21/762_ 8.81004012400.00.2111.03 146.70.165.230h2localhost:443[0/0] Software caused connection abort 0-257710/30/889_ 9.642334292330.00.4921.95 45.128.38.247http/1.1 0-257710/38/796_ 9.79104303750.00.287.83 144.126.198.24http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-257710/29/772_ 9.70303888510.00.2916.49 45.128.38.247h2localhost:443[0/0] Software caused connection abort 0-257710/29/827_ 9.86203821030.00.2313.86 65.154.226.171http/1.1localhost:80GET / HTTP/1.1 0-257710/46/809_ 9.70024071410.01.399.25 86.111.247.23http/1.1www.chonlateepr.com:443POST /wp-content/themes/sydney/inc/integrations/elementor/css.p 0-257710/26/780_ 9.70004286500.00.2416.55 50.62.176.221h2www.chonlateepr.com:443[0/0] init 0-257710/26/853_ 9.86204193210.00.197.33 146.70.188.139http/1.1localhost:443GET / HTTP/1.1 0-257710/28/800_ 9.70304250660.00.2211.77 45.128.38.247h2localhost:443[0/0] Software caused connection abort 0-257710/51/754_ 9.34104402970.00.228.52 45.128.38.247h2localhost:443[0/0] Software caused connection abort 0-257710/28/740_ 9.81303985480.00.229.20 65.154.226.167http/1.1localhost:80GET / HTTP/1.1 0-257710/23/760_ 9.5515074314680.00.1210.47 185.191.171.4http/1.1www.mkandptfoods.com:443GET /wzy.php?m85332392128.html HTTP/1.1 0-257710/24/802_ 9.81304514020.00.198.31 65.154.226.167http/1.1localhost:80GET / HTTP/1.1 0-257710/43/832_ 9.70304279630.00.179.17 139.144.150.205http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-259300/32/357_ 15.61202119210.00.194.14 165.232.76.155http/1.1localhost:443GET /login.action HTTP/1.1 1-259301/40/404W 15.57002001160.00.255.01 45.55.193.222http/1.1www.wealneosupply.com:443GET /about HTTP/1.1 1-259300/37/396_ 15.6218862148350.00.325.20 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?pjiwxmt-48388vitems/etid.html HTTP/1.1 1-259300/36/413_ 15.56102354410.00.374.00 165.232.76.155http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-259300/43/389_ 15.57102352230.00.363.59 198.199.121.22http/1.1www.wealneosupply.com:80GET /telescope/requests HTTP/1.1 1-259300/49/430_ 15.60202487730.00.444.27 146.190.64.200http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-259300/54/379_ 15.67012073610.00.303.91 148.66.146.18http/1.1www.chonlateepr.com:443POST /wp-content/themes/twentytwentyone/assets/sass/css.php HTT 1-259300/40/409_ 15.55202429710.00.596.27 46.101.103.192http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-259300/60/378_ 15.56202020910.00.407.23 74.125.218.160http/1.1www.hotlineservicethailand.com:GET / HTTP/1.1 1-259300/48/451_ 15.51102480750.00.555.11 31.184.236.33http/1.1 1-259300/40/412_ 15.62001821430.00.534.96 144.126.198.24http/1.1localhost:443GET /.env HTTP/1.1 1-259300/57/374R 15.52302569620.00.353.68 46.101.103.192http/1.1localhost:80GET /config.json HTTP/1.1 1-259300/44/480_ 15.56202752080.00.335.38 128.199.61.251http/1.1www.wealneosupply.com:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-259300/69/514R 15.2129281776540.00.754.07 139.144.150.45h2localhost:443[0/0] Software caused connection abort 1-259300/47/414
Found on 2023-11-24 17:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1510fbdd4Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 04:51:15 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 49 minutes 5 seconds Server load: 0.77 0.61 0.49 Total accesses: 2708 - Total Traffic: 25.4 MB - Total Duration: 3709646 CPU Usage: u3208.3 s5848.92 cu55534000 cs13589400 - 2350000% CPU load .92 requests/sec - 8.8 kB/second - 9.6 kB/request - 1369.88 ms/request 3 requests currently being processed, 7 idle workers _W___C..._...._.W_................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965178420/77/258_ 43.59003825930.01.012.07 139.144.150.205http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1965184010/37/247W 21.38003749360.00.332.18 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1 2-1965186390/19/232_ 13.1407653322760.00.153.09 167.172.232.142http/1.1 3-1965182710/54/195_ 35.70012747720.00.531.84 161.35.176.95http/1.1localhost:80GET /_all_dbs HTTP/1.0 4-1965182840/52/174_ 31.34012151520.00.691.88 167.99.182.39http/1.1localhost:80GET /_all_dbs HTTP/1.0 5-1965188411/1/215C 0.00022923641.40.002.38 139.144.150.205http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1965-0/0/157. 0.0047402306280.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1965-0/0/137. 0.0046601934910.00.001.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1965-0/0/179. 0.0047502145560.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1965182900/53/160_ 27.61012014730.00.431.35 139.144.150.205http/1.1localhost:443GET /about HTTP/1.1 10-1965-0/0/79. 0.0047801271280.00.000.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1965-0/0/128. 0.0047301488170.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1965-0/0/124. 0.004129751830570.00.001.20 172.70.214.140http/1.1www.anumotanaboon.com:443GET /admin/controller/extension/extension/ HTTP/1.1 13-1965-0/0/99. 0.0044915401038820.00.000.65 162.158.107.81http/1.1www.torrong.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%81%E0%B8%A5%E0%B8%81 14-1965183190/52/126_ 31.24021703630.00.491.27 167.172.232.142http/1.1 15-1965-0/0/5. 0.00471020290.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1965183270/52/142W 31.85001884450.00.651.29 162.158.38.180http/1.1www.chonlateeplus.com:443GET //olux.php HTTP/1.1 17-1965183350/51/51_ 29.5001736760.00.440.44 167.99.182.39http/1.1localhost:80GET /login.action HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 3subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 291...296)index usage: 0%, cache usage: 0%total entries stored since starting: 65total entries replaced since starting: 0total entries expired since starting: 62total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1320 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 21:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1607aa67cApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:32:55 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 30 minutes 43 seconds Server load: 0.89 0.72 0.55 Total accesses: 50766 - Total Traffic: 931.9 MB - Total Duration: 97335717 CPU Usage: u3096.69 s5787.87 cu55152800 cs13502400 - 201000% CPU load 1.48 requests/sec - 27.9 kB/second - 18.8 kB/request - 1917.34 ms/request 6 requests currently being processed, 7 idle workers W_W_C___WC_C_..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193275680/18/4252W 7.770086759380.00.20118.11 146.190.160.11http/1.1www.theangelluxury.com:443GET /config.json HTTP/1.1 1-193273220/58/4186_ 20.95030880256690.00.4352.75 178.62.73.12http/1.1www.wealneosupply.com:443GET /config.json HTTP/1.1 2-193276770/6/4186W 0.050079233650.00.0255.68 178.62.73.12http/1.1www.wealneosupply.com:443GET /telescope/requests HTTP/1.1 3-193273330/62/4054_ 26.700179266680.00.4670.32 147.182.130.98http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-193276841/6/4102C 0.910178592911.40.0263.57 143.110.156.182http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-193276300/16/3804_ 5.52026669415350.00.2246.33 178.62.73.12http/1.1www.wealneosupply.com:443GET /.git/config HTTP/1.1 6-193276860/5/3789_ 0.841173412570.00.0258.27 143.110.156.182http/1.1localhost:443GET /about HTTP/1.1 7-193271940/89/3682_ 32.87025973352740.00.6293.85 178.62.73.12http/1.1www.wealneosupply.com:443GET /.env HTTP/1.1 8-193273860/47/3418W 19.870065622710.00.3055.49 143.110.156.182http/1.1localhost:443GET /server-status HTTP/1.1 9-193273931/51/3013C 22.561321569871020.50.3635.72 178.62.73.12http/1.1www.wealneosupply.com:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-193272130/89/2775_ 35.20039752555230.00.5643.45 146.190.160.11http/1.1www.theangelluxury.com:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-193276971/5/2099C 0.020041595441.30.0030.84 147.182.130.98http/1.1localhost:443GET /login.action HTTP/1.1 12-193272440/80/1979_ 27.59074835632120.00.6334.43 172.71.102.38http/1.1www.ptatun.or.th:80GET /assets/upload/ALFA_DATA/alfacgiapi/index.php?bx=0e21596201 13-1932-0/0/1743. 0.001276037768610.00.00116.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/944. 0.001209017948590.00.0010.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/563. 0.00578268683030.00.0020.48 162.158.78.106http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 16-1932-0/0/444. 0.0056217363220.00.003.83 172.71.150.27http/1.1www.anumotanaboon.com:443POST /xmlrpc.php HTTP/1.1 17-1932-0/0/250. 0.00384102763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00468907137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00533702780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00533805022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0053280690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00533202695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.004530192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.005333029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00518501528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00481302033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00462801828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00143910140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00143800108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 283 seconds, (range: 275...288)index usage: 0%, cache usage: 0%total entries stored since starting: 393total entries replaced since starting: 0total entries expired since starting: 385total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 29228 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1a2a3fd98Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 03:29:19 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 3 hours 5 minutes 24 seconds Server load: 3.12 3.32 3.52 Total accesses: 50150 - Total Traffic: 718.3 MB - Total Duration: 263359212 CPU Usage: u3156.07 s5643.86 cu53842500 cs13132400 - 602000% CPU load 4.51 requests/sec - 66.1 kB/second - 14.7 kB/request - 5251.43 ms/request 20 requests currently being processed, 1 idle workers _RWWCWWWWWWWWWWWWRWCR............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-189543940/38/2170_ 29.5403544104936080.00.4529.74 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=family-tree-symbol-icon-logo-design-stock-vector-royalt 1-189541660/51/2079R 39.0801104743980.00.8029.35 3.224.220.101http/1.1www.chonlateefbc.com:443 2-189548120/6/2036W 0.0520105852950.00.0130.02 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=vector-family-tree-design-with-frames-stock-vector-illu 3-189539770/81/2110W 49.2020104297050.01.0930.08 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=art-work-tree-on-the-gold-background-trees-landscapes-m 4-189548301/3/1955C 0.0201103934271.40.0033.21 164.90.205.35http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-189546780/14/2070W 6.4900102075600.00.2426.91 207.46.13.14http/1.1www.nakindogtraining.com:443GET /wzy.php?massage-WATERSPORTS.xml HTTP/1.1 6-189546270/18/2014W 12.8300100698390.00.2129.21 40.77.167.70http/1.1www.nakindogtraining.com:443GET /wzy.php?av-GLASS.xml HTTP/1.1 7-189548400/0/1933W 0.000098936310.00.0026.74 52.70.240.171http/1.1www.thaidaoherb.com:443GET /43848315123637.html HTTP/1.1 8-189547070/7/1891W 1.620094182360.00.0626.22 136.243.228.193http/1.1www.mkandptfoods.com:443GET /wzy.php?m2613228790.html HTTP/1.1 9-189546900/9/1981W 8.702092390510.00.1627.26 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=uk-england-lake-district-cumbria-rydal-water-oak-tree-m 10-189545920/20/1953W 12.100092798850.00.2627.27 164.90.205.35http/1.1localhost:443GET /server-status HTTP/1.1 11-189537620/73/1838W 54.1113093208160.01.2227.58 40.77.167.45http/1.1www.nakindogtraining.com:443GET /wzy.php?launched-RECIPE.xml HTTP/1.1 12-189542850/46/1865W 30.261091948900.00.6126.51 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=tree-at-keswick-lake-district-cumbria-uk-ii-solid-mm-rn 13-189547160/12/1756W 7.570088278770.00.1224.78 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=no-pectin-apple-jelly-recipe-hgtv-mm-VDZ9eQtK HTTP/1.0 14-189542970/45/1889W 30.290098678800.00.6024.50 128.199.61.251http/1.1www.wealneosupply.com:443GET / HTTP/1.1 15-189546480/9/1877W 3.610090872240.00.0832.21 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=unique-family-tree-designs-that-will-take-your-breath-m 16-189541100/56/1712W 38.592085920520.00.6821.77 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=jams-jellies-and-preserves-mm-1D05qQHL HTTP/1.0 17-189548460/0/1682R 0.000151682764020.00.0023.43 147.182.168.210http/1.1 18-189541940/48/1699W 38.671084744550.00.6824.10 52.70.240.171http/1.1www.thaidaoherb.com:443GET /43848315123646.html HTTP/1.1 19-189547211/7/1495C 5.39016658406968105.40.2820.39 104.250.238.104http/1.1www.dreamhightravel.com:443GET / HTTP/1.1 20-189548480/0/1461R 0.000077278830.00.0021.01 23.22.35.162http/1.1 21-1895-0/0/1376. 0.0014071828710.00.0019.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1895-0/0/926. 0.00197054141570.00.0013.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1895-0/0/1029. 0.0024165567910.00.0014.28 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /reune.php?okvimex57175ietidm18bx.html HTTP/1.1 24-1895-0/0/916. 0.00930051784410.00.0012.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1895-0/0/715. 0.00731049928540.00.0010.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1895-0/0/691. 0.001697039438130.00.009.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1895-0/0/456. 0.001712031179160.00.006.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1895-0/0/379. 0.001745029243370.00.005.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1895-0/0/566. 0.001576400032848080.00.007.18 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=20-fun-hilarious-bachelorette-party-games-for-2023-mm-x 30-1895-0/0/372. 0.001792023109700.00.004.63 27.254.96.168http/1.1www.chonlateefbc.com:443POST /wp-cron.php?doing_wp_cron=1698350365.53270411491394042968 31-1895-0/0/371. 0.001711027343590.00.004.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1895-0/0/475. 0.001727034291270.00.006.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1895-0/0/353. 0.001869023903290.00.004.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1895-0/0/480. 0.001635352026818810.00.008.41 161.35.155.246http/1.1 35-1895-0/0/180. 0.00207309066590.00.002.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1895-0/0/275. 0.001773020407360.00.003.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1895-0/0/269. 0.001896015304370.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1895-0/0/168. 0.00185607027490.00.003.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1895-0/0/130. 0.00219106829760.00.001.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1895-0/0/61. 0.00219002234190.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1895-0/0/116. 0.00248004318290.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1895-0/0/38. 0.00238001084420.00.000.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895-0/0/64. 0.00231304834510.00.000.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1895-0/0/89. 0.00248203798200.00.007.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1895-0/0/85. 0.00208105869310.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1895-0/0/6. 0.0024680190300.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1895-0/0/4. 0.0024810110.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1895-0/0/94. 0.00188820418589640.00.001.19 45.80.158.52http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum
Found on 2023-10-26 20:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1187ffda1Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 07:54:42 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 3 hours 52 minutes 29 seconds Server load: 0.99 0.94 1.08 Total accesses: 20300 - Total Traffic: 249.3 MB - Total Duration: 21270288 CPU Usage: u2898.02 s5357.59 cu52301900 cs12765800 - 467000% CPU load 1.46 requests/sec - 18.3 kB/second - 12.6 kB/request - 1047.8 ms/request 9 requests currently being processed, 6 idle workers WRCCC_RC___C_C_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182371450/54/1779W 22.960017589100.00.8419.83 143.110.156.182http/1.1localhost:443GET /server-status HTTP/1.1 1-182374240/15/1755R 4.680018015040.00.1118.71 149.56.160.134http/1.1www.importantaccount.com:443 2-182374331/12/1766C 1.6401222189174922.00.2022.36 104.43.230.183http/1.1www.1smestartup.com:443GET /wp-content/shell20211028.php HTTP/1.1 3-182371871/47/1549C 19.360016789961.40.6220.45 143.110.156.182http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-182374401/12/1588C 0.570118252291.40.0615.07 45.55.193.222http/1.1localhost:443GET /_all_dbs HTTP/1.1 5-182374670/6/1409_ 1.820115461740.00.0217.05 149.56.160.134http/1.1www.importantaccount.com:443GET /wp-content/themes/sydney/style.css?ver=20221019 HTTP/1.1 6-182369320/78/1538R 28.590017344210.00.8817.30 149.56.160.134http/1.1www.importantaccount.com:443 7-182374421/10/1502C 2.710933157529710.30.4520.26 64.227.126.135http/1.1www.wealneosupply.com:443GET /server-status HTTP/1.1 8-182369400/86/1278_ 35.46027513043500.01.7327.57 149.56.160.134http/1.1www.importantaccount.com:443GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3.1 9-182371940/50/1176_ 25.830112159090.00.7014.34 45.55.193.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-182373180/36/931_ 9.17018984160.00.2114.42 149.56.160.134http/1.1www.importantaccount.com:443GET /wp-content/themes/sydney/css/components/elementor.min.css? 11-182374771/1/706C 0.4504716482801.20.005.98 161.35.155.246http/1.1www.theangelluxury.com:443GET /telescope/requests HTTP/1.1 12-182373330/35/672_ 10.6608627341830.00.369.14 64.227.126.135http/1.1www.wealneosupply.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-182374541/11/190C 0.05001361591.30.021.81 45.55.193.222http/1.1localhost:443GET /login.action HTTP/1.1 14-182374600/5/360_ 1.43013548390.00.023.51 143.110.156.182http/1.1localhost:443GET /about HTTP/1.1 15-1823-0/0/291. 0.0058603008500.00.003.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1823-0/0/430. 0.0058304871110.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1823-0/0/398. 0.002194044188280.00.005.52 144.217.77.80http/1.1www.pennungmarket.com:80POST /wp-login.php HTTP/1.0 18-1823-0/0/396. 0.002196743917280.00.004.15 172.68.238.114http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 19-1823-0/0/50. 0.0011160505120.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/213. 0.008016472106140.00.001.39 162.158.62.122http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 21-1823-0/0/30. 0.0011200252820.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/29. 0.0011760201800.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/23. 0.0011670163790.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/239. 0.00117502434840.00.002.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1823-0/0/2. 0.00116808920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 219subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 66 seconds, (range: 16...159)index usage: 7%, cache usage: 9%total entries stored since starting: 4424total entries replaced since starting: 0total entries expired since starting: 4205total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 94 hit, 6617 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 00:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f109d4a67bApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 22:11:08 +07 Restart Time: Tuesday, 03-Oct-2023 04:02:11 +07 Parent Server Config. Generation: 1799 Parent Server MPM Generation: 1798 Server uptime: 18 hours 8 minutes 56 seconds Server load: 1.13 0.86 0.70 Total accesses: 95969 - Total Traffic: 2.3 GB - Total Duration: 153634041 CPU Usage: u2872.54 s5287.57 cu51825400 cs12662100 - 98700% CPU load 1.47 requests/sec - 37.3 kB/second - 25.4 kB/request - 1600.87 ms/request 8 requests currently being processed, 4 idle workers W_C___R.C.W.WRC................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1798295870/42/8066W 27.7100141079450.00.47240.59 134.122.89.242http/1.1localhost:443GET /server-status HTTP/1.1 1-1798296540/35/8052_ 20.8100126300270.00.49178.53 142.93.153.3http/1.1 2-1798298291/13/7642C 4.0410121729872.60.09169.17 46.101.103.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1798299200/6/7508_ 0.0801126916930.00.01219.02 74.207.237.46http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-1798299080/10/7177_ 0.0400112330200.00.01216.14 137.184.106.30http/1.1 5-1798299320/1/7175_ 0.770795111963060.00.01170.60 172.68.242.221http/1.1www.time2hand.com:80GET /apple-touch-icon-120x120.png HTTP/1.0 6-1798294040/63/7062R 32.8000110250350.00.82159.41 134.122.89.242http/1.1localhost:443GET /about HTTP/1.1 7-1798-0/0/6940. 0.002160109672780.00.00145.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1798292891/73/6199C 29.4800106069241.415.69144.96 134.122.89.242http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1798-0/0/6101. 0.00218096750990.00.00125.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1798294100/55/5507W 24.230093564110.00.81177.19 192.95.30.177http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 11-1798-0/0/4785. 0.00217074101590.00.00128.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1798296770/40/3581W 12.185058452360.00.5089.65 27.254.96.168http/1.1www.wealneosupply.com:443POST /wp-cron.php?doing_wp_cron=1696345863.29783010482788085937 13-1798296830/33/2861R 16.2624043444590.00.4470.47 116.62.155.4http/1.1www.thesungolden.com:443 14-1798296891/35/1814C 15.230026868761.30.2737.86 46.101.103.192http/1.1localhost:443GET /about HTTP/1.1 15-1798-0/0/1504. 0.00212019979110.00.0033.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1798-0/0/823. 0.002411011522570.00.0021.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1798-0/0/239. 0.00241003349140.00.003.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1798-0/0/352. 0.00140005526120.00.007.08 164.92.192.25http/1.1localhost:443GET /about HTTP/1.1 19-1798-0/0/299. 0.00240805300670.00.007.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1798-0/0/70. 0.0018480926180.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1798-0/0/86. 0.00239101029550.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1798-0/0/98. 0.0024070738520.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1798-0/0/226. 0.00240904775950.00.002.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1798-0/0/211. 0.00144403012730.00.002.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1798-0/0/174. 0.00239002258600.00.002.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1798-0/0/12. 0.0023860132980.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1798-0/0/99. 0.00136421931778170.00.001.26 185.191.171.7http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 28-1798-0/0/103. 0.0023880940790.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1798-0/0/7. 0.002395099910.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1798-0/0/12. 0.0023960247870.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1798-0/0/189. 0.00139903328680.00.002.39 128.199.61.251http/1.1localhost:443GET /_all_dbs HTTP/1.1 32-1798-0/0/190. 0.00139102308920.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1798-0/0/99. 0.00139113381712710.00.001.19 149.202.65.189http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%99 34-1798-0/0/123. 0.00239901056340.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1798-0/0/125. 0.00238701403490.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1798-0/0/11. 0.0023980217480.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1798-0/0/57. 0.0024021573560.00.001.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1798-0/0/10. 0.0024010121730.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1798-0/0/9. 0.0024030129820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1798-0/0/44. 0.0024000551430.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1798-0/0/9. 0.00349730116370.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1798-0/0/12. 0.00349620172750.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1798-0/0/5. 0.0034976076270.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1798-0/0/76. 0.003496901477960.00.001.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1798-0/0/5. 0.0034982020710.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1798-0/0/104. 0.0034718547812450.00.001.54 159.192.136.230http/1.1www.importantaccount.com:443POST //xmlrpc.php HTTP/1.1 47-1798-0/0/10. 0.0034961051750.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1798-0/0/101. 0.00347062271071880.00.001.39 54.36.148.103http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2022/10/Chondesign_logo_-174-215x215.jp 49-1798-0/0/5. 0.0034980022460.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this chi
Found on 2023-10-03 15:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f168e2c007Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 29-Sep-2023 05:11:03 +07 Restart Time: Friday, 29-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1785 Parent Server MPM Generation: 1784 Server uptime: 1 hour 8 minutes 50 seconds Server load: 0.33 0.28 0.36 Total accesses: 4105 - Total Traffic: 65.2 MB - Total Duration: 5263585 CPU Usage: u2753.34 s5235.6 cu51551200 cs12605500 - 1550000% CPU load .994 requests/sec - 16.2 kB/second - 16.3 kB/request - 1282.24 ms/request 4 requests currently being processed, 8 idle workers C..._WC___C__.....__.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1784265221/16/361C 4.6304904979701.20.095.00 134.122.63.192http/1.1www.theangelluxury.com:443GET /about HTTP/1.1 1-1784-0/0/341. 0.00304711880.00.0016.23 139.59.182.142http/1.1 2-1784-0/0/379. 0.00305068480.00.005.95 139.59.182.142http/1.1 3-1784-0/0/277. 0.00403267270.00.004.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1784261210/49/373_ 9.99004833780.00.154.41 137.184.162.65http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 5-1784266310/12/316W 0.09004413930.00.014.81 139.59.182.142http/1.1localhost:443GET /server-status HTTP/1.1 6-1784266331/10/346C 0.05004354931.40.015.94 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1784266430/5/275_ 0.02103751710.00.013.34 172.71.98.154http/1.1www.chonlateefarm.com:443POST /xmlrpc.php HTTP/1.1 8-1784261340/52/305_ 12.85003807210.00.413.48 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 9-1784266450/6/311_ 0.53004437760.00.013.49 104.236.193.132http/1.1localhost:80GET /telescope/requests HTTP/1.0 10-1784261441/49/136C 15.26044316276211.10.321.26 138.68.163.10http/1.1www.wealneosupply.com:443GET /.vscode/sftp.json HTTP/1.1 11-1784266550/4/158_ 0.5505221337280.00.011.57 134.122.63.192http/1.1www.theangelluxury.com:443GET /.vscode/sftp.json HTTP/1.1 12-1784266570/4/33_ 0.7100459270.00.090.28 137.184.162.65http/1.1localhost:80GET /telescope/requests HTTP/1.0 13-1784-0/0/118. 0.0047301440090.00.001.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1784-0/0/88. 0.0017236621562010.00.000.97 172.68.234.124http/1.1www.khlangkaew.com:443POST /wp-cron.php?doing_wp_cron=1695938886.77958703041076660156 15-1784-0/0/86. 0.004660921120.00.000.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1784-0/0/50. 0.004680582000.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1784-0/0/7. 0.00470011580.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1784261760/40/40_ 13.4010433430.00.280.28 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 19-1784261880/44/44_ 12.7700300240.00.280.28 104.236.193.132http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 20-1784-0/0/3. 0.0047507730.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1784-0/0/4. 0.00478040.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1784-0/0/5. 0.00465059950.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1784-0/0/3. 0.0047109280.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1784-0/0/3. 0.00472030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1784-0/0/3. 0.0047709680.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1784-0/0/40. 0.0030247720.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 42subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 138 seconds, (range: 1...296)index usage: 1%, cache usage: 1%total entries stored since starting: 745total entries replaced since starting: 0total entries expired since starting: 703total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 26 hit, 1442 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-28 22:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1037102f4Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 25-Sep-2023 00:30:02 +07 Restart Time: Monday, 25-Sep-2023 00:29:53 +07 Parent Server Config. Generation: 1768 Parent Server MPM Generation: 1767 Server uptime: 8 seconds Server load: 2.05 1.61 1.45 Total accesses: 125 - Total Traffic: 332 kB - Total Duration: 25379 CPU Usage: u2676.96 s5170.83 cu51182200 cs12518900 - 7.96e+8% CPU load 15.6 requests/sec - 41.5 kB/second - 2719 B/request - 203.032 ms/request 10 requests currently being processed, 10 idle workers W____CRC____C_W_WCRR.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1767134400/7/7W 0.0910190.00.010.01 172.70.42.50http/1.1www.chorsiam.com:80GET /about/ HTTP/1.0 1-1767134410/11/11_ 0.0900160.00.010.01 159.65.58.104http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1767134450/16/16_ 1.32043523970.00.030.03 94.232.42.51http/1.1www.hotlineservicethailand.com:GET /adminer-4.0.1-en.php HTTP/1.1 3-1767134560/5/5_ 1.320041430.00.110.11 161.35.27.144http/1.1localhost:443GET /.DS_Store HTTP/1.1 4-1767134630/15/15_ 2.11045381990.00.040.04 128.199.61.251http/1.1www.wealneosupply.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1767134861/10/10C 0.900016751.30.020.02 207.154.240.169http/1.1localhost:443GET /.env HTTP/1.1 6-1767134920/8/8R 0.0300110.00.010.01 207.154.240.169http/1.1localhost:443GET /.DS_Store HTTP/1.1 7-1767134941/3/3C 0.41107141.30.010.01 159.65.58.104http/1.1localhost:443GET /login.action HTTP/1.1 8-1767135050/6/6_ 0.020090.00.010.01 159.65.58.104http/1.1localhost:443GET /.DS_Store HTTP/1.1 9-1767135070/5/5_ 0.020070.00.010.01 207.154.240.169http/1.1localhost:443GET /login.action HTTP/1.1 10-1767135130/4/4_ 0.670013440.00.010.01 159.65.58.104http/1.1localhost:443GET /_all_dbs HTTP/1.1 11-1767135180/5/5_ 0.43008230.00.020.02 161.35.27.144http/1.1localhost:443GET /_all_dbs HTTP/1.1 12-1767135301/4/4C 0.770015421.40.010.01 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-1767135320/5/5_ 0.010170.00.000.00 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1767135380/3/3W 0.42008090.00.010.01 159.203.94.228http/1.1www.wealneosupply.com:443GET /.vscode/sftp.json HTTP/1.1 15-1767135440/5/5_ 0.88091818440.00.010.01 172.68.234.149http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1695576600.91854906082153320312 16-1767135500/5/5W 0.50009970.00.010.01 142.93.158.96http/1.1localhost:443GET /server-status HTTP/1.1 17-1767135561/2/2C 0.001261.30.000.00 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 18-1767135620/3/3R 0.4023998020.00.000.00 173.249.24.3http/1.1 19-1767135680/3/3R 0.011160.00.000.00 94.232.42.51http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 14subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 290...296)index usage: 0%, cache usage: 0%total entries stored since starting: 14total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 57 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-24 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1207d8ceaApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 26-Jul-2023 09:01:38 +07 Restart Time: Wednesday, 26-Jul-2023 09:00:29 +07 Parent Server Config. Generation: 1497 Parent Server MPM Generation: 1496 Server uptime: 1 minute 9 seconds Server load: 4.15 4.11 3.98 Total accesses: 492 - Total Traffic: 4.8 MB - Total Duration: 620658 CPU Usage: u2443.57 s4097.17 cu38597700 cs9240120 - 6.93e+7% CPU load 7.13 requests/sec - 71.8 kB/second - 10.1 kB/request - 1261.5 ms/request 10 requests currently being processed, 10 idle workers _C_W___W_CR_CW_CC__C.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1496258430/36/36_ 12.4201556470.00.210.21 147.182.168.210http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-1496259951/27/33C 15.1700414111.40.250.32 104.236.193.132http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1496260230/24/31_ 9.510619283470.00.160.24 159.203.44.43http/1.1www.wealneosupply.com:443GET /about HTTP/1.1 3-1496261110/14/15W 3.150063550.00.060.06 104.236.193.132http/1.1localhost:443GET /server-status HTTP/1.1 4-1496261290/8/12_ 3.2101144920.00.060.11 142.93.64.15http/1.1localhost:443GET /server-status HTTP/1.1 5-1496258900/40/40_ 21.700971448340.00.360.36 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 6-1496258980/29/29_ 19.9001778437640.00.440.44 172.68.234.148http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 7-1496259000/30/30W 16.9310368960.00.330.33 172.70.254.193http/1.1www.accgoing.com:80POST /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0 8-1496261300/2/13_ 1.7707998365390.00.010.19 172.68.234.165http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1690336890.07536196708679199218 9-1496259131/41/41C 18.4906093974311.10.340.34 45.79.116.95http/1.1www.wealneosupply.com:443GET /.vscode/sftp.json HTTP/1.1 10-1496259190/35/35R 19.031984385030.00.320.32 167.99.67.145http/1.1www.chonlateedesign.com:443 11-1496259250/31/31_ 18.0310382140.00.310.31 104.236.193.132http/1.1localhost:443GET /about HTTP/1.1 12-1496259361/27/27C 16.3110447981.40.280.28 142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-1496259420/28/28W 18.1310417030.00.380.38 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 14-1496261480/2/3_ 0.67070314090.00.020.02 20.7.8.28http/1.1www.tkadvicesystem.com:443POST //wp-login.php HTTP/1.1 15-1496261551/4/8C 0.990166363.70.020.06 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 16-1496259601/30/30C 17.8800363601.40.340.34 147.182.168.210http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1496259660/33/33_ 18.5200424750.00.330.33 147.182.168.210http/1.1localhost:443GET /about HTTP/1.1 18-1496261630/2/3_ 0.980100020020.00.010.01 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 19-1496261691/2/14C 0.0000205221.40.000.17 161.35.190.56http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 48subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 266 seconds, (range: 232...295)index usage: 1%, cache usage: 2%total entries stored since starting: 48total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 121 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-07-26 02:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1f7ca26cfApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 25-Oct-2022 13:32:59 +07 Restart Time: Tuesday, 25-Oct-2022 13:31:03 +07 Parent Server Config. Generation: 461 Parent Server MPM Generation: 460 Server uptime: 1 minute 56 seconds Server load: 2.32 1.77 1.42 Total accesses: 465 - Total Traffic: 3.1 MB - Total Duration: 514036 CPU Usage: u794.81 s1305.83 cu12902400 cs3103420 - 1.38e+7% CPU load 4.01 requests/sec - 27.6 kB/second - 6.9 kB/request - 1105.45 ms/request 21 requests currently being processed, 19 idle workers RRWW_WCRW._____C_C__W_CW__CCC_W_.__WC_CC__........ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-460196120/32/32R 11.811728435620.00.200.20 139.177.198.221http/1.1 1-460196130/24/24R 16.60151377540.00.140.14 185.165.118.130http/1.1www.chonlateeinternational.com: 2-460196160/39/39W 17.4200402060.00.310.31 139.177.198.221http/1.1localhost:443GET /server-status HTTP/1.1 3-460196280/32/32W 18.7100533140.00.350.35 162.158.90.64http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 4-460196350/42/42_ 20.6711070469670.00.230.23 139.162.49.205http/1.1www.wealneosupply.com:443GET /telescope/requests HTTP/1.1 5-460196610/32/32W 17.1600481210.00.250.25 172.70.250.215http/1.1www.siamautomation.com:443GET /sitemap.txt HTTP/1.1 6-460196701/40/40C 18.5500484432.60.200.20 139.177.198.221http/1.1localhost:443GET /.env HTTP/1.1 7-460196720/38/38R 17.671384381560.00.330.33 74.125.150.93http/1.1www.tspaccount.net:443GET /wp-content/themes/chonlateedesign/fonts/fontawesome-webfon 8-460196850/59/59W 18.0600407400.00.450.45 172.68.234.164http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 9-460-0/0/30. 0.0010283540.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-460197410/27/27_ 12.5601378311930.00.190.19 172.68.234.150http/1.1www.accgoing.com:80GET /%E0%B8%AD%E0%B8%99%E0%B8%B8%E0%B8%8D%E0%B8%B2%E0%B8%95%E0% 11-460205530/10/10_ 1.241124730.00.030.03 139.177.198.221http/1.1 12-460205600/5/5_ 1.250104437620.00.010.01 139.162.49.205http/1.1www.wealneosupply.com:443GET /.git/config HTTP/1.1 13-460205620/5/5_ 1.21192330780.00.010.01 139.162.49.205http/1.1www.wealneosupply.com:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-460205730/1/1_ 0.011240.00.000.00 68.183.197.190http/1.1 15-460205741/2/2C 0.020162.30.000.00 139.177.198.221http/1.1localhost:443GET / HTTP/1.1 16-460205760/7/7_ 2.120122554680.00.020.02 139.162.49.205http/1.1www.wealneosupply.com:443GET /info.php HTTP/1.1 17-460205781/3/3C 1.130122952.60.010.01 139.177.198.221http/1.1localhost:443GET /telescope/requests HTTP/1.1 18-460205990/3/3_ 2.06085048570.00.010.01 162.158.90.64http/1.1www.torrong.com:80POST //xmlrpc.php HTTP/1.0 19-460206050/1/1_ 0.801199439890.00.090.09 195.211.77.140http/1.1www.wealneosupply.com:443GET / HTTP/1.1 20-460206100/3/3W 0.662020240.00.020.02 172.70.162.12http/1.1www.torrong.com:80GET / HTTP/1.0 21-460206130/2/2_ 1.320122537960.00.010.01 139.162.49.205http/1.1www.wealneosupply.com:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 22-460206181/3/3C 1.280129382.60.010.01 139.177.198.221http/1.1localhost:443GET /info.php HTTP/1.1 23-460206210/1/1W 0.001020.00.000.00 172.70.34.148http/1.1www.accgoing.com:80POST /wp-login.php HTTP/1.0 24-460206310/1/1_ 0.000120.00.000.00 159.203.83.218http/1.1 25-460206360/1/1_ 0.000120.00.000.00 68.183.197.190http/1.1 26-460206561/1/1C 0.070242.50.000.00 139.177.198.221http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 27-460206571/2/2C 0.650212792.70.000.00 139.177.198.221http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 28-460206581/1/1C 0.010242.60.000.00 139.177.198.221http/1.1localhost:443GET /.DS_Store HTTP/1.1 29-460206600/2/2_ 0.630124324940.00.000.00 68.183.197.190http/1.1 30-460206720/1/1W 0.620016700.00.000.00 139.177.198.221http/1.1localhost:443GET /.git/config HTTP/1.1 31-460206810/1/1_ 0.001120.00.000.00 159.203.83.218http/1.1 32-460-0/0/2. 0.000016420.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-460206870/2/2_ 0.6402719320.00.030.03 159.203.83.218http/1.1 34-460206900/1/1_ 0.620101920380.00.000.00 139.177.198.221http/1.1 35-460206960/0/0W 0.003000.00.000.00 172.68.189.158http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1666679575.03953695297241210937 36-460207011/2/2C 0.820118512.70.010.01 139.177.198.221http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 37-460207170/1/1_ 0.620105421080.00.010.01 139.162.49.205http/1.1www.wealneosupply.com:443GET /about HTTP/1.1 38-460207231/2/2C 0.640014730.20.010.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-460207291/2/2C 0.610121912.70.010.01 139.177.198.221http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 40-460207310/1/1_ 0.590103320650.00.010.01 139.162.49.205http/1.1www.wealneosupply.com:443GET /config.json HTTP/1.1 41-460207460/1/1_ 0.61087817570.00.010.01 139.162.49.205http/1.1www.wealneosupply.com:443GET /login.action HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 24subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 255 seconds, (range: 184...293)index usage: 0%, cache usage: 1%total entries stored since starting: 24total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 161 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-25 06:31
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-25 06:31
Last seen 2024-02-02 07:14
Open for 465 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e16761c0c4f72Apache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 14:14:52 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 4 hours 13 minutes 31 seconds Server load: 2.00 2.01 2.00 Total accesses: 1846615 - Total Traffic: 23.8 GB - Total Duration: 2141102390 CPU Usage: u207.86 s114.39 cu32089.3 cs2210.25 - 1.42% CPU load .759 requests/sec - 10.3 kB/second - 13.5 kB/request - 1159.47 ms/request 2 requests currently being processed, 126 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no1yes032001 229661no2yes032001 329394no4yes230004 529374no0yes032000 Sum407 2126006 ________________________________................................ ______________________________________W_______________________R_ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/29/14777_ 11.4410160260910.00.14193.76 164.92.192.25http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/26/15269_ 11.4410139013290.00.09198.95 159.203.44.43h2localhost:443[0/0] Software caused connection abort 0-92293730/28/14841_ 11.4520150309240.00.13192.70 161.35.155.246http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/24/15017_ 11.3880145874870.00.07185.95 162.243.186.177http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/23/14921_ 11.2920147711640.00.14185.41 159.203.44.43h2localhost:443[0/0] Software caused connection abort 0-92293730/23/15150_ 11.3940156649100.00.09188.50 162.243.186.177http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/24/14824_ 11.4410145588360.00.11200.21 162.243.161.105http/1.1localhost:80GET /login.action HTTP/1.1 0-92293730/20/15127_ 11.4520150181990.00.06187.56 161.35.155.246http/1.1localhost:80GET / HTTP/1.1 0-92293730/28/15095_ 11.4530145226800.00.07229.87 161.35.155.246http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-92293730/29/15223_ 11.3710148853290.00.14194.87 146.190.64.200http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-92293730/32/14792_ 11.4910154393220.00.08200.68 134.122.89.242http/1.1localhost:80GET / HTTP/1.1 0-92293730/27/14800_ 11.4810147156110.00.08195.44 139.144.150.23http/1.1localhost:80GET / HTTP/1.1 0-92293730/33/14664_ 11.4910137182700.00.13185.49 146.190.160.11http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-92293730/29/14820_ 11.4520169086470.00.07186.00 146.190.160.11http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/22/15768_ 11.3510141614970.00.08187.74 162.243.161.105http/1.1localhost:443GET / HTTP/1.1 0-92293730/29/14821_ 11.4540165341170.00.07182.46 146.190.160.11http/1.1localhost:80\x16\x03\x01\x01\n 0-92293730/30/14869_ 11.4520143404940.00.09206.35 139.144.150.23http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-92293730/27/14934_ 11.4520144939910.00.09189.27 146.190.160.11http/1.1localhost:80GET /about HTTP/1.1 0-92293730/21/14749_ 11.2930160388130.00.03200.51 164.90.205.35http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/30/14975_ 11.4410144639330.00.11193.79 162.243.161.105http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/26/14963_ 11.4520181495750.00.14193.40 134.122.89.242http/1.1localhost:80\x16\x03\x01\x01\b\x01 0-92293730/25/14990_ 11.2330147053460.00.08204.06 167.99.8.63http/1.1localhost:80\x16\x03\x01\x01\x1c\x01 0-92293730/28/15446_ 11.2530150748520.00.14188.26 162.243.161.105h2localhost:443[0/0] Software caused connection abort 0-92293730/26/14657_ 11.37100138764970.00.13190.18 162.243.186.177http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/30/14954_ 11.3890162205790.00.08186.86 146.190.64.200http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/28/14631_ 11.4320135981450.00.12196.97 164.92.192.25http/1.1localhost:443GET / HTTP/1.1 0-92293730/22/15129_ 11.4520144713420.00.04194.48 164.90.205.35http/1.1localhost:80GET / HTTP/1.1 0-92293730/25/14910_ 11.4560159187380.00.04213.29 139.144.150.45http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/27/14714_ 11.3520152174320.00.10175.91 139.144.150.45h2localhost:443[0/0] Software caused connection abort 0-92293730/22/15170_ 11.3510135139100.00.08225.12 159.223.102.13http/1.1localhost:80GET /.env HTTP/1.1 0-92293730/30/14649_ 11.4530155571720.00.04199.12 146.190.160.11http/1.1localhost:80GET / HTTP/1.1 0-92293730/23/14913_ 11.4520145814950.00.12185.11 164.90.205.35http/1.1localhost:80GET / HTTP/1.1 1-92-0/0/15731. 0.00360770138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00360770136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00360770174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00360770150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00360770146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00360770134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00360770172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00360770165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00360770127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00360770152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00360770148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00360770159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00360770159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00360770137016410.00.00183.04 159.223.
Found on 2024-02-02 07:14 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e16761ef25d83Apache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 10:24:10 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 22 minutes 49 seconds Server load: 2.94 2.85 2.73 Total accesses: 814502 - Total Traffic: 11.0 GB - Total Duration: 1005871780 CPU Usage: u187.18 s16.03 cu13881.1 cs728.27 - 8.5% CPU load 4.68 requests/sec - 66.3 kB/second - 14.2 kB/request - 1234.95 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 016374no5yes329000 216287no4yes527000 Sum209 856000 _________W___________W___W______................................ _WR_____W__R_________________W__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7163740/60/6277_ 32.241104785356600.00.9592.75 178.62.73.12http/1.1 0-7163740/58/6764_ 32.64081362367500.00.7689.17 203.170.192.183http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 0-7163740/57/6274_ 32.750074307620.00.6592.72 167.172.20.95http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-7163740/46/6576_ 31.95186071594170.00.6185.38 217.113.194.49http/1.1www.1smestartup.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-7163740/43/6307_ 32.750071472810.00.8381.80 137.184.106.30http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-7163740/59/6698_ 32.461080103390.00.7489.02 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-7163740/43/6487_ 32.690060620320.00.6099.23 159.65.138.217http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-7163740/50/6554_ 32.640069643820.00.5585.76 159.65.138.217http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-7163740/58/6556_ 32.760064873710.00.74127.66 159.223.108.26http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-7163741/52/6476W 31.660073461170.00.9083.43 3.224.220.101http/1.1www.chonlateeboi.com:443GET /22933rbhsitems/etidm43 HTTP/1.1 0-7163740/60/6223_ 32.740078364410.00.7579.36 164.92.192.25http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-7163740/49/6177_ 32.74096879752950.00.5680.54 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ocdxhvp-34659qitems/etidm.htm HTTP/1.1 0-7163740/56/6251_ 32.750055234910.00.7282.75 142.93.158.96http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-7163740/59/6470_ 32.570083771990.00.6886.91 159.65.138.217http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-7163740/61/6890_ 32.711062331060.00.7088.66 159.223.108.26http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7163740/59/6230_ 32.36083786429010.00.7281.26 159.223.108.26http/1.1 0-7163740/47/6393_ 32.74191766487510.00.6583.15 52.70.240.171http/1.1www.chonlateeboi.com:443GET /33065khrreti.html HTTP/1.1 0-7163740/52/6531_ 32.32084264518200.00.6884.99 178.62.73.12http/1.1 0-7163740/61/6554_ 32.670071396560.00.7783.43 142.93.158.96http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-7163740/63/6317_ 32.701100170694690.00.7588.57 85.208.96.211http/1.1www.chonlateefood.com:443GET /items/ond36050lenitidm.html HTTP/1.1 0-7163740/62/6597_ 32.670094654030.00.7391.34 178.62.73.12h2localhost:443[0/0] Software caused connection abort 0-7163741/55/6272W 28.80108073038530.00.7185.01 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7163740/51/6832_ 32.740078912280.00.5791.00 159.223.108.26http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-7163740/59/6369_ 32.69089265224500.00.7291.51 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ocdxhvp-4187qetidm.html HTTP/1.1 0-7163740/50/6274_ 32.690077119790.00.6178.80 159.223.108.26http/1.1localhost:80GET /about HTTP/1.1 0-7163741/64/6392W 32.050059471460.00.7782.71 85.208.96.197http/1.1www.chonlateeadmin.com:443GET /zioxhvp-28378betid HTTP/1.1 0-7163740/64/6382_ 32.731072904760.00.8492.23 142.93.158.96http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7163740/49/6375_ 32.571079637420.00.63112.85 159.65.138.217http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-7163740/46/6299_ 32.571068389680.00.6079.50 178.62.73.12http/1.1 0-7163740/50/6569_ 32.31183574441190.00.57118.43 178.62.73.12h2localhost:443[0/0] Software caused connection abort 0-7163740/53/6263_ 32.44079969259720.00.5591.82 178.62.73.12h2localhost:443[0/0] Software caused connection abort 0-7163740/62/6580_ 32.741071835870.00.7484.67 167.172.20.95http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-7-0/0/6466. 0.00163842274721740.00.0084.07 51.15.59.15http/1.1www.happy-carrent.com:443POST /xmlrpc.php HTTP/1.1 1-7-0/0/6249. 0.00163845268360270.00.0079.42 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=5501-seminary-rd-unit-2305s-falls-church-va-22041-5-ii- 1-7-0/0/6212. 0.001638959100680970.00.0080.31 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /pveitgo-24936retidm30cir.htm HTTP/1.1 1-7-0/0/5977. 0.00163884377800350.00.0079.41 52.167.144.137h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /8pcpoe/best-cursive-fonts-for-tattoo 1-7-0/0/6152. 0.00163884376922630.00.0092.62 52.70.240.171http/1.1www.chonlateeboi.com:443GET /42454qecvetidm79w HTTP/1.1 1-7-0/0/6223. 0.00163884766598140.00.0081.75 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ntcitgo-35802petid.htm HTTP/1.1 1-7-0/0/6251. 0.001638219370593040.00.0079.56 52.70.240.171http/1.1www.chonlateeboi.com:443GET /19075oqmiitems/etidm HTTP/1.1 1-7-0/0/6319. 0.00163888579594730.00.0084.70 52.167.144.186h2www.happy-carrent.com:443GET /wp-content/uploads/2018/09/Page-02-1024x410.jpg HTTP/2.0 1-7-0/0/6288. 0.001638114057278660.00.0081.40 52.167.144.186h2www.happy-carrent.com:443[1/1] done: stream 1, GET /wp-content/uploads/2018/09/Page-02-1 1-7-0/0/6224. 0.00163830979955160.00.0086.70 163.172.106.185http/1.1www.tspaccount.net:443POST /wp-login.php HTTP/1.1 1-7-0/0/6028. 0.00163867377872850.00.0086.08 185.191.171.5http/1.1www.chonlateefood.com:443GET /getid/rig11587vvpiitems HTTP/1.1 1-7-0/0/6552. 0.00163897160633540.00.0094.71 52.70.240.171http/1.1www.chonlateeboi.com:443GET /20484tbrmetidm1.htm HTTP/1.1 1-7-0/0/6284. 0.00163884581432030.00.0084.49
Found on 2024-01-07 03:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e1676e6d8e53fApache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 02:21:06 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 16 hours 19 minutes 45 seconds Server load: 2.56 2.71 2.73 Total accesses: 293586 - Total Traffic: 4.2 GB - Total Duration: 256631042 CPU Usage: u664.55 s36.08 cu4282.28 cs230.01 - 8.87% CPU load 4.99 requests/sec - 74.1 kB/second - 14.8 kB/request - 874.126 ms/request 10 requests currently being processed, 118 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 019907no2yes032001 419908no1yes131000 719927no2yes428000 919931no5yes527000 Sum4010 10118001 ________________________________................................ ................................................................ ______________W_________________................................ ................................_W__________W__W__R_____________ ................................____________W_W_R__R______W_____ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2199070/234/3077_ 139.921488025488510.02.6545.68 52.70.240.171http/1.1www.chonlateeboi.com:443GET /29413biwxitems/etidm33 HTTP/1.1 0-2199070/227/3322_ 139.9213106624080130.02.9143.86 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ojqsvcw-355291detid HTTP/1.1 0-2199070/221/3014_ 140.090127336783140.02.7552.39 159.203.94.228http/1.1 0-2199070/224/3254_ 140.26391926664960.02.9041.37 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?utjggdh-206369weti.html HTTP/1.1 0-2199070/211/3135_ 140.447135524608400.02.3739.19 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /gphfciu-9405uetidm.html HTTP/1.1 0-2199070/226/3379_ 139.996107427260980.03.0442.73 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?iuxggdh-187767kitems/etidm87vh.htm HTTP/1.1 0-2199070/229/3151_ 139.922024651200.02.8154.38 139.144.150.23http/1.1 0-2199070/245/3165_ 140.3813105425533690.02.6041.00 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?qfrhlzs-117835eitems/eti.htm HTTP/1.1 0-2199070/237/3212_ 140.52385025422860.02.5483.33 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?mtbggdh-191333oetidm60.html HTTP/1.1 0-2199070/222/3143_ 140.522024565300.02.8540.67 162.243.161.105http/1.1localhost:80GET /about HTTP/1.1 0-2199070/228/3075_ 140.25201428110600.02.7837.78 66.249.71.7http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.GET /wp-content/uploads/siteorigin-widgets/sow-price-table-atom 0-2199070/246/3023_ 140.51411724726140.02.8638.91 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 0-2199070/213/2980_ 140.52384324673620.02.5340.75 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /vzwismm-37994jetidm82imj HTTP/1.1 0-2199070/211/3263_ 140.514035966440.02.5844.24 139.144.150.23http/1.1localhost:443GET / HTTP/1.1 0-2199070/225/3320_ 140.3814423928105910.02.4944.48 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /sitemap74.xml HTTP/1.1 0-2199070/201/3050_ 140.485102225586760.02.3339.49 40.77.167.38h2www.chonlateefood.com:443GET /items/eit30632ihpotidm769805.html HTTP/2.0 0-2199070/215/3002_ 140.48586328655950.02.6638.97 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?ddaqxjd-369996netidm73q HTTP/1.1 0-2199070/218/3297_ 140.234131824213840.02.4743.64 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?afwhsbr-53781jetidm77n.htm HTTP/1.1 0-2199070/220/3194_ 140.083024014660.02.5941.60 170.130.204.98http/1.1localhost:80GET / HTTP/1.0 0-2199070/217/3038_ 139.987130528586200.02.5144.84 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?etdggdh-273901qitems/eti HTTP/1.1 0-2199070/224/3089_ 140.197105024087560.02.8543.89 3.224.220.101http/1.1www.chonlateeboi.com:443GET /14426biwxitems/etid.html HTTP/1.1 0-2199070/213/3139_ 140.33386626479110.02.6544.82 3.224.220.101http/1.1www.chonlateeboi.com:443GET /29707khrritems/etidm HTTP/1.1 0-2199070/237/3482_ 139.386246824419030.02.7644.23 40.77.167.38h2www.chonlateefood.com:443[0/0] init 0-2199070/198/2971_ 140.063103624194070.02.2639.06 52.167.144.145h2www.chonlateeadmin.com:443GET /vkkxzet-20184xetidm11ixx.htm HTTP/2.0 0-2199070/232/3041_ 140.4010100024449610.02.8138.81 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /cfdismm-14133qetidm.html HTTP/1.1 0-2199070/220/3020_ 139.894103324266400.02.7839.22 52.167.144.145h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /vkkxzet-20184xetidm11ixx.htm 0-2199070/209/3101_ 140.225112027420030.02.8049.89 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?sjosvcw-74859betidm8.htm HTTP/1.1 0-2199070/206/3082_ 140.351131128513550.02.7870.00 137.184.162.65http/1.1 0-2199070/223/2988_ 140.35285024524470.02.6337.60 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wfxhlzs-95611kitems/eti.htm HTTP/1.1 0-2199070/230/3339_ 140.225111223196700.02.6878.24 40.77.167.38h2www.chonlateefood.com:443[1/1] done: stream 1, GET /items/eit30632ihpotidm769805.html 0-2199070/229/3038_ 140.447106924404290.02.8646.96 3.224.220.101http/1.1www.chonlateeboi.com:443GET /29982khrretidm42e.htm HTTP/1.1 0-2199070/230/3393_ 140.181066327219900.02.8341.46 157.245.202.8http/1.1www.12gobiz.com:443POST /wp-login.php HTTP/1.1 1-1-0/0/2323. 0.00695786617630010.00.0030.27 207.46.13.154http/1.1www.thaidaoherb.com:443GET /9i7h/dyv42461ryyhc053875235.html HTTP/2.0 1-1-0/0/2100. 0.006957173417390000.00.0027.02 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /db.php?g3192039.shtml HTTP/1.1 1-1-0/0/2227. 0.006957107117630050.00.0030.69 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?rngadej-26472tetidm80eat.htm HTTP/1.1 1-1-0/0/2089. 0.006957211517285130.00.0027.89 66.249.69.229http/1.1www.chonlateenextbiz.com:443GET /db.php?g335424.shtml HTTP/1.1 1-1-0/0/2129. 0.00695785117106500.00.0032.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /48835biwxitems/etidm HTTP/1.1 1-1-0/0/2185. 0.00695785816794840.00.0028.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jryadej-23266letid HTTP/1.1 1-1-0/0/2135. 0.00695797217421340.00.0026.37 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22684biwxetidm7 HTTP/1.1 1-1-0/0/2185. 0.0069571717237790.00.0029.46 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?papaw99.xml HTTP/1.1 1-1-0/0/2163. 0.00695784617365570.00.0029.98 23.22.35.162http/1.1www.chonlateeboi.com:443GET /42349biwxitems/etidm52 HTTP/1.1 1-1-0/0/2112. 0.00695789516912400.00.0027.55 185.191.171.3http/1.1www.chonlateefood.com:443GET /geti/cer43578htewitems.htm HTTP/1.1 1-1-0/0/2118. 0.006957102016733450.00.0031.98 157.55.39.202h2www.chonlateeadmin.com:443[1/1] done: stream 1, GET /tviipbe-4943
Found on 2024-01-05 19:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e1676709bfb4fApache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Monday, 11-Dec-2023 19:12:38 ICT Restart Time: Friday, 01-Dec-2023 00:22:58 ICT Parent Server Config. Generation: 41 Parent Server MPM Generation: 40 Server uptime: 10 days 18 hours 49 minutes 40 seconds Server load: 0.83 0.79 0.90 Total accesses: 4249863 - Total Traffic: 54.5 GB - Total Duration: 4032323739 CPU Usage: u225.37 s46.57 cu76365.7 cs4002.43 - 8.65% CPU load 4.56 requests/sec - 61.4 kB/second - 13.5 kB/request - 948.813 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 010297no8yes329004 22452no2yes527001 Sum2010 856005 ______W_________W____________W__................................ __R________RWW_R________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-40102970/69/38296_ 40.541936349490640.00.82485.24 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?fmyzslq-12368letidm16s.htm HTTP/1.1 0-40102970/69/37630_ 40.7900356356320.00.78475.88 165.232.76.155http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-40102970/80/38011_ 40.7800391258320.00.90487.86 139.59.182.142http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-40102970/72/38079_ 40.7210378635550.00.81498.26 139.59.182.142http/1.1localhost:80GET /about HTTP/1.1 0-40102970/68/38581_ 40.191868360283720.00.89552.11 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?247273evvmitems/eti HTTP/1.1 0-40102970/74/37649_ 40.7110389380420.00.96476.78 165.232.76.155http/1.1localhost:80GET / HTTP/1.1 0-40102971/63/37992W 40.6200390191800.00.82479.50 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?mqbadej-157533oitems/etidm65.htm HTTP/1.1 0-40102970/65/38732_ 39.8600358495080.00.86486.46 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /uibpcov102343o158d95b0d.html HTTP/1.1 0-40102970/61/37719_ 40.7900370536210.00.75494.76 162.243.184.251http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-40102970/61/38147_ 38.880914358505410.00.72488.39 217.182.175.125http/1.1www.12gobiz.com:443GET /tag/%E0%B8%99%E0%B8%B2%E0%B8%94%E0%B9%89%E0%B8%A7%E0%B8%87 0-40102970/65/37646_ 39.8511147374276510.00.82458.69 139.59.182.142h2localhost:443[0/0] Software caused connection abort 0-40102970/77/37755_ 40.7710358117200.00.88508.51 139.59.182.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-40102970/66/37575_ 40.691922365573980.00.78458.51 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?pwijoap-38196vetid HTTP/1.1 0-40102970/59/37787_ 40.7010394576610.00.75487.79 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /ginpcov247487a9gh5y/16b4427ee.htm HTTP/1.1 0-40102970/60/38057_ 40.790689369694600.00.77478.54 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?bauafnb-30434hetidm73onh.htm HTTP/1.1 0-40102970/80/37705_ 40.160658362632770.00.91532.97 139.59.182.142http/1.1 0-40102971/67/38717W 40.6600366153260.00.84513.30 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?247284evvmetidm2.htm HTTP/1.1 0-40102970/64/38161_ 40.7710356731250.00.78471.26 164.90.205.35http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-40102970/65/38176_ 40.6210358267030.020.09494.28 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /yifpcov244983srlexc7/ab87283e4 HTTP/1.1 0-40102970/68/38497_ 40.021886374272510.00.86501.83 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?hxakrdj-25500netid HTTP/1.1 0-40102970/57/37883_ 40.041900352365580.00.69500.39 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dnsadej-124296fetidm86qaf.htm HTTP/1.1 0-40102970/71/38073_ 40.630658376820910.00.82492.72 66.249.64.227http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?svloazi-35235yitems/eti HTTP/1.1 0-40102970/74/37775_ 40.711937395548580.00.85501.05 66.249.71.3http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?dnwapuc-26692jitems/etid.html HTTP/1.1 0-40102970/67/37122_ 40.251890351688330.00.80462.34 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?ftytrge-28670letidm4.htm HTTP/1.1 0-40102970/68/38139_ 40.7900361606780.00.82507.66 91.92.252.167http/1.1www.bannongsaischool.com:80GET /admin.php HTTP/1.1 0-40102970/59/37425_ 40.7700378712770.00.72458.27 165.22.74.203http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-40102970/67/38161_ 40.711825362402430.00.75571.60 217.182.175.125http/1.1www.12gobiz.com:80GET /tag/%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B8%88%E0%B8%B1%E0%B8%81 0-40102970/63/37399_ 40.771643360930900.00.88498.35 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?cbvbopr-47413ietidm.html HTTP/1.1 0-40102970/59/37965_ 40.7510401655850.00.71510.78 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-40102971/60/37863W 33.591370363074200.00.71491.12 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-40102970/61/37973_ 39.7711233357659840.00.68481.72 66.249.64.226http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?umngazz-43323aitems/eti HTTP/1.1 0-40102970/63/37694_ 40.680904365821550.00.89525.08 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?mqbadej-122017oitems/eti HTTP/1.1 1-40-0/0/38863. 0.00809863364752980.00.00492.68 23.22.35.162http/1.1www.chonlateeboi.com:443GET /trust.php?291574evvmetidm20k HTTP/1.1 1-40-0/0/38802. 0.00809917373119540.00.00535.20 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?qwfadej-222771sitems/etidm.htm HTTP/1.1 1-40-0/0/38626. 0.00809603374504180.00.00537.29 66.249.64.102http/1.1www.chonlateefbc.com:443GET /?m=macbook-air-mac-book-pro-imac-mac-mini-macbook-mm-OPeRV 1-40-0/0/38884. 0.00809635382396960.00.00547.99 66.249.64.102http/1.1www.chonlateefbc.com:443GET /?m=genuine-msi-crosshair-15-r6e-b12ugz-414tr-battery-90wh- 1-40-0/0/39629. 0.00809623354047560.00.00604.02 66.249.71.165http/1.1www.chonlateefbc.com:443GET /?m=air-filter-472306-for-komatsu-engine-4d94-4d95s-p40-mm- 1-40-0/0/38433. 0.00809891350986300.00.00551.36 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?nncadej-289744petidm66aap HTTP/1.1 1-40-0/0/38562. 0.00809843351221390.00.00517.38 121.4.151.114http/1.1 1-40-0/0/38902. 0.00809868378421350.00.00496.70 65.109.127.29http/1.1www.thesungolden.com:443GET /tzeu2e/best-cheap-wonderkid-fm-2023.html HTTP/1.1 1-40-0/0/38702. 0.008091051367400040.00.00487.21 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?214574evvmitems/etidm53w.html HTTP/1.1 1-40-0/0/38838. 0.008090359455680.00.00497.82 3.233.221.90http/1.1www.12gobiz.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 1-40-0/0/39346. 0.008090355193580.00.00521.44 23.2
Found on 2023-12-11 12:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e48e1676e48e16769c083a8aApache Status Apache Server Status for smtp.wealneosupply.com (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 25-Nov-2023 00:29:38 ICT Restart Time: Friday, 24-Nov-2023 14:51:08 ICT Parent Server Config. Generation: 3 Parent Server MPM Generation: 2 Server uptime: 9 hours 38 minutes 29 seconds Server load: 1.68 1.52 1.55 Total accesses: 79885 - Total Traffic: 1.2 GB - Total Duration: 42570549 CPU Usage: u49.58 s5.2 cu1189.91 cs70.87 - 3.79% CPU load 2.3 requests/sec - 35.0 kB/second - 15.2 kB/request - 532.898 ms/request 5 requests currently being processed, 123 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 05771no0yes131000 15930no2yes230001 35783no2yes131000 75934no6yes131103 Sum4010 5123104 ___________________R________________________R_____W_____________ ................................____________________________R___ ................................................................ ................................___________________W____________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-257710/24/682_ 9.12604959150.00.238.74 154.28.229.30http/1.1 0-257710/30/738_ 8.80603815480.00.237.71 154.28.229.30http/1.1 0-257710/26/778_ 9.0747403948920.00.208.32 144.126.202.105http/1.1www.twinbuilt.co.th:80GET /.DS_Store HTTP/1.1 0-257710/28/689_ 9.6407904528980.00.298.27 139.144.150.45http/1.1www.wealneosupply.com:443GET / HTTP/1.1 0-257710/25/851_ 9.5410164288810.00.139.99 68.178.149.81http/1.1www.chonlateepr.com:443POST /wp-includes/blocks/details/admin-ajax.php HTTP/1.1 0-257710/25/775_ 8.9669544714810.00.1911.09 31.184.236.42http/1.1 0-257710/22/830_ 8.90104044660.00.208.70 144.126.198.24h2localhost:443[0/0] Software caused connection abort 0-257710/36/783_ 9.07020384293920.00.219.57 139.144.150.45http/1.1www.wealneosupply.com:443GET / HTTP/1.1 0-257710/26/712_ 8.81304583700.00.158.25 205.169.39.207http/1.1 0-257710/18/712_ 9.311020313974230.00.117.78 68.178.221.71http/1.1www.chonlateepr.com:443POST / HTTP/1.0 0-257710/24/985_ 9.34604491370.00.1422.89 154.28.229.30http/1.1 0-257710/25/750_ 9.59204936700.00.129.11 46.101.103.192http/1.1localhost:80GET / HTTP/1.1 0-257710/29/717_ 9.54104883923930.00.2716.59 146.70.165.230http/1.1www.theangelluxury.com:443GET / HTTP/1.1 0-257710/28/777_ 8.80603917810.00.178.21 154.28.229.30http/1.1 0-257710/31/766_ 8.49204178390.00.1711.83 194.36.25.9h2localhost:443[0/0] Software caused connection abort 0-257710/22/838_ 9.03284012270.00.3811.11 194.36.25.9h2localhost:443[0/0] Software caused connection abort 0-257710/21/779_ 9.63104480450.00.1111.34 128.199.61.251http/1.1www.wealneosupply.com:80GET /about HTTP/1.1 0-257710/25/893_ 9.56203744030.00.2231.27 139.144.150.205http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-257710/21/762_ 8.81204012400.00.2111.03 146.70.165.230h2localhost:443[0/0] Software caused connection abort 0-257710/29/888R 9.511114394291990.00.4821.94 217.70.32.7http/1.1 0-257710/37/795_ 9.20204303740.00.287.83 31.184.236.33http/1.1 0-257710/28/771_ 9.4718913888510.00.2916.49 144.126.198.24h2localhost:443[0/0] Software caused connection abort 0-257710/27/825_ 9.05108563821030.00.2313.86 66.249.71.2http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bGET /mds.php?qdjhgeq-5307witems/eti HTTP/1.1 0-257710/45/808_ 9.34610774071390.01.399.25 154.28.229.30http/1.1 0-257710/25/779_ 9.59224286500.00.2416.54 93.185.99.54http/1.1www.chonlateepr.com:443POST /wp-content/themes/sydney/woocommerce/css/css.php HTTP/1.0 0-257710/25/852_ 9.59104193200.00.187.33 128.199.61.251http/1.1www.wealneosupply.com:80GET / HTTP/1.1 0-257710/27/799_ 9.49114250660.00.2211.77 184.168.117.121http/1.1www.chonlateepr.com:443POST /wp-content/plugins/addons-for-elementor/assets/admin-ajax 0-257710/51/754_ 9.34404402970.00.228.52 3.137.191.34http/1.1localhost:80GET /.well-known/acme-challenge/MkIFRvgd4ZAIv5wKFyoi0KziXJwHIBz 0-257710/26/738_ 9.30003985470.00.219.20 144.126.198.24http/1.1 0-257710/23/760_ 9.5555074314680.00.1210.47 185.191.171.4http/1.1www.mkandptfoods.com:443GET /wzy.php?m85332392128.html HTTP/1.1 0-257710/23/801_ 9.31004514010.00.198.31 146.70.165.230http/1.1localhost:443GET / HTTP/1.1 0-257710/42/831_ 9.63104279620.00.179.17 46.101.103.192http/1.1localhost:80GET /about HTTP/1.1 1-259300/31/356_ 15.23002119200.00.194.14 45.55.193.222h2localhost:443[0/0] Software caused connection abort 1-259300/38/402_ 15.10102001160.00.255.00 144.126.198.24h2localhost:443[0/0] Software caused connection abort 1-259300/35/394_ 15.35002139480.00.305.19 128.199.61.251http/1.1www.wealneosupply.com:80GET /debug/default/view?panel=config HTTP/1.1 1-259300/34/411_ 15.02202354370.00.363.99 154.28.229.30http/1.1 1-259300/42/388_ 15.28102352230.00.363.58 139.144.150.205http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-259300/46/427_ 15.23002487720.00.444.26 144.126.198.24http/1.1localhost:443GET / HTTP/1.1 1-259300/53/378_ 15.22102073590.00.293.90 198.199.121.22http/1.1localhost:80\x16\x03\x01\x01\b\x01 1-259300/39/408_ 15.35002429710.00.586.27 198.199.121.22http/1.1www.wealneosupply.com:80GET /about HTTP/1.1 1-259300/57/375_ 14.68202020900.00.407.23 154.28.229.30http/1.1 1-259300/47/450_ 15.05102480740.00.555.10 31.184.236.33http/1.1 1-259300/39/411_ 15.32101821420.00.524.96 139.144.150.205http/1.1localhost:80GET /about HTTP/1.1 1-259300/56/373_ 15.221252569610.00.353.68 128.199.61.251http/1.1localhost:80\x16\x03\x01\x01\x04\x01 1-259300/43/479R 14.662242733600.00.335.38 146.70.165.230http/1.1 1-259300/69/514_ 15.2119281776540.00.754.07 159.65.58.104http/1.1localhost:80\x16\x03\x01\x01\b\x01 1-259300/46/413_ 15.31102507950.00.215.01 165.232.76.155http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-259300/39/369_ 14.59102334420.00.394.79 146.190.64.200h2localhost:443[0/0] Software caused connection abort
Found on 2023-11-24 17:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f19d154f17Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 03:15:41 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 2 hours 51 minutes 55 seconds Server load: 0.44 0.45 0.45 Total accesses: 11803 - Total Traffic: 192.4 MB - Total Duration: 25140535 CPU Usage: u3099.07 s5822.01 cu55530700 cs13588600 - 670000% CPU load 1.14 requests/sec - 19.1 kB/second - 16.7 kB/request - 2130.01 ms/request 9 requests currently being processed, 13 idle workers ___C_W_W_RCC_C__R_W___............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1964121430/21/1005_ 7.240021725930.00.5712.56 178.62.3.65http/1.1localhost:80GET /login.action HTTP/1.0 1-1964121490/17/970_ 9.120022375250.00.1014.39 164.92.192.25http/1.1localhost:80GET /login.action HTTP/1.0 2-1964121580/21/973_ 4.900021193740.00.8113.06 139.144.150.45http/1.1 3-1964123421/9/977C 0.170019592042.60.0216.31 139.144.150.45http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-1964116180/66/843_ 28.480018074780.00.4910.34 164.92.192.25http/1.1localhost:80GET /_all_dbs HTTP/1.0 5-1964123480/9/836W 0.020018767890.00.0110.87 198.199.121.22http/1.1localhost:80GET /server-status HTTP/1.0 6-1964123540/4/924_ 0.010120016470.00.0013.47 198.199.121.22http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1964117610/48/759W 25.465018092860.01.7810.05 159.89.83.196http/1.1www.smtts.co.th:443GET / HTTP/1.1 8-1964117670/54/857_ 28.650018925860.01.6711.40 167.172.20.95http/1.1localhost:80GET /.DS_Store HTTP/1.0 9-1964117680/53/668R 26.850013550880.00.958.41 178.62.73.12http/1.1 10-1964123601/3/551C 0.00008882640.20.005.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1964123661/3/593C 0.010012738782.40.008.64 167.172.232.142http/1.1localhost:443GET / HTTP/1.1 12-1964123720/5/287_ 0.01015765580.00.005.72 159.65.138.217http/1.1localhost:443GET /.env HTTP/1.1 13-1964123781/4/315C 0.01018307992.70.015.61 46.101.103.192http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 14-1964123840/1/162_ 0.00013406080.00.001.85 165.22.108.223http/1.1localhost:443GET /telescope/requests HTTP/1.1 15-1964123900/4/173_ 0.01013538530.00.012.35 161.35.176.95http/1.1localhost:80GET /_all_dbs HTTP/1.0 16-1964123960/2/158R 0.01002546060.00.003.11 139.144.150.45http/1.1localhost:443GET / HTTP/1.1 17-1964123980/1/98_ 0.00001546610.00.003.09 159.65.138.217http/1.1localhost:443GET /.git/config HTTP/1.1 18-1964124040/0/63W 0.00101261760.00.001.98 162.158.106.139http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%84%E0%B8%B2%E0%B9%80%E0%B8%9F%E0%B9%88%E0%B9%81 19-1964124100/3/106_ 0.00002012400.00.001.41 159.65.138.217http/1.1localhost:443GET /telescope/requests HTTP/1.1 20-1964124170/2/97_ 0.00001888410.00.002.90 159.65.138.217http/1.1localhost:443GET /config.json HTTP/1.1 21-1964124220/1/96_ 0.00011467890.00.007.53 159.65.138.217http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 22-1964-0/0/193. 0.0010213213903990.00.0019.39 172.68.234.185http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 23-1964-0/0/99. 0.00153201822810.00.002.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 16subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 253 seconds, (range: 86...299)index usage: 0%, cache usage: 0%total entries stored since starting: 111total entries replaced since starting: 0total entries expired since starting: 95total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5549 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 20:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1595b158fApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 09:00:53 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 4 hours 58 minutes 40 seconds Server load: 0.64 0.60 0.50 Total accesses: 28949 - Total Traffic: 408.7 MB - Total Duration: 59470438 CPU Usage: u3028.05 s5765.89 cu55148000 cs13501200 - 383000% CPU load 1.62 requests/sec - 23.4 kB/second - 14.5 kB/request - 2054.32 ms/request 8 requests currently being processed, 7 idle workers ____RWC.RWR___WW.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932231110/20/2376_ 3.590149628010.00.2226.11 138.68.133.118http/1.1localhost:80GET /.git/config HTTP/1.0 1-1932229150/63/2369_ 21.560149086700.00.4629.04 128.199.61.251http/1.1 2-1932228620/71/2407_ 24.550048980210.00.7131.01 207.154.240.169http/1.1localhost:80GET /login.action HTTP/1.0 3-1932232170/4/2341_ 0.030149150050.00.0038.78 146.190.64.200http/1.1 4-1932230630/33/2373R 7.510249566490.00.2141.49 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.0 5-1932230430/42/2194W 11.340043653390.00.3227.66 108.162.245.217http/1.1www.biztaste.com:80GET /tag/%E0%B8%9F%E0%B8%B2%E0%B8%81%E0%B8%97%E0%B9%88%E0%B8%B2 6-1932227891/77/2236C 15.670147426622.60.5428.08 172.105.37.32http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-1932-0/0/2111. 0.000043045230.00.0023.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1932232240/1/2024R 0.012243242360.00.0027.13 138.68.133.118http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1932227750/78/1924W 20.280037826780.00.6624.59 108.162.245.217http/1.1www.biztaste.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 10-1932230890/28/1555R 7.490032233410.00.2119.13 138.68.133.118http/1.1localhost:80GET /.env HTTP/1.0 11-1932232260/2/1201_ 0.030126060400.00.0016.83 159.89.83.196http/1.1 12-1932232360/3/1128_ 0.010122225310.00.0012.18 143.110.218.229http/1.1 13-1932232380/1/1040_ 0.020322124290.00.0045.85 46.101.103.192http/1.1 14-1932232440/4/446W 0.500010012850.00.015.00 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.0 15-1932232500/0/232W 0.00003683670.00.001.78 162.158.106.94http/1.1www.dr-rpi.com:443GET /tag/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B9%80 16-1932-0/0/255. 0.00214504355940.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/113. 0.00263801388040.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/178. 0.00200903176620.00.001.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/142. 0.00686402494810.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/177. 0.00667203205100.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/26. 0.0069880445250.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/99. 0.00857210801664140.00.001.31 162.158.189.46http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%9B 23-1932-0/0/2. 0.008995028590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 233 seconds, (range: 152...297)index usage: 0%, cache usage: 0%total entries stored since starting: 157total entries replaced since starting: 0total entries expired since starting: 142total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 18398 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 01:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1fe373e32Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 27-Oct-2023 02:47:49 +07 Restart Time: Friday, 27-Oct-2023 00:23:54 +07 Parent Server Config. Generation: 1896 Parent Server MPM Generation: 1895 Server uptime: 2 hours 23 minutes 54 seconds Server load: 4.07 4.20 3.92 Total accesses: 38400 - Total Traffic: 544.4 MB - Total Duration: 200573222 CPU Usage: u3232.15 s5668.94 cu53836000 cs13130400 - 776000% CPU load 4.45 requests/sec - 64.6 kB/second - 14.5 kB/request - 5223.26 ms/request 41 requests currently being processed, 0 idle workers CWRWWWCWWCWWRWCRWRWWCWCCWWCCCWWWCCCRWRC....WW..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1895301871/7/1655C 1.060381420895.10.0322.84 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 1-1895301990/2/1612W 1.630081607140.00.0123.66 23.22.35.162http/1.1www.nakindogtraining.com:443GET /wzy.php?till-LOCKS.xml HTTP/1.1 2-1895292030/51/1622R 31.00039382392570.00.7122.96 52.70.240.171http/1.1 3-1895293970/55/1667W 39.181081839570.00.8123.72 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=olight-deutschland-hofheim-in-taunus-mm-B9yM0I0 HTTP/1. 4-1895298440/20/1526W 11.800079214060.00.3921.00 141.98.6.209http/1.1www.nadapool.com:443POST //wp-login.php HTTP/1.1 5-1895299770/9/1651W 6.6815079573100.00.1420.96 52.167.144.166http/1.1www.nakindogtraining.com:443GET /wzy.php?rep-CONDUCTING.xml HTTP/1.1 6-1895301431/12/1578C 6.160177315741.40.0323.48 165.22.74.203http/1.1localhost:443GET /login.action HTTP/1.1 7-1895300010/16/1516W 5.884075652050.00.2120.92 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=neue-retro-laterne-olantern-classic-lite-pro-mm-ydO2Lsy 8-1895297620/33/1442W 16.600071965770.00.3819.79 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=orcam-myeye-pro-with-smart-reading-mm-doJ33ghN HTTP/1.1 9-1895302081/14/1538C 0.511171828981.40.0321.14 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1895298560/19/1476W 15.1512070902590.00.2421.16 52.167.144.209http/1.1www.nakindogtraining.com:443GET /wzy.php?fell-TRANSITIONS.xml HTTP/1.1 11-1895300270/7/1438W 3.9912072257380.00.0521.15 52.167.144.209http/1.1www.nakindogtraining.com:443GET /wzy.php?dicke-MIKES.xml HTTP/1.1 12-1895300440/12/1461R 6.073171446760.00.1020.82 185.220.101.2http/1.1 13-1895300560/9/1337W 5.742067344940.00.1319.32 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=orcam-read-smart-mm-LYqll5S5 HTTP/1.1 14-1895299061/31/1516C 14.961175305232.70.5219.53 134.122.89.242http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 15-1895292430/68/1507R 32.560072297410.01.1020.72 79.137.207.224http/1.1www.mgrandstructure.com:443 16-1895294030/67/1320W 43.269064656440.00.9316.78 165.232.76.155http/1.1www.wealneosupply.com:443GET / HTTP/1.1 17-1895302140/5/1336R 0.050163587330.00.0118.78 52.70.240.171http/1.1www.thaidaoherb.com:443 18-1895300930/12/1284W 7.302064834890.00.1818.77 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=olight-mm-pyODvco HTTP/1.0 19-1895299400/7/1123W 5.5015064615620.00.1515.24 23.22.35.162http/1.1www.nakindogtraining.com:443GET /wzy.php?proteins-GRIPS.xml HTTP/1.1 20-1895292561/73/1078C 32.690457768475.11.3116.07 143.110.156.182http/1.1localhost:443GET /server-status HTTP/1.1 21-1895301000/7/1051W 4.0313050843220.00.1114.23 23.22.35.162http/1.1www.nakindogtraining.com:443GET /wzy.php?strongly-PLANT.xml HTTP/1.1 22-1895302221/4/662C 0.060041084981.30.019.41 134.122.89.242http/1.1localhost:443GET /about HTTP/1.1 23-1895292781/66/704C 26.150146892451.30.819.56 139.144.150.8http/1.1localhost:443GET /.DS_Store HTTP/1.1 24-1895302230/3/701W 0.470039761540.00.029.94 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=orcam-read-smart-an-ai-assistive-reading-pen-for-mm-P1Z 25-1895301020/2/491W 1.878035798330.00.047.18 52.70.240.171http/1.1www.nakindogtraining.com:443GET /wzy.php?familiar-ELECTRIC.xml HTTP/1.1 26-1895302261/4/530C 0.061331286965.00.027.49 139.144.150.8http/1.1localhost:443GET /server-status HTTP/1.1 27-1895302311/6/347C 0.831025306211.40.014.91 165.22.74.203http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 28-1895302501/5/271C 0.021023674421.40.013.36 143.110.156.182http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 29-1895296040/47/450W 26.456026210100.00.565.83 23.22.35.162http/1.1www.nakindogtraining.com:443GET /wzy.php?involving-CORNERSTONE.xml HTTP/1.1 30-1895302590/1/286W 0.001017674790.00.003.69 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=neue-retro-laterne-olantern-classic-lite-pro-mm-4n2gyFL 31-1895293210/47/290W 31.0410020444510.00.743.62 52.70.240.171http/1.1www.nakindogtraining.com:443GET /wzy.php?investing-ALBANIA.xml HTTP/1.1 32-1895302611/2/348C 0.011026317511.30.014.91 139.144.150.8http/1.1localhost:443GET /login.action HTTP/1.1 33-1895302721/1/309C 0.010121348231.30.004.23 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 34-1895289481/76/396C 39.880220647885.12.527.15 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 35-1895302740/1/124R 0.00027585150.00.001.64 23.22.35.162http/1.1 36-1895302800/0/180W 0.000014348520.00.002.45 172.71.134.144http/1.1www.business.co.th:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 37-1895302860/1/196R 0.000111805710.00.002.53 3.224.220.101http/1.1 38-1895296311/43/64C 22.98036452570356.22.252.55 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=i5r-eos-edc-flashlight-for-valentine-s-day-olight-mm-k0 39-1895-0/0/64. 0.001503208450.00.000.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1895-0/0/11. 0.00167059930.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1895-0/0/111. 0.0014304303490.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1895-0/0/7. 0.00172037090.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1895296610/27/30W 12.85302554460.00.320.33 45.80.158.52http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1POST //wp-login.php HTTP/1.1 44-1895296670/35/84W 15.74003798080.06.857.56 159.65.58.104http/1.1localhost:80GET /server-status HTTP/1.0 45-1895-0/0/10. 0.001470342720.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 862subcaches: 32
Found on 2023-10-26 19:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f168b35fedApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 11-Oct-2023 07:25:04 +07 Restart Time: Wednesday, 11-Oct-2023 04:02:12 +07 Parent Server Config. Generation: 1824 Parent Server MPM Generation: 1823 Server uptime: 3 hours 22 minutes 52 seconds Server load: 1.74 1.31 1.04 Total accesses: 14785 - Total Traffic: 176.3 MB - Total Duration: 16108591 CPU Usage: u2861.22 s5345.47 cu52300300 cs12765400 - 535000% CPU load 1.21 requests/sec - 14.8 kB/second - 12.2 kB/request - 1089.52 ms/request 9 requests currently being processed, 1 idle workers RRRWRW_CRR........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-182345360/23/1359R 5.590213414910.00.2214.18 162.240.150.219http/1.1 1-182344300/42/1367R 14.260113934670.00.2514.83 139.144.150.8http/1.1 2-182344660/37/1395R 13.170115549780.00.2216.42 165.232.76.155http/1.1localhost:80GET / HTTP/1.0 3-182346100/5/1239W 0.080013716040.00.0017.91 147.182.168.210http/1.1localhost:80GET /server-status HTTP/1.0 4-182343920/40/1227R 14.27036315136370.00.4012.27 198.96.155.3http/1.1www.xn--m3cbp0adb4cva5bee03a.co 5-182342910/67/976W 32.960011589070.00.4111.25 172.70.42.34http/1.1www.orderaccounting.com:80GET /wp-admin/user/cloud.php HTTP/1.0 6-182342970/74/1253_ 30.810114863750.00.4415.21 161.35.27.144http/1.1 7-182345621/7/1169C 5.800190012899115.80.1014.61 137.184.106.30http/1.1www.wealneosupply.com:443GET / HTTP/1.1 8-182346170/0/970R 0.00009507720.00.0016.61 64.227.126.135http/1.1 9-182346190/1/982R 0.060210199370.00.009.57 143.110.156.182http/1.1localhost:80GET /login.action HTTP/1.0 10-1823-0/0/711. 0.0037607157980.00.0012.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1823-0/0/542. 0.002475595403260.00.004.93 172.68.234.169http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81 12-1823-0/0/390. 0.0036804908720.00.004.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1823-0/0/34. 0.003460194980.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1823-0/0/247. 0.0037702628200.00.002.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1823-0/0/199. 0.00012047120.00.002.38 128.199.61.251http/1.1 16-1823-0/0/298. 0.00103542260.00.002.47 64.227.126.135http/1.1 17-1823-0/0/101. 0.00100920991000.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1823-0/0/102. 0.0093515051028690.00.000.82 188.116.22.119http/1.1www.tkadvicesystem.com:443GET /wp/ HTTP/1.1 19-1823-0/0/13. 0.00100220144960.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1823-0/0/100. 0.0093277821131590.00.000.84 20.127.125.189http/1.1www.dreamhightravel.com:443GET /wp.php HTTP/1.1 21-1823-0/0/3. 0.00100930300.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1823-0/0/4. 0.00100960210.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1823-0/0/3. 0.0010106050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1823-0/0/101. 0.001010501095670.00.001.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 118subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 114 seconds, (range: 10...275)index usage: 4%, cache usage: 5%total entries stored since starting: 3614total entries replaced since starting: 0total entries expired since starting: 3496total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 76 hit, 4901 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-11 00:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1527176aeApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 03-Oct-2023 23:18:47 +07 Restart Time: Tuesday, 03-Oct-2023 04:02:11 +07 Parent Server Config. Generation: 1799 Parent Server MPM Generation: 1798 Server uptime: 19 hours 16 minutes 35 seconds Server load: 1.09 0.86 0.83 Total accesses: 102481 - Total Traffic: 2.4 GB - Total Duration: 162274328 CPU Usage: u2882.62 s5290.34 cu51827800 cs12662600 - 92900% CPU load 1.48 requests/sec - 36.4 kB/second - 24.6 kB/request - 1583.46 ms/request 14 requests currently being processed, 3 idle workers WWWWWRWWWW_RRR_R_................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-179830120/86/8607W 43.2640148798240.00.98246.45 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1696349922.23879408836364746093 1-179835050/35/8546W 15.8810132820540.00.28185.45 138.199.60.178http/1.1www.chonlateepr.com:443GET / HTTP/1.1 2-179834470/37/8144W 19.0400128724170.00.33176.16 172.68.234.202http/1.1www.report.business.co.th:443GET / HTTP/1.1 3-179837080/9/8025W 0.9800134010830.00.03227.91 128.199.61.251http/1.1localhost:80GET /server-status HTTP/1.0 4-179832500/66/7723W 28.6900119612090.02.29224.63 45.61.186.93http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 5-179837160/5/7594R 1.3100117925170.00.01175.48 139.144.150.23http/1.1localhost:80GET /config.json HTTP/1.0 6-179832770/67/7543W 26.4410116604080.01.07164.42 27.254.96.168http/1.1www.12gobiz.com:443GET /category/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0% 7-179837170/7/7375W 1.0710114882860.00.02151.17 172.68.234.217http/1.1www.report.business.co.th:443POST /wp-cron.php?doing_wp_cron=1696349925.77579808235168457031 8-179832850/60/6572W 26.680620110454250.02.16151.05 139.59.65.144http/1.1www.smtts.co.th:443GET / HTTP/1.1 9-179832910/57/6580W 25.6640102890820.03.01133.51 172.68.138.174http/1.1www.report.business.co.th:443GET /wp-login.php HTTP/1.1 10-179837310/3/5767_ 4.630128197497860.00.18180.10 139.59.182.142http/1.1 11-179837330/5/5082R 0.460078158400.00.01132.57 137.184.150.232http/1.1 12-179837390/5/3886R 0.980262001730.00.0293.91 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.0 13-179837450/7/3051R 0.680245950680.00.0872.75 178.62.3.65http/1.1localhost:80GET /server-status HTTP/1.0 14-179837590/4/2035_ 0.070030534940.00.0041.74 159.203.44.43http/1.1 15-179837780/1/1602R 0.120121205710.00.0033.85 178.62.73.12http/1.1 16-179837840/2/880_ 0.010012053300.00.0021.54 143.110.218.229http/1.1 17-1798-0/0/291. 0.0011765763932620.00.003.82 172.71.175.89http/1.1www.altaccount.com:80GET /fm.php HTTP/1.0 18-1798-0/0/357. 0.00143705543150.00.007.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1798-0/0/308. 0.00142305379960.00.007.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1798-0/0/166. 0.00103001917570.00.001.62 172.69.166.126http/1.1www.mbaaccount.com:80GET /xmlrpc.php HTTP/1.0 21-1798-0/0/181. 0.00102502219250.00.001.64 172.69.65.50http/1.1www.altaccount.com:80GET //Gecko.php HTTP/1.0 22-1798-0/0/102. 0.0014400738570.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1798-0/0/235. 0.00143504786540.00.002.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1798-0/0/238. 0.00125403414640.00.003.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1798-0/0/174. 0.00644802258600.00.002.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1798-0/0/12. 0.0064440132980.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1798-0/0/99. 0.00542221931778170.00.001.26 185.191.171.7http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B9%83 28-1798-0/0/103. 0.0064460940790.00.002.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1798-0/0/7. 0.006453099910.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1798-0/0/12. 0.0064540247870.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1798-0/0/189. 0.00545703328680.00.002.39 128.199.61.251http/1.1localhost:443GET /_all_dbs HTTP/1.1 32-1798-0/0/190. 0.00544902308920.00.003.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1798-0/0/99. 0.00544913381712710.00.001.19 149.202.65.189http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%99 34-1798-0/0/123. 0.00645701056340.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1798-0/0/125. 0.00644501403490.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1798-0/0/11. 0.0064560217480.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1798-0/0/57. 0.0064601573560.00.001.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1798-0/0/10. 0.0064590121730.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1798-0/0/9. 0.0064610129820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1798-0/0/44. 0.0064580551430.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1798-0/0/9. 0.00390310116370.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1798-0/0/12. 0.00390200172750.00.000.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1798-0/0/5. 0.0039034076270.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1798-0/0/76. 0.003902701477960.00.001.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1798-0/0/5. 0.0039040020710.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1798-0/0/104. 0.0038776547812450.00.001.54 159.192.136.230http/1.1www.importantaccount.com:443POST //xmlrpc.php HTTP/1.1 47-1798-0/0/10. 0.0039019051750.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1798-0/0/101. 0.00387642271071880.00.001.39 54.36.148.103http/1.1www.chonlateedesign.com:443GET /wp-content/uploads/2022/10/Chondesign_logo_-174-215x215.jp 49-1798-0/0/5. 0.0039038022460.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes tran
Found on 2023-10-03 16:17 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f155f5897cApache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 29-Sep-2023 05:02:48 +07 Restart Time: Friday, 29-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1785 Parent Server MPM Generation: 1784 Server uptime: 1 hour 35 seconds Server load: 0.62 0.45 0.46 Total accesses: 3511 - Total Traffic: 61.8 MB - Total Duration: 4855436 CPU Usage: u2838.9 s5257.39 cu51551000 cs12605400 - 1770000% CPU load .966 requests/sec - 17.4 kB/second - 18.0 kB/request - 1382.92 ms/request 9 requests currently being processed, 3 idle workers __WW_RWRW..R..RW.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1784257320/57/334_ 19.14014836660.00.534.86 128.199.61.251http/1.1localhost:80GET /server-status HTTP/1.0 1-1784257570/48/302_ 18.33004274280.00.4315.87 164.92.84.255http/1.1 2-1784258570/40/332W 16.22004657230.00.255.72 128.199.62.55http/1.1localhost:80GET /server-status HTTP/1.0 3-1784261020/12/263W 1.14003221640.00.054.59 207.46.13.17http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 4-1784261210/3/327_ 0.01004440930.00.004.25 165.232.76.155http/1.1 5-1784254350/75/295R 24.66004348810.00.784.78 143.198.72.96http/1.1localhost:80GET /about HTTP/1.0 6-1784259440/26/322W 6.18204277390.00.215.83 68.183.64.176http/1.1www.smtts.co.th:443GET / HTTP/1.1 7-1784261280/1/258R 0.00013751340.00.003.32 134.122.34.144http/1.1 8-1784261340/2/255W 0.00003468630.00.003.06 27.254.96.168http/1.1www.smtts.co.th:443POST /wp-cron.php?doing_wp_cron=1695938567.93389701843261718750 9-1784-0/0/294. 0.0012204399370.00.003.37 161.35.190.56http/1.1localhost:80GET /.git/config HTTP/1.0 10-1784-0/0/87. 0.0075301249890.00.000.94 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1784254420/75/141R 27.17001274830.00.751.51 139.59.182.142http/1.1 12-1784-0/0/21. 0.007520270190.00.000.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1784-0/0/102. 0.0075601438330.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1784254590/60/60R 33.01013621224250.00.600.60 164.90.205.35http/1.1 15-1784254610/76/76W 32.5800857350.00.650.65 74.249.240.138http/1.1www.12gobiz.com:443POST /wp-login.php HTTP/1.1 16-1784-0/0/42. 0.003330563160.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 106subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 87 seconds, (range: 0...296)index usage: 3%, cache usage: 5%total entries stored since starting: 677total entries replaced since starting: 0total entries expired since starting: 571total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 26 hit, 1221 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-28 22:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1efcece11Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 25-Sep-2023 00:29:54 +07 Restart Time: Monday, 25-Sep-2023 00:29:53 +07 Parent Server Config. Generation: 1768 Parent Server MPM Generation: 1767 Server uptime: 1 second Server load: 2.06 1.60 1.45 Total accesses: 20 - Total Traffic: 23 kB - Total Duration: 700 CPU Usage: u2668.91 s5168.9 cu51182200 cs12518900 - 6.37e+9% CPU load 20 requests/sec - 23.0 kB/second - 1177 B/request - 35 ms/request 6 requests currently being processed, 0 idle workers RRRRWR............................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1767134400/2/2R 0.030170.00.000.00 143.110.218.229http/1.1www.wealneosupply.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1767134410/2/2R 0.010260.00.000.00 159.65.58.104http/1.1 2-1767134450/7/7R 0.38006690.00.010.01 46.101.103.192http/1.1localhost:80GET /.DS_Store HTTP/1.0 3-1767134560/1/1R 0.001120.00.000.00 185.234.69.215http/1.1 4-1767134630/8/8W 0.0400140.00.010.01 198.199.121.22http/1.1localhost:80GET /server-status HTTP/1.0 5-1767134860/0/0R 0.000000.00.000.00 94.232.42.51http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 2subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 298 seconds, (range: 298...299)index usage: 0%, cache usage: 0%total entries stored since starting: 2total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 20 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-24 17:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1a05e77a1Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 26-Jul-2023 09:01:31 +07 Restart Time: Wednesday, 26-Jul-2023 09:00:29 +07 Parent Server Config. Generation: 1497 Parent Server MPM Generation: 1496 Server uptime: 1 minute 2 seconds Server load: 4.18 4.11 3.98 Total accesses: 375 - Total Traffic: 4.2 MB - Total Duration: 526948 CPU Usage: u2415.95 s4090.33 cu38597700 cs9240120 - 7.72e+7% CPU load 6.05 requests/sec - 68.9 kB/second - 11.4 kB/request - 1405.19 ms/request 11 requests currently being processed, 5 idle workers W_RWWWW_WR_W__..RW................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1496258430/28/28W 12.3800556320.00.200.20 137.184.150.232http/1.1localhost:80GET /server-status HTTP/1.0 1-1496259950/20/26_ 13.370922378310.00.220.29 142.93.64.15http/1.1 2-1496260230/17/24R 8.920630270750.00.150.22 147.182.168.210http/1.1 3-1496261110/8/9W 0.0200110.00.010.01 20.7.8.28http/1.1www.tkadvicesystem.com:443POST //wp-login.php HTTP/1.1 4-1496261290/1/5W 1.040091490.00.010.07 172.68.234.164http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-1496258900/32/32W 18.6800386670.00.310.31 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 6-1496258980/24/24W 15.2700325560.00.370.37 167.99.67.145http/1.1www.chonlateedesign.com:443POST //wp-login.php HTTP/1.1 7-1496259000/24/24_ 16.0400351120.00.310.31 139.144.150.8http/1.1localhost:80GET /.DS_Store HTTP/1.0 8-1496261300/1/12W 0.9110205420.00.010.19 172.68.234.165http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1690336890.07536196708679199218 9-1496259130/30/30R 16.2301352560.00.290.29 159.203.94.228http/1.1localhost:80GET /server-status HTTP/1.0 10-1496259190/28/28_ 15.5000313320.00.270.27 147.182.168.210http/1.1 11-1496259250/24/24W 16.0200339760.00.280.28 159.65.135.96http/1.1www.12gobiz.com:443POST //wp-login.php HTTP/1.1 12-1496259360/21/21_ 13.8400399010.00.240.24 159.203.44.43http/1.1 13-1496259420/22/22_ 16.220967357600.00.290.29 150.230.93.233http/1.1www.12gobiz.com:443POST /wp-login.php HTTP/1.1 14-1496-0/0/1. 0.0055000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1496-0/0/4. 0.0048046100.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1496259600/25/25R 17.320918353750.00.330.33 206.189.147.16http/1.1www.chonlateebusiness.com:443POST //wp-login.php HTTP/1.1 17-1496259660/23/23W 16.5830336370.00.300.30 172.70.54.191http/1.1www.accgoing.com:80GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 18-1496-0/0/1. 0.0053000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1496-0/0/12. 0.00230205180.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 40subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 271 seconds, (range: 239...297)index usage: 1%, cache usage: 1%total entries stored since starting: 40total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 85 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-07-26 02:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318547e3f18547e3f1e8b22011Apache Status Apache Server Status for smtp.wealneosupply.com (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 25-Oct-2022 13:32:52 +07 Restart Time: Tuesday, 25-Oct-2022 13:31:03 +07 Parent Server Config. Generation: 461 Parent Server MPM Generation: 460 Server uptime: 1 minute 49 seconds Server load: 1.74 1.65 1.38 Total accesses: 371 - Total Traffic: 2.6 MB - Total Duration: 415554 CPU Usage: u780.37 s1301.15 cu12902300 cs3103420 - 1.47e+7% CPU load 3.4 requests/sec - 24.1 kB/second - 7.1 kB/request - 1120.09 ms/request 14 requests currently being processed, 0 idle workers CRCCCWWCCCCWCC.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-460196121/28/28C 10.6201409692.70.180.18 172.104.179.101http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 1-460196130/24/24R 16.6091377540.00.140.14 185.165.118.130http/1.1www.chonlateeinternational.com: 2-460196161/35/35C 15.2611355382.60.300.30 172.104.179.101http/1.1localhost:443GET /.env HTTP/1.1 3-460196281/30/30C 17.0611482342.60.340.34 172.104.179.101http/1.1localhost:443GET /.git/config HTTP/1.1 4-460196351/40/40C 20.0701448272.60.220.22 157.245.53.210http/1.1localhost:443GET /.env HTTP/1.1 5-460196610/31/31W 16.3820365050.00.240.24 172.68.234.184http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1666679570.55735802650451660156 6-460196700/31/31W 18.4800484220.00.190.19 139.177.198.221http/1.1localhost:80GET /server-status HTTP/1.0 7-460196721/35/35C 16.3201348352.60.160.16 172.104.179.101http/1.1localhost:443GET /info.php HTTP/1.1 8-460196851/57/57C 16.9101379321.30.440.44 172.104.179.101http/1.1localhost:443GET /config.json HTTP/1.1 9-460197321/25/25C 11.8011256152.60.160.16 172.104.179.101http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-460197411/24/24C 10.3711239432.70.170.17 172.104.179.101http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-460205530/7/7W 0.51009620.00.010.01 172.70.243.39http/1.1www.siamautomation.com:443GET /sitemap HTTP/1.1 12-460205601/3/3C 0.000171.30.000.00 172.104.179.101http/1.1localhost:443GET /login.action HTTP/1.1 13-460205621/1/1C 0.000231.30.000.00 172.104.179.101http/1.1localhost:443GET /about HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 21subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 259 seconds, (range: 191...297)index usage: 0%, cache usage: 0%total entries stored since starting: 21total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 95 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-25 06:31
-