LeakIX - Host trlismore-login.cloudworkengine.net

Domain trlismore-login.cloudworkengine.net

United States

AMAZON-02

Ubuntu

Software information

Apache Apache 2.4.58

tcp/443

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 65.9.95.58
Domain: trlismore-login.cloudworkengine.net
Port: 443
URL: https://trlismore-login.cloudworkengine.net

First seen 2024-10-09 04:11
Last seen 2025-12-20 21:24
Open for 437 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a94e799f15

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 20-Dec-2025 21:24:34 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 14 hours 42 minutes 29 seconds
Server load: 0.80 0.91 0.82
Total accesses: 138457 - Total Traffic: 478.6 MB - Total Duration: 15047773
CPU Usage: u6.49 s7.08 cu29.37 cs17.45 - .0152% CPU load
.347 requests/sec - 1259 B/second - 3624 B/request - 108.682 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0134560/278/2517_
2.2541932807610.01.078.87
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2e514c9a666d2

0-0134560/225/2830_
2.2545133009360.00.749.69
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9d8149a8a51a0

0-0134560/209/2471_
2.285032890500.00.688.62
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2723d0c49d038

0-0134560/195/2589_
2.2549832727210.00.579.37
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_23d0d3d173713

0-0134560/309/2898_
2.2546753539470.01.279.92
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUjYE

0-0134560/220/2814_
2.282793612760.00.649.64
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/247/2685_
2.2543433319860.00.889.44
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bdb27eaa548bc

0-0134560/273/2966_
2.2639763314970.00.9110.51
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0134560/278/2624_
2.2728172867970.01.028.94
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0134560/267/3032_
2.2635533570470.00.9410.92
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ffe865252c0dd

0-0134560/211/2477_
2.2637762613250.00.829.10
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/233/2823_
2.2630632823850.00.829.66
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d376fc9c6121d

0-0134560/208/3068_
2.263252023094540.00.6410.40
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/247/2629_
2.272521853231220.00.818.91
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/198/2561_
2.2726642591960.00.619.07
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/241/3563_
2.2722153451550.00.7112.33
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0134560/291/2726_
2.2723333609820.01.119.21
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b1361a1b01f9a

0-0134560/302/2884_
2.2715433829970.01.029.54
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7343519064827

0-0134560/223/2863_
2.2719432668100.00.699.86
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1009ad662e786

0-0134560/240/3283_
2.2714652854820.00.8711.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/212/2713_
2.271862003089940.00.719.35
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDemB

0-0134560/273/3043_
2.285852570900.00.9810.48
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0134560/242/2806_
2.2712742645620.00.8010.06
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0134560/254/2652_
2.2885342550190.00.919.33
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134560/253/3292_
2.2810733210550.00.9711.60
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_584edf0bfd818

1-0134920/235/3165_
2.2020453787460.00.7910.93
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/270/2713_
2.201862102369030.01.029.29
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/265/2811_
2.2018042917230.00.949.73
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8a190597ac31c

1-0134920/229/3192_
2.2016822813110.00.7810.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2afdaa09a1267

1-0134920/235/2577_
2.219433269390.00.728.74
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_63a83d788fbad

1-0134920/226/2707_
2.2013962538530.00.779.19
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e8553609fc285

1-0134920/217/2810_
2.1931733058110.00.749.49
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a084e25e9da66

1-0134920/230/2631_
2.2025942810940.00.819.14
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2e0d62973af0d

1-0134920/219/2865_
2.2029132672280.00.709.53
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d7486e4ca24ec

1-0134920/232/2796_
2.2022843234160.00.879.80
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/244/2646_
2.2024142674780.00.799.13
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/258/2623_
2.2012132609420.00.748.79
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d785f3f70f84d

1-0134920/281/2319_
2.215742950550.01.008.09
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/239/2868_
2.217732638540.00.899.97
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e19bcf822199b

1-0134920/253/2437_
2.213622724580.01.038.68
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_517b7f92dc110

1-01349230/281/2614W
2.210029602044.11.139.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

1-0134920/212/2541_
2.1945733037360.00.688.80
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/225/2387_
2.1942732257900.00.928.25
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/248/2801_
2.1848743553010.00.919.61
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcOY

1-0134920/237/2995_
<

Found on 2025-12-20 21:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a95b637e87

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 18-Dec-2025 15:41:30 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 8 hours 59 minutes 25 seconds
Server load: 0.69 0.58 0.60
Total accesses: 105242 - Total Traffic: 360.1 MB - Total Duration: 11027558
CPU Usage: u26.11 s17.25 cu0 cs0 - .0211% CPU load
.513 requests/sec - 1840 B/second - 3588 B/request - 104.783 ms/request
1 requests currently being processed, 49 idle workers
_____________W____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0330/1808/1808_
19.985472105280.06.286.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0330/2110/2110_
19.9777982168540.07.177.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0330/1832/1832_
19.9780272077460.06.356.35
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/1883/1883_
19.9838261586140.06.696.69
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0330/2158/2158_
19.989772723600.07.117.11
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2151/2151_
19.985921962862350.07.547.54
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpW

0-0330/1959/1959_
19.9864842491050.06.716.71
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0330/2303/2303_
19.985022082589530.08.218.21
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0330/1983/1983_
19.9769771881190.06.606.60
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2327/2327_
19.9856272543530.08.398.39
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-0330/1844/1844_
19.9814471787420.06.346.34
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0330/2201/2201_
19.9845782021640.07.457.45
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2417/2417_
19.9851782173250.08.118.11
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03326/1954/1954W
19.990023590832.56.586.58
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

0-0330/1955/1955_
19.9830481957510.07.027.02
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/2897/2897_
19.9862252691790.010.0110.01
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0330/2034/2034_
19.9786062693950.06.696.69
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduC

0-0330/2155/2155_
19.981741942459590.07.057.05
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0330/2179/2179_
19.9781771909740.07.577.57
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2599/2599_
19.9823462213710.08.738.73
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

0-0330/2009/2009_
19.9820262111580.06.976.97
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/2324/2324_
19.977482002027910.07.907.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0330/2137/2137_
19.9827771911920.07.647.64
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/1995/1995_
19.9833781781760.06.976.97
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2677/2677_
19.984131782587530.09.289.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0340/2474/2474_
18.6580262707530.08.468.46
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/2018/2018_
18.6647251813700.06.766.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0340/2158/2158_
18.6629452046300.07.427.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0340/2550/2550_
18.6653262092930.08.548.54
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNiOp

1-0340/2026/2026_
18.663522722686480.06.866.86
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wth

1-0340/2114/2114_
18.6639772120780.07.137.13
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2234/2234_
18.662642002467910.07.527.52
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0340/1969/1969_
18.6657772114700.06.766.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2217/2217_
18.668471961600.07.327.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZV

1-0340/2107/2107_
18.6568110392211170.07.327.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0340/2016/2016_
18.6632261814120.06.886.88
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

1-0340/1963/1963_
18.6575771690820.06.806.80
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/1611/1611_
18.6663772217460.05.425.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2235/2235_
18.6620261866620.07.777.77
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/1786/1786_
18.66442342112430.06.166.16
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0340/1979/1979_
18.6571291989150.06.916.91
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0340/1969/1969_
18.6615772363180.06.846.84
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/1681/1681_
18.6650261590540.05.595.59
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/2141/2141_
18.663772658380.07.187.18
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2159/2159_
18.6621771686040.07.297.29
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/1958/1958_

Found on 2025-12-18 15:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e6f12933

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 16-Dec-2025 16:06:36 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 hours 24 minutes 31 seconds
Server load: 0.63 0.69 0.59
Total accesses: 38258 - Total Traffic: 122.7 MB - Total Duration: 2187752
CPU Usage: u7.97 s5.58 cu0 cs0 - .04% CPU load
1.13 requests/sec - 3799 B/second - 3363 B/request - 57.1842 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0330/601/601_
6.168574389140.01.981.98
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e243abc017bb2

0-0330/552/552_
6.139565251800.01.731.73
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/700/700_
6.168325573380.02.242.24
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/617/617_
6.0811615140160.01.921.92
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/703/703_
6.0811326370350.02.172.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/562/562_
6.284243231140.01.901.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9e8f951b70e6b

0-0330/641/641_
6.21662202322230.02.042.04
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0330/760/760_
6.342329717830.02.832.83
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/808/808_
6.313553589070.02.532.53
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/796/796_
6.313755606330.02.522.52
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0330/585/585_
6.371037229060.01.891.89
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/804/804_
6.313604471930.02.482.48
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/925/925_
6.371824417840.02.902.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0330/667/667_
6.0910544299240.02.072.07
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_66295156c1d5e

0-0330/586/586_
6.371637400050.01.961.96
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/1053/1053_
6.235703460210.03.283.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_190198c693ef8

0-0330/1000/1000_
6.216963655050.03.073.07
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_240885106ce3b

0-03326/1026/1026W
6.38004717153.33.183.18
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

0-0330/1035/1035_
6.2353210694850.03.623.62
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/968/968_
6.0413434635500.03.063.06
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/399/399_
6.0512633305950.01.281.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_62fad5fe65907

0-0330/872/872_
6.1875230487230.02.822.82
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/783/783_
6.37573203570.02.422.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_24d9f85667a2d

0-0330/639/639_
6.0811466504950.02.142.14
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0330/889/889_
6.264734472840.02.902.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7bd040b4e64d6

1-0340/1076/1076_
6.1411328686700.03.613.61
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/944/944_
6.276143656310.03.033.03
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2f541bb6a0787

1-0340/976/976_
6.305223725190.03.253.25
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ced4baafc602d

1-0340/1078/1078_
6.295327542110.03.353.35
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/642/642_
6.313787405870.02.042.04
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0340/754/754_
6.371214731780.02.412.41
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/857/857_
6.304774577270.02.902.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/618/618_
6.304454477460.02.122.12
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3652a2f38b99d

1-0340/938/938_
6.333194264880.02.942.94
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_40c515bfbc4d0

1-0340/833/833_
6.238328483330.02.612.61
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/734/734_
6.352325160350.02.422.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/890/890_
6.219084335800.02.882.88
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_61ef3f0643105

1-0340/612/612_
6.248085341580.01.881.88
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/690/690_
6.3526724436070.02.112.11
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b2070a6ac1fc1

1-0340/541/541_
6.24737192186960.01.721.72
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/961/961_
6.37968569910.03.003.00
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0340/469/469_
6.351765573150.01.471.47
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0340/624/624_
6.246705144040.01.911.91
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1ed05f76be502

1-0340/966/966_
6.1112853693790.03.133.13
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f96dc7215efb5

1-0340/542/542_
6.40174168300.01.711.71
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_95121a38b17a5

1-0340/462/462_
6.0813933430830.01.541.54
127.0

Found on 2025-12-16 16:06

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a99cb89ce3

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 14-Dec-2025 10:52:08 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  47 days 13 hours 41 minutes 23 seconds
Server load: 0.38 0.55 0.55
Total accesses: 1651312 - Total Traffic: 6.4 GB - Total Duration: 443559879
CPU Usage: u50.75 s75.72 cu454.44 cs283.11 - .021% CPU load
.402 requests/sec - 1675 B/second - 4169 B/request - 268.611 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/1329/30665_
15.70518877396280.04.99120.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/1333/29521_
15.7047965781637330.04.92117.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0291810/1116/28953_
15.7410937277953190.04.16114.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0291810/1400/30830_
15.71375880506020.05.79122.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1208/30388_
15.74140577497070.04.56118.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0291810/1407/30207_
15.73155483123350.05.49121.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0291810/1197/31647_
15.72237679851480.04.55125.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZW

0-0291810/1084/31237_
15.722094681824000.04.12123.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291810/1244/29268_
15.6970941478770690.04.72116.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/1569/31901_
15.7575784060280.06.23124.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1583/31676_
15.69756085420590.06.14124.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291810/1122/30287_
15.71351180864610.04.03119.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0291810/1409/31348_
15.70555782486750.05.75124.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1119/30709_
15.70615885573090.04.33121.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1371/30020_
15.71340878385570.05.46119.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1513/31450_
15.71435783239610.06.21123.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1285/31223_
15.72283372380823150.05.10124.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0291810/1324/30429_
15.72255777746410.05.54121.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1087/29662_
15.713986180354350.04.34116.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291810/1514/30148_
15.7550681644520.05.62120.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291810/1312/31167_
15.74149188445520.05.49125.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0291810/1438/31149_
15.7219936675021870.05.75121.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCch2

0-0291810/1166/30028_
15.71315781061940.04.43119.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1252/29926_
15.67243083593870.04.62119.17
127.0.0.1http/1.1

0-0291810/1356/30384_
15.69665184230020.05.11121.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0286900/116/24453_
1.08261564866600.00.5096.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0286900/73/24833_
1.08307668451480.00.2698.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

1-0286900/57/24602_
1.08315168775670.00.2196.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/73/23872_
1.08338166585550.00.2995.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0286900/196/24252_
1.073506666268190.00.7495.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286900/77/24420_
1.06491767916450.00.2997.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0286900/147/25516_
1.08238168463400.00.55100.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0286900/169/24505_
1.08238169538730.00.6497.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/98/24658_
1.082303169739630.00.3498.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwFIX%2Fyt761HU

1-0286900/156/24985_
1.09195858241370.00.60100.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/59/24392_
1.09150168365120.00.3096.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/66/24647_
1.09170569666240.00.2697.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

1-0286900/46/24518_
1.09155165001250.00.1996.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/101/26483_
1.09135767779740.00.34106.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/84/24930_
1.10894570382200.00.2697.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286900/44/24561_
1.1060563213420.00.1797.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-02869029/114/25043W
1.1100650838142.10.4498.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0286900/66/24726_
1.06735766491250.00.2798.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/88/25395_
1.06675866019780.00.3598.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/59/24857_
1.06650764496080.00.2499.24
127.0.0.1http/1.1ip-10-1-10

Found on 2025-12-14 10:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a966463f38

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 13-Dec-2025 17:48:53 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  46 days 20 hours 38 minutes 8 seconds
Server load: 0.20 0.38 0.51
Total accesses: 1638402 - Total Traffic: 6.4 GB - Total Duration: 439972786
CPU Usage: u55.84 s78.91 cu444.87 cs276.42 - .0211% CPU load
.405 requests/sec - 1687 B/second - 4170 B/request - 268.538 ms/request
1 requests currently being processed, 49 idle workers
______________W___________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/999/30335_
12.60257876466130.03.66119.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/990/29178_
12.6060881067370.03.64116.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/918/28755_
12.59587877435070.03.41113.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhOt

0-0291810/1153/30583_
12.602274079895000.04.84121.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/987/30167_
12.60540776715030.03.73117.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1142/29942_
12.59699682683770.04.43120.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/939/31389_
12.598273379333150.03.50124.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291810/865/31018_
12.597373481411290.03.39122.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0291810/929/28953_
12.60399877923990.03.52115.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/1337/31669_
12.60497583324180.05.27123.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefHCcBg

0-0291810/1350/31443_
12.6046743184315530.05.29123.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpu

0-0291810/915/30080_
12.5997661880292680.03.17118.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNbxoxEIb%2Fyt588no

0-0291810/1190/31129_
12.601674281844700.04.95123.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/886/30476_
12.60347684914600.03.37120.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNf

0-02918128/1059/29708W
12.6000776447238.84.25118.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0291810/1258/31195_
12.6099682467130.05.17122.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/1029/30967_
12.59896780174760.04.12123.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/959/30064_
12.59857876385210.04.19119.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291810/865/29440_
12.60120879853920.03.44115.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1164/29798_
12.60420880712020.04.37118.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1057/30912_
12.59617787688380.04.44124.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZV

0-0291810/1193/30904_
12.59660774341330.04.84120.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/893/29755_
12.59948579918220.03.40118.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdJW

0-0291810/1038/29712_
12.59781783223930.03.90118.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1053/30081_
12.60296883377800.03.99119.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1085/24155_
14.29437763986870.03.8895.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

1-0249080/1261/24628_
14.2948667901510.04.7297.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0249080/1262/24403_
14.28677668305890.04.4496.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/1370/23633_
14.28600865997530.05.3694.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1054/23885_
14.279183765276080.04.0593.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/1425/24187_
14.2955741867378310.05.2496.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOo

1-0249080/1115/25236_
14.2788747368013450.04.1899.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduK

1-0249080/1176/24159_
14.2864539968588960.04.4495.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0249080/1274/24352_
14.2935838368812210.04.6497.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpq

1-0249080/1364/24605_
14.294035557079460.05.3198.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1122/24162_
14.29240867695130.04.7695.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1221/24468_
14.28767669232510.05.1397.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0249080/1252/24340_
14.2779737964519180.04.9596.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNfJU

1-0249080/1144/26249_
14.295271667105710.04.58105.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0249080/1320/24663_
14.2978669568880.05.0596.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9owEIb%2FSm4%2BO

1-0249080/1121/24298_
14.2928739562462550.04.5696.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0249080/1184/24692_
14.293173564465240.04.4397.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wsR

1-0249080/1192/24532_
14.29180865855820.04.6497.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1127/25161_
14.27840765277010.04.1897.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1152/24638_

Found on 2025-12-13 17:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a96e18033d

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 20:22:20 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 23 hours 11 minutes 35 seconds
Server load: 0.93 0.82 0.88
Total accesses: 1625006 - Total Traffic: 6.3 GB - Total Duration: 437200248
CPU Usage: u51.72 s75.03 cu444.87 cs276.42 - .0214% CPU load
.409 requests/sec - 1707 B/second - 4172 B/request - 269.045 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/734/30070_
9.5753941575869980.02.53117.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0291810/807/28995_
9.57267780458750.03.01115.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/694/28531_
9.57394677124120.02.60112.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/872/30302_
9.57364679221940.03.29120.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/750/29930_
9.57453576095010.02.83117.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTsMwEIRfJTefHDdpK

0-0291810/854/29654_
9.57487581929930.03.21118.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0291810/683/31133_
9.5887778938680.02.54123.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/651/30804_
9.57621780902610.02.60122.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/668/28692_
9.57634577463540.02.75114.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0291810/955/31287_
9.57573682794780.04.02122.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTsMwEIRfJTefHCdpK

0-0291810/974/31067_
9.57423683817160.03.60122.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0291810/650/29815_
9.58154679530860.02.15117.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtwgEIZfxTdOGGwnV

0-0291810/950/30889_
9.57327781222610.04.10122.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/622/30212_
9.576211084565460.02.42119.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/771/29420_
9.58207777142470.03.15117.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1027/30964_
9.57302681983430.04.27121.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0291810/764/30702_
9.57241679320150.03.07122.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/744/29849_
9.5822016375824690.02.81118.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPbahsxEP0Vofe92evgC

0-0291810/609/29184_
9.573211079304440.02.40114.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/780/29414_
9.58213479920450.03.26117.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/746/30601_
9.5834587245690.03.16123.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzqt

0-0291810/903/30614_
9.58213873900040.03.74119.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/667/29529_
9.58122579526170.02.59117.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEIRfRTeeKEryT

0-0291810/821/29495_
9.5767041882635410.03.13117.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLdbuMgEIVfxXdcYWzi%

0-0291810/790/29818_
9.57554082824350.03.18119.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0249080/773/23843_
11.43627763436370.02.9394.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/978/24345_
11.43661567291040.03.6296.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYLdZ

1-0249080/911/24052_
11.43503767885500.03.3595.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1058/23321_
11.43554465398500.04.1292.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0249080/819/23650_
11.43687864513810.03.0992.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1055/23817_
11.44405311766883480.04.0595.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdZ2

1-0249080/861/24982_
11.4360439167712910.03.1898.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDduF

1-0249080/978/23961_
11.44332113467859600.03.7495.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/978/24056_
11.44387768309920.03.6596.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1148/24389_
11.443211056439370.04.5097.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/881/23921_
11.45231067110160.03.8494.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0249080/984/24231_
11.44321568593240.04.2496.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/926/24014_
11.44447863749170.03.7795.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/799/25904_
11.4347139966641490.03.27104.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/1118/24461_
11.45213569022160.04.3096.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/841/24018_
11.452476161879150.03.5695.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0249080/970/24478_
11.44274564043430.03.6696.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/909/24249_
11.459340565046320.03.6096.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLfT8IwEMf%2Flb31qSs

1-0249080/893/24927_
11.4527764711640.03.3696.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/911/24397_
11.45147863308490.03.3997.48

Found on 2025-12-12 20:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a941b43a5c

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 11-Dec-2025 06:52:50 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  44 days 9 hours 42 minutes 5 seconds
Server load: 0.98 0.77 0.81
Total accesses: 1579446 - Total Traffic: 6.1 GB - Total Duration: 427399484
CPU Usage: u50.81 s72.2 cu431.29 cs267.71 - .0214% CPU load
.412 requests/sec - 1719 B/second - 4175 B/request - 270.601 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046020/1543/29200_
20.39344474152460.06.30114.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_642486f3bd645

0-046020/1669/28068_
20.4187478235520.07.59112.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_26b249ee8fc07

0-046020/1665/27670_
20.39326475636860.07.01109.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f05e1d7721053

0-046020/1676/29243_
20.39308476659140.07.42116.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6878a5d065398

0-046020/1637/29029_
20.40257474046650.06.78113.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1536/28611_
20.39409580041090.06.63114.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-046020/1696/30292_
20.40271677122440.07.24120.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1596/30001_
20.40211578535390.06.79118.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1421/27862_
20.40166675807820.06.60111.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1584/30160_
20.41443980153600.06.42117.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1528/29911_
20.4015138681965960.07.12117.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1586/28936_
20.40194977459270.06.74114.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-046020/1815/29780_
20.38451478941450.07.45118.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_113d465bb33e9

0-046020/1646/29420_
20.40101483244050.07.26116.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0019256efe39e

0-046020/1770/28493_
20.4022640975621730.07.36113.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1669/29762_
20.40132579554690.07.31116.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b8ad679f70783

0-046020/1549/29785_
20.4165177394880.06.45118.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-046020/1758/28945_
20.39437473315970.07.80114.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_37f86090624c3

0-046020/1425/28396_
20.40116377435760.05.91111.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5123ba65ab6fc

0-046020/1714/28475_
20.39397577932420.07.99113.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1684/29690_
20.4130585944250.07.41119.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1569/29534_
20.39357772001360.06.59114.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046020/1637/28698_
20.39287578076730.06.96114.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1590/28496_
20.38466480240900.06.69113.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b9035a761b6e

0-046020/1718/28872_
20.39375480456930.08.32115.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ed8db3d06aca0

1-0249080/69/23139_
0.76220462103230.00.3692.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dca27c402e9d8

1-0249080/49/23416_
0.76125565005440.00.1992.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/64/23205_
0.76158466214880.00.2391.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_40bcee4fe7b17

1-0249080/58/22321_
0.76188462766250.00.1888.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3fe915984eb67

1-0249080/56/22887_
0.76199562662660.00.2090.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/50/22812_
0.76137563674170.00.1791.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/74/24195_
0.76108566061990.00.2696.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/106/23089_
0.7679666160840.00.4491.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

1-0249080/70/23148_
0.7750666515200.00.2593.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/60/23301_
0.7695554476280.00.2293.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/50/23090_
0.754601265874620.00.2090.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/87/23334_
0.77354366502140.00.4492.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-02490834/94/23182W
0.7800616169659.90.2791.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0249080/57/25162_
0.75445765291700.00.19100.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/59/23402_
0.754274166635310.00.1891.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/59/23236_
0.75404460589860.00.2492.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_05f4501e23f43

1-0249080/45/23553_
0.75389462480130.00.2093.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9593b18b335b3

1-0249080/60/23400_
0.753663462738850.00.2093.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/48/24082_
0.75349662904180.00.1593.60
127.0.0.1http/1.1ip-10-1-102-142.ap-sou

Found on 2025-12-11 06:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9b2e681b7

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 01-Dec-2025 10:18:33 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  34 days 13 hours 7 minutes 48 seconds
Server load: 0.73 0.96 1.13
Total accesses: 1071729 - Total Traffic: 4.3 GB - Total Duration: 334431647
CPU Usage: u45.29 s57.57 cu289.65 cs174.19 - .019% CPU load
.359 requests/sec - 1557 B/second - 4338 B/request - 312.049 ms/request
1 requests currently being processed, 49 idle workers
______W__________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-056400/1765/19364_
20.8550055398060.06.6979.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

0-056400/1589/18182_
20.8320958457670150.06.6474.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7vCiva

0-056400/1711/18087_
20.82538655871260.07.4774.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/2068/20092_
20.82453158604150.08.4782.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-056400/1564/18490_
20.82571659842520.06.6275.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-056400/1503/18313_
20.83400659248030.06.4276.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0564026/1853/19339W
20.8600569890339.77.2780.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-056400/1760/19434_
20.83374060845370.07.2980.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-056400/1815/18009_
20.83238858380220.07.7374.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/1753/19762_
20.8341619061296140.07.4981.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfM%

0-056400/1928/18926_
20.8413119162168060.08.1478.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1700/18691_
20.83381458545870.07.0576.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/1780/19117_
20.83276758277250.07.6280.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/1840/18756_
20.83231664657830.07.3077.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/1898/18810_
20.8343417657287380.07.5177.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJHG6h

0-056400/1762/19440_
20.84120444359979210.07.2579.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1630/19642_
20.84100661572050.06.3382.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1874/18989_
20.82580658212540.07.9379.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1809/18416_
20.82520660382830.07.2575.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1772/18900_
20.8419035161338070.07.4778.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1874/18963_
20.83340664819650.07.9079.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1613/19322_
20.84173653024830.06.4477.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNt

0-056400/1757/18725_
20.833095558550560.07.4177.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1889/19359_
20.82545562981520.08.5280.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduW

0-056400/1738/18984_
20.8247343963413380.06.8877.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgFIX%2Fit94wth

1-0-0/0/15950.
0.0039718451227500.00.0066.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDspZ

1-0-0/0/15849.
0.0039718653996500.00.0067.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/15860.
0.003971836454763030.00.0067.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCRA3

1-0-0/0/14863.
0.0039718161050000620.00.0063.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15656.
0.0039718050344840.00.0064.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15753.
0.0039718051820140.00.0067.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/15908.
0.0039718453901850.00.0067.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0-0/0/16061.
0.003971874054311010.00.0067.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15627.
0.0039718153358930.00.0067.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/15622.
0.0039718143314310.00.0066.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/15359.
0.0039718052574000.00.0063.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15461.
0.0039718055903900.00.0065.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15562.
0.0039718650438500.00.0065.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/16546.
0.0039718454160340.00.0071.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcJL

1-0-0/0/15843.
0.003971875555612390.00.0066.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15980.
0.0039718149423390.00.0067.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/15802.
0.003971817950204960.00.0065.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL0j8R8i3%2

1-0-0/0/15806.
0.00397183952434090.00.0066.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/16408.
0.0039718551390660.00.0067.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0-0/0/16120.
0.0039718750975730.00.0068.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/16532.
0.003971833573845

Found on 2025-12-01 10:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9bda1299e

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 29-Nov-2025 04:42:22 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  32 days 7 hours 31 minutes 37 seconds
Server load: 0.80 0.97 1.10
Total accesses: 1018221 - Total Traffic: 4.1 GB - Total Duration: 315132586
CPU Usage: u39.37 s52.71 cu277.87 cs166.62 - .0192% CPU load
.365 requests/sec - 1582 B/second - 4338 B/request - 309.493 ms/request
1 requests currently being processed, 49 idle workers
_____________________W____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-056400/787/18386_
8.16795952243180.02.9575.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/610/17203_
8.19613355059800.02.2470.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/707/17083_
8.16740552755370.02.9269.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

0-056400/812/18836_
8.166488954952460.03.9177.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-056400/734/17660_
8.16689657665870.03.2772.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/511/17321_
8.18269554423390.02.2472.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/714/18200_
8.16569554114110.03.0175.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/711/18385_
8.165193556871730.03.1276.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/698/16892_
8.1748519454631560.02.9469.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuSUhUA

0-056400/776/18785_
8.18389658224580.03.2877.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/699/17697_
8.17465456325710.03.1073.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDdp0

0-056400/761/17752_
8.18185754720860.03.4372.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/615/17952_
8.18410453519810.02.6375.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-056400/622/17538_
8.18350560393980.02.5772.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpW

0-056400/650/17562_
8.18320453271040.02.8172.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-056400/514/18192_
8.18228456114590.02.1574.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpW

0-056400/631/18643_
8.18130057707990.02.5878.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-056400/742/17857_
8.1675739653745180.03.5374.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-056400/742/17349_
8.1686040756872700.02.8271.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

0-056400/713/17841_
8.1929557786590.02.9573.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/633/17722_
8.1819442360035720.02.8074.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0564025/576/18285W
8.2000499132129.22.2773.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-056400/608/17576_
8.1910339352686690.02.6173.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdOE

0-056400/775/18245_
8.16614308759176130.03.4475.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/687/17933_
8.16830558593180.03.0174.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0295180/1066/15243_
10.84869549125310.04.0263.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/883/15042_
10.87209551739950.04.0464.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/742/15118_
10.871837951884670.02.9664.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0295180/829/14156_
10.84809547922950.03.2760.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/1054/14944_
10.87169548162420.04.0661.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLd

1-0295180/860/15029_
10.86449549042070.03.6164.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/849/15169_
10.8628742751753950.03.5064.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0295180/914/15348_
10.87259451951190.03.7464.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0295180/807/14783_
10.85749550761450.03.1363.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/833/14922_
10.84786641462600.03.7463.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/897/14695_
10.8750450171540.03.7561.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJF

1-0295180/1050/14791_
10.86399553844230.04.3162.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0295180/1008/14783_
10.85700528447519920.04.6362.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0295180/903/15603_
10.85629550565040.03.5767.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/947/15137_
10.8484218853320430.04.2563.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8k5Acc

1-0295180/974/15306_
10.85678199347136540.03.8064.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dh

1-0295180/994/15019_
10.86560447627800.04.1962.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHEMID

1-0295180/721/15087_
10.86486849652070.03.2063.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/878/15725_
10.86505949487130.03.7864.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/903/15433_
10.86580386249312100.03.9465.71
127.0.0.1h

Found on 2025-11-29 04:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9bcd2394a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 27-Nov-2025 07:05:53 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  30 days 9 hours 55 minutes 8 seconds
Server load: 1.54 1.05 0.91
Total accesses: 976477 - Total Traffic: 3.9 GB - Total Duration: 302058323
CPU Usage: u39.75 s51.66 cu263.3 cs157.22 - .0195% CPU load
.372 requests/sec - 1611 B/second - 4337 B/request - 309.335 ms/request
1 requests currently being processed, 49 idle workers
_________________________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-031070/1920/17379_
21.773714149856340.08.4571.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1780/16479_
21.766944452925040.07.9567.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1883/16084_
21.7666917450273240.08.2465.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCFAW

0-031070/1961/17883_
21.78180552831360.08.2473.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1748/16711_
21.77360554628800.07.3967.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1721/16669_
21.7660939452385210.07.5569.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-031070/1830/17350_
21.747513251861020.07.8172.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1541/17548_
21.76480553714780.06.9772.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1720/16077_
21.781291051932810.06.8866.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-031070/1736/17762_
21.76715055380390.07.6273.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-031070/1584/16691_
21.764284353359530.07.0969.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1924/16767_
21.76660751426220.08.3468.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1749/17175_
21.76530051188770.07.7771.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-031070/1725/16760_
21.782202058005340.07.6969.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHOcHC

0-031070/1633/16804_
21.77240550662710.07.1569.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1449/17477_
21.76506454045290.06.4371.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-031070/1749/17862_
21.77253454858130.07.2575.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-031070/1940/16923_
21.78163451331020.08.5070.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-031070/1827/16465_
21.77282554151100.07.6867.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-031070/1811/16924_
21.77306263454481270.07.7770.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-031070/1835/16783_
21.76683056986070.07.8970.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /apple-touch-icon-precomposed.png HTTP/1.1

0-031070/1816/17602_
21.783441347524870.07.6970.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-031070/1902/16843_
21.76582450690230.08.2370.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-031070/1720/17335_
21.7810243555549290.07.0271.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-031070/1963/17055_
21.7872456237040.08.2570.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCemJ

1-02951828/131/14308W
1.1000466936038.90.6160.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0295180/92/14251_
1.08116649019510.00.5660.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/93/14469_
1.0968049472880.00.4061.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0295180/85/13412_
1.08143644442310.00.3357.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0295180/116/14006_
1.0721217444680370.00.5057.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7Epze8

1-0295180/101/14270_
1.0637239746428220.00.4461.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iA8i

1-0295180/62/14382_
1.0960749087750.00.2861.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/76/14510_
1.05729849668550.00.3361.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/54/14030_
1.05717648046460.00.2160.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/100/14189_
1.05683039690950.00.5260.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-0295180/71/13869_
1.056814347710490.00.3157.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0295180/139/13880_
1.05641650810560.00.4859.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCeGh

1-0295180/65/13840_
1.05673444910140.00.3258.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0295180/99/14799_
1.06520448138830.00.3864.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8MwDIb%2FSm85pWm

1-0295180/63/14253_
1.06540550508830.00.2459.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/88/14420_
1.05600544529020.00.3261.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/103/14128_
1.06492645135580.00.4658.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0295180/66/14432_
1.0646240847342480.00.3461.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0295180/54/14901_
1.06333546363620.00.2261.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpQ

1-0295180/107/14637_
1.06403447072030.00.5462.31
127.0.0.1http/1.1ip-10-1-102-142.ap

Found on 2025-11-27 07:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a935902123

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 23-Nov-2025 09:21:14 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  26 days 12 hours 10 minutes 29 seconds
Server load: 0.79 0.62 0.69
Total accesses: 851361 - Total Traffic: 3.4 GB - Total Duration: 261021130
CPU Usage: u39.13 s47.76 cu221.51 cs131.19 - .0192% CPU load
.372 requests/sec - 1597 B/second - 4297 B/request - 306.593 ms/request
1 requests currently being processed, 49 idle workers
__________________________________________W_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0144450/967/14754_
12.15469142456420.03.8759.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/1076/13928_
12.17141744693770.04.5556.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/1113/13520_
12.1872742407740.04.6654.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0144450/1224/15293_
12.17161545016940.04.7462.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDemh

0-0144450/869/14241_
12.15482345375910.03.7257.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0144450/1175/14257_
12.14552143592490.04.6859.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0144450/1135/14874_
12.145783043805080.04.8761.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0144450/1002/15151_
12.16285145953140.04.2862.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/955/13578_
12.17191542148530.04.0256.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0144450/997/15236_
12.18112147089330.04.0561.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/924/14260_
12.14590044979450.04.0258.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0144450/998/14343_
12.183917143692170.04.0457.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78rqPg

0-0144450/1216/14740_
12.12621742600590.04.9461.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/989/14390_
12.1265416449445900.03.9259.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7vOAGu

0-0144450/979/14563_
12.15381742249970.04.0959.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/1105/15186_
12.15480647389590.04.7462.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/1177/15432_
12.14508548141110.05.2164.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/951/14398_
12.18102642179240.04.1859.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0144450/1060/14013_
12.15431545926190.04.4257.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0144450/1079/14255_
12.15401543056340.04.4958.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0144450/910/14229_
12.14539047753690.03.5859.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0144450/896/15050_
12.16306140125470.03.5459.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0144450/975/14254_
12.17218543309650.04.1558.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0144450/1017/14784_
12.15337376748194290.03.7660.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0144450/865/14404_
12.17269547065550.03.7858.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-058420/1260/11518_
15.60321738381550.05.2548.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1250/11637_
15.60285439790370.05.5449.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-058420/1332/11838_
15.62251541024510.05.6949.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-058420/1302/11164_
15.62180635693980.05.5147.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-058420/1390/11504_
15.6213016437025630.05.6246.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJDGwX

1-058420/1256/11666_
15.59457038466800.05.1549.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/1366/11995_
15.62113141184280.05.6450.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-058420/1258/11938_
15.6219876241088590.04.9249.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLb9swDL7nVxi%2B27K

1-058420/1271/11661_
15.57641540787890.05.2249.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dj

1-058420/1285/11743_
15.62249411431924100.05.2749.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-058420/1212/11636_
15.6215319241082610.05.1647.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BW90m

1-058420/1325/11374_
15.58482343837680.05.1747.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cad187209a930

1-058420/1410/11639_
15.57611638285510.05.5148.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-058420/1452/12349_
15.57596139683230.05.8652.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-058420/1322/11442_
15.57528842047800.05.6347.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-058420/1351/11880_
15.6281736791070.05.7550.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1145/11522_
15.57539036784880.04.4247.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0584227/1405/11819W
15.6200388650237.15.7049.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-058420/1349/12482_
15.6253138414340.05.5851.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

1-058420/1256/11989_
15.57561737065110.05.6750.82
127.0.0.1http/1.1

Found on 2025-11-23 09:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e7f396b5

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 21-Nov-2025 04:14:20 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  24 days 7 hours 3 minutes 35 seconds
Server load: 1.12 0.85 0.84
Total accesses: 812559 - Total Traffic: 3.3 GB - Total Duration: 250853510
CPU Usage: u26.67 s37.12 cu221.51 cs131.19 - .0198% CPU load
.387 requests/sec - 1665 B/second - 4302 B/request - 308.72 ms/request
1 requests currently being processed, 49 idle workers
____________________________________W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0144450/225/14012_
3.4622540151510.00.9457.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0144450/346/13198_
3.42567842496160.01.5353.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/283/12690_
3.41638339864120.01.4651.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0144450/387/14456_
3.425534243221120.01.6258.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/132/13504_
3.461705343303370.00.5954.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0144450/331/13413_
3.44387741403100.01.3756.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/339/14078_
3.4350241841987660.01.6058.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0144450/214/14363_
3.41702644113900.00.9758.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

0-0144450/284/12907_
3.42613840060760.01.4053.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTsMwEER%2FJTefHCe

0-0144450/279/14518_
3.42533645135690.01.1159.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0144450/222/13558_
3.43443542960120.01.0255.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/232/13577_
3.43472741053320.01.1554.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0144450/288/13812_
3.43422140808990.01.2357.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0144450/272/13673_
3.4434817047085040.01.2556.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyY3br

0-0144450/246/13830_
3.46163640747080.01.0956.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0144450/300/14381_
3.44253745655820.01.4258.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/303/14558_
3.44260145455690.01.3160.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/253/13700_
3.44292840425860.01.3256.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/321/13274_
3.4419689544246960.01.3754.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0144450/264/13440_
3.4611237940422300.01.1555.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcub

0-0144450/188/13507_
3.44233545510880.00.9756.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMduI

0-0144450/293/14447_
3.416732839036830.01.1657.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDshQ

0-0144450/193/13472_
3.41715141444400.00.9255.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0144450/246/14013_
3.416644646028560.01.0058.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0144450/153/13692_
3.4653745123410.00.7555.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-058420/571/10829_
6.594103835797850.02.5445.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/466/10853_
6.5852517538281700.02.3645.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BYS

1-058420/449/10955_
6.5846116738812560.02.0146.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCQpu

1-058420/479/10341_
6.585463133091990.02.0043.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-058420/489/10603_
6.585024535375150.02.0543.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/452/10862_
6.57687936774200.02.0246.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/570/11199_
6.59398038431190.02.5947.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-058420/523/11203_
6.59364539260000.02.0046.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-058420/549/10939_
6.59278038782720.02.2846.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/572/11030_
6.59323630227410.02.4446.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-058420/519/10943_
6.61239139332780.02.3845.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0584227/559/10608W
6.6200408609140.62.2744.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-058420/493/10722_
6.6118417736023090.02.1745.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLc9sgEL77V2h0lxCya

1-058420/645/11542_
6.59260037757750.02.5749.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-058420/505/10625_
6.61143740244320.02.3143.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-058420/488/11017_
6.6142135502550.02.2746.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

1-058420/384/10761_
6.61171134939490.01.5744.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-058420/531/10945_
6.61202035844150.02.1545.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-058420/500/11633_
6.6183836272350.02.0147.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-058420/463/11196_
6.56710131335485470.02.1147.26
127.0.0.1http/1.1

Found on 2025-11-21 04:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a939711553

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 16-Nov-2025 19:20:05 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  19 days 22 hours 9 minutes 20 seconds
Server load: 1.06 0.69 0.61
Total accesses: 611394 - Total Traffic: 2.5 GB - Total Duration: 200695566
CPU Usage: u33.06 s36.53 cu153.73 cs88.25 - .0181% CPU load
.355 requests/sec - 1547 B/second - 4356 B/request - 328.259 ms/request
2 requests currently being processed, 48 idle workers
_________________K____________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-064260/1405/10267_
15.70284431603730.05.9842.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYoze

0-064260/1564/9722_
15.68718035419500.05.9339.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-064260/1121/9102_
15.7212832167950.04.2937.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1540/10296_
15.69640733766860.06.3242.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1510/10094_
15.70552733904770.06.2641.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1248/9872_
15.696584431861070.05.0141.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-064260/1721/10093_
15.70509033078670.07.2442.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-064260/1631/10499_
15.6960073934550870.06.5943.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-064260/1533/9516_
15.68700032147840.06.0440.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /.git/config HTTP/1.1

0-064260/1407/9984_
15.70440533770900.05.5641.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yYq

0-064260/1606/9883_
15.7040938333554140.06.2741.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-064260/1387/9610_
15.6961937531276180.05.4639.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWjuzIsFB

0-064260/1458/10327_
15.70372732631210.05.8543.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1614/9783_
15.72200438397870.06.6740.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

0-064260/1553/9734_
15.70492631302520.06.2640.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1436/10110_
15.7216744135222410.06.0741.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMe

0-064260/1475/10374_
15.70340532743850.06.2544.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064261/1688/10281K
15.721032446701.16.9342.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /.vscode/sftp.json HTTP/1.1

0-064260/1251/9837_
15.70319535292120.05.1440.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-064260/1544/9655_
15.72125031634150.06.1840.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HT

0-064260/1612/9623_
15.728039233028030.06.5641.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-064260/1493/10318_
15.7254730382550.06.1241.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1250/9927_
15.70252631837560.04.8041.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1684/10294_
15.7240534459130.06.9943.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1411/9608_
15.68679534976790.06.0840.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0235490/887/9526_
10.46710432490590.03.1839.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0235490/993/9704_
10.46619435047410.03.8140.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d90a69b16897

1-0235490/1178/9868_
10.46672634867730.04.6341.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/915/9268_
10.4847430760620.03.7239.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/905/9524_
10.46732532570720.03.4438.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/1065/9821_
10.48109433161660.04.1041.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZX

1-0235490/1013/10015_
10.48469433945250.04.4141.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/1035/10004_
10.48499735659450.04.2142.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpI

1-0235490/980/9642_
10.475645134794640.03.9141.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0235490/872/9811_
10.47612626918290.03.4941.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/1078/9602_
10.48432634685220.04.1739.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/1010/9316_
10.48511244634527500.03.9439.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0235490/894/9626_
10.48330631224300.03.6440.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/1073/10286_
10.48354733855670.04.4243.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/930/9364_
10.48380534683050.03.7038.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcJt

1-0235490/976/9818_
10.4831019630179780.03.9841.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJAQCC

1-0235490/1103/9782_
10.4825893431522480.04.5640.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCchr

1-0235490/1075/9572_
10.48140832414170.04.1540.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/1076/10535_
10.48227633609270.04.1242.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0235490/933/10013_
10.4872731843420.03.6241.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /m

Found on 2025-11-16 19:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a960505672

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 14-Nov-2025 11:46:46 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 14 hours 36 minutes 1 second
Server load: 0.40 0.45 0.55
Total accesses: 572174 - Total Traffic: 2.3 GB - Total Duration: 190904753
CPU Usage: u20.99 s27.25 cu153.73 cs88.25 - .0191% CPU load
.376 requests/sec - 1646 B/second - 4379 B/request - 333.648 ms/request
1 requests currently being processed, 49 idle workers
_W________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-064260/654/9516_
7.5531638930008700.02.8439.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0642625/670/8828W
7.5600330501533.12.6936.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-064260/496/8477_
7.5472638030413880.01.9634.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgFIX%2Fit94whj

0-064260/797/9553_
7.54593732124810.03.5539.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/681/9265_
7.54757531261570.03.0137.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whj

0-064260/506/9130_
7.546983329725790.02.2238.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-064260/941/9313_
7.54533731352940.04.2639.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/697/9565_
7.546593131770790.03.1240.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-064260/672/8655_
7.54611130261820.02.8836.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-064260/634/9211_
7.545593132138740.02.7038.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNduq

0-064260/740/9017_
7.54513631453290.02.8737.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/776/8999_
7.54648029523270.03.1837.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-064260/707/9576_
7.54479530796900.03.0640.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-064260/799/8968_
7.55166636955740.03.4637.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/874/9055_
7.54443529317220.03.7237.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHOMkh

0-064260/680/9354_
7.5541137933780700.02.8238.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-064260/750/9649_
7.54466630682610.03.4941.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/808/9401_
7.5521142030115710.03.5039.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-064260/568/9154_
7.55363633196050.02.5238.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-064260/769/8880_
7.5597729898580.03.3538.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

0-064260/809/8820_
7.5514939530868580.03.3038.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedZFmJu

0-064260/696/9521_
7.552781728346260.03.1338.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/534/9211_
7.55124529818760.02.2439.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-064260/817/9427_
7.5553732034660.03.6540.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/607/8804_
7.53772733002380.02.9137.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/190/8829_
2.22713730490350.00.6736.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/252/8963_
2.236664733127040.00.9837.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0235490/293/8983_
2.22750532779790.01.2838.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/264/8617_
2.2438629119290.01.1636.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/118/8737_
2.22766730550090.00.5635.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/260/9016_
2.24196631497440.01.1539.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761NV

1-0235490/177/9179_
2.236202531645680.00.8638.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-0235490/271/9240_
2.24605633889700.01.2039.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0235490/256/8918_
2.23644032734540.01.0738.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0235490/194/9133_
2.2457336325426860.00.8738.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMchl

1-0235490/245/8769_
2.24548532896060.00.8836.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0235490/166/8472_
2.2448842232346880.00.6335.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0235490/191/8923_
2.24473729369490.00.9137.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/246/9459_
2.24519532049120.01.0940.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lh

1-0235490/164/8598_
2.24450532673400.00.6335.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/188/9030_
2.24351728561740.00.8538.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCehp

1-0235490/184/8863_
2.243943229455780.00.8036.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4db1a94601c94

1-0235490/111/8608_
2.2443517029557290.00.4736.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7EsIjA

1-0235490/144/9603_
2.24293731776670.00.6339.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/230/9310_
2.24233830362950.01.0139.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /m

Found on 2025-11-14 11:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9f9724bf6

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 12-Nov-2025 09:45:04 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  15 days 12 hours 34 minutes 19 seconds
Server load: 0.99 0.70 0.66
Total accesses: 495279 - Total Traffic: 2.0 GB - Total Duration: 164725933
CPU Usage: u29.7 s30.49 cu122.43 cs70.34 - .0189% CPU load
.369 requests/sec - 1608 B/second - 4356 B/request - 332.592 ms/request
1 requests currently being processed, 49 idle workers
.........................________W______________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/8862.
0.006036528496100.00.0036.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0-0/0/8158.
0.006036730880000.00.0033.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Dg

0-0-0/0/7981.
0.006036728129330.00.0032.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8756.
0.006036630523170.00.0036.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

0-0-0/0/8584.
0.006036829562850.00.0034.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8624.
0.006036027846180.00.0036.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0-0/0/8372.
0.006036028973350.00.0034.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/8868.
0.00603616029896960.00.0037.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uKig

0-0-0/0/7983.
0.006036528847950.00.0033.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0-0/0/8577.
0.006036730523790.00.0035.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdp2

0-0-0/0/8277.
0.006036163128854690.00.0035.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/8223.
0.006036627998050.00.0033.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0-0/0/8869.
0.006036729046450.00.0037.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8169.
0.00603640232637840.00.0034.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0-0/0/8181.
0.006036727553950.00.0033.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8674.
0.00603644530384510.00.0035.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PCkUL

0-0-0/0/8899.
0.0060364628929760.00.0038.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/8593.
0.006036528255890.00.0035.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0-0/0/8586.
0.00603639330726750.00.0035.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0-0/0/8111.
0.0060364827973110.00.0034.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/8011.
0.006036828691360.00.0034.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0-0/0/8825.
0.006036207926322560.00.0035.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/8677.
0.006036027845580.00.0036.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/8610.
0.006036730023690.00.0036.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8197.
0.006036730650310.00.0034.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-096830/1362/7862_
15.138037825828750.05.7032.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcJi

1-096830/1353/7974_
15.09431828921200.05.8833.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1251/7931_
15.094603229390290.05.5733.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-096830/1376/7623_
15.11231526145650.06.1632.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-096830/1388/7769_
15.0938116425956110.05.7931.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCQhP

1-096830/1132/7947_
15.132816327966710.04.7134.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCSB9

1-096830/1388/8010_
15.121695129117560.05.8132.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-096830/1430/8184_
15.139916129739720.06.7334.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWjuzGshC

1-0968329/1394/7796W
15.1400290679744.16.1932.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-096830/1561/8163_
15.0947717022375760.06.5634.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdrxohEH33V5h9d1e2s

1-096830/1463/7694_
15.13131728776770.06.4331.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1332/7313_
15.111893326872880.05.6731.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-096830/1218/7953_
15.08611726294130.05.5333.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1510/8218_
15.10256381427526570.06.7535.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-096830/1455/7687_
15.08557528902370.06.3231.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-096830/1286/8088_
15.08594824205490.05.6033.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-096830/1370/7779_
15.0933416526506880.06.4031.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL37KwTdJWqxI

1-096830/1326/7725_
15.0940419725927480.05.6332.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCSEF

1-096830/1502/8455_
15.1121936427826770.06.8834.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-096830/1324/8171_
15.10305325626660920.06.2534.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

Found on 2025-11-12 09:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a960d99ca0

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Nov-2025 12:43:17 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  13 days 15 hours 32 minutes 32 seconds
Server load: 0.43 0.40 0.50
Total accesses: 432257 - Total Traffic: 1.7 GB - Total Duration: 145309708
CPU Usage: u23.88 s25.56 cu109.11 cs62.94 - .0188% CPU load
.367 requests/sec - 1583 B/second - 4318 B/request - 336.165 ms/request
1 requests currently being processed, 74 idle workers
____W___________________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291140/1211/7988_
11.65960526084530.04.8832.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/1082/7408_
11.66505828858360.04.5130.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1046/7279_
11.66443525843970.04.0829.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDdpQ

0-0291140/1094/7788_
11.65112039327753430.04.7631.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-02911425/1029/7721W
11.6700270563928.04.0731.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0291140/1267/7712_
11.651011624953490.05.2832.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/970/7457_
11.662383026018580.04.0230.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/1438/7976_
11.66579627251370.06.2233.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/1060/7137_
11.66632726112400.04.7629.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0291140/918/7844_
11.6635236428394180.03.8032.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpF

0-0291140/1122/7595_
11.651393526360620.04.3932.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-0291140/1018/7569_
11.6612636325082650.04.1830.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/1021/7931_
11.66298526749020.04.4933.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-0291140/1119/7497_
11.66662630136770.04.4131.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/937/7372_
11.6784724708600.03.4930.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1032/7699_
11.6588935827015980.04.2031.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNTwMhEIb%2Fyt44sXR

0-0291140/1242/7941_
11.65124939426262380.05.4233.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduC

0-0291140/1164/7782_
11.65853625352270.04.6131.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0291140/1084/7722_
11.66745727597380.04.7131.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1051/7569_
11.651303625790510.04.2732.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

0-0291140/981/7128_
11.651359925769060.04.0530.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0291140/1250/7903_
11.651206823825940.05.4331.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/1242/7646_
11.651085525149310.05.2732.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/1335/7799_
11.66178727928110.05.3433.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/994/7360_
11.651450628258910.04.1230.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-096830/514/7014_
6.1425722592370.02.1929.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/533/7154_
6.13804826596800.02.3629.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/428/7108_
6.13969626821480.02.0530.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-096830/562/6809_
6.1312738423656550.02.4528.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096830/548/6929_
6.13680189723925440.02.2828.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096830/428/7243_
6.131220525718950.01.9231.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096830/494/7116_
6.12139958325649080.02.0029.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096830/590/7344_
6.1213671127389540.02.6330.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-096830/577/6979_
6.1313113226538790.02.6729.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eef799aec14b8

1-096830/590/7192_
6.139063120239200.02.4730.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-096830/534/6765_
6.121464725351670.02.3427.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/610/6591_
6.13265824006960.02.7428.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/518/7253_
6.131279624724040.02.2930.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096830/649/7357_
6.13379524781180.02.8531.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-096830/576/6808_
6.131162726700870.02.3327.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-096830/507/7309_
6.131044722267650.02.2730.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/546/6955_
6.134642924161020.02.3727.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-096830/544/6943_
6.13643623942170.02.2929.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096830/681/7634_
6.1318936024763580.03.2030.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdps

1-096830/625/7472_
6.13306824249750

Found on 2025-11-10 12:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a98e16b1fe

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Nov-2025 08:40:19 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 11 hours 29 minutes 34 seconds
Server load: 0.47 0.76 0.78
Total accesses: 379703 - Total Traffic: 1.5 GB - Total Duration: 126847772
CPU Usage: u22.32 s23.6 cu94.62 cs53.91 - .0196% CPU load
.383 requests/sec - 1648 B/second - 4306 B/request - 334.071 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................________W_____
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291140/98/6875_
1.03298522818290.00.3928.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUjYU

0-0291140/92/6418_
1.03286624645490.00.3225.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291140/215/6448_
1.04245723534880.00.6326.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0291140/108/6802_
1.04206724839480.00.5427.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/87/6779_
1.04177023744330.00.3127.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291140/75/6520_
1.05156821102590.00.2527.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/98/6585_
1.05130723883800.00.3827.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/161/6699_
1.0575623243170.00.6627.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0291140/92/6169_
1.0510538222995040.00.4625.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

0-0291140/98/7024_
1.0536125555770.00.4229.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0291140/114/6587_
1.0520322207680.00.4428.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_362f7368895c1

0-0291140/79/6630_
1.02730621117380.00.3627.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/115/7025_
1.02706623951000.00.5429.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/107/6485_
1.0265741726263820.00.3627.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/107/6542_
1.02626722321740.00.4327.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/87/6754_
1.02577805223953350.00.3427.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/130/6829_
1.02563022181680.00.4428.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

0-0291140/90/6708_
1.02525921077680.00.3827.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0291140/79/6717_
1.02495108223389730.00.3127.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWwn0

0-0291140/69/6587_
1.024561221421850.00.2428.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/69/6216_
1.02435721688450.00.2826.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

0-0291140/138/6791_
1.02421720998180.00.5226.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/105/6509_
1.03384922235510.00.4327.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/108/6572_
1.03315923604900.00.4628.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCeBb

0-0291140/106/6472_
1.0333340825291650.00.4326.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RX

1-0-0/0/6500.
0.0026235421257000.00.0027.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/6621.
0.002623537125032180.00.0027.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

1-0-0/0/6680.
0.0026235724638250.00.0027.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6247.
0.0026235622177560.00.0026.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6381.
0.002623515421970260.00.0025.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PHhEl

1-0-0/0/6815.
0.0026235724278590.00.0029.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6622.
0.0026235524279430.00.0027.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpa

1-0-0/0/6754.
0.0026235025846100.00.0027.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/6402.
0.0026235624644470.00.0026.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/6602.
0.0026235518568950.00.0027.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCduc

1-0-0/0/6231.
0.0026235523473450.00.0025.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/5981.
0.0026235303521882640.00.0025.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0-0/0/6735.
0.0026235522929210.00.0028.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itml

1-0-0/0/6708.
0.0026235722734140.00.0028.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/6232.
0.002623542523968350.00.0025.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/6802.
0.0026235720204160.00.0028.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6409.
0.00262352122031570.00.0025.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0-0/0/6399.
0.0026235522164880.00.0027.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0-0/0/6953.
0.0026235522697880.00.0027.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/6847.
0.0026235721518310.00.0028.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6604.
0.00</

Found on 2025-11-08 08:39

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9497168a1

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 06-Nov-2025 17:13:04 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 20 hours 2 minutes 19 seconds
Server load: 0.93 0.67 0.65
Total accesses: 307076 - Total Traffic: 1.3 GB - Total Duration: 112268521
CPU Usage: u39.12 s31.01 cu59.37 cs33.34 - .0192% CPU load
.361 requests/sec - 1589 B/second - 4398 B/request - 365.605 ms/request
2 requests currently being processed, 73 idle workers
_W_________________________________________________W____________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/1692/5803_
19.356561620801380.06.7824.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1607/5456W
19.130022471030.06.7522.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-049600/1940/5492_
19.28908321543120.07.8222.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/2012/5870_
19.337193022918000.07.9124.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1870/5856_
19.49312321637720.07.6824.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1393/5715_
19.221245219044030.05.8824.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_abc42fb10a412

0-049600/1854/5612_
19.161618322455500.07.7023.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_53b547e99ee52

0-049600/2053/5716_
19.221288421100430.08.4824.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1855/5277_
19.39596420359610.07.3021.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-049600/2034/6018_
19.43498323972570.08.1825.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a2eba97d3898

0-049600/2131/5816_
19.43489420193750.09.1625.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/2074/5639_
19.201493319668620.08.4423.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5ef67ddae8c61

0-049600/2130/6161_
19.32760322315530.08.9726.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_126649b8938ae

0-049600/1751/5362_
19.30831324177490.07.1622.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3c8774ba90026

0-049600/1651/5712_
19.47425220588660.06.9123.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_41b2fc3573afd

0-049600/1884/5464_
19.15168336520328180.07.7522.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1724/5490_
19.261091419537590.07.0823.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1871/5782_
19.53127419315120.07.8924.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1693/5691_
19.5495421070030.06.4123.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1825/5724_
19.261056319468560.07.6525.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e57f8989b6240

0-049600/1912/5309_
19.261027419202990.08.2823.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://trinitylism

0-049600/1603/5623_
19.32747419243480.06.1822.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1966/5681_
19.53214321133730.08.1624.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1800/5578_
19.221367621479690.08.4224.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/1792/5427_
19.49371323327350.07.6323.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1650/5677_
19.45711419887290.06.9024.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpK

1-048880/1859/5765_
19.381000223676580.07.4624.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_34e5ed0c49e2a

1-048880/1794/5758_
19.45484621461730.07.6824.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1802/5362_
19.161746220692620.07.4122.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3f61119a8dcd3

1-048880/1768/5499_
19.48339720626470.06.9922.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/1970/6118_
19.45792322910160.08.7927.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1899/5702_
19.351174222121790.08.0023.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3d668bba1201f

1-048880/1871/5805_
19.261452322073270.07.5324.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1645/5576_
19.45621423512390.07.0023.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/1729/5611_
19.39969316873620.07.2523.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_394fbfbbb523c

1-048880/1844/5336_
19.1916425121749950.07.4122.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1818/5415_
19.231585420667780.07.6223.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/2202/5941_
19.52167521187100.09.2225.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-048880/2185/6214_
19.5635221159460.08.9626.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6d5b1ca1fcf74

1-048880/1704/5461_
19.281331521977540.06.8022.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1743/5874_
19.43862318695110.07.0024.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_87b08664edc98

1-048880/1846/5391_
19.52122420632970.07.4121.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/1744/5748_
19.45685321238680.07.1824.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_633817a07ab08

1-048880/1738/5972_
19.02768621347600.07.2724.31
127.0.0.1http/1.1

1-04888

Found on 2025-11-06 17:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a99f4e7c5f

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 05-Nov-2025 03:33:15 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 6 hours 22 minutes 30 seconds
Server load: 1.66 1.96 1.56
Total accesses: 243346 - Total Traffic: 1.0 GB - Total Duration: 95108303
CPU Usage: u21.87 s19.5 cu59.37 cs33.34 - .0188% CPU load
.341 requests/sec - 1530 B/second - 4490 B/request - 390.836 ms/request
1 requests currently being processed, 74 idle workers
___W____________________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/951/5062_
10.92862718212200.04.1121.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/873/4722_
10.93560719596830.03.8819.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/1042/4594_
10.9412648519718780.04.3319.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3A6%

0-0496025/1260/5118W
10.9600204045828.95.0421.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-049600/1032/5018_
10.93463620023470.04.5920.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-049600/778/5100_
10.9482617580110.03.6522.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/919/4677_
10.94373520066380.04.0020.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-049600/1179/4842_
10.942103119587410.04.8020.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-049600/1018/4440_
10.9210325017942160.04.1518.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/1023/5007_
10.9427420776840.04.4121.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-049600/1118/4803_
10.92922618395620.05.0921.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/888/4453_
10.94322517399490.03.9218.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1076/5107_
10.921055792819803150.04.4621.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

0-049600/815/4426_
10.945822321677340.03.4719.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL0X6D8QvGtzE

0-049600/858/4919_
10.9367239319139690.04.0021.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcpp

0-049600/1047/4627_
10.93508317667310.04.5119.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2304422ca3f60

0-049600/958/4724_
10.94262717444870.04.2820.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/952/4863_
10.937533216455950.04.3520.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-049600/863/4861_
10.93622617999650.03.4620.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1012/4911_
10.94158491116884020.04.5221.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-049600/1138/4535_
10.9471017052630.05.2920.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-049600/957/4977_
10.9297299517738390.03.6320.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOr

0-049600/963/4678_
10.92792418077200.04.4520.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-049600/916/4694_
10.9343242719269530.04.5820.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-049600/992/4627_
10.9372718820856620.04.3219.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJHEoW

1-048880/934/4961_
11.07223417779710.03.8521.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfT8MgFMW%2FSt94orT

1-048880/953/4859_
11.07442520944740.04.1420.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/949/4913_
11.0771018919610.04.0321.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-048880/1005/4565_
11.068823117947370.04.3719.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-048880/919/4650_
11.061042918562180.03.9319.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1114/5262_
11.07132521206410.05.1023.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKc

1-048880/926/4729_
11.07492519794010.04.0419.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94onR

1-048880/1098/5032_
11.0752251420291530.04.7221.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOp

1-048880/1049/4980_
11.075822521713330.04.6921.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL0X6D8QvGtzE

1-048880/866/4748_
11.0734242315070510.03.9920.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-048880/955/4447_
11.06732518879110.03.9218.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-048880/904/4501_
11.07583518633830.04.2219.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-048880/1318/5057_
11.06982619107830.05.9321.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1184/5213_
11.0680944919303120.05.3823.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-048880/910/4667_
11.07682819214580.03.8919.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/970/5101_
11.072823216726430.04.0321.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-048880/1065/4610_
11.06785417875310.04.5819.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_352b7f8e3ded4

1-048880/1025/5029_
11.077287319844420.04.4321.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuMwFN0j8Q%2BW93k

1-048880/921/5155_
11.07197619257350.04.0221.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-048880/911/4828_
11.077287318329340.0

Found on 2025-11-05 03:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a21d0021

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 03-Nov-2025 18:24:27 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 21 hours 13 minutes 42 seconds
Server load: 0.48 0.41 0.45
Total accesses: 191794 - Total Traffic: 817.3 MB - Total Duration: 75316003
CPU Usage: u5.8 s9.75 cu59.37 cs33.34 - .0182% CPU load
.322 requests/sec - 1440 B/second - 4468 B/request - 392.692 ms/request
1 requests currently being processed, 49 idle workers
_____________________W____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/0/4111_
0.00579614381220.00.0017.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/0/3849_
0.00579715587330.00.0015.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/0/3552_
0.00579615733090.00.0014.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/0/3858_
0.0057938916203520.00.0016.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJK

0-049600/0/3986_
0.0057937316241150.00.0016.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-049600/0/4322_
0.00579514658720.00.0018.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/1/3759_
0.00529321916643620.00.0016.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcJW

0-049600/1/3664_
0.00503715713400.00.0015.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-049600/2/3424_
0.00454614282960.00.0114.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1/3985_
0.00413617343730.00.0017.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-049600/1/3686_
0.003832813658280.00.0016.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-049600/3/3568_
0.00334714547230.00.0114.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1/4032_
0.003212815569860.00.0017.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/1/3612_
0.00283718725450.00.0015.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/2/4063_
0.00274615712090.00.0117.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1/3581_
0.002263114365810.00.0014.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-049600/1/3767_
0.00203614289420.00.0016.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpU

0-049600/1/3912_
0.0014238413012180.00.0016.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

0-049600/1/3999_
0.00104514939820.00.0017.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-049600/1/3900_
0.0082712519080.00.0017.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/4/3401_
0.0032611635500.00.0114.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0496029/29/4049W
0.0100144616543.10.0416.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-049600/0/3715_
0.00579614443260.00.0015.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/0/3778_
0.005792815769410.00.0016.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/0/3635_
0.00579616416730.00.0015.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/4030_
0.01514614823130.00.0117.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/3909_
0.014724417126720.00.0116.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-048880/2/3966_
0.0144258615099480.00.0117.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDfpt

1-048880/3/3563_
0.01394613583140.00.0115.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/5/3736_
0.0135241715143830.00.0215.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHJOEo

1-048880/3/4151_
0.02293516903610.00.0118.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-048880/2/3805_
0.02283615568240.00.0015.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-048880/2/3936_
0.02328615015050.00.0016.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdp0

1-048880/2/3933_
0.0226337517038210.00.0116.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-048880/4/3886_
0.02214612616970.00.0116.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/3495_
0.02154615615580.00.0114.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/3600_
0.02112614087600.00.0115.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-048880/3/3742_
0.0294613866360.00.0115.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/2/4031_
0.00874615247850.00.0117.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/2/3759_
0.0214715182090.00.0015.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-048880/2/4133_
0.025242413439790.00.0117.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-048880/1/3546_
0.00828513325030.00.0014.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjpswEIZfhZtPxhiyT

1-048880/1/4005_
0.007983016347670.00.0017.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XX

1-048880/2/4236_
0.01754615613410.00.0117.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/10/3927_
0.01712412858290.00.0616.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-04888

Found on 2025-11-03 18:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9315e582a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 02-Nov-2025 08:04:20 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 10 hours 53 minutes 34 seconds
Server load: 0.87 1.00 0.81
Total accesses: 149122 - Total Traffic: 639.4 MB - Total Duration: 60951655
CPU Usage: u15.75 s14.19 cu34.95 cs18.38 - .0177% CPU load
.316 requests/sec - 1422 B/second - 4496 B/request - 408.737 ms/request
2 requests currently being processed, 48 idle workers
_______W____________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0187730/836/3149_
9.098083210641190.03.1713.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0187730/758/2892_
9.09333011363780.03.0011.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0187730/769/2713_
9.093233412869060.02.9111.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/887/3067_
9.09207513350050.03.4912.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/751/3035_
9.0838336912458790.02.9312.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0187730/928/3343_
9.09291511784030.04.0414.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/666/2860_
9.091089213592280.02.4512.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/824/2933W
9.050012129410.03.1812.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0187730/677/2646_
9.1067112025830.02.5911.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0187730/791/3057_
9.091467814539900.03.2813.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/724/2959_
9.05635210661450.03.1212.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0187730/871/2733_
9.1055411609070.03.2811.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0187730/739/3250_
9.066044012348710.02.9614.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/739/2920_
9.06591715707260.02.9112.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/786/3025_
9.102124512975750.03.2913.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJA4fu

0-0187730/841/2843_
9.07507511217820.03.1411.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/952/3008_
9.07560012007740.04.0113.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0187730/800/3125_
9.05642010962360.03.0313.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0187730/797/3169_
9.0925443712556910.03.2713.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0187730/819/2934_
9.08474249112650.03.3812.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCeBh

0-0187730/711/2568_
9.0562569181230.02.7911.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/789/2979_
9.08374011293000.03.0212.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0187730/592/2822_
9.09347811549360.02.1112.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/991/2952_
9.09164806813322300.03.7812.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcuV

0-0187730/754/2903_
9.08414713770320.02.9912.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0187040/843/3094_
8.69604111079800.03.0813.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0187040/703/3017_
8.72338313422160.02.7613.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0187040/688/3243_
8.7369612660720.02.8214.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-01870425/771/2603W
8.740099760628.92.9511.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCehh

1-0187040/716/2865_
8.69591811817020.02.9212.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0187040/833/3326_
8.713702814282540.03.1415.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_72a45e6808665

1-0187040/805/2921_
8.69635312439530.03.1312.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0187040/872/2941_
8.7044436412405790.03.3112.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

1-0187040/976/3152_
8.70512341213592800.03.6413.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0187040/827/3107_
8.70501610212750.03.2113.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0187040/645/2638_
8.72317344613113650.02.4611.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0187040/722/2859_
8.72338211941250.02.8612.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0187040/557/2786_
8.70391111375170.02.3011.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0187040/754/2980_
8.73135252212493520.03.0413.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0187040/649/3099_
8.72267613270790.02.3512.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0187040/837/3264_
8.7216372910966940.03.5314.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcuV

1-0187040/868/2753_
8.7387610755890.02.8511.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0187040/748/3327_
8.72229613993000.03.0414.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDu

1-0187040/776/3362_
8.72199413217760.03.2313.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0187040/682/3003_
8.73463410028910.02.6712.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

Found on 2025-11-02 08:04

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9b3f3ae5a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 29-Oct-2025 07:32:50 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 10 hours 22 minutes 5 seconds
Server load: 1.90 2.79 2.19
Total accesses: 51966 - Total Traffic: 225.6 MB - Total Duration: 23414971
CPU Usage: u18.24 s10.78 cu0 cs0 - .0235% CPU load
.42 requests/sec - 1912 B/second - 4552 B/request - 450.583 ms/request
2 requests currently being processed, 48 idle workers
____________________________________________W___K_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/983/983_
12.581537083435080.04.654.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCGQR

0-0360/877/877_
12.5739064257970.03.773.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgW

0-0360/909/909_
12.566401845095490.03.713.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DecyEst

0-0360/906/906_
12.5677774297650.03.763.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/1331/1331_
12.567351694999740.05.475.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5GsXt

0-0360/919/919_
12.5819163335950.03.883.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0360/1209/1209_
12.582731535978730.05.255.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnctUeW4I

0-0360/1129/1129_
12.5753515245347970.05.115.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/945/945_
12.5658354900960.03.993.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94onS

0-0360/1128/1128_
12.56610348032900.05.045.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1067/1067_
12.566894723960770.04.724.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpp

0-0360/706/706_
12.582794534116860.03.123.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1059/1059_
12.5751083946120.04.554.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/1165/1165_
12.5812968050110.05.125.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0360/1058/1058_
12.591305262440.04.384.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

0-0360/987/987_
12.5747763987660.04.034.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/904/904_
12.56548353523900.03.923.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1088/1088_
12.5735862962940.04.444.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/983/983_
12.599054289260.04.414.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTtwwEIZfJTefHCcOo

0-0360/1043/1043_
12.5831803128930.04.534.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/975/975_
12.5823764136000.04.044.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/918/918_
12.5824873360530.03.863.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1085/1085_
12.59512533652650.04.734.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uJRs

0-0360/871/871_
12.592953228370.04.444.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0360/1054/1054_
12.58310105898020.04.494.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0370/1005/1005_
13.2529764225230.04.284.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/1142/1142_
13.2617864547270.05.105.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/1352/1352_
13.2171875438440.05.685.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/846/846_
13.2613482673783850.03.373.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uLyq

1-0370/940/940_
13.226331644439450.04.044.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5ItSi

1-0370/1150/1150_
13.265765858210.05.935.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/1077/1077_
13.2527905068430.04.484.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0370/999/999_
13.254061754959160.04.454.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Isiw

1-0370/994/994_
13.2256844724910.04.284.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1140/1140_
13.2524874330210.04.864.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0370/929/929_
13.2526074402870.03.743.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0370/979/979_
13.2353674407510.04.154.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0370/1100/1100_
13.252081765350550.04.564.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78qpow

1-0370/1136/1136_
13.2531914812940.05.365.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0370/1100/1100_
13.2175055966370.04.604.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/1194/1194_
13.225901674429110.05.245.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwX6D8QvOthA

1-0370/956/956_
13.216542113743200.04.264.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78oKUi

1-0370/1172/1172_
13.264405514290.05.215.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

1-0370/1166/1166_
13.2541505196810.04.594.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-03740/1157/1157W
13.2800430933121.85.015.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0370/964/964_
13.253702136998810.04.244.24
127.0.0.1http/1.1i

Found on 2025-10-29 07:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a1cd6425

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 27-Oct-2025 05:56:15 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  109 days 22 hours 50 minutes 15 seconds
Server load: 1.20 0.97 1.04
Total accesses: 3671114 - Total Traffic: 14.8 GB - Total Duration: 1235300115
CPU Usage: u118.06 s169.75 cu1121.52 cs648.27 - .0217% CPU load
.386 requests/sec - 1671 B/second - 4326 B/request - 336.492 ms/request
2 requests currently being processed, 48 idle workers
__K____________________________W__________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0176540/1800/69590_
21.974156238535950.07.41284.59
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/1864/70561_
21.97322336234202420.07.47294.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdq6O

0-0176541/1745/69866K
21.9920224639051.17.44287.66
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /api/swagger.json HTTP/1.1

0-0176540/1736/71092_
21.9816328241481140.07.30291.34
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_40b6749be3ca1

0-0176540/1800/69456_
21.965564238115890.07.43287.01
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0176540/1743/69697_
21.9744248234100200.07.18290.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0176540/1753/71308_
21.973766248022080.07.41292.94
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

0-0176540/1838/70210_
21.9740519059235635290.08.28289.69
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0176540/1817/72881_
21.983050245477270.08.26299.78
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0176540/1605/72047_
21.96579480242467750.06.86297.74
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1Du%2BdQ

0-0176540/1857/70319_
21.981975240801810.07.99288.81
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqy

0-0176540/1833/71064_
21.982626234339610.08.21291.47
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/1734/72199_
21.965266230773700.07.17298.70
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dj

0-0176540/1756/72908_
21.981464245324870.07.78301.75
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0176540/1744/67479_
21.98761228823930.07.38279.30
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0176540/1979/70623_
21.982040252654080.07.99288.04
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0176540/1876/70258_
21.98836231467900.07.85292.67
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/1754/71158_
21.99295229874370.07.35292.46
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0176540/1895/71761_
21.9817833238640430.07.74294.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/1784/70953_
21.99410241457190.08.03294.85
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0176540/1703/70407_
21.99134233096930.07.25289.10
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7kpA24

0-0176540/1793/71311_
21.96475202242950640.08.07294.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuSUiAV

0-0176540/1949/69658_
21.96495366232099580.08.47287.71
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KmV

0-0176540/1787/71748_
21.9823810238511330.07.77299.23
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0176540/1815/70414_
21.966236223335270.07.32291.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/1794/65054_
21.386000217548530.07.22267.40
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /manager/assets/modext/core/modx.js HTTP/1.1

1-0234880/1613/66239_
21.41236220431050.07.08271.60
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/1658/66607_
21.392245213053190.07.33273.62
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKfZt

1-0234880/1675/64719_
21.401290217142050.07.02266.54
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0234880/1667/66134_
21.3939245216419160.06.30270.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/1533/65409_
21.394440204251510.06.72269.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-02348828/2038/66990W
21.42002224916746.97.99271.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /server-status HTTP/1.1

1-0234880/1468/65590_
21.3946842209415920.05.79268.15
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/1754/64807_
21.392955212310370.07.72268.92
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0234880/1680/66569_
21.3917835215865870.06.96270.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/1525/66034_
21.392524216440840.06.00274.45
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wji

1-0234880/1879/65312_
21.3947811209984430.08.10268.64
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/1915/67975_
21.386365214986370.07.87275.65
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dh

1-0234880/2003/65884_
21.41715213682920.08.41269.44
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0234880/1731/66329_
21.39173451211459430.07.02271.97
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0234880/1878/65612_
21.41610214698710.08.77271.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0234880/1820/66729_
21.3854011219059760.08.26276.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/2242/65511_
21.393226217895960.09.04270.54
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/1856/65748_
21.3936644219559830.07.67270.16
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/1679/65941_
21.41374214392520.06.83273.75
127.0.0.1http/1.1

Found on 2025-10-27 05:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a998b14e60

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 24-Oct-2025 23:27:33 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  107 days 16 hours 21 minutes 32 seconds
Server load: 0.77 1.17 1.29
Total accesses: 3604666 - Total Traffic: 14.5 GB - Total Duration: 1212978556
CPU Usage: u96.09 s155.39 cu1121.52 cs648.27 - .0217% CPU load
.387 requests/sec - 1676 B/second - 4325 B/request - 336.502 ms/request
1 requests currently being processed, 49 idle workers
____________________________________W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0176540/642/68432_
6.666194233628010.02.59279.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0176540/426/69123_
6.69324230878750.01.69288.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/467/68588_
6.691314220293900.01.98282.21
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://trinitylism

0-0176540/442/69798_
6.681764237532060.02.21286.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/510/68166_
6.681607232763820.02.34281.92
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/450/68404_
6.682807228780050.01.89284.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/480/70035_
6.69674244162240.01.95287.48
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/449/68821_
6.657294231789190.02.65284.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpu

0-0176540/466/71530_
6.708202239567260.02.15293.67
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNb9QwEL0j8R8s35NsA

0-0176540/424/70866_
6.691006239085110.02.38293.26
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/607/69069_
6.681985237383880.03.05283.87
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0176540/577/69808_
6.676021231215730.02.59285.86
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0176540/438/70903_
6.657062429227862040.01.83293.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/totp.php HTTP/1.1

0-0176540/424/71576_
6.6665768240095100.01.76295.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0176540/538/66273_
6.68498349224185450.02.86274.77
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

0-0176540/583/69227_
6.6758410246537780.02.26282.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/490/68872_
6.67573279226677640.02.18287.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8k5DQg

0-0176540/527/69931_
6.6752731224568290.02.29287.41
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpW

0-0176540/585/70451_
6.666765234587730.02.41288.89
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/445/69614_
6.684606235920320.02.40289.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/435/69139_
6.68256485229297810.02.21284.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyQU2C

0-0176540/529/70047_
6.684006239271250.02.25288.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/515/68224_
6.683406227449490.01.99281.23
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/529/70490_
6.666764234832960.02.46293.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/611/69210_
6.6829840219172430.02.50286.42
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/449/63709_
5.205806212440590.01.83262.01
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/316/64942_
5.21409331215894520.01.36265.88
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0234880/370/65319_
5.213794208983580.01.67267.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

1-0234880/336/63380_
5.2231444211969110.01.28260.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/282/64749_
5.214695211390130.01.10265.12
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0234880/386/64262_
5.2228430200896800.01.93265.16
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/433/65385_
5.221773215610920.01.98264.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/427/64549_
5.222894204863450.01.83264.19
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0234880/331/63384_
5.222141207694430.01.91263.12
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0234880/360/65249_
5.241470212487870.01.36265.13
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0234880/304/64813_
5.231655212200800.01.05269.49
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-02348825/494/63927W
5.25002058121228.82.44262.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /server-status HTTP/1.1

1-0234880/417/66477_
5.24724210725960.01.72269.50
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/516/64397_
5.20686179209176150.02.17263.20
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/495/65093_
5.24109303206906050.02.08267.04
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

1-0234880/370/64104_
5.24523210851840.01.68264.65
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/480/65389_
5.206406214807870.02.09270.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/486/63755_
5.207006213588530.02.04263.54
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/476/64368_
5.25154215058650.01.87264.37
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

Found on 2025-10-24 23:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9f48fe86f

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 23-Oct-2025 02:48:33 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  105 days 19 hours 42 minutes 32 seconds
Server load: 1.85 1.83 1.71
Total accesses: 3553394 - Total Traffic: 14.3 GB - Total Duration: 1195626487
CPU Usage: u114.77 s163.08 cu1081.81 cs629.26 - .0218% CPU load
.389 requests/sec - 1677 B/second - 4317 B/request - 336.475 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0326840/1867/67378_
22.2091229062740.08.68275.35
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0326840/1808/68184_
22.205528227448830.08.73283.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6ebe15d0f7bb5

0-0326840/1744/67638_
22.201024217123840.07.89277.89
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b61037bd61c68

0-0326840/1495/68839_
22.201301233900650.07.15281.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0326840/1722/67137_
22.172955228468840.08.05277.34
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86ybK

0-0326840/1944/67335_
22.155641224668100.09.56279.88
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0326840/1674/69089_
22.154606241309050.07.82283.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/1715/67989_
22.18215157227889160.08.29278.61
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgXctVaQ6J

0-0326840/2105/70637_
22.164157236691800.010.03289.65
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0326840/1854/69895_
22.14574493236490720.08.45288.15
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itmu

0-0326840/1772/68043_
22.155151234904850.08.16279.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0326840/1603/68816_
22.1736610226604600.07.73280.90
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/1522/69937_
22.20668224866210.07.41288.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/1517/70732_
22.173790236936710.07.61292.06
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/1789/65237_
22.182811220368400.08.24269.32
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0326840/1704/68243_
22.1547531243348620.08.03277.79
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0326840/1870/67877_
22.20407223717780.09.07281.82
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/1732/68960_
22.17346200220370400.07.78283.35
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCG8F

0-0326840/1625/69441_
22.155348231541100.07.26283.48
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdxg

0-0326840/1512/68843_
22.15445343233426860.07.15284.89
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0326840/1840/68300_
22.17321150226397440.08.60279.55
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7POHqI

0-0326840/1818/69047_
22.1820415235709440.08.91284.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0326840/1613/67230_
22.164006224119870.07.55277.02
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/1796/69367_
22.191510232222630.08.32288.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0326840/1657/68133_
22.2011462215831640.07.87281.49
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-056070/1492/62729_
20.065140209347770.07.52256.90
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-056070/1655/64132_
20.09795212853080.07.72262.23
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDtpu

1-056070/1467/64235_
20.0636611204282520.06.82262.92
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-056070/1496/62406_
20.07306527208823970.07.04256.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPLbtswEPwVgXdJjOwID

1-056070/1814/63788_
20.081661208720870.08.84261.14
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-056070/1474/63269_
20.0638516197319300.06.61260.58
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-056070/1788/64170_
20.06503154211317090.08.02259.37
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVNLj9owEP4rlu95EGgJF

1-056070/1576/63325_
20.07354178200526880.07.72258.95
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7EggJF

1-056070/1638/62469_
20.09554204098910.07.99258.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-056070/1445/64121_
20.09667207821850.06.25259.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-056070/1550/63778_
20.091024208741380.07.26263.79
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-056070/1642/62801_
20.081447202135210.07.62257.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-056070/1768/65341_
20.091289207647820.08.12264.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-056070/1303/63278_
20.1090205541440.06.10258.61
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-056070/1321/63769_
20.091023202837880.05.92261.59
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-056070/3740/63140_
20.091006207255800.016.84259.49
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056070/1525/64082_
20.073397210286520.07.30264.51
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056070/1640/62608_
20.064700210244210.07.84257.84
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-056070/1444/63117_
20.0642819211552730.06.52259.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0560737/1559/63591W
20.110

Found on 2025-10-23 02:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a92432543b

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 20-Nov-2024 17:38:20 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  35 days 20 hours 18 minutes 37 seconds
Server load: 0.84 1.15 1.22
Total accesses: 1029614 - Total Traffic: 4.3 GB - Total Duration: 449301323
CPU Usage: u37.3 s65.61 cu352.58 cs192.9 - .0209% CPU load
.332 requests/sec - 1496 B/second - 4500 B/request - 436.378 ms/request
1 requests currently being processed, 74 idle workers
__________________________W_____________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0163760/392/18918_
7.39156665885264150.01.8079.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgW

0-0163760/530/19084_
7.40814581809270.03.1983.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0163760/498/18704_
7.40344782397410.02.5681.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/453/18991_
7.39140941077988450.01.9679.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0163760/497/18471_
7.39165540378299560.02.2678.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0163760/553/19739_
7.4096445089803660.03.0584.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/417/18953_
7.40118761987129220.01.7982.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0163760/411/18921_
7.39174539491116920.02.1880.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0163760/495/20388_
7.40662592881780.02.3388.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0163760/512/18902_
7.40424579885540.02.3180.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0163760/383/18815_
7.40515586995520.01.7678.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/552/19251_
7.40755587979500.02.6682.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgX

0-0163760/639/19507_
7.402041586303980.02.8283.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/630/19657_
7.391897485057770.02.9385.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0163760/619/19442_
7.40111442884555790.03.1684.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBb%2BMgEIX%2Fim%2B

0-0163760/551/18732_
7.401753188008860.02.4881.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/642/19532_
7.39183642278778520.03.3284.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCcBB

0-0163760/370/19188_
7.401247786396750.01.5282.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/445/18732_
7.40935579461780.01.9782.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0163760/413/19740_
7.40606588520090.02.1883.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgW

0-0163760/574/20088_
7.4024563274573310.02.4886.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0163760/578/19287_
7.409543479686820.02.8082.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/445/18855_
7.40105242185544540.02.0082.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpo

0-0163760/644/18915_
7.391506485592760.03.5182.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0163760/503/19025_
7.391326484705630.02.2179.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0154060/395/14432_
6.941080564886180.01.7561.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGJtE9

1-0154068/461/14640W
6.950066437539.71.9162.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0154060/594/14197_
6.9547764475000.03.9462.83
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/475/14466_
6.95365563182550.02.0263.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0154060/485/14258_
6.9530691664120240.02.2261.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0154060/474/13925_
6.95456764745900.02.1060.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

1-0154060/469/13856_
6.941145559358030.02.1860.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0154060/553/14023_
6.95696460684010.02.4759.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzqJ

1-0154060/452/13342_
6.949953267621280.02.3757.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a2beeca686030

1-0154060/487/13497_
6.95775664653270.02.5157.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/471/14294_
6.95126557953400.02.3462.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0154060/369/13381_
6.94843557481970.01.8758.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZX

1-0154060/629/14421_
6.931446567252050.03.2262.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0154060/502/14214_
6.9318473168775880.02.3960.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/338/13878_
6.9316862659477570.01.4656.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMehS

1-0154060/524/13474_
6.95545561196640.02.2555.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMf

1-0154060/545/14596_
6.941263138964792400.02.3161.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0154060/471/14025_
6.95187760350680.02.3760.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/446/13780_
6.931535763269340.01.8460.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-0154060/530/14179<

Found on 2024-11-20 17:38

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a91ddafd8a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 18-Nov-2024 17:22:17 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  33 days 20 hours 2 minutes 34 seconds
Server load: 0.99 1.35 1.59
Total accesses: 969971 - Total Traffic: 4.0 GB - Total Duration: 419664778
CPU Usage: u44.92 s66.6 cu319.1 cs177.84 - .0208% CPU load
.332 requests/sec - 1482 B/second - 4469 B/request - 432.657 ms/request
1 requests currently being processed, 49 idle workers
__________________________________________W_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157970/891/17990_
15.0880343479808360.03.8675.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1092/18032_
15.082613176189450.05.4078.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1017/17652_
15.08381777405580.05.0276.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0157970/1189/18108_
15.0813641973526820.05.1675.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNf

0-0157970/1033/17466_
15.0881575062950.05.2874.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMch7

0-0157970/1090/18580_
15.08182581859320.05.2278.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdtu

0-0157970/1062/17934_
15.081301311780274580.04.5277.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BIwEIb%2FSm4%2

0-0157970/1128/17945_
15.08862586638620.05.8275.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedZNlO0

0-0157970/983/19241_
15.08501686528780.04.2483.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0157970/1077/17736_
15.081196773723590.04.6475.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/867/17966_
15.0815581439810.04.3274.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0157970/1010/18190_
15.083515781656190.04.5977.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1031/18253_
15.08952580846350.04.7277.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0157970/903/18513_
15.08105547679949770.04.2380.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1003/18294_
15.081344679365050.04.4478.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0157970/1032/17694_
15.081003583354850.04.8876.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-0157970/950/18384_
15.088984173552260.05.7478.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/926/18356_
15.0871038881882990.04.9378.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0157970/1113/17809_
15.08114865373253730.06.0178.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

0-0157970/816/18873_
15.081226118884477370.03.6378.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0157970/1057/18959_
15.08651569429250.04.5181.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0157970/1014/18136_
15.0842613576218110.04.4376.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/3252/17854_
15.0856041379841030.014.4976.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0157970/927/17581_
15.08596680394080.04.2575.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/881/18080_
15.08298779032010.03.7376.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/1274/13566_
16.89375558919020.06.8758.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0148380/1246/13693_
16.898332861700510.05.7658.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMe

1-0148380/1153/13086_
16.8989244258629740.04.8556.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0148380/1161/13413_
16.89402443159136620.06.2858.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/1250/13370_
16.90112559074710.06.7857.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTsMwEIRfJTefHNehV

1-0148380/1080/12946_
16.895312260393420.04.8355.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/985/12853_
16.9019955154682900.05.1255.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHJM

1-0148380/1029/12950_
16.891179556165990.04.0754.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdug

1-0148380/1150/12368_
16.8947143961947480.05.2952.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0148380/903/12348_
16.8932064158858880.04.0551.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94woS

1-0148380/1230/13290_
16.89102614554241140.05.1756.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/893/12415_
16.891282653239920.04.8253.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/1085/13136_
16.897582661019040.04.3454.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe96so2I

1-0148380/1125/13141_
16.89590464657050.04.6255.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0148380/1025/13022_
16.896823055260560.04.2152.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0148380/1001/12434_
16.891212656494850.04.1451.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

1-0148380/1106/13414_
16.891119558039920.04.9156.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-01483810/1017/13107W
16.9100552248411.35.0456.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0148380/1251/12853_
16.8997945357993930.07.3056.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.

Found on 2024-11-18 17:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a902e87138

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 16-Nov-2024 19:15:04 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 21 hours 55 minutes 21 seconds
Server load: 1.26 1.14 1.38
Total accesses: 929463 - Total Traffic: 3.8 GB - Total Duration: 397987670
CPU Usage: u25.89 s55.79 cu319.1 cs177.84 - .021% CPU load
.337 requests/sec - 1496 B/second - 4438 B/request - 428.191 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157970/166/17265_
2.726053276801430.00.5972.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/183/17123_
2.72502572410950.00.7673.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0157970/216/16851_
2.7244142672847790.00.8972.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNdpa

0-0157970/200/17119_
2.72366569173560.00.8071.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/241/16674_
2.72322671270180.00.9369.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/221/17711_
2.72412476054370.01.0474.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0157970/270/17142_
2.7219941874877690.00.9674.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHOMkb

0-0157970/207/17024_
2.7211450681289160.00.8370.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0157970/303/18561_
2.7353582962240.00.8980.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/244/16903_
2.7365568841660.00.8871.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0157970/191/17290_
2.721283576317200.00.8171.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/199/17379_
2.721246478080540.00.8573.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

0-0157970/224/17446_
2.72113942277057250.00.6973.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-0157970/177/17787_
2.721205973010010.00.6876.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/196/17487_
2.721080874899200.00.8075.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/242/16904_
2.7210141078420910.01.4773.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0157970/219/17653_
2.72989568003150.00.7273.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/139/17569_
2.72893169678930550.00.4673.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0157970/290/16986_
2.72862669999020.01.3173.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0157970/156/18213_
2.72925580581050.00.6375.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0157970/179/18081_
2.72796415765497990.00.7677.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpS

0-0157970/191/17313_
2.7277212172473510.00.7473.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/2436/17038_
2.7271161476966450.010.6572.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/184/16838_
2.7266098977532760.00.6671.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157970/168/17367_
2.7263839674865880.00.7373.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

1-0148380/306/12598_
3.75420554988240.01.5852.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0148380/315/12762_
3.731021455784160.01.1053.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDclb

1-0148380/267/12200_
3.75667054625600.00.9652.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0148380/349/12601_
3.7552344755523170.01.3953.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

1-0148380/285/12405_
3.75340553877470.01.4552.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0148380/301/12167_
3.75480856531940.01.1352.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/241/12109_
3.741000650570870.00.9351.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0148388/284/12205W
3.750050518989.71.0551.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0148380/265/11483_
3.731261556354620.00.9648.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0148380/237/11682_
3.7555556175740.00.8248.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0148380/363/12423_
3.7496042249395910.01.4653.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNehv

1-0148380/229/11751_
3.749165049492240.00.8049.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_05fba87cfbb3a

1-0148380/291/12342_
3.75743757142600.01.0151.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0148380/256/12272_
3.75622560550750.01.0152.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

1-0148380/250/12247_
3.75779851087140.00.8249.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/265/11698_
3.748802352949630.00.8647.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

1-0148380/261/12569_
3.758335253434800.00.8552.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/210/12300_
3.731171551167400.00.7352.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0148380/267/11869_
3.73113941152600100.01.0650.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

1-0148380/247/12406_
3.75651

Found on 2024-11-16 19:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a92fe53fca

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 17:32:30 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 20 hours 12 minutes 47 seconds
Server load: 2.12 2.32 1.71
Total accesses: 874682 - Total Traffic: 3.6 GB - Total Duration: 380994742
CPU Usage: u48.7 s64.01 cu277.18 cs156.19 - .0212% CPU load
.339 requests/sec - 1515 B/second - 4467 B/request - 435.581 ms/request
1 requests currently being processed, 49 idle workers
_____________W____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0318150/1387/16218_
20.21759773292940.06.7168.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1331/16076_
20.2473169060470.06.4068.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0318150/1400/15857_
20.2434468984150.06.8068.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_945da34339ab0

0-0318150/1187/16042_
20.24180665261930.05.9967.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

0-0318150/1371/15521_
20.24204467292500.06.4365.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0318150/1420/16455_
20.22601572474630.06.6369.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHOMkV

0-0318150/1307/16153_
20.22631672440170.06.1570.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0318150/1303/16051_
20.22491879119480.05.9666.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1482/17309_
20.21734579961720.07.7675.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1510/15779_
20.21809865789360.07.3567.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1223/16077_
20.22408573970180.05.7866.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1577/16207_
20.21846573980170.07.1868.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1425/16475_
20.21687573572330.07.0669.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318158/1464/16764W
20.240069091149.77.1672.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0318150/1350/16340_
20.2445670887370.06.5570.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJ2

0-0318150/1363/15936_
20.24270675079940.07.1669.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDduQ

0-0318150/1429/16547_
20.218823465182800.06.4569.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1469/16556_
20.2458675358470.06.8070.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpy

0-0318150/1296/16028_
20.21661567474460.06.3769.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdOG

0-0318150/1476/17344_
20.24233576213040.06.5472.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1403/16853_
20.22453562290450.06.4072.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHOPQ3

0-0318150/1354/16314_
20.22348570520780.06.4469.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1256/15858_
20.22321572952030.06.3468.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1304/15793_
20.24291573608580.07.3167.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1288/16273_
20.22540572095290.06.1168.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcmU

1-0267270/1368/11433_
21.89621552304040.06.8748.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1674/11662_
21.91201550471660.07.7649.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1311/11032_
21.9363050569450.06.7748.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/1552/11402_
21.902773752038550.07.5549.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_675a75c58808a

1-0267270/1289/11111_
21.88667550610810.06.3147.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1552/11168_
21.917013853006430.07.2448.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0267270/1377/10906_
21.88781547766030.07.0347.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0267270/1597/11051_
21.8936142746000160.07.3746.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0267270/1539/10389_
21.89511552205950.06.9444.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpU

1-0267270/1454/10716_
21.90331652453540.06.8444.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0267270/1486/11320_
21.90256645587000.07.0348.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0267270/1423/10697_
21.9251046119360.06.4146.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0267270/1357/11325_
21.91187553479800.06.4747.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1759/11167_
21.87904355588430.08.0547.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ec8f90e83de34

1-0267270/1389/11226_
21.9332547914310.06.4445.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1456/10680_
21.89561549993710.06.9044.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1585/11276_
21.89652650628030.07.4547.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1377/11159_
21.90301849067700.06.3847.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0267270/1457/11020_
21.87839649846150.06.9347.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwE

Found on 2024-11-14 17:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9828298c6

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 18:21:35 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  27 days 21 hours 1 minute 53 seconds
Server load: 0.41 1.03 1.31
Total accesses: 819611 - Total Traffic: 3.4 GB - Total Duration: 352787005
CPU Usage: u25.62 s50.16 cu277.18 cs156.19 - .0211% CPU load
.34 requests/sec - 1508 B/second - 4432 B/request - 430.432 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0318150/215/15046_
4.2440443768059450.01.0262.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86ybL

0-0318150/315/15060_
4.237863264081660.01.4964.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

0-0318150/389/14846_
4.23840763639230.01.9063.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/170/15025_
4.221054760075650.00.8662.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/265/14415_
4.2299747261469780.01.3460.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpK

0-0318150/312/15347_
4.24366666004530.01.5564.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0318150/232/15078_
4.22874967422250.01.1265.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0318150/253/15001_
4.2436673309550.01.2161.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0318150/333/16160_
4.23769774783710.02.0770.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/302/14571_
4.2463846158565320.01.4861.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0318150/233/15087_
4.2211134467220550.01.0862.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_899396351dfcd

0-0318150/215/14845_
4.2293342768375990.01.0262.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0318150/283/15333_
4.2448744466922710.01.5563.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0318150/291/15591_
4.23739663456830.01.2966.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/317/15307_
4.221257764006740.01.5865.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0318150/285/14858_
4.2457646067804630.01.6463.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHOOQI

0-0318150/280/15398_
4.24558660493670.01.3164.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYyTR

0-0318150/320/15407_
4.237095570482540.01.5364.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0318150/274/15006_
4.241862762510800.01.4064.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNixF

0-0318150/298/16166_
4.2459671637710.01.4367.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/286/15736_
4.24301321757155970.01.3467.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0318150/273/15233_
4.24240862934200.01.2864.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/265/14867_
4.24156766395250.01.2663.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0318150/287/14776_
4.242626368709170.01.8062.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_111da46a89381

0-0318150/236/15221_
4.2211716866699210.01.2764.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/437/10502_
5.62728547206710.02.0443.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yYq

1-0267270/377/10365_
5.621148100543631650.01.8243.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTtwwEIZfJTefHCcmb

1-0267270/366/10087_
5.62816646099540.01.8743.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0267270/424/10274_
5.63464246213120.01.9843.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_361a33dcd736a

1-0267270/331/10153_
5.63571945111250.01.4842.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/354/9970_
5.621231542147073590.01.6942.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0267270/399/9928_
5.63399643443310.02.1342.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcmp

1-0267270/527/9981_
5.636446240533070.02.3641.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfT8MgFMW%2FSt94ooy

1-0267270/554/9404_
5.63215548286350.02.3839.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZX

1-0267270/472/9734_
5.63454746042790.02.0440.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/322/10156_
5.63246740609900.01.6343.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

1-0267270/429/9703_
5.627773941414270.02.0941.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c8473448a1e24

1-0267270/325/10293_
5.63331748117130.01.4242.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/413/9821_
5.63169948955410.02.0341.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/366/10203_
5.621038542780680.01.7140.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0267270/306/9530_
5.62968644375450.01.3838.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchp

1-02672710/328/10019W
5.6400438586816.41.6542.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0267270/311/10093_
5.62108744342581270.01.4242.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZW

1-0267270/373/9936_
5.63632645908920.01.6641.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0267270/377/10023_
5.63277645487760.02.0642.90

Found on 2024-11-12 18:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c884386b

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 01:33:29 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  25 days 4 hours 13 minutes 46 seconds
Server load: 1.31 2.05 1.76
Total accesses: 755478 - Total Traffic: 3.1 GB - Total Duration: 312829764
CPU Usage: u30.5 s49.86 cu243.47 cs139.64 - .0213% CPU load
.347 requests/sec - 1521 B/second - 4379 B/request - 414.082 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0249240/669/13838_
9.806594661859650.03.0357.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/713/13775_
9.79895556897380.03.4757.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-0249240/525/13594_
9.79940126053864040.02.2157.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0249240/480/13809_
9.8226941451413990.02.0956.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0249240/724/12916_
9.79846654259480.03.2953.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/577/14136_
9.82332158358880.02.3457.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpg

0-0249240/610/13899_
9.81590059706820.03.1759.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/703/13768_
9.79789665990190.02.8156.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMchK

0-0249240/755/14757_
9.82393764625850.03.3463.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0249240/689/13360_
9.81614052271630.03.1055.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/697/13942_
9.791054660461910.03.7056.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0249240/717/13710_
9.822131159864510.02.8557.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0249240/628/14064_
9.79997660840880.02.8657.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

0-0249240/571/14110_
9.79723656691190.02.8359.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0249240/590/13820_
9.82502052048350.02.8758.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0249240/686/13445_
9.8245340958988480.03.8257.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdrOT

0-0249240/579/14157_
9.81559253616020.02.9758.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/750/14132_
9.82152862561180.03.0358.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpu

0-0249240/644/13708_
9.82106953797920.02.9058.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/628/14821_
9.7910229261769370.02.8960.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/678/14314_
9.8233341348208750.03.5360.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

0-0249240/708/13847_
9.79679154348630.03.2357.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0249240/699/13650_
9.7969343058982190.03.1357.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp2

0-0249249/798/13613W
9.8300584283413.03.5756.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0249240/651/13937_
9.7910721087560391320.02.8357.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0222820/759/9236_
11.01904739608750.03.1937.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/903/9008_
11.011009034819980.04.1237.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0222820/693/8700_
11.01102825439017800.03.1736.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/821/8926_
11.026784636688200.04.0437.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/780/8903_
11.031215834773210.03.2035.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0222820/742/8620_
11.03301536420100.03.4836.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0222820/731/8800_
11.01108931437304430.03.4236.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/749/8411_
11.03244633543590.03.8334.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/747/7952_
11.02663140094990.03.4632.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0222820/707/8225_
11.02750037381180.03.0333.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0222820/766/8876_
11.0352259833679980.03.4435.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iLkF

1-0222820/762/8356_
11.03648033864820.03.6335.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0222820/653/9066_
11.03573640279910.03.0036.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0222820/738/8513_
11.02814537104370.02.7134.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0222820/709/9028_
11.03603635329630.03.1135.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0222820/715/8478_
11.03176748835730030.03.2934.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561bU

1-0222820/665/8851_
11.0313634318280.03.1036.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHMchh

1-0222820/813/8914_
11.01967736116100.03.7436.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNchC

1-0222820/711/8777_
11.02706639628080.03.0936.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/723/8763_
11.02890038047210.03.2037.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css

Found on 2024-11-10 01:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c0b140f3

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 03:05:29 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  23 days 5 hours 45 minutes 46 seconds
Server load: 2.24 2.43 1.93
Total accesses: 736636 - Total Traffic: 3.0 GB - Total Duration: 304069416
CPU Usage: u22.18 s42.58 cu243.47 cs139.64 - .0223% CPU load
.367 requests/sec - 1604 B/second - 4374 B/request - 412.781 ms/request
2 requests currently being processed, 48 idle workers
_____________________________WK___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0249240/336/13505_
4.34340460182170.01.5455.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a7d912b5a5b0

0-0249240/214/13276_
4.33460054237310.01.1755.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0249240/204/13273_
4.325153652481960.00.9856.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/178/13507_
4.351233650280530.00.7355.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dcc14d4159d4b

0-0249240/380/12572_
4.32615052297920.01.6851.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0249240/231/13790_
4.3785255982080.00.9956.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0249240/249/13538_
4.343403658405900.01.4057.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6adf00e31a0cf

0-0249240/303/13368_
4.3349322263071330.01.3454.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9MwEP0rke%2F57na

0-0249240/392/14394_
4.3530498563375200.01.8561.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/296/12967_
4.3434047850290100.01.4654.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCEEW

0-0249240/347/13592_
4.31623159398790.01.8654.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0249240/411/13404_
4.35143258876710.01.7656.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0249240/181/13617_
4.3260717959421740.00.9255.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNLj9owEP4rlu95EJFsZ

0-0249240/210/13749_
4.33437554217380.00.8957.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduK

0-0249240/220/13450_
4.3529820150405420.01.2456.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0249240/321/13080_
4.3520442857623200.01.4654.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uBVs

0-0249240/223/13801_
4.3522383252508670.01.5057.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJA4sd

0-0249240/408/13790_
4.3744160695190.01.6257.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0249240/270/13334_
4.3758852292790.01.3857.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/275/14468_
4.375060559480.01.3358.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /login.action HTTP/1.1

0-0249240/375/14011_
4.3515543146872840.01.8359.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3e1G

0-0249240/341/13480_
4.35282752363780.01.6356.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/check.php?username=elizabeth.waters

0-0249240/344/13295_
4.34397755319110.01.8556.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/check.php?username=54322&method=ema

0-0249240/395/13210_
4.37205157042420.01.8955.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0249240/289/13575_
4.3254545358291190.01.2856.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0222820/408/8885_
5.394364737787900.01.7736.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/463/8568_
5.394804733104280.02.2435.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/333/8340_
5.39526737894980.01.5235.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0222820/411/8516_
5.404233832860570.01.9235.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10b9b079a42e0

1-02228232/409/8532W
5.4600334165270.31.6434.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0222822/403/8281K
5.461035294722.11.9034.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /debug/default/view?panel=config HTTP/1.1

1-0222820/371/8440_
5.39587635974500.01.8234.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDsJK

1-0222820/356/8018_
5.44175232026490.01.9832.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/382/7587_
5.413304838235540.02.0431.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/283/7801_
5.41340534457560.01.5431.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_786c37762a412

1-0222820/382/8492_
5.41250358232258000.01.7734.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/416/8010_
5.41310231996470.02.0633.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0222820/349/8762_
5.4210170839017700.01.7135.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu7%2BjON

1-0222820/276/8051_
5.403724634017970.01.1533.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/294/8613_
5.41214633688410.01.4033.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/291/8054_
5.411952434146130.01.3732.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/304/8490_
5.39615632807810.01.3435.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-0222820/399/8500_
5.395054934340500.01.9834.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/281/8347_
5.41290278337960340.01.1334.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0222820/403/8443_
5.4134073643771<

Found on 2024-11-08 03:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c05a4801

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 22:14:13 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  22 days 54 minutes 31 seconds
Server load: 1.07 1.79 2.14
Total accesses: 698893 - Total Traffic: 2.8 GB - Total Duration: 283216122
CPU Usage: u50.33 s58.89 cu199.97 cs113.46 - .0222% CPU load
.367 requests/sec - 1591 B/second - 4336 B/request - 405.235 ms/request
2 requests currently being processed, 48 idle workers
______________________W__.........................______________
_______K___.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157180/2587/12728_
28.351443355810820.09.4752.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_926c038982a5a

0-0157180/2267/12550_
28.35119150922390.08.7551.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2110/12662_
28.3219718149235290.08.2353.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5KuQC

0-0157180/2127/13020_
28.2931470647683510.08.2352.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_c8c4136db61b

0-0157180/2264/11707_
28.264796647572600.08.7547.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/2339/13030_
28.292573552698950.08.6952.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1d50441e6c01d

0-0157180/2224/12747_
28.2838822953672670.08.9853.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0157180/2508/12597_
28.29323557964740.09.4651.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCehD

0-0157180/2551/13239_
28.33189057711790.010.1555.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157180/2352/12249_
28.3510219347325010.09.6450.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCQb2

0-0157180/2144/12572_
28.3543053392810.07.8949.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157180/2437/12562_
28.35130154962640.09.8052.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2365/13020_
28.2645324755182470.09.2252.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVLLbtswEPwVgXdJtvyQQ

0-0157180/2185/13036_
28.3524549075550.08.1054.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0157180/2104/12823_
28.33190047154740.08.2453.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/2051/12353_
28.3415464253695310.08.1351.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0157180/2197/13150_
28.3560649362580.08.5254.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0157180/2400/12989_
28.2839591952720110.09.3453.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157180/2203/12650_
28.26441148447900.08.8053.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2111/13770_
28.31227154617060.08.3455.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0157180/2245/13149_
28.274343943269490.09.0654.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/2302/12647_
28.27441149084530.08.8352.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-01571819/2098/12531W
28.3600508064385.37.7752.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0157180/2177/12410_
28.2935121653253710.08.6951.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78hKUW

0-0157180/2031/12781_
28.293303253925890.08.2852.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/8477.
0.00203105635833920.00.0034.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

1-0-0/0/8105.
0.00203105730848700.00.0032.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/8007.
0.00203105535874360.00.0033.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp1

1-0-0/0/8105.
0.00203105530477410.00.0033.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdut

1-0-0/0/8123.
0.002031054131592930.00.0032.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7878.
0.0020310543033548540.00.0032.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/8069.
0.00203105533351920.00.0032.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/7662.
0.00203105830309630.00.0030.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7205.
0.00203105735420430.00.0029.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/7518.
0.00203105533166770.00.0030.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMd1K

1-0-0/0/8110.
0.0020310541530017380.00.0032.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7594.
0.0020310542829841390.00.0031.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/8413.
0.00203105537321200.00.0033.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0-0/0/7775.
0.0020310543231370920.00.0031.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8319.
0.00203105732539330.00.0032.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7763.
0.002031051332357650.00.0031.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8186.
0.0020310542230804830.00.0033.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Bg

1-0-0/0/8101.
0.0020310545932098040.00.0032.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/8066.
0.00203105635213850.00.0033.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0-0/0/8040.
0.00203105633768430.00.0033.92
127.0.0.1http/1.1ip-10-1-103-

Found on 2024-11-06 22:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e9b51bd7

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 04-Nov-2024 22:11:09 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  20 days 51 minutes 26 seconds
Server load: 0.74 1.63 1.77
Total accesses: 594314 - Total Traffic: 2.4 GB - Total Duration: 253121846
CPU Usage: u16.86 s35.27 cu199.97 cs113.46 - .0211% CPU load
.343 requests/sec - 1505 B/second - 4385 B/request - 425.906 ms/request
1 requests currently being processed, 49 idle workers
_W_______________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157180/133/10274_
1.952724245683200.00.6343.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-01571896/207/10490W
2.09004645981303.90.7543.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0157180/118/10670_
2.05453843328050.00.4946.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_289df415266ad

0-0157180/160/11053_
2.00162141706460.00.8045.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0157180/192/9635_
2.00161142802880.00.8239.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/205/10896_
1.982434147074120.00.8344.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_61ef0a57

0-0157180/117/10640_
1.93290147524060.00.5445.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0157180/161/10250_
1.913754750806290.00.7442.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/198/10886_
1.93289351161200.00.7146.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0157180/108/10005_
1.91448040270230.00.4641.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/128/10556_
1.96254148533660.00.4542.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0157180/186/10311_
1.99222048168850.00.8743.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0157180/104/10759_
2.0276449408300.00.3843.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0157180/147/10998_
1.922968444009090.00.6246.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_61ef0a57

0-0157180/83/10802_
1.91315141412890.00.4645.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/173/10475_
2.0821448513340.00.7843.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dd731959b908e

0-0157180/245/11198_
2.055121443916260.00.9546.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iJAa

0-0157180/119/10708_
1.89545046041540.00.5344.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/128/10575_
1.895676643599660.00.4845.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/145/11804_
1.89535047854760.00.6547.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/113/11017_
1.90516538124600.00.4646.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCem7

0-0157180/161/10506_
1.91398542575640.00.6843.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0157180/93/10526_
1.90487845241120.00.3644.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpK

0-0157180/119/10352_
1.91462145860160.00.5243.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/169/10919_
1.91332146895040.01.0345.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0-0/0/8477.
0.0030120635833920.00.0034.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

1-0-0/0/8105.
0.0030120730848700.00.0032.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/8007.
0.0030120535874360.00.0033.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp1

1-0-0/0/8105.
0.0030120530477410.00.0033.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdut

1-0-0/0/8123.
0.00301204131592930.00.0032.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7878.
0.003012043033548540.00.0032.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/8069.
0.0030120533351920.00.0032.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/7662.
0.0030120830309630.00.0030.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7205.
0.0030120735420430.00.0029.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/7518.
0.0030120533166770.00.0030.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMd1K

1-0-0/0/8110.
0.003012041530017380.00.0032.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7594.
0.003012042829841390.00.0031.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/8413.
0.0030120537321200.00.0033.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0-0/0/7775.
0.003012043231370920.00.0031.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8319.
0.0030120732539330.00.0032.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7763.
0.00301201332357650.00.0031.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8186.
0.003012042230804830.00.0033.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Bg

1-0-0/0/8101.
0.003012045932098040.00.0032.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/8066.
0.0030120635213850.00.0033.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0-0/0/8040.
0.0030120633768430.00.0033.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

Found on 2024-11-04 22:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a91c425097

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 21:12:19 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 23 hours 52 minutes 36 seconds
Server load: 1.28 1.10 1.30
Total accesses: 523244 - Total Traffic: 2.1 GB - Total Duration: 231176528
CPU Usage: u24.09 s38.31 cu167.86 cs93.21 - .0208% CPU load
.337 requests/sec - 1484 B/second - 4411 B/request - 441.814 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0267300/726/8930_
10.73561441478910.02.8737.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_172d0ceb38711

0-0267300/961/9202_
10.73518343426620.03.6438.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4fe1e2b446090

0-0267300/779/9352_
10.72670438751910.03.3740.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5d7ac11031a93

0-0267300/690/9523_
10.71741737525420.02.5239.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/733/8196_
10.68964637982350.02.8234.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0267300/860/9018_
10.71694802841281270.03.0836.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

0-0267300/851/9384_
10.77304542728690.03.2540.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/892/9036_
10.7544486846878080.03.3837.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0267300/819/9332_
10.73539447394550.02.9240.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fc73261de04b2

0-0267300/735/8755_
10.7357310436357120.02.6036.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0267300/796/9011_
10.78193443424820.03.1336.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ef8b28809ca33

0-0267300/947/8821_
10.79161642571940.03.6137.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

0-0267300/829/9413_
10.76415445162940.03.1338.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_283e587569a45

0-0267300/862/9679_
10.76389539665900.03.2641.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/956/9405_
10.74482536942990.03.4939.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/831/8935_
10.7972442628380.03.2837.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_953567a137a2b

0-0267300/915/9737_
10.681010441164790.03.3241.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_da489534dac3c

0-0267300/847/9369_
10.7999542373390.03.0339.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/783/9297_
10.68989439958550.03.2640.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_714a7f82fd8ab

0-0267300/872/10098_
10.68913543681780.03.1540.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHLsJo

0-0267300/796/9641_
10.804143134140760.02.9240.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/924/9193_
10.71814739489810.03.5838.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_4a2d851a581

0-0267300/929/9202_
10.726123541775440.03.5039.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbhshEIZfZW%2BcWMz

0-0267308/778/9007W
10.800040754049.73.0437.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0267300/894/9260_
10.70823641383080.03.2538.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_04a7adbfc4dd9

1-0314230/759/7234_
9.15558432973180.02.6029.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fed5d23081d25

1-0314230/741/6866_
9.101004627359770.02.6327.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/787/6773_
9.13685632186450.02.9228.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/870/7060_
9.1991526887780.03.3228.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/680/6831_
9.10970428091760.02.4327.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a441468bd1146

1-0314230/703/6580_
9.17188629844010.02.6127.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0314230/679/6728_
9.12759429194620.02.5827.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3235527322972

1-0314230/644/6320_
9.11942426135660.02.2726.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4218c95b64ce8

1-0314230/650/6045_
9.11884631681380.02.3424.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/706/6391_
9.13585430181300.02.4225.48
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5652a674db267

1-0314230/825/6902_
9.13694624949990.02.8228.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-0314230/750/6310_
9.15551626830060.02.6926.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYyTN

1-0314230/696/7105_
9.11831433451860.02.5128.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b7d90cfc81b0

1-0314230/692/6456_
9.15525628639090.02.5726.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94orR

1-0314230/798/6965_
9.15451529256380.02.8926.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/762/6562_
9.153723327816460.02.7926.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/654/6909_
9.155073328170940.02.1928.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/694/6943_
9.13664528863170.02.4128.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/726/6750_
9.154734830607130.02.7028.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webaut

Found on 2024-11-02 21:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9959208a7

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 15:56:20 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  16 days 18 hours 36 minutes 37 seconds
Server load: 0.64 0.62 0.65
Total accesses: 496480 - Total Traffic: 2.1 GB - Total Duration: 225561463
CPU Usage: u16.11 s30.79 cu167.86 cs93.21 - .0212% CPU load
.343 requests/sec - 1527 B/second - 4460 B/request - 454.321 ms/request
1 requests currently being processed, 49 idle workers
_______________W__________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0267300/267/8471_
4.5469343239813100.01.2635.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/366/8607_
4.544513042392800.01.7237.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/315/8888_
4.54754637488740.01.8839.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0267300/197/9030_
4.53813636269950.00.9437.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/224/7687_
4.531023736810000.01.0932.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0267300/316/8474_
4.539282740028790.01.2735.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

0-0267300/308/8841_
4.55149441027640.01.3438.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a5d5608a5236a

0-0267300/382/8526_
4.55275645895940.01.7136.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0267300/304/8817_
4.5451442946467030.01.2738.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0267300/212/8232_
4.54634634945010.00.9134.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

0-0267300/284/8499_
4.5595642384580.01.3634.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0267300/320/8194_
4.55194541816890.01.4835.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/286/8870_
4.543903543490610.01.3736.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/305/9122_
4.55245638348170.01.4439.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdquS

0-0267300/413/8862_
4.55304835844580.01.7838.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HV

0-02673010/328/8432W
4.5600418137516.61.5836.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0267300/463/9285_
4.531085840467140.01.8239.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0267300/342/8864_
4.5614140803880.01.4337.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-0267300/300/8814_
4.531175738304230.01.6938.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/293/9519_
4.531121742393770.01.2838.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/298/9143_
4.531240633436950.01.2438.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d2dbf593e2113

0-0267300/290/8559_
4.5396142737933030.01.3036.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0267300/313/8586_
4.54551840898170.01.4137.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/240/8469_
4.531204739635630.01.0935.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJC

0-0267300/328/8694_
4.5387140440203340.01.4036.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0314230/175/6650_
2.83485932274130.00.7327.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNdpy

1-0314230/229/6354_
2.82953526287620.00.9426.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/275/6261_
2.82724931365820.01.3227.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMclV

1-0314230/275/6465_
2.821116625904210.01.3926.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0314230/190/6341_
2.821051726939930.00.8626.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/208/6085_
2.835629140370.00.9025.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0314230/192/6241_
2.8278443427560700.00.9325.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

1-0314230/146/5822_
2.829903125393890.00.6324.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/172/5567_
2.82662930788130.00.7323.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp2

1-0314230/212/5897_
2.82543629312130.00.8323.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/183/6260_
2.82902623166700.00.7525.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpo

1-0314230/215/5775_
2.83425625565390.00.9824.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0314230/193/6602_
2.828433832133870.00.8226.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8MwDIb%2FSm85pVm

1-0314230/172/5936_
2.8336346827916150.00.7424.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

1-0314230/187/6354_
2.83256527928250.00.8324.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/231/6031_
2.8312339426732710.01.0124.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdNW

1-0314230/144/6399_
2.8329242426923520.00.5927.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0314230/228/6477_
2.8260343727975870.00.9126.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0314230/149/6173_
2.8321345329624620.00.7026.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dj

1-031423

Found on 2024-11-01 15:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a911289d8d

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 18:46:33 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  14 days 21 hours 26 minutes 50 seconds
Server load: 0.98 1.21 1.55
Total accesses: 447389 - Total Traffic: 1.8 GB - Total Duration: 197399717
CPU Usage: u39.98 s40.48 cu124.55 cs70.29 - .0214% CPU load
.348 requests/sec - 1540 B/second - 4429 B/request - 441.226 ms/request
2 requests currently being processed, 48 idle workers
_____W___________________.........................________W_____
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136670/1612/7526_
24.87277635470590.07.8631.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0136670/2050/7629_
24.8798435514480.08.8132.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f49e3dbc3fe20

0-0136670/1681/7897_
24.87331632063950.07.0634.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0136670/1934/8200_
24.8635342131681820.07.7433.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1365/6767_
24.87831230760360.05.6528.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7bf2d8bdf9a11

0-0136678/2073/7577W
24.8800335701111.78.2831.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1905/7802_
24.872652435107170.08.6833.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1836/7442_
24.87151537417000.07.8831.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1876/7967_
24.8766809840621930.08.1434.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1577/7447_
24.85411431172450.07.0831.48
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bcb3d3cca525a

0-0136670/1634/7571_
24.8843435950830.06.7130.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6deffa430a99e

0-0136670/1674/7189_
24.87183534473760.08.0730.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpl

0-0136670/1780/7893_
24.87109536385440.06.9932.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b476c2c6d31ac

0-0136670/1992/8131_
24.85387533764710.09.1735.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGGJ7l

0-0136670/1946/7692_
24.87132529565270.08.2532.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1565/7398_
24.85438536690510.07.0731.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1912/8193_
24.8838435669610.07.8735.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_979d9206d0998

0-0136670/1735/7724_
24.86370037069990.08.0332.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0136670/1884/7837_
24.87165432781410.08.7134.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_58bfed6e730a6

0-0136670/2241/8566_
24.87297637764210.09.4134.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/2106/8072_
24.8816429897600.09.3634.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_70afc14286b59

0-0136670/1643/7582_
24.85449431963210.07.0031.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_de99a602d86c3

0-0136670/1639/7452_
24.8722331332955540.07.3632.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5JPug

0-0136670/1680/7630_
24.87202433990510.07.1331.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10ad82ff5aae3

0-0136670/1653/7739_
24.87247534748190.07.2532.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0-0/0/6475.
0.00161114430248640.00.0027.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0-0/0/6125.
0.0016111444524784200.00.0025.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/select.php?StateId=_6b7ebf7f3

1-0-0/0/5986.
0.00161114130320660.00.0025.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/6190.
0.00161114124952470.00.0025.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6151.
0.00161114425963170.00.0025.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/5877.
0.00161114128265090.00.0024.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0-0/0/6049.
0.00161114426416860.00.0024.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/5676.
0.001611143124179070.00.0023.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_6b7ebf7f

1-0-0/0/5395.
0.001611146490028897560.00.0022.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/5685.
0.00161114027089400.00.0023.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/6077.
0.001611144722232930.00.0025.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/5560.
0.001611144324793810.00.0023.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6409.
0.001611142931199540.00.0025.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_73f79ca20b9f2

1-0-0/0/5764.
0.00161114526092010.00.0024.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6167.
0.00161114026774030.00.0023.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/5800.
0.0016111426025709010.00.0023.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJISPs

1-0-0/0/6255.
0.00161114125839730.00.0026.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/6249.
0.00161114127135540.00.0026.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6024.
0.001611143728632330.00.0025.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_db6370f7cd4c7

1-0-0/0/6113.
0.00161114

Found on 2024-10-30 18:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e96e4652

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 23:42:03 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 2 hours 22 minutes 20 seconds
Server load: 2.06 1.49 1.57
Total accesses: 303810 - Total Traffic: 1.2 GB - Total Duration: 139003567
CPU Usage: u14.62 s22.94 cu94.47 cs53.18 - .0193% CPU load
.317 requests/sec - 1388 B/second - 4382 B/request - 457.535 ms/request
2 requests currently being processed, 48 idle workers
_______W________________________________K_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0259750/581/4706_
6.86679321821790.02.2719.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f4017308dc3f

0-0259750/586/4340_
6.86670523425320.02.2717.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0259750/565/4983_
6.86556141822329890.02.3620.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0259750/520/5145_
6.8916021616860.02.0821.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0259750/452/4242_
6.8664714220011840.01.8417.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0259750/483/4449_
6.8661311620498360.02.2318.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0259750/493/4827_
6.8917325223576260.02.2920.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0259758/587/4385W
6.890024123739.62.6818.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0259750/614/4966_
6.86678027461770.02.5521.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0259750/547/4624_
6.87198622248000.02.1919.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RX

0-0259750/568/4728_
6.86595725508460.02.5318.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0259750/618/4448_
6.86318322344510.02.3318.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b59d0a813ab99

0-0259750/588/4907_
6.86479122187840.02.5320.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0259750/477/4954_
6.864412922820630.01.9320.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0259750/490/4549_
6.865084120010450.02.1918.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0259750/543/4742_
6.872912826364980.02.2219.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0259750/394/5063_
6.863773324976200.01.4720.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0259750/404/5043_
6.87261623908170.01.7621.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0259750/567/5043_
6.871392120365160.02.5121.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0259750/557/4875_
6.8918326222476280.02.1119.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0259750/478/4938_
6.8839520277530.01.9920.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0259750/520/4923_
6.87227020711620.01.9220.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0259750/534/4568_
6.87107522646990.02.0919.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0259750/550/4587_
6.8919413119006530.02.1919.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0259750/382/4836_
6.8754122813390.01.5419.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0312120/367/5044_
4.71408424660340.01.3821.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0312120/302/4944_
4.71465420299910.01.0420.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0312120/426/4677_
4.72283824371020.01.6820.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0312120/380/4891_
4.713503020629610.01.5520.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLt

1-0312120/364/4719_
4.72306021154280.01.5719.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /.git/config HTTP/1.1

1-0312120/447/4556_
4.72252122129820.01.9518.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0312120/373/4665_
4.7321278119871210.01.2919.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/338/4475_
4.7316740020619310.01.3418.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNbxshEIb%2Fyt44sex

1-0312120/438/4339_
4.738038222551920.01.8218.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdpS

1-0312120/443/4384_
4.73121621830070.01.7517.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduS

1-0312120/359/4939_
4.74414517098520.01.5520.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312120/363/4219_
4.74314419116650.01.3617.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312120/361/4986_
4.7417326524752310.01.4420.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/301/4539_
4.7415520352590.01.1319.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_26ca4b8a5499d

1-0312120/390/4823_
4.7067921521155730.01.5318.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312121/370/4264K
4.740020136591.01.4717.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /v2/_catalog HTTP/1.1

1-0312120/361/4743_
4.7417322720653040.01.3619.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/323/5011_
4.7418375621692660.01.2920.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/388/4755_
4.70668023727270.01.7820.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0312120/363/4709_
4.7062123621034440.01.3819.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

Found on 2024-10-26 23:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c4fde5f8

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 23:37:42 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 2 hours 17 minutes 59 seconds
Server load: 1.44 2.26 2.36
Total accesses: 277396 - Total Traffic: 1.1 GB - Total Duration: 126462078
CPU Usage: u73.62 s52.42 cu25.7 cs15.08 - .0212% CPU load
.353 requests/sec - 1548 B/second - 4387 B/request - 455.89 ms/request
10 requests currently being processed, 65 idle workers
_____W__W___W_________K____W____W______W___________________W____
___KW______.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/2618/4105_
35.53498519127960.010.9116.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0306740/2332/3726_
35.58230520569110.010.0015.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtj

0-0306740/2986/4403_
35.591883220082190.012.7618.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/3228/4600_
35.5356717419217550.013.7319.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCHQl

0-0306740/2536/3772_
35.536045017380210.010.7515.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306743/2532/3942W
35.624018183509.711.0616.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2777/4305_
35.60131110121625300.012.4318.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2331/3791_
35.53412721353540.09.9015.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0306744/2819/4317W
35.6290252129722.312.9718.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2548/4069_
35.6185219887390.011.4217.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/2907/4108_
35.58269123332880.011.3716.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/2367/3809_
35.62343219744750.010.0516.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2806/4314W
35.523018980160.011.4817.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/3145/4464_
35.52654121057830.012.8618.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0306740/2610/4046_
35.60110617841690.010.8316.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761BX

0-0306740/2779/4188_
35.52736023290740.011.3516.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/3205/4628_
35.58305022848880.013.9119.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0306740/3059/4616_
35.57325021252590.012.9619.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/3053/4469_
35.62614018115280.013.3819.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1Dec4WAs

0-0306740/2877/4311_
35.5354019518904850.011.3117.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL73V0S5J05

0-0306740/2986/4457_
35.53437017805740.012.7418.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/2993/4387_
35.527133818751660.012.3718.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306746/2602/4031K
35.6210207235915.511.3817.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /about HTTP/1.1

0-0306740/2694/4019_
35.53465116814960.011.6717.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/3100/4425_
35.56348402121150940.012.8218.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/3099/4655_
35.84465023395960.013.4619.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0307110/3168/4618_
35.82638619277890.013.5319.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0307114/2861/4238W
35.870023066398.512.7418.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0307110/3143/4487_
35.86787019166570.013.5819.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/3132/4346_
35.8451625919941390.013.5718.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iKlY

1-0307110/2506/4104_
35.85188120311780.010.3516.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0307110/2875/4283_
35.861484517555990.012.3218.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d70093f120588

1-0307110/2869/4127W
35.823018219650.011.9316.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2559/3898_
35.83593113021145450.010.9116.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2622/3917_
35.8535169219747810.010.9115.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCTAp

1-0307110/3034/4576_
35.8274820515808500.012.9019.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu62VcdrU

1-0307110/2402/3842_
35.83555517475070.09.9015.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0307110/3285/4609_
35.8610118122642730.013.6018.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJBC%2

1-0307110/2698/4205_
35.85295018697650.011.9918.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.HEAD /trinitylismore-logincloudworkenginenet.tar HTTP/1.1

1-0307113/2850/4390W
35.8740188199612.611.2016.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2535/3890_
35.8536117918736210.010.7615.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2ab83206f7fbb

1-0307110/2995/4356_
35.8654019030240.012.5318.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/3045/4677_
35.8277021019162010.012.6919.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0307110/3025/4322_
35.84479422501840.013.4218.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fb5a0a9320139

1-0307110/3011/4342_
35.85223819107800.012.7617.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.<

Found on 2024-10-24 23:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a959d87e55

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 22:33:27 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 days 1 hour 13 minutes 45 seconds
Server load: 3.55 3.81 2.81
Total accesses: 219668 - Total Traffic: 889.7 MB - Total Duration: 90267784
CPU Usage: u50.5 s38.04 cu25.7 cs15.08 - .0212% CPU load
.361 requests/sec - 1531 B/second - 4246 B/request - 410.928 ms/request
2 requests currently being processed, 73 idle workers
______________________K________________________________W________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/1804/3291_
24.3145622014099170.07.2212.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7EpIGd

0-0306740/1625/3019_
24.344001415415979030.06.8012.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2320/3737_
24.3534814916156120.09.4514.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnctlpS4J

0-0306740/2421/3793_
24.29677014429190.09.7815.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0306740/1895/3131_
24.3148017313592200.07.6012.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCEsd

0-0306740/1724/3134_
24.31524514100320.07.1212.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0306740/1996/3524_
24.36305616951790.08.6414.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0306740/1579/3039_
24.3440572614611190.06.0711.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2033/3531_
24.37138820319685450.08.7714.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

0-0306740/1677/3198_
24.372443015711280.06.9212.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4cccf9a9453c7

0-0306740/2099/3300_
24.3439717217247300.07.9912.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78rqBF

0-0306740/1636/3078_
24.344011394013517030.06.6412.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2104/3612_
24.36274113574090.08.5414.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/2342/3661_
24.389519815166520.09.1114.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJMTwI

0-0306740/1875/3311_
24.3722247513794730.07.3413.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCemW

0-0306740/1990/3399_
24.371731118903880.08.0913.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0306740/2324/3747_
24.3839717558880.08.9214.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_32724dca256

0-0306740/2215/3772_
24.3155332314876610.08.8115.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3A3e

0-0306740/2124/3540_
24.306345614574820.09.2115.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2181/3615_
24.305663814124720.08.2414.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2257/3728_
24.344021383113589170.09.2815.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2041/3435_
24.3868235714380850.07.9614.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke9JwEDYW

0-0306741/1786/3215K
24.383014973731.97.5213.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/script.js HTTP/1.1

0-0306740/1903/3228_
24.343971607513913130.08.2013.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2411/3736_
24.344091375615661290.09.6514.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2267/3823_
25.13635416645730.09.6516.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0307110/2367/3817_
25.164484413580350.09.9815.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/2195/3572_
25.21108117217190.09.7015.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2376/3720_
25.2186297514359440.09.7715.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2342/3556_
25.2336915724470.09.6714.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0307110/1648/3246_
25.20293715007280.06.4813.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0307110/2168/3576_
25.2120720314093360.08.8214.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCELC

1-0307110/2202/3460_
25.16455337014951290.08.5813.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/1866/3205_
25.14608117097370.07.5513.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0307110/1927/3222_
25.235154814293210.07.7512.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8JwH3O

1-0307110/2152/3694_
25.14536011498870.08.7014.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1746/3186_
25.14508113227600.06.7812.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2394/3718_
25.19314017476400.09.2314.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1989/3496_
25.173983114647430.08.6614.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/2041/3581_
25.1456186215015240.07.7213.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/1832/3187_
25.164051373512278740.07.7012.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2390/3751_
25.20255113161100.09.6515.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2168/3800_
25.12699114757940.08.5415.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2225/3522_
25.173981544117704620.09.6114.83
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2253/3584_
25.16399015791460.09.1014.25
127.0.0.1http/1

Found on 2024-10-22 22:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a98d0a5b

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 22:44:12 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 1 hour 24 minutes 30 seconds
Server load: 1.72 1.93 2.02
Total accesses: 149636 - Total Traffic: 547.9 MB - Total Duration: 57486813
CPU Usage: u24.19 s22.2 cu25.7 cs15.08 - .0199% CPU load
.342 requests/sec - 1314 B/second - 3839 B/request - 384.178 ms/request
1 requests currently being processed, 74 idle workers
_____________W__________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/1123/2610_
11.75235111899330.03.799.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/873/2267_
11.7526873112746960.02.868.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/1098/2515_
11.75251410217910.03.549.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsignin-s

0-0306740/1431/2803_
11.71378010370090.04.7810.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0306740/959/2195_
11.7140309658180.03.018.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/879/2289_
11.66486010461950.02.968.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/1031/2559_
11.82142511035910.03.579.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/864/2324_
11.75297010476060.02.818.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/1054/2552_
11.80191313618390.03.979.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/836/2357_
11.87396911103700.03.028.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1289/2490_
11.82118211033550.04.028.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/952/2394_
11.8018159221450.03.309.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/1018/2526_
11.8781458618090.03.409.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-03067472/1258/2577W
11.91001054763275.54.159.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0306740/1026/2462_
11.61588510366230.03.369.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/972/2381_
11.87834212006600.03.258.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1377/2800_
11.61608512370480.04.6310.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/1249/2806_
11.6158320510776020.04.2410.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1123/2539_
11.9013779302900.03.719.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1170/2604_
11.6452988969950.03.799.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_143082af934ea

0-0306740/1217/2688_
11.752927539898810.04.3610.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/1203/2597_
11.66504410682450.03.939.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8eed684421737

0-0306740/889/2318_
11.655176510622890.02.978.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b792c8adc08ae

0-0306740/819/2144_
11.71358549618040.03.208.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1454/2779_
11.714033412384930.05.0210.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_091b34f3c7076

1-0307110/1134/2690_
11.9862512657040.03.7310.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wji

1-0307110/1271/2721_
11.76557510723190.04.179.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0307110/1233/2610_
11.987520712460870.04.179.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu62U89OO

1-0307110/1474/2818_
11.97118359272840.05.2710.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0307110/1026/2240_
11.9221859180030.03.288.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/817/2415_
11.89243611176450.02.739.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0307110/1134/2542_
11.96141310000120.03.709.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_415d64cdaad8b

1-0307110/930/2188_
11.765506210797080.02.948.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/1067/2406_
11.76570414421470.04.049.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/1070/2365_
11.9828110160200.03.538.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0307110/1174/2716_
11.78541928059270.03.8110.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/971/2411_
11.990010844050.03.169.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /config.json HTTP/1.1

1-0307110/1350/2674_
11.843074613350870.04.629.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/1225/2732_
11.8145622011386060.03.949.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWjuzDNaE

1-0307110/1090/2630_
11.78532411867750.03.479.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/929/2284_
11.8047914748622710.03.008.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/1285/2646_
11.961531928286460.04.119.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5MPQ3

1-0307110/1269/2901_
11.981043310485840.04.1311.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_98b728fcbdf1a

1-0307110/1140/2437_
11.82372012591420.03.859.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1281/2612_
11.814446710288920.04.299.45

Found on 2024-10-20 22:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a975d11910

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 19-Oct-2024 00:36:54 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  3 days 3 hours 17 minutes 11 seconds
Server load: 2.20 2.34 2.05
Total accesses: 61761 - Total Traffic: 252.4 MB - Total Duration: 38735397
CPU Usage: u25.11 s19.11 cu0 cs0 - .0163% CPU load
.228 requests/sec - 976 B/second - 4285 B/request - 627.182 ms/request
1 requests currently being processed, 49 idle workers
______________________W___________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/1292/1292_
18.01825118518850.05.145.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1222/1222_
18.099559569790.04.964.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0360/1248/1248_
18.0184367199570.04.794.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

0-0360/1216/1216_
18.0857486117970.04.994.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0360/1057/1057_
18.08180597379450.04.394.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1222/1222_
18.08346145288647840.04.774.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1346/1346_
18.0828187787750.05.295.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1276/1276_
18.0193368630020.04.914.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/1333/1333_
18.08664610079420.05.445.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKc

0-0360/1334/1334_
18.09354278337640.05.225.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0360/1019/1019_
18.0773597660250.04.134.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1256/1256_
18.0824386439190.05.365.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0360/1319/1319_
18.09161115977080.05.545.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1157/1157_
18.0775197843020.05.185.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1293/1293_
18.0179497009550.05.305.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1217/1217_
18.08399689593820.04.804.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0360/1225/1225_
18.0771669313540.04.764.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1384/1384_
18.0188178195060.05.985.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1211/1211_
18.0852357227530.05.055.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0360/1248/1248_
18.0770176476570.05.205.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/1261/1261_
18.0863556649770.05.175.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDu

0-0360/1143/1143_
18.0848067597790.05.125.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0369/1274/1274W
18.100076493711.45.155.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0360/1131/1131_
18.0830986078300.04.394.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/1075/1075_
18.0181098384080.04.464.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0370/1422/1422_
18.2235069319350.05.995.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKcJ3

1-0370/1296/1296_
18.2075117698340.05.265.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-0370/1212/1212_
18.214254629067910.05.025.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/1187/1187_
18.2070706122680.04.914.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0370/1054/1054_
18.22302566703520.04.244.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/1402/1402_
18.1990067858330.05.925.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0370/1214/1214_
18.2355377703280.05.085.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/1057/1057_
18.2235652657857500.04.294.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wmD

1-0370/1197/1197_
18.207736410943630.05.005.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1153/1153_
18.23557695630.04.454.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0370/1385/1385_
18.216054275756970.05.705.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-0370/1254/1254_
18.216508458123470.05.255.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/1149/1149_
18.206744878878530.04.604.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0370/1283/1283_
18.1987458104810.05.245.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1407/1407_
18.1982619715810.05.295.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/1198/1198_
18.20810465902170.04.654.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1211/1211_
18.2078655866150.04.974.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1431/1431_
18.2218867799690.06.176.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/1115/1115_
18.2314658813140.04.554.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0370/1205/1205_
18.199934497013160.04.714.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2

Found on 2024-10-19 00:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a94ebb6dac

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 17-Oct-2024 02:51:30 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 5 hours 31 minutes 47 seconds
Server load: 1.04 1.29 1.78
Total accesses: 26421 - Total Traffic: 109.8 MB - Total Duration: 18045797
CPU Usage: u11.03 s8.69 cu0 cs0 - .0186% CPU load
.249 requests/sec - 1083 B/second - 4359 B/request - 683.01 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/537/537_
8.115547144325310.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PEjgc

0-0360/493/493_
8.1616474028760.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/495/495_
8.1071862993730.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

0-0360/556/556_
8.16281122344490.02.432.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/394/394_
8.107414563110500.01.671.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcO0

0-0360/488/488_
8.16219764510890.01.921.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/599/599_
8.116382353660930.02.272.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVJdT%2BMwEPwrkd%2Fz0

0-0360/601/601_
8.12517115049200.02.392.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/503/503_
8.115294495084090.02.022.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTtwwEIZfJTefHCcml

0-0360/694/694_
8.1541464071710.02.652.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeBs

0-0360/529/529_
8.1450104844540.02.242.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0360/484/484_
8.1168072816240.02.072.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/466/466_
8.168061992210.01.981.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/532/532_
8.1448843082740.02.232.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1037943160b61

0-0360/530/530_
8.1531810933236750.02.232.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/498/498_
8.1625105072720.02.022.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0360/516/516_
8.115852124540550.02.102.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJMGwq

0-0360/643/643_
8.161096024198680.02.872.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0360/459/459_
8.161949083354420.01.941.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJAFCl

0-0360/534/534_
8.144402092817680.02.252.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNNj9owEP0rke%2f5gAa

0-0360/596/596_
8.153847353156480.02.452.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCZLC

0-0360/486/486_
8.1530063335390.02.322.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

0-0360/596/596_
8.16389182812320.02.332.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyW23i

0-0360/459/459_
8.1448162773430.01.851.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0360/412/412_
8.1160114519130.01.841.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0370/619/619_
8.2551814165470.02.642.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0370/639/639_
8.2549363270950.02.682.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

1-0370/494/494_
8.264515423699900.01.991.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHLdJu

1-0370/533/533_
8.2560112839340.02.282.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0370/513/513_
8.2640442951370.02.072.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b9bcb3c1d2d2f

1-0370/654/654_
8.2821263938660.02.742.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/523/523_
8.282294224217450.02.352.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78oDk0

1-0370/388/388_
8.2550203287450.01.621.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0370/515/515_
8.272697106051130.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCG7w

1-0370/468/468_
8.2642762663740.01.851.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_21b8ffbfd1eff

1-0370/549/549_
8.2632982140430.02.222.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0370/579/579_
8.2469463458800.02.572.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/519/519_
8.246594444848850.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0370/634/634_
8.281728803114290.02.582.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsignin-s

1-0370/590/590_
8.289144428750.02.312.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dc4aff3af092c

1-0370/511/511_
8.286262235250.01.941.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/436/436_
8.2814962697480.01.771.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

1-0370/615/615_
8.2630663983240.03.043.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/428/428_
8.272624774899970.01.761.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PAUNW

1-0370/500/500_
8.2551813655920.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/597/5

Found on 2024-10-17 02:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a96945e9d9

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 15-Oct-2024 02:13:56 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 4 hours 38 minutes 11 seconds
Server load: 1.27 1.29 1.29
Total accesses: 290509 - Total Traffic: 995.3 MB - Total Duration: 47934740
CPU Usage: u18.9 s15.49 cu62.4 cs41.08 - .0258% CPU load
.543 requests/sec - 1950 B/second - 3592 B/request - 165.003 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-029130/719/5515_
10.324061332011444800.04.0719.28
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/714/6004_
10.2950309498510.03.8021.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-029130/807/5769_
10.33380010397350.04.3820.60
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-029130/604/6208_
10.361263110765940.03.0321.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_276a2b5a836d0

0-029130/694/6153_
10.3520549411071070.03.7120.78
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL0j9T9YvudTI

0-029130/740/5416_
10.333451728827220.03.9618.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuMwFN0jzT9Y3udVw

0-029130/717/6083_
10.39311607794550.03.4219.81
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5IuGd

0-029130/795/5756_
10.3429747673900.05.1520.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-029130/736/6392_
10.388307244990.04.2822.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-029130/581/5619_
10.33317369252530.02.8618.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/823/6099_
10.32397190879021300.04.0120.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/908/5840_
10.304623279428230.04.3819.87
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJAFSC

0-029130/881/5578_
10.3523217611339880.04.4018.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCTl0

0-029130/870/6118_
10.352232049027910.05.1821.39
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DecwX2Y

0-029130/873/5643_
10.38464111158600.04.8519.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/748/5824_
10.37981688874170.03.8619.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1Dec2WBX

0-029130/827/6063_
10.352616811948730.04.1920.54
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/662/5611_
10.352903982110051900.03.4719.26
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/775/5905_
10.3241318984960.03.8719.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-029130/931/6222_
10.352937508810200.04.6321.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/906/6477_
10.361691979114830.04.5621.85
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke%2F5JLS

0-029130/870/5730_
10.31431419700410.04.3919.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/540/5379_
10.391418855000.03.7219.04
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-029130/668/5611_
10.3528419610071990.03.3818.58
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78mq4U

0-029130/754/5773_
10.2853118710102600.04.0520.32
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUwKW

1-029610/758/5553_
10.473273969010531690.03.9918.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/783/5663_
10.48242810202240.03.9318.80
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-029610/781/5860_
10.4730318508330.03.8720.37
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-029610/767/5569_
10.4638519378960.04.1819.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-029610/844/5457_
10.49342037551130.04.4219.22
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJOQDd

1-029610/697/5763_
10.463954628716920.04.0719.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iTQW

1-029610/715/5393_
10.48267109010363030.03.7318.42
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/741/5936_
10.4344519220540.04.0420.22
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-029610/673/5971_
10.4639608985070.04.2920.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-029610/791/6213_
10.472903980910905330.03.7420.71
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/870/5654_
10.4732607537200.04.2719.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-029610/819/5652_
10.4964410260980.05.4220.43
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8QgEIX%2FSt94ovS

1-029610/542/5803_
10.482141629021370.02.7318.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7kjg8S

1-029610/687/6033_
10.491181789058620.03.4820.04
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwX6D8QvOuJB

1-029610/826/5788_
10.473234210045380.04.3320.00
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0296132/613/5466W
10.5100837281153.03.0717.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-029610/872/5430_
10.49152010478590.04.6819.35
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-029610/700/4818_
10.4988111249270.03.9817.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-029610/801/6468_
10.481881799502950.04.4121.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itlt

1-029610/849/6666_
10.4952410114770.04.2222.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2

Found on 2024-10-15 02:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a95ada6a06

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 23:28:03 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 1 hour 52 minutes 17 seconds
Server load: 0.46 0.73 0.90
Total accesses: 201849 - Total Traffic: 616.9 MB - Total Duration: 18458272
CPU Usage: u52.12 s38.37 cu0 cs0 - .0257% CPU load
.573 requests/sec - 1835 B/second - 3204 B/request - 91.4459 ms/request
1 requests currently being processed, 49 idle workers
______________________________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/3635/3635_
41.2852264371910.011.2111.21
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0340/4153/4153_
41.2936143200370.012.7412.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_564e27308bf84

0-0340/4103/4103_
41.3022343657680.012.8712.87
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/4488/4488_
41.2946153437090.013.6713.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdOC

0-0340/4368/4368_
41.2932973731580.013.4413.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/3920/3920_
41.292823313224180.011.9611.96
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BwgEIX%2FSt94o

0-0340/4402/4402_
41.285094853356980.013.1413.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnetcZGIs

0-0340/4009/4009_
41.2871443744410.011.9111.91
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0340/4399/4399_
41.2861443227410.013.3413.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/4024/4024_
41.2948803184810.012.3312.33
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/4333/4333_
41.301943533719280.013.2013.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0340/4090/4090_
41.3111413628040.012.6612.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0340/3689/3689_
41.2940644055940.011.1411.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpS

0-0340/4413/4413_
41.3115003661130.013.3613.36
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/3729/3729_
41.319344003070.011.4411.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

0-0340/4385/4385_
41.2924443267130.013.2713.27
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0340/4187/4187_
41.2938144165050.012.7612.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0340/3781/3781_
41.288022304681080.011.7711.77
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3k00

0-0340/4063/4063_
41.335003829090.012.3412.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/4012/4012_
41.3112303974340.012.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0340/4547/4547_
41.294707424127610.013.9013.90
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0340/3895/3895_
41.286427843824350.011.9511.95
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/3884/3884_
41.28575303772910.011.8111.81
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_76e67acb68b0e

0-0340/3744/3744_
41.2855933340460.011.2911.29
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15e82728c25b2

0-0340/3789/3789_
41.2947313869250.012.0312.03
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/3668/3668_
40.3520053366240.011.2511.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7b218aa52e31

1-0350/4265/4265_
40.3266343643790.012.7512.75
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0350/4123/4123_
40.37106463471300.012.7912.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3902/3902_
40.32784432843610.011.8011.80
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3523/3523_
40.3440063003570.010.8310.83
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-03513/4009/4009W
40.370033643120.912.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-0350/3700/3700_
40.343443223729620.011.4111.41
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0350/4139/4139_
40.3425443356260.012.6012.60
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzir

1-0350/4460/4460_
40.3437344013550.013.5513.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0350/3979/3979_
40.3431443742520.012.0912.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0350/3802/3802_
40.35243423036500.011.5711.57
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3946/3946_
40.3615743820710.012.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/4299/4299_
40.3451673797350.013.1213.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/3987/3987_
40.3356903462760.012.2912.29
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0350/4044/4044_
40.328173034613880.012.4912.49
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=173&StateId=

1-0350/3966/3966_
40.3447313936490.011.7911.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/3736/3736_
40.3711413839320.011.4511.45
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/3229/3229_
40.3260134406340.010.1110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52f2da9cdf228

1-0350/4740/4740_
40.3283644051790.014.6314.63
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/4611/4611_
40.3443343488550.014.1414.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2

Found on 2024-10-12 23:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a5b75903

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 22:40:06 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 1 hour 4 minutes 21 seconds
Server load: 0.79 1.13 1.26
Total accesses: 8942 - Total Traffic: 33.9 MB - Total Duration: 4780335
CPU Usage: u4.67 s4.69 cu0 cs0 - .0053% CPU load
.0506 requests/sec - 201 B/second - 3973 B/request - 534.594 ms/request
1 requests currently being processed, 49 idle workers
__________________W_______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/202/202_
2.434029791420.00.760.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/172/172_
2.443845904700.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzbX

0-0340/170/170_
2.453115918620.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/165/165_
2.4436951034750.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

0-0340/241/241_
2.452690813920.00.840.84
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/192/192_
2.4340311014390.00.720.72
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0340/199/199_
2.436367713500.00.700.70
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/147/147_
2.43649339912640.00.540.54
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDehX

0-0340/179/179_
2.435395543840.00.690.69
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/161/161_
2.434865768890.00.660.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/164/164_
2.452218584040.00.680.68
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzit

0-0340/206/206_
2.45212361176610.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4c884b1046f8

0-0340/165/165_
2.4521231345600.00.580.58
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee61f085397d1

0-0340/173/173_
2.4519851023050.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLsb

0-0340/188/188_
2.451693711075780.00.760.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/192/192_
2.451085633160.00.730.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBj9owEIX%2FSm4%2BO

0-0340/168/168_
2.45528681160.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/186/186_
2.461561264000.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-03424/175/175W
2.46008983139.20.640.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

0-0340/155/155_
2.43907341019620.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/167/167_
2.4388251107240.00.640.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdTyMhFIb%2FytxxxTA

0-0340/166/166_
2.4380041250330.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0340/159/159_
2.438565709710.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKduA

0-0340/175/175_
2.437403541114210.00.590.59
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTtswFIZfJXe%2Bcpy

0-0340/147/147_
2.4360641530470.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWyaL

1-0350/157/157_
2.482493501217010.00.520.52
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcm7

1-0350/168/168_
2.472829532580.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/195/195_
2.473448746420.00.770.77
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

1-0350/150/150_
2.469095583250.00.570.57
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/156/156_
2.46829383947320.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/150/150_
2.473760730930.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /.git/config HTTP/1.1

1-0350/145/145_
2.4689991183090.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/177/177_
2.4764271190340.00.590.59
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/157/157_
2.468772221437730.00.610.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

1-0350/145/145_
2.467085880990.00.520.52
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/179/179_
2.476174952480.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/239/239_
2.482071972760.00.940.94
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0350/164/164_
2.467705670920.00.660.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0350/196/196_
2.482112600420.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/207/207_
2.4821121650470.00.790.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0350/173/173_
2.4758124301033500.00.610.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtwgEIZfxTdOGBu78

1-0350/175/175_
2.4918981027200.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/152/152_
2.4751343131539510.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWycb

1-0350/220/220_
2.474031771950.00.860.86
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/268/268_
2.4957340679160.01.071.07
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT%2BQgFIb%2FSu%2B

1-0350/198/198_
2.4738801189560.00.690.69
127.0.0.1http/1.1ip-10-

Found on 2024-10-10 22:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9840245ca

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:52 UTC
Restart Time: Tuesday, 08-Oct-2024 21:42:46 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 hours 29 minutes 6 seconds
Server load: 0.43 0.84 1.07
Total accesses: 1645 - Total Traffic: 6.9 MB - Total Duration: 1111230
CPU Usage: u.91 s.69 cu0 cs0 - .00685% CPU load
.0705 requests/sec - 310 B/second - 4401 B/request - 675.52 ms/request
2 requests currently being processed, 48 idle workers
_____________________K_________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0370/39/39_
0.4613444692830.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/19/19_
0.45138742735650.00.060.06
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGNtxq

0-0370/20/20_
0.461286870900.00.060.06
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0370/39/39_
0.4612054262660.00.200.20
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8657d40d5d437

0-0370/44/44_
0.461138218274530.00.210.21
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp2

0-0370/50/50_
0.46868404793600.00.260.26
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfM%

0-0370/36/36_
0.461051240231570.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0370/22/22_
0.46961203129880.00.070.07
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0370/33/33_
0.467864206670.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_24b9a4926b35e

0-0370/24/24_
0.4663811296040.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0370/43/43_
0.46714547130.00.190.19
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fbd60c7d65ebb

0-0370/34/34_
0.465850420610.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0370/28/28_
0.465492171510.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a42a5c1f51fd5

0-0370/25/25_
0.474574429060.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0370/24/24_
0.4738758353340.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XX

0-0370/24/24_
0.4728036945900.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHLtNg

0-0370/32/32_
0.47224332630.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0370/36/36_
0.47183424175770.00.180.18
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0370/38/38_
0.471236135580.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0370/48/48_
0.475974154490.00.210.21
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/30/30_
0.47113858550.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0373/35/35K
0.4700114533.20.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /config.json HTTP/1.1

0-0370/34/34_
0.45157216379470.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/22/22_
0.4515222174400.00.110.11
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c102bb42e6bb0

0-0370/21/21_
0.4514286348080.00.110.11
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/27/27_
0.48130143448530.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/47/47_
0.481376371010.00.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/35/35_
0.48141812127880.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0380/27/27_
0.48147681065640.00.220.22
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0380/41/41_
0.4812544242480.00.190.19
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLt

1-0380/27/27_
0.48117341235870.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0380/39/39_
0.481099215184240.00.230.23
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BR71l

1-0380/25/25_
0.4899731107790.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yfJ

1-0380/34/34_
0.4890628477510.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/40/40_
0.4883932512950.00.170.17
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0380/25/25_
0.4966241103280.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0380/24/24_
0.497543277520.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0380/28/28_
0.496314303040.00.130.13
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-0380/21/21_
0.495771278193030.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgXdJjO14I

1-0380/51/51_
0.495033387175750.00.260.26
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0380/25/25_
0.494165107070.00.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_744c0d02a84f9

1-0380/38/38_
0.493360200250.00.230.23
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0380/27/27_
0.492574145730.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2daa0148e5209

1-0380/36/36_
0.492001154470.00.140.14
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0380/28/28_
0.49157769320.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0380/37/37_
0.4986427166590.00.150.15
127.0.0.1http/

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a93327da7a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:50 UTC
Restart Time: Monday, 09-Sep-2024 06:19:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 52 minutes 21 seconds
Server load: 1.56 2.14 2.47
Total accesses: 1031205 - Total Traffic: 3.9 GB - Total Duration: 292096829
CPU Usage: u29.41 s45.98 cu294.73 cs165.4 - .0207% CPU load
.399 requests/sec - 1613 B/second - 4043 B/request - 283.258 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/420/19095_
6.4575142355305020.01.5971.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/408/20079_
6.46476556390920.01.7374.47
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0716e312c8dc4

0-065990/429/20016_
6.456701310654956340.01.6475.31
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVI9b9swEN0L5D8Q3CXRR

0-065990/434/18062_
6.4640624751710050.02.3970.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PKChg

0-065990/405/20112_
6.45943553380780.01.7074.39
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7568d4336e259

0-065990/524/18256_
6.46657747996200.02.2268.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/483/18811_
6.46628448879140.02.3070.76
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4953280e84e3

0-065990/499/17590_
6.46549955687790.01.9766.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_5951107b30816fcbc

0-065990/476/19674_
6.46582052063230.02.0073.26
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/437/18833_
6.471975555555080.02.2272.53
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/416/18770_
6.47331749291090.01.9171.33
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c827b5df88de6

0-065990/546/18411_
6.47247653123860.02.3369.54
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHKdp2

0-065990/544/18929_
6.471513346849140.02.1468.67
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/432/18013_
6.47832847927120.01.9966.34
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/614/19865_
6.451405449421060.03.0573.87
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3e52884237cb

0-065990/564/19508_
6.472621353153460.02.3972.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-065990/500/20311_
6.451455549489850.02.1576.93
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c375feffbc8d2

0-065990/425/19051_
6.45136423650356710.01.9671.96
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BW93m

0-065990/460/19827_
6.45133636752959070.01.9675.18
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/479/18165_
6.45124542752894090.02.2169.56
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/546/18974_
6.4512864552667160.02.4671.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/600/18594_
6.45111335049468150.02.5470.66
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-065990/440/18368_
6.451171151956680.01.9969.17
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-065990/430/18392_
6.45102433251846630.01.6469.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-065990/490/18726_
6.45860648043580.02.1070.92
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_371172ee691e0

1-0136090/267/18433_
3.6589436745303850.01.2969.60
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0136090/307/19043_
3.64992747371320.01.3171.00
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/262/19285_
3.641161448806150.01.0972.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_59e4b17f70bab

1-0136090/281/17442_
3.6582542048351730.01.3966.25
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/227/17884_
3.641082654912920.00.8765.48
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0136090/234/17985_
3.641293750179140.00.9367.57
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/243/17514_
3.65672647102950.00.9868.45
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0136090/429/17621_
3.655871441647806360.01.6366.21
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/254/16730_
3.6563549853025170.01.0663.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136090/253/18464_
3.65719950471000.01.3369.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/244/18873_
3.65448293847187290.01.0570.98
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/243/17903_
3.65572650608040.01.0369.38
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/257/18727_
3.65513358250158320.01.0971.73
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/249/18712_
3.6526564647980600.01.0069.88
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vxH%2Bwf

1-0136090/280/17740_
3.65209750459770.01.1365.72
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDumW

1-0136090/245/18111_
3.6536927847729870.00.9867.43
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/250/20063_
3.659240448725900.01.1375.61
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/303/19236_
3.65170447616490.01.2874.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09ca8a5cac1cb

1-0136090/286/20016_
3.64141779548104140.01.1574.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a92c6a04e4

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:49 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 hours 36 minutes 4 seconds
Server load: 1.05 1.14 1.27
Total accesses: 1632 - Total Traffic: 6.7 MB - Total Duration: 1168667
CPU Usage: u.78 s.79 cu0 cs0 - .00661% CPU load
.0687 requests/sec - 296 B/second - 4311 B/request - 716.095 ms/request
2 requests currently being processed, 48 idle workers
_______________K____________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/36/36_
0.4655711571308570.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKchB

0-0340/34/34_
0.4651263191730.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94orR

0-0340/40/40_
0.463401088200680.00.190.19
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/32/32_
0.4641752218280.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzb7

0-0340/40/40_
0.46288548430.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0340/28/28_
0.465820132640.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0340/27/27_
0.45928338118330.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0340/18/18_
0.458554042220.00.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/34/34_
0.4568310693400.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/33/33_
0.46635818390.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/28/28_
0.4623422258540.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0340/37/37_
0.461544487170.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/26/26_
0.4685411512890.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0340/32/32_
0.46571103370.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0340/32/32_
0.46103088610.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cHEAD /saml2/idp/metadata.php HTTP/1.1

0-0343/23/23K
0.470029387.40.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

0-0340/36/36_
0.441416119106730.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_daa053c3b7ff6

0-0340/44/44_
0.44137346405470.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/23/23_
0.4413418102570.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/24/24_
0.4412868387380.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/35/35_
0.4412305332410.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJK

0-0340/39/39_
0.4511704670990.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

0-0340/28/28_
0.4511024253730.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9c9130d94597

0-0340/26/26_
0.4510245160770.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_faef4587504c8

0-0340/27/27_
0.45751230890120.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-0350/29/29_
0.482553891120.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/23/23_
0.473330102750.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0350/57/57_
0.4739210282310.00.280.28
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/22/22_
0.4613353105780.00.070.07
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3077a9b850d5

1-0350/32/32_
0.4611366522350.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/30/30_
0.474681892111380.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

1-0350/33/33_
0.4612595406900.00.150.15
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0350/47/47_
0.468725600520.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0350/23/23_
0.461194256248540.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/21/21_
0.46989388184800.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.46813314210450.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeBl

1-0350/38/38_
0.481969108770.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/41/41_
0.461058566291660.00.230.23
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.481264200870.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06ad13838ad68

1-0350/25/25_
0.48654167460.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_535c4fb62e15a

1-0350/29/29_
0.467175493900.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKf

1-0350/34/34_
0.4831496070.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c62949131ffe5

1-0350/26/26_
0.4664321683832020.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0350/23/23_
0.46609248228920.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-03521/79/79W
0.48001184232.20.270.27
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-0350/43/43_
0.4656511616311910.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOServ

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9db17e0fc

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:49 UTC
Restart Time: Monday, 09-Sep-2024 06:19:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 52 minutes 20 seconds
Server load: 1.56 2.14 2.47
Total accesses: 1031198 - Total Traffic: 3.9 GB - Total Duration: 292096825
CPU Usage: u29.41 s45.98 cu294.73 cs165.4 - .0207% CPU load
.399 requests/sec - 1613 B/second - 4043 B/request - 283.26 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/420/19095_
6.4575142355305020.01.5971.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/408/20079_
6.46475556390920.01.7374.47
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0716e312c8dc4

0-065990/429/20016_
6.456701310654956340.01.6475.31
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVI9b9swEN0L5D8Q3CXRR

0-065990/434/18062_
6.4640524751710050.02.3970.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PKChg

0-065990/405/20112_
6.45942553380780.01.7074.39
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7568d4336e259

0-065990/524/18256_
6.46656747996200.02.2268.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/483/18811_
6.46627448879140.02.3070.76
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4953280e84e3

0-065990/499/17590_
6.46549955687790.01.9766.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_5951107b30816fcbc

0-065990/476/19674_
6.46581052063230.02.0073.26
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/437/18833_
6.471965555555080.02.2272.53
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/416/18770_
6.47331749291090.01.9171.33
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c827b5df88de6

0-065990/546/18411_
6.47246653123860.02.3369.54
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHKdp2

0-065990/544/18929_
6.471513346849140.02.1468.67
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/432/18013_
6.47822847927120.01.9966.34
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/614/19865_
6.451404449421060.03.0573.87
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3e52884237cb

0-065990/564/19508_
6.472521353153460.02.3972.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-065990/500/20311_
6.451454549489850.02.1576.93
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c375feffbc8d2

0-065990/425/19051_
6.45136323650356710.01.9671.96
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BW93m

0-065990/460/19827_
6.45133636752959070.01.9675.18
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/479/18165_
6.45124442752894090.02.2169.56
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/546/18974_
6.4512854552667160.02.4671.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/600/18594_
6.45111335049468150.02.5470.66
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-065990/440/18368_
6.451170151956680.01.9969.17
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-065990/430/18392_
6.45102433251846630.01.6469.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-065990/490/18726_
6.45859648043580.02.1070.92
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_371172ee691e0

1-0136090/267/18433_
3.6589336745303850.01.2969.60
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0136090/307/19043_
3.64991747371320.01.3171.00
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/262/19285_
3.641161448806150.01.0972.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_59e4b17f70bab

1-0136090/281/17442_
3.6582442048351730.01.3966.25
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/227/17884_
3.641081654912920.00.8765.48
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0136090/234/17985_
3.641292750179140.00.9367.57
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/243/17514_
3.65671647102950.00.9868.45
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0136090/429/17621_
3.655861441647806360.01.6366.21
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/254/16730_
3.6563449853025170.01.0663.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136090/253/18464_
3.65718950471000.01.3369.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/244/18873_
3.65447293847187290.01.0570.98
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/243/17903_
3.65571650608040.01.0369.38
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/257/18727_
3.65512358250158320.01.0971.73
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/249/18712_
3.6526464647980600.01.0069.88
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vxH%2Bwf

1-0136090/280/17740_
3.65208750459770.01.1365.72
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDumW

1-0136090/245/18111_
3.6536827847729870.00.9867.43
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/250/20063_
3.659140448725900.01.1375.61
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/303/19236_
3.65170447616490.01.2874.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09ca8a5cac1cb

1-0136090/286/20016_
3.64141679548104140.01.1574.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j8

Found on 2024-10-09 04:11

Create report

Open service 65.9.95.58:443 · trlismore-login.cloudworkengine.net

2026-01-09 03:51

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 09 Jan 2026 03:51:45 GMT
Pragma: no-cache
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 1f7383179aa19c47a962c46236696426.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: haTC0iRaTmu2qVRK32By1mf7DTw-iutJgIIBhT2LE0OcKK0nchbo-g==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.58:443 · trlismore-login.cloudworkengine.net

2026-01-02 03:27

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 02 Jan 2026 03:27:59 GMT
Pragma: no-cache
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 ca6609f4a83e693c532f54c00146f5f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: 4XT3kzd12nY3Fgq9JOie2HjUB1ZfON6vi-1RmUPOGKoiNWfO7fan9g==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 65.9.95.58:443 · trlismore-login.cloudworkengine.net

2025-12-22 18:22

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 18:22:51 GMT
Pragma: no-cache
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 0c8bf5614b4bcc3e76982cb7ff9a7662.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: bRURxlfSH-ECA1HkEuvljX6mlaxQ1hv_9MWyMR6_agD8Nk4b3bQWUw==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://trlismore-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

trlismore.cloudworkengine.nettrinitylismore.cloudworkengine.nettrlismore-login.cloudworkengine.nettrinitylismore-login.cloudworkengine.nettrinitylismore.files.cloudworkengine.net.autrlismore-id.cloudworkengine.nettrlismore.files.cloudworkengine.net.autrinitylismore.cloudwork.id

Fingerprint:

b2438b9da84749bd9e3b0471c7d655561a7d3b17e39754bd51aff6ff53f0c36d

CN:

trlismore.cloudworkengine.net

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M02

Not before:

2025-09-10 00:00

Not after:

2026-10-09 23:59

Domain summary

trlismore-login.cloudworkengine.net 52

1 recorded

IP summary

65.9.95.58 2 143.204.194.21 1 65.9.95.59 1 65.9.95.92 1 65.9.95.46 1

5 recorded