Domain tspaccount.net
Thailand
CS LOXINFO Public Company Limited.
Software information
Apache 2
tcp/443
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 15:47
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63a5efebc8aApache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 22:47:47 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 28 days 12 hours 46 minutes 26 seconds Server load: 2.08 2.02 2.01 Total accesses: 1850243 - Total Traffic: 23.8 GB - Total Duration: 2141120598 CPU Usage: u236.12 s124.84 cu32089.3 cs2210.25 - 1.41% CPU load .751 requests/sec - 10.1 kB/second - 13.5 kB/request - 1157.21 ms/request 3 requests currently being processed, 125 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes032000 229661no0yes032000 329394no0yes131000 529374no0yes230000 Sum400 3125000 ________________________________................................ ________________________________________________________W_______ ................................___________R_________________R__ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/53/14801_ 19.0120160260990.00.17193.80 159.89.83.196h2localhost:443[0/0] Software caused connection abort 0-92293730/51/15294_ 19.8780139013530.00.12198.97 159.89.83.196http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/52/14865_ 19.2210150309560.00.18192.75 159.203.182.222h2localhost:443[0/0] Software caused connection abort 0-92293730/53/15046_ 19.9420145875140.00.13186.00 159.203.182.222http/1.1localhost:443GET / HTTP/1.1 0-92293730/50/14948_ 19.5920147711740.00.18185.45 128.199.195.68http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/44/15171_ 19.4910156649170.00.13188.55 159.203.182.222h2localhost:443[0/0] Software caused connection abort 0-92293730/43/14843_ 19.8880145588900.00.18200.28 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-92293730/45/15152_ 19.6260150182080.00.10187.60 207.154.240.169http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/46/15113_ 19.5010145226990.00.11229.90 146.190.160.11http/1.1 0-92293730/52/15246_ 19.5660148853440.00.20194.92 159.203.182.222http/1.1 0-92293730/51/14811_ 19.9510154393440.00.13200.72 146.190.160.11http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-92293730/48/14821_ 19.6170147156350.00.10195.46 207.154.240.169http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/58/14689_ 18.8210137182770.00.19185.55 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-92293730/52/14843_ 19.9420169086630.00.11186.04 159.89.83.196http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/51/15797_ 19.7130141615390.00.15187.81 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/54/14846_ 19.9320165341260.00.13182.52 104.236.193.132http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-92293730/59/14898_ 19.7140143405110.00.14206.39 128.199.62.55http/1.1 0-92293730/51/14958_ 19.0630144940050.00.15189.33 161.35.176.95http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/49/14777_ 19.6170160388370.00.10200.57 159.203.182.222http/1.1 0-92293730/54/14999_ 19.7520144639400.00.17193.85 159.89.83.196http/1.1localhost:443GET / HTTP/1.1 0-92293730/52/14989_ 19.0570181496030.00.20193.46 146.190.160.11http/1.1 0-92293730/50/15015_ 19.6260147053790.00.14204.12 167.172.20.95http/1.1 0-92293730/53/15471_ 19.3960150756110.00.19188.31 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-92293730/44/14675_ 19.0570138765330.00.16190.21 167.172.20.95http/1.1 0-92293730/61/14985_ 19.5820162205900.00.13186.91 128.199.195.68http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/55/14658_ 19.9510135981670.00.20197.05 104.236.193.132http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/51/15158_ 19.9240144713520.00.09194.53 104.236.193.132http/1.1localhost:443GET /about HTTP/1.1 0-92293730/56/14941_ 19.9420159195750.00.08213.32 167.172.20.95http/1.1localhost:443GET / HTTP/1.1 0-92293730/55/14742_ 19.5740152174680.00.13175.94 128.199.62.55http/1.1 0-92293730/38/15186_ 19.4720135139140.00.11225.16 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-92293730/57/14676_ 19.9240155573090.00.07199.15 159.89.83.196http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/48/14938_ 19.5980145815210.00.20185.19 167.172.20.95h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15731. 0.00668520138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00668520136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00668520174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00668520150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00668520146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00668520134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00668520172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00668520165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00668520127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00668520152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00668520148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00668520159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00668520159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/15189. 0.00668520137016410.00.00183.04 159.223.102.13http/1.1localhost:80GET /config.json HTTP/1.1 1-92-0/0/15367. 0.0066852013650663
Found on 2024-02-02 15:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63a6905cc71Apache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 12:16:14 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 2 hours 14 minutes 53 seconds Server load: 2.82 2.76 2.73 Total accesses: 840732 - Total Traffic: 11.4 GB - Total Duration: 1043272026 CPU Usage: u251.83 s19.47 cu14229.9 cs747.1 - 8.43% CPU load 4.65 requests/sec - 65.9 kB/second - 14.2 kB/request - 1240.91 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 131206no6yes428021 229763no12yes527005 Sum2018 955026 ................................______W____W_____________W_____R _W___W_________________R____WW__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/6552. 0.00130812368188558120.00.0096.41 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/7053. 0.00130884864235680.00.0099.11 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /eitkawv-13875gitems/etidm.htm HTTP/1.1 0-7-0/0/6556. 0.001308076524630.00.0095.89 54.186.174.90http/1.1localhost:443GET /modules/.git/config HTTP/1.1 0-7-0/0/6834. 0.00130883973518460.00.0088.79 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?gfchsbr-333781petidm46t HTTP/1.1 0-7-0/0/6559. 0.00130895474139030.00.0085.10 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /rkgxsgj-27408tetidm84ext.htm HTTP/1.1 0-7-0/0/6978. 0.00130863384471470.00.0092.39 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ijnecaw-308615aeti.html HTTP/1.1 0-7-0/0/6738. 0.00130884168369350.00.00102.15 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /njckawv-18902pitems/etidm96a.html HTTP/1.1 0-7-0/0/6838. 0.00130884671606760.00.0089.85 185.191.171.14http/1.1www.chonlateeadmin.com:443GET /rvgitgo-4528tetidm73eit HTTP/1.1 0-7-0/0/7037. 0.00130884366715850.00.00140.14 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?zqaggdh-287234netidm56mdn HTTP/1.1 0-7-0/0/6805. 0.001308075434310.00.0086.91 154.40.58.51http/1.1www.tkadvicesystem.com:80GET /wp-content/plugins/wp-mlm/js/custom.js HTTP/1.1 0-7-0/0/6491. 0.00130884780490450.00.00106.34 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /kfzxsgj-42741mitems/etidm54.htm HTTP/1.1 0-7-0/0/6442. 0.001308105781888170.00.0084.05 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /qnfkawv-13861sitems/etidm16 HTTP/1.1 0-7-0/0/6486. 0.00130868660477520.00.0085.58 52.167.144.190h2www.chonlateefbl.com:443GET /bath-body-works-2023-haunted-castle-luminary-871982.html H 0-7-0/0/6701. 0.00130866390197780.00.0091.70 148.72.211.177http/1.1www.chonlateekeyman.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7326. 0.00130883969746530.00.0093.06 52.70.240.171http/1.1www.chonlateeboi.com:443GET /1310yytxitems/etidm43k.html HTTP/1.1 0-7-0/0/6510. 0.00130884788465600.00.0084.81 52.70.240.171http/1.1www.chonlateeboi.com:443GET /21293hevyetidm58.html HTTP/1.1 0-7-0/0/6682. 0.00130820370739740.00.0086.69 217.34.133.56http/1.1www.xn--12cf1cddmk0fho2ci6he1a9GET /wp-login.php HTTP/1.1 0-7-0/0/6793. 0.00130828769725410.00.0091.40 51.15.17.105http/1.1www.pentorproperty.com:80GET /.well-known/pki-validation/x.php HTTP/1.1 0-7-0/0/6750. 0.00130884686251620.00.0085.52 23.22.35.162http/1.1www.chonlateeboi.com:443GET /7052khrritems/etidm9.html HTTP/1.1 0-7-0/0/6754. 0.00130867772792400.00.0092.31 154.40.58.51http/1.1www.tkadvicesystem.com:443GET /wp-content/plugins/wp-mlm/js/custom.js HTTP/1.1 0-7-0/0/6803. 0.0013081443062110446390.00.0094.03 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6533. 0.00130867976228870.00.0088.29 85.208.96.206http/1.1www.chonlateefood.com:443GET /getid/dts38899csrtitems HTTP/1.1 0-7-0/0/7067. 0.00130883384242990.00.0093.93 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /eftxsgj-27473geti.html HTTP/1.1 0-7-0/0/6616. 0.00130883867185760.00.0094.45 23.22.35.162http/1.1www.chonlateeboi.com:443GET /38903ztiaetidm51ha.html HTTP/1.1 0-7-0/0/6545. 0.00130884224389758900.00.0083.28 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7-0/0/6804. 0.00130847061437680.00.0086.49 51.77.66.84http/1.1www.emba35.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/6663. 0.00130884274790590.00.0095.03 66.249.73.11http/1.1www.chonlateeadmin.com:443GET /trust.php?hneadej-56960retid.htm HTTP/1.1 0-7-0/0/6682. 0.00130884285351900.00.00116.28 47.128.61.3h2www.seasabithailand.com:443GET /wp-theme/index.php?hl=xim-xbox HTTP/2.0 0-7-0/0/6549. 0.00130884673699920.00.0082.78 52.70.240.171http/1.1www.chonlateeboi.com:443GET /43530gzgqetid.htm HTTP/1.1 0-7-0/0/6847. 0.00130883776532610.00.00121.71 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /lkaxsgj-1896netidm98yxn.htm HTTP/1.1 0-7-0/0/6510. 0.00130883775565700.00.0095.23 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /uwjxsgj-27411witems/etidm.htm HTTP/1.1 0-7-0/0/6834. 0.00130885073873630.00.0087.79 66.249.73.10http/1.1www.chonlateeadmin.com:443GET /trust.php?vnsadej-379868fetidm57i.htm HTTP/1.1 1-7312060/343/6809_ 183.533077181130.04.5388.60 159.203.63.67http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-7312060/293/6542_ 183.310077723410.04.0883.50 167.99.8.63http/1.1localhost:443GET /.env HTTP/1.1 1-7312060/347/6559_ 183.6300103067570.04.1484.45 164.92.84.255http/1.1localhost:443GET /.env HTTP/1.1 1-7312060/314/6291_ 183.290582093990.04.0283.43 164.92.84.255http/1.1localhost:443GET /server-status HTTP/1.1 1-7312060/330/6482_ 183.58188979215640.04.1096.72 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /qrfarie-17735setidm70de.html HTTP/1.1 1-7312060/290/6513_ 183.572077263460.04.5586.30 143.110.156.182http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-7312061/268/6519W 157.08831079681010.03.8583.42 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 1-7312060/299/6618_ 182.902089609850.03.6988.39 52.167.144.232h2www.yougame.in.th:443[0/0] init 1-7312060/372/6660_ 183.54384059769270.04.7086.10 52.70.240.171http/1.1www.chonlateeboi.com:443GET /8903gzgqetidm90lq.html HTTP/1.1 1-7312060/329/6553_ 181.98383582283200.04.3391.03 159.203.63.67h2localhost:443[0/0] Software caused connection abort 1-7312060/292/6320_ 183.49285285353090.03.4489.51 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lnaarie-18016netidm30yan HTTP/1.1 1-7312061/231/6783W 168.16
Found on 2024-01-07 05:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63ad49b8a6fApache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 22:45:26 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 12 hours 44 minutes 5 seconds Server load: 2.82 2.78 2.62 Total accesses: 227048 - Total Traffic: 3.3 GB - Total Duration: 181717399 CPU Usage: u207.77 s12.03 cu3522.42 cs190.09 - 8.58% CPU load 4.95 requests/sec - 75.7 kB/second - 15.3 kB/request - 800.348 ms/request 11 requests currently being processed, 53 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 012776no6yes725004 112906no6yes428003 Sum2012 1153007 _R____W_R__W___R__________R__W______W______RW_________W_________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0127760/174/2491_ 113.32185020315580.02.3538.40 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /fmuuzzo-39954hetid.htm HTTP/1.1 0-0127760/329/2763R 113.12184719179260.06.8736.97 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?xpvsvcw-127254ieti.html HTTP/1.1 0-0127760/181/2443_ 113.410031447370.02.1045.49 138.68.163.10http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0127760/189/2679_ 113.190019598530.02.0134.33 128.199.62.55http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-0127760/166/2560_ 113.12085420021670.02.0031.95 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /vhkuzzo-9680xitems/etidm91iux.html HTTP/1.1 0-0127760/163/2827_ 113.321020061080.02.0635.54 159.223.102.13http/1.1localhost:443GET / HTTP/1.1 0-0127761/267/2550W 113.121019643620.011.2839.65 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /mbbuzzo-20851oitems/etidm HTTP/1.1 0-0127760/178/2568_ 113.400020501150.02.2733.54 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0127760/216/2627R 113.321019397890.011.5176.37 138.68.163.10http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-0127760/181/2557_ 113.18185019426430.02.3733.04 23.22.35.162http/1.1www.chonlateeboi.com:443GET /39886bzlnetidm10c HTTP/1.1 0-0127760/162/2511_ 112.68186422895460.02.0630.93 164.90.222.93h2localhost:443[0/0] Software caused connection abort 0-0127761/171/2443W 113.071019562340.02.0431.77 188.165.232.135http/1.1www.chonlateefood.com:443GET /tag/%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B8%9E%E0%B8%B1%E0%B8%81 0-0127760/148/2397_ 113.390019567350.01.8133.68 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0127760/181/2733_ 112.651020461460.02.8036.65 159.203.63.67h2localhost:443[0/0] Software caused connection abort 0-0127760/169/2761_ 113.400022634030.02.2537.69 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-0127760/168/2490R 113.281019765710.02.0833.14 66.249.72.66http/1.1 0-0127760/168/2431_ 113.041019990630.02.0531.83 165.232.76.155http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-0127760/161/2609_ 112.75085119775550.02.0335.99 128.199.62.55h2localhost:443[0/0] Software caused connection abort 0-0127760/168/2628_ 113.41085719270300.01.9634.44 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wqzqxjd-215419metidm.html HTTP/1.1 0-0127760/174/2478_ 113.120021362850.09.7338.08 128.199.62.55http/1.1localhost:443GET / HTTP/1.1 0-0127760/173/2541_ 112.810619562850.02.4936.87 159.223.102.13h2localhost:443[0/0] Software caused connection abort 0-0127760/226/2590_ 113.361020538720.03.0837.93 159.203.63.67http/1.1localhost:443GET / HTTP/1.1 0-0127760/214/2843_ 113.31085519313170.02.8335.60 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?cedhsbr-126999qetidm56.html HTTP/1.1 0-0127760/156/2447_ 113.420018803170.01.9332.56 159.203.63.67http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-0127760/166/2463_ 113.13085219839600.01.9432.12 3.224.220.101http/1.1www.chonlateeboi.com:443GET /19374otfwetidm89e.htm HTTP/1.1 0-0127760/162/2473_ 113.01084419195480.02.0832.01 52.167.144.209h2www.xn--12cx2bef7bl0boq4ch6gugw[0/0] init 0-0127760/276/2514R 112.53290318990650.012.9241.51 52.167.144.209h2www.xn--12cx2bef7bl0boq4ch6gugw[1/0] schedule: stream 1, GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2% 0-0127760/147/2540_ 113.151019373010.01.7462.88 192.95.30.21http/1.1www.1smestartup.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 0-0127760/160/2422_ 113.410019414800.01.9630.60 159.223.102.13http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-0127761/174/2765W 113.230018789820.01.9871.40 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /qbfuzzo-28239sitems/etidm39do.htm HTTP/1.1 0-0127760/167/2440_ 113.290019366140.02.7739.03 128.199.62.55http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-0127760/156/2760_ 113.400108019445670.02.4234.12 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /yawnuvn-10931jetidm90l HTTP/1.1 1-0129060/167/1975_ 99.890108214882610.02.0926.03 164.90.222.93h2localhost:443[0/0] Software caused connection abort 1-0129060/163/1752_ 101.78069714408160.01.9322.74 157.55.39.201h2www.chonlateeaa.com:443GET /?s=ayno-floor-lamp-large-grey-%E2%80%93-brook-farm-general 1-0129060/157/1872_ 100.521121314787340.01.8826.09 157.55.39.201h2www.chonlateeaa.com:443[0/0] init 1-0129060/155/1758_ 101.71136314442390.01.9723.33 79.137.206.177http/1.1www.mkandptfoods.com:443POST /bdb1c307e65f.php HTTP/1.1 1-0129061/158/1782W 101.670014333080.02.0727.96 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 1-0129060/152/1794_ 101.770014175730.01.7223.91 138.68.163.10http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-0129060/160/1824_ 101.64086114672230.01.9422.50 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?sfqhsbr-8533detidm40fsd.htm HTTP/1.1 1-0129060/222/1872_ 101.50039414486730.04.7925.44 198.71.235.31http/1.1www.ddkserviceandtransport.com:GET /?author=2 HTTP/1.1 1-0129060/140/1842_ 101.78084714766750.02.9626.07 185.191.171.5http/1.1www.chonlateeadmin.com:443GET /sihcvfc-5777ueti.html HTTP/1.1 1-0129060/199/1786_ 101.431129014320460.02.0923.48 31.184.236.34http/1.1 1-0129060/153/1775_ 101.52193314023370.01.9026.61 85.208.96.209http/1.1www.chonlateeadmin.com:443GET /xfmsall-21460zetidm2 HTTP/1.1 1-0129060/228/1924R 101.50279515141770.04.2727.17 192.95.30.21http/1.1 1-0129061/222/1839W<
Found on 2024-01-05 15:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63a1988504dApache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:21 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 32 minutes 1 second Server load: 2.28 2.10 1.76 Total accesses: 1082668 - Total Traffic: 11.9 GB - Total Duration: 678460708 CPU Usage: u26.92 s13.78 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.656 ms/request 9 requests currently being processed, 119 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no6yes131004 315011no10yes329305 415163no8yes527004 615166no0yes032000 Sum4024 91193013 ................................W_______________________________ ................................____R___R______________________W _W____R_W___________R_______R___................................ ________________________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0055062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0055259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0055130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0055057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.005589958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.005587062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0055056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0055157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.005586455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0055059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.005587056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0055055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0055315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00551662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0055161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0055107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0055062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.005586960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0055058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00551256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0055498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0055160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0055074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00551192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0055058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0055083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0055122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00551163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0055859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0055261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0055157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0055059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-131501212/13/9139W 1.673425541986696.30.10142.56 65.154.226.170h2www.tspaccount.net:443[27/26] write: stream 53, GET /wp-content/themes/chonlateedesig 1-13150120/6/8971_ 1.582055125050.00.03107.50 207.154.240.169http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-13150120/4/9103_ 1.592055516790.00.03131.74 139.144.150.205http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-13150120/3/9376_ 1.192057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150120/4/9357_ 1.68078256511010.00.03111.88 205.169.39.94http/1.1www.tspaccount.net:443GET / HTTP/1.1 1-13150120/2/9081_ 1.501056147270.00.0099.02 139.144.150.205http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-13150120/1/9263_ 0.77187056057710.00.01109.58 154.28.229.245http/1.1 1-13150120/3/9351_ 1.251056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150120/1/9213_ 0.8411055728890.00.0190.53 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 1-13150120/3/9162_ 1.451073740350.00.01108.70 143.110.218.229http/1.1localhost:443GET / HTTP/1.1 1-13150120/5/9391_ 1.572055727320.00.0295.49 139.144.150.205http/1.1localhost:443GET /_all_dbs HTTP/1.1 1-13150120/6/9135_ 1.560055927
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675bc6a7ff8Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 08:25:21 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 4 hours 23 minutes 8 seconds Server load: 0.35 0.30 0.35 Total accesses: 12062 - Total Traffic: 109.8 MB - Total Duration: 16417428 CPU Usage: u3273.86 s5968.62 cu56635900 cs13846500 - 446000% CPU load .764 requests/sec - 7.1 kB/second - 9.3 kB/request - 1361.09 ms/request 11 requests currently being processed, 10 idle workers _CW_CC_R__..W_._W_CC.C__C......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-207932080/35/1288_ 8.610015226020.00.3810.77 164.92.192.25http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-207935461/7/1160C 0.590015914541.40.019.52 164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-207931480/28/1070W 8.1912014850540.00.199.82 162.243.161.105http/1.1www.chonlateefood.com:80GET / HTTP/1.0 3-207932150/34/1080_ 6.180114982900.00.2210.27 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-207935541/6/1007C 0.010013331381.30.019.68 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 5-207932271/31/1067C 5.860012970261.40.1110.73 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-207935600/5/909_ 0.011013933820.00.018.22 128.199.61.251http/1.1localhost:443GET /.DS_Store HTTP/1.1 7-207927650/62/949R 29.6611115512788190.00.419.02 144.126.202.105http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 8-207935680/3/809_ 0.010010301500.00.015.78 161.35.27.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-207932290/30/699_ 7.42109266580.00.249.71 162.243.186.177http/1.1localhost:443GET /about HTTP/1.1 10-2079-0/0/712. 0.003011421080.00.007.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-2079-0/0/577. 0.00109729000.00.004.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-207929990/46/428W 15.951006025390.00.482.98 198.199.121.22http/1.1www.chonlateefood.com:80GET / HTTP/1.0 13-207931700/31/220_ 12.24102756340.00.291.43 164.92.192.25http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 14-2079-0/0/30. 0.0000390740.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-207935840/2/10_ 0.000030040.00.000.04 128.199.61.251http/1.1localhost:443GET /login.action HTTP/1.1 16-207932410/29/29W 8.1700255520.00.150.15 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 17-207935920/2/2_ 0.001030.00.000.00 162.243.186.177http/1.1localhost:443GET /v2/_catalog HTTP/1.1 18-207935981/2/2C 0.010141.40.000.00 161.35.27.144http/1.1localhost:443GET /_all_dbs HTTP/1.1 19-207936041/3/3C 0.000030.20.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.002010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-207936131/3/3C 0.020161.30.000.00 128.199.61.251http/1.1localhost:443GET /.git/config HTTP/1.1 22-207936200/3/3_ 0.001170.00.000.00 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 23-207936240/2/2_ 0.000030.00.000.00 164.92.192.25http/1.1localhost:443GET /about HTTP/1.1 24-207936341/2/2C 0.000051.30.000.00 128.199.61.251http/1.1localhost:443GET /.env HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 14subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 259 seconds, (range: 18...294)index usage: 0%, cache usage: 0%total entries stored since starting: 140total entries replaced since starting: 0total entries expired since starting: 126total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3703 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236754ac30c0aApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 02:42:45 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 2 hours 17 minutes 55 seconds Server load: 2.17 1.26 0.82 Total accesses: 7045 - Total Traffic: 68.1 MB - Total Duration: 11404903 CPU Usage: u3236.11 s5934.32 cu56302300 cs13768200 - 847000% CPU load .851 requests/sec - 8.4 kB/second - 9.9 kB/request - 1618.86 ms/request 18 requests currently being processed, 5 idle workers C_CCCWC_CCCCCCW_CWC_WC_........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041204671/8/676C 0.750011376421.40.027.20 74.207.237.114http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2041201850/36/657_ 26.580204811009410.00.366.36 207.154.240.169http/1.1www.chonlateefood.com:80GET /debug/default/view?panel=config HTTP/1.0 2-2041196121/95/671C 60.390111531561.40.907.02 167.172.232.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-2041203441/16/663C 8.290110194811.30.135.73 159.65.58.104http/1.1localhost:443GET /.env HTTP/1.1 4-2041202991/16/654C 9.740110695311.30.217.96 139.144.150.23http/1.1localhost:443GET /config.json HTTP/1.1 5-2041204410/5/533W 0.88008427960.00.024.84 137.184.222.107http/1.1localhost:443GET /server-status HTTP/1.1 6-2041203151/11/475C 6.45007751231.40.154.08 144.126.202.105http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 7-2041203160/17/539_ 7.49019159360.00.105.33 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 8-2041204491/8/541C 0.91008595711.40.035.29 137.184.222.107http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-2041203731/10/502C 3.54108796701.30.044.52 144.126.202.105http/1.1localhost:443GET /.env HTTP/1.1 10-2041203741/7/379C 3.28115922871.30.043.46 139.144.150.23http/1.1localhost:443GET /.env HTTP/1.1 11-2041204511/5/132C 2.08011901153.90.011.26 167.172.232.142http/1.1localhost:443GET /server-status HTTP/1.1 12-2041203921/10/128C 2.22001385681.30.030.71 159.65.58.104http/1.1localhost:443GET /.git/config HTTP/1.1 13-2041203981/11/28C 2.0700193011.30.030.05 144.126.202.105http/1.1localhost:443GET /config.json HTTP/1.1 14-2041204040/10/26W 3.1500102040.00.030.06 172.69.64.185http/1.1www.business.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 15-2041204760/3/104_ 2.19010671708180.00.141.08 137.184.162.65http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 16-2041204831/2/15C 0.010122981.40.000.02 139.144.150.23http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 17-2041204890/1/11W 0.0000250.00.000.01 143.110.218.229http/1.1www.chonlateefood.com:80GET /debug/default/view?panel=config HTTP/1.0 18-2041204961/2/8C 0.0110101.30.000.01 139.144.150.23http/1.1localhost:443GET /.git/config HTTP/1.1 19-2041204980/3/5_ 0.48055811260.00.010.01 172.69.222.175http/1.1www.accprogress.com:80GET /tag/%E0%B8%A7%E0%B8%B1%E0%B8%87%E0%B8%8A%E0%B8%B4%E0%B9%89 20-2041205080/1/99W 0.00001853790.00.000.85 172.69.67.118http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 21-2041205141/2/101C 0.00111655541.30.000.83 144.126.202.105http/1.1localhost:443GET /.git/config HTTP/1.1 22-2041205250/0/98_ 0.0008551753580.00.001.41 172.69.67.19http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 23subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 259 seconds, (range: 12...294)index usage: 0%, cache usage: 1%total entries stored since starting: 94total entries replaced since starting: 0total entries expired since starting: 71total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3285 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 19:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675c1148f7eApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 06:13:13 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 2 hours 11 minutes 2 seconds Server load: 1.03 0.61 0.56 Total accesses: 9374 - Total Traffic: 170.8 MB - Total Duration: 12189075 CPU Usage: u3130 s5832.37 cu55536500 cs13590000 - 879000% CPU load 1.19 requests/sec - 22.2 kB/second - 18.7 kB/request - 1300.31 ms/request 14 requests currently being processed, 8 idle workers _CWW__R_C_CC_CRW__WRCC............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965259560/4/896_ 2.920208212528900.00.0227.39 159.89.83.196http/1.1www.chonlateefood.com:80GET /v2/_catalog HTTP/1.0 1-1965256491/27/804C 17.680110241931.30.2219.23 139.144.150.45http/1.1localhost:443GET /telescope/requests HTTP/1.1 2-1965256640/26/824W 14.690152711414160.00.189.30 172.71.123.161http/1.1www.khlangkaew.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 3-1965259060/6/756W 1.14009042470.00.027.82 134.122.34.144http/1.1www.spamechanicssystem.com:443GET /v2/_catalog HTTP/1.1 4-1965251870/51/718_ 27.62008415820.00.358.02 159.203.94.228http/1.1localhost:443GET /login.action HTTP/1.1 5-1965248640/69/760_ 36.5904649476490.01.547.04 134.122.34.144http/1.1www.spamechanicssystem.com:443GET /about HTTP/1.1 6-1965259620/2/618R 1.45007089090.00.024.93 74.207.237.46http/1.1localhost:443GET /login.action HTTP/1.1 7-1965251460/58/606_ 32.47007002400.00.554.16 167.99.184.41http/1.1localhost:443GET /.DS_Store HTTP/1.1 8-1965251971/44/650C 25.94008290021.30.405.62 159.203.94.228http/1.1localhost:443GET /.env HTTP/1.1 9-1965259150/5/549_ 1.8805527332980.00.0120.79 134.122.34.144http/1.1www.spamechanicssystem.com:443GET /debug/default/view?panel=config HTTP/1.1 10-1965259171/7/388C 2.82005969891.30.035.03 74.207.237.46http/1.1localhost:443GET /.env HTTP/1.1 11-1965259331/6/366C 1.26005592231.40.0118.02 137.184.150.232http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1965259400/3/419_ 1.46006083530.00.026.57 167.99.184.41http/1.1localhost:443GET /login.action HTTP/1.1 13-1965259461/5/300C 0.02103730761.40.012.76 139.144.150.45http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 14-1965259680/4/204R 0.01002537450.00.013.63 139.144.150.45http/1.1localhost:443GET /.env HTTP/1.1 15-1965259810/3/14W 0.630064520.00.020.33 172.71.175.66http/1.1www.chorsiam.com:80POST /?wc-ajax=get_refreshed_fragments HTTP/1.0 16-1965259870/1/272_ 1.41019193458400.00.002.37 159.203.63.67http/1.1www.chonlateefood.com:80GET /v2/_catalog HTTP/1.0 17-1965259930/1/94_ 0.00011187960.00.000.95 139.144.150.45http/1.1localhost:443GET /.git/config HTTP/1.1 18-1965260030/1/30W 0.0000212100.00.000.68 137.184.150.232http/1.1localhost:443GET /server-status HTTP/1.1 19-1965260090/1/93R 0.00002148960.00.0015.53 159.203.94.228http/1.1localhost:443GET /.DS_Store HTTP/1.1 20-1965260151/1/12C 0.000170561.30.000.63 139.144.150.45http/1.1localhost:443GET /config.json HTTP/1.1 21-1965260201/1/1C 0.000121.40.000.00 137.184.106.30http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 14subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 287 seconds, (range: 284...294)index usage: 0%, cache usage: 0%total entries stored since starting: 477total entries replaced since starting: 0total entries expired since starting: 463total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4317 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 23:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367501e05969Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 12:03:51 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 8 hours 1 minute 38 seconds Server load: 0.37 0.24 0.32 Total accesses: 43609 - Total Traffic: 831.5 MB - Total Duration: 86219844 CPU Usage: u3011.32 s5763.6 cu55151100 cs13501900 - 238000% CPU load 1.51 requests/sec - 29.5 kB/second - 19.5 kB/request - 1977.11 ms/request 18 requests currently being processed, 2 idle workers CCCWWCWWCCCCRCWWWR__.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193218751/53/3643C 14.660177342152.30.46110.88 142.93.158.96http/1.1localhost:443GET / HTTP/1.1 1-193214821/91/3623C 25.710171586132.61.0047.12 178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-193223821/4/3632C 0.030170033781.40.0148.80 172.105.37.32http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 3-193220920/24/3500W 6.011071094410.00.3153.00 172.71.167.176http/1.1www.proplustech.co.th:443GET /?page_id=Q747498 HTTP/1.1 4-193221710/20/3529W 6.801070526360.00.1657.99 159.89.83.196http/1.1www.chonlateefood.com:80GET /.vscode/sftp.json HTTP/1.0 5-193220091/34/3228C 6.831160563621.30.3440.20 172.105.37.32http/1.1localhost:443GET /.git/config HTTP/1.1 6-193219180/42/3242W 10.031065042970.00.4153.14 172.71.170.165http/1.1www.proplustech.co.th:443GET /?page_id=S1173183 HTTP/1.1 7-193223110/14/3167W 3.751065259440.00.1089.09 172.71.166.79http/1.1www.proplustech.co.th:443GET /?page_id=G1489820 HTTP/1.1 8-193223881/2/2981C 0.020159559441.30.0050.89 172.105.37.32http/1.1localhost:443GET /telescope/requests HTTP/1.1 9-193223941/3/2639C 0.011151134341.30.0032.30 172.105.37.32http/1.1localhost:443GET /.env HTTP/1.1 10-193224041/4/2366C 0.030046161341.30.0139.70 172.105.37.32http/1.1localhost:443GET /config.json HTTP/1.1 11-193220161/34/1896C 6.620038631591.40.3328.79 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-193221070/28/1692R 6.820032049730.00.3032.31 167.172.232.142http/1.1localhost:80GET /.DS_Store HTTP/1.0 13-193224111/2/1527C 0.020134272982.60.00113.23 64.227.126.135http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 14-193221210/25/863W 4.661016491510.00.349.72 162.158.175.186http/1.1www.proplustech.co.th:443GET /?page_id=A1546078 HTTP/1.1 15-193224130/0/404W 0.00105883580.00.003.99 146.190.64.200http/1.1www.chonlateefood.com:80GET /.vscode/sftp.json HTTP/1.0 16-193224260/0/341W 0.00005510690.00.002.92 139.144.150.23http/1.1localhost:443GET /server-status HTTP/1.1 17-193224320/0/233R 0.00002611860.00.002.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-193224380/0/331_ 0.00005441010.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-193224440/0/165_ 0.00002780800.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/310. 0.00204205022000.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/48. 0.0021960650330.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/177. 0.00222402695160.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/4. 0.002233028610.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1932-0/0/5. 0.002221029530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/40. 0.00859501125780.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/17. 0.0088370560250.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/2. 0.009045020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.0090460140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.0090350108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 294 seconds, (range: 290...298)index usage: 0%, cache usage: 0%total entries stored since starting: 310total entries replaced since starting: 0total entries expired since starting: 298total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 26127 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 05:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236753ed7a5c0Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:42 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 55 seconds Server load: 6.21 6.99 6.73 Total accesses: 757 - Total Traffic: 26.9 MB - Total Duration: 1337272 CPU Usage: u3042.55 s5674.6 cu54400400 cs13297400 - 1.23e+8% CPU load 13.8 requests/sec - 500.9 kB/second - 36.4 kB/request - 1766.54 ms/request 36 requests currently being processed, 5 idle workers C_WCWWWRWWC.W_RCCC_RRWWCRWRCCRR_RCWWR.WCW..W_..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-190216611/1/14C 0.0002212411.30.000.09 161.35.190.56http/1.1localhost:443GET /login.action HTTP/1.1 1-190211230/25/25_ 6.3400359840.00.230.23 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /reune.php?prwevst127844jetidm8.htm HTTP/1.1 2-190211470/17/17W 6.2130440740.00.290.29 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=used-2022-chevrolet-corvette-stingray-coupe-2lt-z51-for 3-190211561/29/29C 9.6301439421.30.150.15 178.128.151.41http/1.1localhost:443GET /login.action HTTP/1.1 4-190211620/26/26W 8.8200412060.00.220.22 217.113.194.205http/1.1www.1smestartup.com:443GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 5-190211740/21/21W 8.2400430030.00.380.38 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0039929736.html HTTP/1.1 6-190211800/32/32W 6.7100361600.00.300.30 23.22.35.162http/1.1www.chonlateeboi.com:443GET /24658emxgetid HTTP/1.1 7-190214830/8/23R 3.973788333810.00.050.17 162.158.87.150http/1.1www.khlangkaew.com:443GET /category/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0% 8-190211880/21/21W 5.6310370350.00.550.55 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0045773572.html HTTP/1.1 9-190211940/23/23W 7.4700429670.00.640.64 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2021-chevrolet-corvette-stingray-vs-2022-chevy-corvette 10-190212001/25/25C 8.1411422501.30.190.19 164.90.222.93http/1.1localhost:443GET /telescope/requests HTTP/1.1 11-1902-0/0/19. 0.0080369430.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-190212190/20/20W 7.5120442950.00.170.17 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=painite-value-price-and-jewelry-information-gem-society 13-190214920/10/13_ 4.1400196250.00.100.12 164.90.222.93http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 14-190212310/25/25R 6.0400369050.00.200.20 205.169.39.172http/1.1 15-190214981/8/15C 6.2113334474.90.090.17 178.128.151.41http/1.1localhost:443GET /server-status HTTP/1.1 16-190212431/19/19C 5.9811532571.42.312.31 161.35.190.56http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-190212491/26/26C 5.50011276430622757.32.922.92 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-bg.png HTTP/1.1 18-190212510/23/23_ 9.680864494280.00.220.22 3.224.220.101http/1.1www.chonlateeboi.com:443GET /21199emxgitems/etidm20jg HTTP/1.1 19-190212670/27/27R 4.9030262430.00.300.30 205.169.39.86http/1.1localhost:80GET / HTTP/1.0 20-190212730/13/13R 3.24010659598810.05.365.36 52.70.240.171http/1.1www.chonlateeadmin.com:443 21-190212790/17/17W 8.6650422220.00.320.32 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 22-190212850/23/23W 6.5530303900.00.270.27 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 23-190215311/7/9C 1.8900101291.40.060.08 159.203.182.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 24-190212920/21/21R 5.453697406210.00.660.66 5.255.125.196http/1.1www.chonlateevip.com:443 25-190212980/22/22W 8.1500450480.00.490.49 159.203.182.222http/1.1localhost:443GET /server-status HTTP/1.1 26-190213040/18/18R 5.2911432660.01.701.70 159.203.182.222http/1.1localhost:443GET /about HTTP/1.1 27-190215401/9/12C 1.961184141.30.040.05 164.90.222.93http/1.1localhost:443GET /config.json HTTP/1.1 28-190213111/26/26C 8.5003183912110.40.620.62 167.172.20.95http/1.1www.tspaccount.net:443GET /.vscode/sftp.json HTTP/1.1 29-190213140/23/23R 3.0000398950.02.392.39 85.208.96.201http/1.1www.seasabithailand.com:443 30-190215420/8/16R 1.7811286060.00.020.24 164.90.222.93http/1.1localhost:443GET /.env HTTP/1.1 31-190213260/20/20_ 9.780301437820.00.240.24 104.131.1.32http/1.1www.tspaccount.net:443GET /v2/_catalog HTTP/1.1 32-190215560/6/14R 0.100915180660.00.030.17 3.224.220.101http/1.1 33-190215581/10/12C 2.5900144643.50.040.06 172.71.167.60http/1.1www.khlangkaew.com:443POST /xmlrpc.php HTTP/1.1 34-190213480/20/20W 10.0820442760.00.260.26 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-classic-cars-for-sale-michigan- 35-190215640/8/8W 0.090077600.00.030.03 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=gemoro-sparkle-spa-pro-robbins-brothers-mm-A0A6KRHZ HTT 36-190215660/4/4R 0.0400125400.01.401.40 198.44.140.139http/1.1 37-1902-0/0/4. 0.006030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-190215910/8/8W 0.760071880.00.340.34 104.197.69.115http/1.1www.tafa.or.th:443GET / HTTP/1.1 39-190215971/6/6C 2.540278735.00.100.10 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 40-190216030/1/1W 0.0100177100.02.212.21 167.172.20.95http/1.1www.tspaccount.net:443GET /about HTTP/1.1 41-1902-0/0/2. 0.007050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1902-0/0/4. 0.005020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-190216190/6/6W 0.021060.00.000.00 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 44-190216270/5/5_ 2.4404893115320.00.020.02 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=gemoro-sparkle-spa-jewelry-and-watch-ultrasonic-cleaner SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 272subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 249 seconds, (range: 243...264)index usage: 9%, cache usage: 12%total entries stored since starting: 272total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 170 misstotal removes since starting: 0 hit, 0 mi
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675b2540d00Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 08:51:58 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 4 hours 49 minutes 47 seconds Server load: 2.15 1.79 1.56 Total accesses: 27566 - Total Traffic: 396.9 MB - Total Duration: 36075192 CPU Usage: u2795.69 s5188.73 cu51098300 cs12501600 - 366000% CPU load 1.59 requests/sec - 23.4 kB/second - 14.7 kB/request - 1308.68 ms/request 14 requests currently being processed, 0 idle workers WWWWWWRCWWCW.WW................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762258520/8/2366W 4.320029888450.00.0543.64 162.158.95.185http/1.1www.99accountant.com:80POST /wp-login.php HTTP/1.0 1-1762258700/2/2169W 2.5910028310430.00.0343.65 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 2-1762253840/88/2271W 51.411028795180.01.2626.71 172.68.234.166http/1.1www.99accountant.com:80POST /wp-cron.php?doing_wp_cron=1695433917.26876211166381835937 3-1762255920/29/2050W 21.0630025991250.00.6527.19 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 4-1762258880/1/2247W 0.0420027739670.00.0142.65 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-1762258900/6/2165W 0.791029592970.00.0326.20 5.62.34.21http/1.1www.chonlateeaa.com:443POST //wp-login.php HTTP/1.1 6-1762259440/0/1950R 0.000126230440.00.0022.24 52.167.144.218http/1.1 7-1762257781/21/1832C 11.260024403383.50.1422.29 172.71.154.205http/1.1www.chonlateebranding.com:443POST /xmlrpc.php HTTP/1.1 8-1762254080/81/1675W 43.130021625770.00.9419.94 172.68.234.144http/1.1www.99accountant.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 9-1762259070/6/1533W 3.450020217070.00.0320.40 159.223.102.13http/1.1localhost:443GET /server-status HTTP/1.1 10-1762258051/18/1633C 10.430020944811.40.1517.38 159.223.102.13http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1762258130/6/1317W 7.0139019138960.00.0515.47 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1695433879.60642790794372558593 12-1762-0/0/895. 0.0021012495400.00.0013.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762258150/13/886W 13.261013280970.00.1910.90 212.102.51.245http/1.1www.chonlateeboi.com:443POST /wp-login.php HTTP/1.1 14-1762259190/5/993W 1.150013638770.00.0416.02 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 15-1762-0/0/637. 0.00108716463070.00.008.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1762-0/0/540. 0.0082807087660.00.007.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/63. 0.0051090572180.00.002.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/124. 0.00510301645590.00.002.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/94. 0.0045816121059020.00.001.26 172.68.234.144http/1.1www.ptatun.or.th:80POST /wp-cron.php?doing_wp_cron=1695429335.63167810440063476562 20-1762-0/0/99. 0.00584001298300.00.004.31 65.21.232.254http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%AA 21-1762-0/0/16. 0.0061970264580.00.002.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/2. 0.006238020500.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/9. 0.006220047380.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 120subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 104 seconds, (range: 13...284)index usage: 4%, cache usage: 5%total entries stored since starting: 3469total entries replaced since starting: 0total entries expired since starting: 3349total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 124 hit, 8955 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 01:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675d71fce7aApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 10:15:01 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 6 hours 12 minutes 49 seconds Server load: 1.91 1.55 1.36 Total accesses: 36665 - Total Traffic: 629.2 MB - Total Duration: 53079733 CPU Usage: u2753.31 s5147.71 cu50869500 cs12452800 - 283000% CPU load 1.64 requests/sec - 28.8 kB/second - 17.6 kB/request - 1447.69 ms/request 9 requests currently being processed, 5 idle workers WW_CWWRW__W_W_.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743191700/33/3013W 20.3923044904680.00.4263.64 27.254.96.168http/1.1www.12gobiz.com:443POST /wp-cron.php?doing_wp_cron=1695093277.99424290657043457031 1-1743191770/36/3036W 21.8622043639390.00.3147.42 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 2-1743192970/25/3174_ 14.751143545904250.00.3062.06 135.181.213.220http/1.1www.chonlateedesign.com:443GET /%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%95%E0%B9%88%E0%B8%AD%E0% 3-1743191831/40/3017C 15.971041629551.40.3458.31 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1743193220/12/2800W 7.2012038794660.00.3137.93 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-1743190630/80/2880W 24.372039725650.00.7454.37 27.254.96.168http/1.1www.12gobiz.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 6-1743193290/20/2659R 9.171137789200.00.2244.27 108.162.216.139http/1.1 7-1743193420/17/2692W 8.630037298320.00.3344.04 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 8-1743193350/17/2633_ 11.220039249030.00.1537.43 146.190.64.200http/1.1 9-1743193540/15/2419_ 11.301735700360.00.2534.15 162.158.238.38http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%AA%E0%B8%AD%E0%B8%99%E0% 10-1743194070/4/2022W 0.9602330165780.00.0433.29 52.167.144.180http/1.1www.12gobiz.com:443GET / HTTP/1.1 11-1743194200/0/1627_ 0.001025862330.00.0027.96 146.190.64.200http/1.1 12-1743194260/1/1428W 0.001018905200.00.0229.97 135.181.213.220http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%A3 13-1743194320/1/1207_ 0.930109020638080.00.0120.63 146.190.64.200http/1.1 14-1743-0/0/778. 0.00362011724400.00.0011.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/451. 0.00263906158850.00.006.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/537. 0.00232808461110.00.008.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/134. 0.00304802057450.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/95. 0.00264101389890.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/39. 0.0028890626550.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/8. 0.003111079460.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/7. 0.003119026970.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/2. 0.003125031570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/5. 0.00312403700.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/2. 0.003126030790.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 139subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 47 seconds, (range: 7...177)index usage: 4%, cache usage: 6%total entries stored since starting: 6816total entries replaced since starting: 0total entries expired since starting: 6677total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 231 hit, 10361 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-19 03:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367593a94960Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 01:52:54 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 1 hour 24 minutes 57 seconds Server load: 0.79 0.92 0.86 Total accesses: 7223 - Total Traffic: 105.0 MB - Total Duration: 9978083 CPU Usage: u2825.32 s5147.85 cu50712200 cs12419000 - 1240000% CPU load 1.42 requests/sec - 21.1 kB/second - 14.9 kB/request - 1381.43 ms/request 5 requests currently being processed, 6 idle workers WCRW__W__._..._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-173382030/59/582W 33.98007382370.00.827.56 45.61.184.148http/1.1www.nptpropertythailand.com:443GET /wp-login.php HTTP/1.1 1-173385331/8/618C 8.10008595421.40.117.88 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-173382090/35/549R 18.63717888349620.00.446.52 123.183.224.6http/1.1www.thai-pack.com:443 3-173379990/82/562W 44.93008396820.01.186.44 108.162.241.100http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%94%E0%B8%B9%E0%B9%81 4-173383510/27/527_ 17.06206966550.00.257.17 207.154.240.169http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 5-173382180/52/534_ 32.0007386867820.00.657.22 162.158.238.246http/1.1www.siamerp.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%82%E0%B8%B2 6-173382240/38/486W 23.15008689060.00.527.93 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 7-173384670/17/441_ 11.1947236185930.00.146.80 162.158.238.50http/1.1www.siamerp.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%82%E0%B8%B2 8-173385550/2/514_ 0.89106494760.00.016.89 207.154.240.169http/1.1localhost:443GET /about HTTP/1.1 9-1733-0/0/427. 0.0025605923600.00.005.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-173380840/77/381_ 43.87104272370.00.853.61 207.154.240.169http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 11-1733-0/0/315. 0.0010404201560.00.004.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1733-0/0/245. 0.0015203070500.00.003.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/189. 0.0020102760180.00.0013.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-173382870/40/149_ 22.53102202840.00.381.72 207.154.240.169http/1.1localhost:443GET /v2/_catalog HTTP/1.1 15-1733-0/0/194. 0.003917922663330.00.002.31 162.158.238.50http/1.1www.siamerp.com:443GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B9%82%E0%B8%9B%E0%B8%A3 16-1733-0/0/102. 0.00123601740500.00.001.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/124. 0.0073401968490.00.002.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/4. 0.001246018660.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/9. 0.001233051440.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/20. 0.0012450165770.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1733-0/0/103. 0.0048201522820.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1733-0/0/13. 0.0012380106800.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/5. 0.001244026900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/2. 0.001253020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/3. 0.005086018690.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1733-0/0/86. 0.0043771959350.00.000.99 167.71.48.191http/1.1 27-1733-0/0/34. 0.0050060178140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/5. 0.0050770380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 40subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 117 seconds, (range: 3...298)index usage: 1%, cache usage: 1%total entries stored since starting: 1043total entries replaced since starting: 0total entries expired since starting: 1003total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3240 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 18:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675d3be737aApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 05:07:35 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 1 hour 5 minutes 23 seconds Server load: 0.25 0.33 0.33 Total accesses: 3421 - Total Traffic: 45.4 MB - Total Duration: 4282241 CPU Usage: u2735.66 s5106.37 cu50514300 cs12376000 - 1.6e+6% CPU load .872 requests/sec - 11.8 kB/second - 13.6 kB/request - 1251.75 ms/request 2 requests currently being processed, 8 idle workers __W___._.C_._..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720167820/41/277_ 19.81114348820.00.553.16 165.22.74.203http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-1720167890/50/335_ 17.23304421800.00.624.60 165.22.74.203http/1.1localhost:443GET / HTTP/1.1 2-1720169180/34/310W 10.97003833840.00.443.84 165.22.74.203http/1.1localhost:443GET /server-status HTTP/1.1 3-1720169240/34/300_ 8.8645853436180.00.923.87 165.22.74.203http/1.1 4-1720170500/5/287_ 1.63004125590.00.033.33 165.22.74.203http/1.1localhost:443GET /about HTTP/1.1 5-1720169300/35/258_ 9.61112869130.00.923.21 172.71.151.80http/1.1www.singkansard.com:443GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?v 6-1720-0/0/278. 0.004346343390870.00.002.48 212.192.193.218http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.GET / HTTP/1.0 7-1720165240/78/235_ 26.3028762546250.00.822.79 45.81.39.200http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1 8-1720-0/0/206. 0.0061203026460.00.002.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1720166451/70/262C 27.53002979261.41.173.05 165.22.74.203http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1720166910/70/182_ 22.69101897750.00.781.72 165.22.74.203http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 11-1720-0/0/132. 0.0025601502330.00.001.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1720167060/63/78_ 23.2500632650.00.480.70 165.22.74.203http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 13-1720-0/0/13. 0.002111037740.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/13. 0.002108091560.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1720-0/0/12. 0.0021050109620.00.000.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720-0/0/91. 0.008494771562900.00.001.69 172.68.234.226http/1.1www.jbbgarment.com:80GET /gallery_home-04/ HTTP/1.0 17-1720-0/0/59. 0.0012220781850.00.004.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/93. 0.0076310961227700.00.001.43 172.70.38.246http/1.1www.99accountant.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 39subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 104 seconds, (range: 2...284)index usage: 1%, cache usage: 1%total entries stored since starting: 548total entries replaced since starting: 0total entries expired since starting: 509total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1023 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 22:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367520df23e8Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 08:22:15 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 4 hours 20 minutes 2 seconds Server load: 0.58 0.59 0.58 Total accesses: 21868 - Total Traffic: 367.4 MB - Total Duration: 26518793 CPU Usage: u2689.81 s5088.58 cu50465000 cs12365600 - 403000% CPU load 1.4 requests/sec - 24.1 kB/second - 17.2 kB/request - 1212.68 ms/request 5 requests currently being processed, 5 idle workers WCWC__R.._._.._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716251270/37/1918W 7.970024831070.00.4834.94 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 1-1716253021/7/2008C 2.2001608234185925.50.0523.35 85.208.96.208http/1.1www.chonlateevip.com:443GET /tag/%E0%B8%AA%E0%B8%B3%E0%B8%99%E0%B8%B1%E0%B8%81%E0%B8%87 2-1716253360/0/2003W 0.000024109700.00.0041.07 164.92.126.255http/1.1www.chonlateefood.com:80GET / HTTP/1.0 3-1716247091/91/1907C 33.040124183331.40.9030.23 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1716249780/59/1867_ 23.690123472580.00.4125.17 161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1716251460/26/1758_ 8.970119212960.00.1723.46 162.158.174.87http/1.1www.anumotanaboon.com:80GET /.well-known/acme-challenge/moon.php HTTP/1.0 6-1716250140/55/1620R 13.141218510250.00.5222.92 40.77.167.133http/1.1www.pentorproperty.com:443 7-1716-0/0/1666. 0.0001019423550.00.0019.90 40.77.167.133http/1.1www.pentorproperty.com:443GET /wp-content/uploads/siteorigin-widgets/sow-contact-form-def 8-1716-0/0/1445. 0.00155018803090.00.0034.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1716251540/34/1405_ 11.120130516924340.00.5229.96 172.177.238.103http/1.1www.chonlateebusiness.com:443GET /test HTTP/1.1 10-1716-0/0/1381. 0.00166016324710.00.0027.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716251560/28/1132_ 8.260013740150.00.2212.16 161.35.155.246http/1.1localhost:443GET /about HTTP/1.1 12-1716-0/0/596. 0.0016809602830.00.0028.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/323. 0.002404424980.00.002.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716251780/33/253_ 9.40002039780.00.354.06 172.177.238.103http/1.1www.chonlateebusiness.com:80GET /main HTTP/1.0 15-1716-0/0/12. 0.001315032950.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/209. 0.00130602557010.00.002.48 149.202.86.56http/1.1www.1smestartup.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%96 17-1716-0/0/96. 0.00604001216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.0060410110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/60. 0.0057260551080.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1716-0/0/96. 0.005596424847590.00.001.07 172.71.223.193http/1.1www.yuritrading.com:80GET //wp-content/dropdown.php HTTP/1.0 21-1716-0/0/12. 0.005979067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/95. 0.0055571706852810.00.002.11 54.36.149.3http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 23-1716-0/0/4. 0.006030040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 65subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 99 seconds, (range: 10...290)index usage: 2%, cache usage: 2%total entries stored since starting: 3613total entries replaced since starting: 0total entries expired since starting: 3548total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 152 hit, 8153 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 01:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675d338f01aApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 22:49:54 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 18 hours 47 minutes 40 seconds Server load: 0.52 0.49 0.44 Total accesses: 95413 - Total Traffic: 1.4 GB - Total Duration: 136582483 CPU Usage: u2773.95 s5086.55 cu50293300 cs12327800 - 92600% CPU load 1.41 requests/sec - 21.2 kB/second - 15.0 kB/request - 1431.49 ms/request 5 requests currently being processed, 6 idle workers WW_C_____RW....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170257600/71/8156W 29.2510112301570.01.29113.48 172.68.234.194http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 1-170256200/93/8133W 47.3800113497050.00.99123.81 159.203.44.43http/1.1localhost:443GET /server-status HTTP/1.1 2-170262130/19/7849_ 10.0310114657300.00.12115.53 159.203.44.43http/1.1localhost:443GET /about HTTP/1.1 3-170259641/49/7733C 24.9700108394551.40.68105.23 159.203.44.43http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-170263240/9/7207_ 5.7911263105736160.00.07104.44 172.68.234.194http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-170256300/94/7630_ 39.6002537104439150.01.16113.63 172.71.123.176http/1.1www.business.co.th:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 6-170260070/40/6966_ 18.4710104498450.00.5295.16 172.70.38.57http/1.1www.time2hand.com:80GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-c25a 7-170264230/1/7213_ 0.0010104388540.00.00107.11 54.159.144.217http/1.1www.chonlateebusiness.com:80GET / HTTP/1.0 8-170260230/41/6472_ 16.99181191345760.00.3684.97 174.129.116.135http/1.1www.chonlateebusiness.com:443GET / HTTP/1.1 9-170260290/35/6029R 18.341085509010.00.3691.77 54.159.144.217http/1.1 10-170256840/94/5394W 32.362075988450.00.8085.00 172.68.234.194http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1694360991.77357411384582519531 11-1702-0/0/4714. 0.00400063766350.00.0076.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1702-0/0/4213. 0.00401063082110.00.0067.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1702-0/0/2203. 0.0084848533804170.00.0043.97 167.71.196.133http/1.1www.uniqueworkthailand.com:443GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1 14-1702-0/0/1764. 0.006809135624652010.00.0026.43 162.158.106.47http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 15-1702-0/0/1167. 0.007483014904440.00.0014.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/525. 0.006756225810731050.00.008.04 67.207.85.29http/1.1 17-1702-0/0/370. 0.00747004247590.00.003.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/73. 0.0082510909090.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.00822401786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.001046301383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.00103720344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.001047004959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.00104750735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.0010456077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.00104690103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.00104590121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.00994542131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.001045501402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.0010482074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.00103380299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.001037501458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.00103190524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.001048101921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.001046802967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.001048003934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.0010467057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.0099768722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.001047902571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.0010465045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0057663060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 51subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 112 seconds, (range: 3...288)index usage: 1%, cache usage: 2%total entries stored since starting: 16674total entries replaced since starting: 0total entries expired since starting: 16623total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 397 hit, 38845 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 15:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236752d3650b1Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 11:30:55 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 7 hours 28 minutes 44 seconds Server load: 3.25 3.31 2.86 Total accesses: 61619 - Total Traffic: 903.1 MB - Total Duration: 96060356 CPU Usage: u2978.4 s5093.27 cu50075500 cs12281400 - 232000% CPU load 2.29 requests/sec - 34.3 kB/second - 15.0 kB/request - 1558.94 ms/request 7 requests currently being processed, 7 idle workers __W__W_CW_WW...W_................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-168514260/1/4928_ 1.020105875646050.00.0070.83 172.69.65.91http/1.1www.chonlateefarm.com:443GET //wp-content/themes/welfare-charity/www.php HTTP/1.1 1-168512640/19/4865_ 28.791075293390.00.1473.17 167.71.185.75http/1.1localhost:443GET /v2/_catalog HTTP/1.1 2-168514340/0/4708W 0.000074292940.00.0058.46 172.71.222.84http/1.1www.time2hand.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 3-16858880/89/4558_ 83.710119871515160.01.0560.99 172.71.175.26http/1.1www.chonlateefarm.com:443GET /0x.php HTTP/1.1 4-168512020/35/4458_ 22.351066841860.00.3162.14 167.71.185.75http/1.1localhost:443GET /about HTTP/1.1 5-168512730/21/4190W 16.510064066580.00.3059.18 172.68.234.134http/1.1www.thaidocuments.com:80GET /%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81%E0% 6-168510380/67/4252_ 48.150104061336990.01.0458.96 172.70.175.28http/1.1www.time2hand.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 7-168511171/51/4322C 35.070068280361.40.8174.29 167.71.185.75http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-168512750/23/4170W 15.911068926150.00.2162.62 172.71.210.196http/1.1www.thaidocuments.com:80GET /wp-login.php HTTP/1.0 9-168511510/50/4181_ 32.41065562401130.00.6165.36 108.162.226.113http/1.1www.chonlateebranding.com:443POST /wp-login.php HTTP/1.1 10-168513360/11/3304W 16.932052933930.00.0863.14 172.68.234.5http/1.1www.solucare.co.th:80GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&s 11-168511590/32/3032W 50.480045472620.00.3345.38 167.71.185.75http/1.1localhost:443GET /server-status HTTP/1.1 12-1685-0/0/2833. 0.0089043011870.00.0036.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1685-0/0/2469. 0.0085039009040.00.0034.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1685-0/0/1950. 0.00259033837230.00.0028.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-168510470/55/1568W 78.250027889910.00.5723.09 172.68.234.160http/1.1www.thaidocuments.com:80POST /wp-cron.php?doing_wp_cron=1694061054.34988403320312500000 16-168510540/55/601_ 79.820112710951560.00.687.62 172.70.174.178http/1.1www.time2hand.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 17-1685-0/0/348. 0.00100104897080.00.005.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/130. 0.00855302267410.00.001.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/111. 0.00855401550090.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1685-0/0/103. 0.00834413311644320.00.001.01 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 21-1685-0/0/185. 0.00836803156980.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/194. 0.0082996583469950.00.002.36 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 23-1685-0/0/100. 0.00825411431318330.00.001.61 172.68.234.148http/1.1www.accprogress.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 24-1685-0/0/39. 0.0084440480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/5. 0.00855502860.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/8. 0.008541074820.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0024426011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0024427012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.002442409920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0024438010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 108subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 68 seconds, (range: 1...242)index usage: 3%, cache usage: 4%total entries stored since starting: 8540total entries replaced since starting: 0total entries expired since starting: 8432total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 177 hit, 13984 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 04:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675840890b0Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 03:55:40 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 12 hours 32 minutes 26 seconds Server load: 6.95 7.33 10.91 Total accesses: 207808 - Total Traffic: 1.3 GB - Total Duration: 557095820 CPU Usage: u3174.14 s5119.62 cu49769200 cs12212500 - 137000% CPU load 4.6 requests/sec - 29.9 kB/second - 6.5 kB/request - 2680.82 ms/request 18 requests currently being processed, 6 idle workers .WWWW_W_WCWWWW_WW_WWWW_W_......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674-0/0/11802. 0.007946261187220.00.0086.84 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693774532.11841607093811035156 1-1674186050/52/11631W 36.6000256842830.00.1289.55 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693774539.93721890449523925781 2-1674190060/33/11678W 21.9810255142980.00.0683.52 172.68.234.5http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774539.30222606658935546875 3-1674194890/11/11463W 7.6410248856070.00.0385.90 172.68.234.203http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774538.9112 HTTP/1.0 4-1674178820/74/11191W 54.0010251215080.00.1792.49 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 5-1674179060/81/11124_ 58.7501717249643590.00.3083.67 172.68.234.140http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774538.5772 HTTP/1.0 6-1674179120/80/10566W 58.2100240187140.00.2177.73 172.68.234.203http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774539.9386 HTTP/1.0 7-1674181390/70/10357_ 50.8600234664140.00.1470.87 128.199.61.251http/1.1localhost:443GET /about HTTP/1.1 8-1674191900/26/10128W 16.3400233263240.00.0669.36 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774540.4503 HTTP/1.0 9-1674196111/8/10223C 3.1200235946801.40.0188.32 128.199.61.251http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1674191690/26/9651W 15.8600223707010.00.0779.30 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774539.61623907089233398437 11-1674192050/24/8960W 16.0210216307760.00.0653.10 172.68.234.197http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693774539.1659 HTTP/1.0 12-1674179460/78/8380W 55.8700204883440.00.1753.55 128.199.61.251http/1.1localhost:443GET /server-status HTTP/1.1 13-1674175310/92/7224W 67.7310191504180.00.3237.42 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774539.0877 HTTP/1.0 14-1674192110/23/6824_ 16.3601738185915470.00.0553.11 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774538.29629302024841308593 15-1674192860/20/5948W 13.3900172923570.00.0329.43 172.68.234.4http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774540.31257605552673339843 16-1674193560/21/4826W 10.7300152208720.00.0720.73 172.68.234.4http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774539.5048 HTTP/1.0 17-1674176120/96/4305_ 69.3401764138504580.00.1917.52 172.68.234.4http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774538.49791288375854492187 18-1674180090/72/4318W 53.2300140716740.00.2216.51 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693774540.2681 HTTP/1.0 19-1674180540/69/3609W 50.5000122609970.00.1912.51 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693774539.79002404212951660156 20-1674193930/15/3324W 11.0200117717550.00.0310.17 172.68.234.140http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774540.2611 HTTP/1.0 21-1674182230/68/2926W 47.4310105456030.00.1213.57 172.68.234.173http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774538.96233892440795898437 22-1674195210/10/2966_ 6.9401714102611910.00.0212.19 172.68.234.4http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774538.2464 HTTP/1.0 23-1674182510/62/2567W 47.450095024120.00.168.38 172.68.234.173http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774539.84341502189636230468 24-1674196980/3/2052_ 2.120163380555970.00.006.16 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693774538.64227509498596191406 25-1674-0/0/2151. 0.0056172481529830.00.007.47 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774481.9769 HTTP/1.0 26-1674-0/0/1932. 0.0047180374218530.00.005.39 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774490.5347 HTTP/1.0 27-1674-0/0/1814. 0.0062185771534180.00.006.23 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774475.67345809936523437500 28-1674-0/0/1502. 0.00175062200810.00.005.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/1265. 0.00818052832140.00.003.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/1208. 0.00793053014350.00.003.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/1117. 0.00769048114840.00.004.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1674-0/0/1094. 0.00823047651570.00.002.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1674-0/0/941. 0.00807040901710.00.003.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/886. 0.00815038831900.00.004.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/780. 0.00542189735353430.00.002.48 172.68.234.140http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693773995.51320695877075195312 36-1674-0/0/649. 0.00816029487650.00.002.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/843. 0.00544177535779050.00.002.65 172.68.234.140http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693773994.2935 HTTP/1.0 38-1674-0/0/596. 0.00810029120010.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/492. 0.001191193424783380.00.001.17 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693773346.26406002044677734375 40-1674-0/0/460. 0.001389022928210.00.001.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/414. 0.001382020566640.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/393. 0.001430019698960.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/298. 0.001718014051340.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1674-0/0/337. 0.001516016692070.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1674-0/0/84. 0.00163505130180.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1674-0/0/75. 0.00170604158940.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1674-0/0/153. 0.00158609047310.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1674-0/0/207. 0.0016493219<
Found on 2023-09-03 20:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367563dfadfaApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 01:52:28 +07 Restart Time: Friday, 01-Sep-2023 00:22:12 +07 Parent Server Config. Generation: 1655 Parent Server MPM Generation: 1654 Server uptime: 1 hour 30 minutes 16 seconds Server load: 3.20 4.21 4.48 Total accesses: 32519 - Total Traffic: 214.0 MB - Total Duration: 37731591 CPU Usage: u2765.22 s4953.92 cu48756200 cs11953500 - 1120000% CPU load 6 requests/sec - 40.5 kB/second - 6.7 kB/request - 1160.29 ms/request 9 requests currently being processed, 6 idle workers _CRWWRWWW_____W................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1654133520/28/2171_ 14.67046325485850.00.1513.75 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 1-1654134311/1/2108C 0.000224206311.40.0015.35 178.62.3.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1654134240/3/2161R 0.611024843430.00.0113.67 172.71.166.193http/1.1 3-1654133590/26/2036W 13.890023069830.00.1212.65 172.71.223.141http/1.1www.singkansard.com:443POST //wp-login.php HTTP/1.1 4-1654131760/96/2035W 53.750023505130.00.4818.56 178.62.3.65http/1.1localhost:443GET /server-status HTTP/1.1 5-1654131970/84/2076R 43.870024090370.00.3812.22 4.151.119.166http/1.1 6-1654132340/67/2079W 36.390023856760.00.3411.97 172.69.65.152http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 7-1654132650/62/1794W 32.890020806600.00.3311.63 172.70.42.153http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 8-1654133230/35/1941W 19.440022305430.00.1417.20 20.7.172.55http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 9-1654132980/45/1940_ 24.160122361130.00.2711.32 162.142.125.223http/1.1localhost:80GET /favicon.ico HTTP/1.0 10-1654133320/33/1740_ 17.680020590700.00.1910.70 4.151.119.166http/1.1www.chonlateedesign.com:80GET //wp-content/install.php HTTP/1.0 11-1654132540/64/1741_ 37.16048720866150.00.3411.20 172.71.166.192http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 12-1654133420/38/1481_ 16.580117203080.00.258.93 178.62.3.65http/1.1localhost:443GET /about HTTP/1.1 13-1654133680/23/1575_ 10.49048918842930.00.199.61 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 14-1654133930/13/1167W 7.670013368690.00.088.41 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 15-1654-0/0/1035. 0.0063012152010.00.006.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1654-0/0/650. 0.0045407534540.00.003.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1654-0/0/777. 0.0044808703290.00.004.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1654-0/0/387. 0.0044904732620.00.001.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1654-0/0/500. 0.0045205673780.00.002.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1654-0/0/294. 0.002892993209970.00.001.78 167.71.196.133http/1.1www.siwapower.com:80POST /xmlrpc.php HTTP/1.0 21-1654-0/0/86. 0.004550845030.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1654-0/0/185. 0.002735072322450.00.001.22 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 23-1654-0/0/197. 0.002863302403430.00.001.11 167.71.196.133http/1.1www.siwapower.com:80POST /xmlrpc.php HTTP/1.0 24-1654-0/0/151. 0.0037901561420.00.002.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1654-0/0/106. 0.0044301256790.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1654-0/0/106. 0.0043701518060.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 137subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 77 seconds, (range: 8...268)index usage: 4%, cache usage: 6%total entries stored since starting: 1636total entries replaced since starting: 0total entries expired since starting: 1499total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 9643 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-31 18:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675ae25a058Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:37:40 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 35 minutes 22 seconds Server load: 6.54 5.93 5.60 Total accesses: 176448 - Total Traffic: 1.0 GB - Total Duration: 229988305 CPU Usage: u2844.95 s4904.47 cu47928600 cs11731900 - 297000% CPU load 8.77 requests/sec - 53.2 kB/second - 6.1 kB/request - 1303.43 ms/request 14 requests currently being processed, 7 idle workers R_WWRCC__CRW__WW_W_W.W............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164561880/34/10663R 23.6910139280470.00.1363.94 172.71.174.180http/1.1 1-164562810/5/10495_ 3.620981134693660.00.0260.68 172.71.174.159http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 2-164562580/6/10297W 3.8600134260780.00.0257.27 144.126.202.105http/1.1localhost:443GET /server-status HTTP/1.1 3-164562440/13/10175W 7.1200132810960.00.0655.54 23.99.196.19http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 4-164560010/63/10180R 42.461938131431100.00.2954.15 159.203.63.67http/1.1www.tspaccount.net:443 5-164560731/48/9885C 35.6901167131706735.32.3954.65 172.71.26.2http/1.1www.chonlateefarm.com:443GET /wp-login.php HTTP/1.1 6-164562251/18/9799C 10.3110129546301.40.0860.17 144.126.202.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-164562750/7/10003_ 3.8000129359450.00.0171.58 134.122.89.242http/1.1localhost:80GET /config.json HTTP/1.0 8-164562370/12/9513_ 7.970787123778170.00.0664.00 137.184.222.107http/1.1www.tafa.or.th:443GET /debug/default/view?panel=config HTTP/1.1 9-164560531/50/9232C 32.8900121779202.60.2051.11 167.172.232.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-164560080/55/9143R 36.031705115711470.00.3246.35 137.184.222.107http/1.1www.tafa.or.th:443 11-164561470/41/9255W 26.3000122478490.00.2150.09 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 12-164560890/38/8843_ 25.830882116855750.00.1847.88 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 13-164562500/14/8232_ 7.910553108721070.00.0547.54 172.69.67.22http/1.1www.makeregist.com:80POST //xmlrpc.php HTTP/1.0 14-164560140/54/7886W 39.5000102823190.00.3657.02 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 15-164562820/4/7387W 1.931094143390.00.0141.86 172.71.170.153http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 16-164560220/57/6818_ 39.42066690225120.00.3040.79 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 17-164562940/1/5521W 0.560071924300.00.0032.55 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 18-164561030/56/4081_ 29.18056453657780.00.3536.47 159.203.63.67http/1.1www.tspaccount.net:443GET /_all_dbs HTTP/1.1 19-164561160/51/2852W 32.270035870050.00.3015.91 172.71.166.63http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 20-1645-0/0/2353. 0.0090031348740.00.0014.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-164561250/47/1152W 29.570013996870.00.226.08 185.36.252.164http/1.1www.kncintergroup.com:443GET /xmlrpc.php HTTP/1.1 22-1645-0/0/455. 0.0016449916243560.00.002.62 172.68.234.226http/1.1www.smebkk.com:80GET /category/type-b/ HTTP/1.0 23-1645-0/0/385. 0.0016189144735560.00.002.34 172.69.65.48http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 24-1645-0/0/256. 0.00179603451990.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/248. 0.00179403167430.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/128. 0.00343601633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0034720296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00347601155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0033565411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00334402410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00331321789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0017647000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00174884221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00174904021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00174953661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00174893821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0017641011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0017637018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0017645030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00176230118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0017628054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0017625072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00174943841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00174934171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 119subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 133 seconds, (range: 4...297)index usage: 4%, cache usage: 5%total entries stored since starting: 6795total entries replaced since starting: 0total entries expired since starting: 6676total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 31636 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236753baed1bfApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:59 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 30 seconds Server load: 6.63 6.13 6.48 Total accesses: 454 - Total Traffic: 2.9 MB - Total Duration: 354620 CPU Usage: u2611.62 s4838.84 cu47808400 cs11700400 - 1.98e+8% CPU load 15.1 requests/sec - 97.8 kB/second - 6.5 kB/request - 781.101 ms/request 16 requests currently being processed, 9 idle workers CCR___C__WCW_CCC__RCRRCW_......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209851/30/30C 9.6401218011.30.180.18 128.199.62.55http/1.1localhost:443GET /.env HTTP/1.1 1-1644209861/24/24C 10.060392201601.20.110.11 64.227.126.135http/1.1www.tspaccount.net:443GET /server-status HTTP/1.1 2-1644209890/26/26R 8.230418179150.00.160.16 64.227.126.135http/1.1www.tspaccount.net:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1644210010/27/27_ 10.600704212280.00.140.14 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 4-1644210080/25/25_ 6.790719246810.00.080.08 167.99.182.39http/1.1www.tafa.or.th:443GET /_all_dbs HTTP/1.1 5-1644210310/20/20_ 9.880700216740.00.190.19 167.99.182.39http/1.1www.tafa.or.th:443GET /login.action HTTP/1.1 6-1644210371/20/20C 8.070435163705.60.160.16 164.90.222.93http/1.1www.tspaccount.net:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1644210390/25/25_ 9.200927183880.00.130.13 172.173.110.230http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST //wp-login.php HTTP/1.1 8-1644211390/11/23_ 2.9500137660.00.020.10 144.126.202.105http/1.1localhost:443GET /login.action HTTP/1.1 9-1644210550/19/19W 5.3200125790.00.060.06 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 10-1644210571/15/15C 6.5000149711.30.090.09 128.199.62.55http/1.1localhost:443GET /.git/config HTTP/1.1 11-1644210630/22/22W 8.1100191370.00.120.12 159.223.108.26http/1.1localhost:443GET /server-status HTTP/1.1 12-1644210730/30/30_ 9.1101353200030.00.090.09 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 13-1644210751/21/21C 8.5100172891.30.200.20 165.232.76.155http/1.1localhost:443GET /.git/config HTTP/1.1 14-1644211461/6/7C 2.300045791.30.040.04 144.126.202.105http/1.1localhost:443GET /.env HTTP/1.1 15-1644210871/19/19C 8.0211163111.30.110.11 165.232.76.155http/1.1localhost:443GET /.env HTTP/1.1 16-1644210930/21/21_ 7.3200147640.00.120.12 128.199.62.55http/1.1localhost:443GET /login.action HTTP/1.1 17-1644210990/14/14_ 4.800361122560.00.340.34 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 18-1644211810/1/18R 0.0201106010.00.000.11 172.173.110.230http/1.1www.xn--12cx2bef7bl0boq4ch6gugw 19-1644211111/22/22C 7.4005061534413.40.170.17 168.61.149.69http/1.1www.uniqueworkthailand.com:443POST //wp-login.php HTTP/1.1 20-1644211220/16/16R 6.5207128430.00.110.11 167.99.182.39http/1.1www.tafa.or.th:443 21-1644211480/4/4R 2.051140640.00.030.03 172.173.110.177http/1.1 22-1644211691/3/3C 0.010051.40.010.01 159.223.108.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 23-1644211870/1/1W 0.510010400.00.010.01 23.99.197.177http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 24-1644211890/2/2_ 1.390104328410.00.020.02 74.249.252.222http/1.1www.chonlateevip.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 37subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 281 seconds, (range: 274...292)index usage: 1%, cache usage: 1%total entries stored since starting: 37total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 151 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236759b4161c7Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:42 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 39 seconds Server load: 0.72 0.86 1.23 Total accesses: 327 - Total Traffic: 4.3 MB - Total Duration: 92844 CPU Usage: u661.55 s1262.32 cu12804600 cs3078510 - 4.07e+7% CPU load 8.38 requests/sec - 113.4 kB/second - 13.5 kB/request - 283.927 ms/request 16 requests currently being processed, 0 idle workers CCCWRRWCCCCRCWCC.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439061/27/27C 4.700357116976.30.590.59 217.151.98.163http/1.1www.hotlineservicethailand.com:GET /xmlrpc.php HTTP/1.1 1-45440981/1/41C 0.000196742.60.000.70 144.126.213.222http/1.1localhost:443GET /.env HTTP/1.1 2-45439121/26/26C 3.2901102552.60.630.63 172.105.91.149http/1.1localhost:443GET /.git/config HTTP/1.1 3-45439220/34/34W 3.580092010.00.490.49 144.126.213.222http/1.1localhost:443GET /server-status HTTP/1.1 4-45439320/31/31R 3.160171540.00.400.40 144.126.213.222http/1.1 5-45439550/59/59R 3.4301101410.00.580.58 144.126.213.222http/1.1 6-45439900/29/29W 3.1700108590.00.490.49 172.68.234.124http/1.1www.orderaccounting.com:80POST /wp-cron.php?doing_wp_cron=1666604801.83584189414978027343 7-45440091/25/25C 1.521149152.70.200.20 172.105.91.149http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-45440191/6/6C 1.521175232.60.030.03 172.105.91.149http/1.1localhost:443GET /info.php HTTP/1.1 9-45440431/6/6C 1.561032422.60.030.03 172.105.91.149http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-45440541/8/8C 0.850215312.70.010.01 172.105.91.149http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-45440560/8/8R 0.960023770.00.080.08 144.126.213.222http/1.1 12-45440661/17/17C 0.42017902.70.030.03 144.126.213.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-45440680/1/1W 0.46109370.00.010.01 172.70.189.75http/1.1www.orderaccounting.com:80GET /tag/%E0%B9%80%E0%B8%9E%E0%B9%87%E0%B8%8D HTTP/1.0 14-45440761/3/3C 0.881116422.60.010.01 172.105.91.149http/1.1localhost:443GET /.env HTTP/1.1 15-45440841/6/6C 0.47018992.60.050.05 144.126.213.222http/1.1localhost:443GET /.git/config HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 13subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 283...298)index usage: 0%, cache usage: 0%total entries stored since starting: 13total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 104 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 21:30
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07fb135737aApache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 04:30:21 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 96 Parent Server MPM Generation: 95 Server uptime: 28 days 18 hours 29 minutes Server load: 2.00 2.00 2.00 Total accesses: 1851539 - Total Traffic: 23.8 GB - Total Duration: 2141174242 CPU Usage: u175.06 s106.59 cu32168.2 cs2235.83 - 1.4% CPU load .745 requests/sec - 10.0 kB/second - 13.5 kB/request - 1156.43 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 03668no0yes032000 13956no0yes032000 23678no0yes032000 33671no0yes131000 Sum400 1127000 ________________________________________________________________ __________________________________________W_____________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-9536680/4/14812_ 0.453638160261230.00.00193.85 159.65.58.104http/1.1localhost:443GET /server-status HTTP/1.1 0-9536680/4/15301_ 0.733610139013550.00.00198.98 45.55.193.222http/1.1localhost:443GET /about HTTP/1.1 0-9536680/3/14873_ 0.733600150319400.00.00192.75 45.55.193.222http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-9536680/6/15060_ 0.463620145875180.00.00186.03 206.81.1.88http/1.1localhost:443GET /login.action HTTP/1.1 0-9536680/5/14957_ 0.533610147711760.00.02185.48 167.172.232.142http/1.1localhost:443GET /.env HTTP/1.1 0-9536680/1/15178_ 0.733610156649270.00.00188.55 161.35.27.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-9536680/5/14854_ 0.733560145588940.00.00200.31 146.19.24.23http/1.1localhost:80GET / HTTP/1.1 0-9536680/2/15160_ 0.463580150182110.00.00187.61 161.35.27.144http/1.1 0-9536680/2/15118_ 0.563600145227000.00.00229.91 142.93.158.96http/1.1localhost:443GET /config.json HTTP/1.1 0-9536680/3/15256_ 0.466810148853490.00.00194.94 139.144.150.45http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-9536680/4/14822_ 0.713500154393480.00.01200.75 161.35.27.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-9536680/6/14835_ 0.613600147156480.00.02195.50 161.35.27.144http/1.1localhost:443GET / HTTP/1.1 0-9536680/5/14703_ 0.513580137182820.00.00185.57 161.35.27.144h2localhost:443[0/0] Software caused connection abort 0-9536680/4/14853_ 0.733530169086670.00.00186.05 45.55.193.222http/1.1localhost:443GET /config.json HTTP/1.1 0-9536680/2/15806_ 0.543550141620500.00.00187.82 161.35.27.144h2localhost:443[0/0] Software caused connection abort 0-9536680/4/14857_ 0.743510165341300.00.02182.55 45.55.193.222http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-9536680/3/14905_ 0.433580143405140.00.00206.40 165.22.74.203http/1.1localhost:443GET /config.json HTTP/1.1 0-9536680/1/14963_ 0.513510144940140.00.00189.33 178.128.151.41http/1.1 0-9536680/3/14785_ 0.473510160388410.00.00200.58 45.55.193.222h2localhost:443[0/0] Software caused connection abort 0-9536680/3/15006_ 0.5430144644830.00.00193.86 45.55.193.222h2localhost:443[0/0] Software caused connection abort 0-9536680/1/14997_ 0.243630181496150.00.00193.47 142.93.158.96h2localhost:443[0/0] Software caused connection abort 0-9536680/1/15021_ 0.433510147053900.00.00204.14 45.55.193.222h2localhost:443[0/0] Software caused connection abort 0-9536680/6/15480_ 0.5500150756280.00.03188.33 45.55.193.222h2localhost:443[0/0] Software caused connection abort 0-9536680/4/14685_ 0.8030138772070.00.00190.22 206.81.1.88http/1.1localhost:80GET / HTTP/1.1 0-9536680/2/14991_ 0.8000162205970.00.00186.95 206.81.1.88http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-9536680/4/14667_ 0.733620135981700.00.00197.06 178.128.151.41http/1.1localhost:443GET /about HTTP/1.1 0-9536680/3/15167_ 0.723630144713610.00.02194.56 178.128.151.41http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-9536680/5/14952_ 0.733540159195780.00.01213.36 178.128.151.41http/1.1localhost:443GET /config.json HTTP/1.1 0-9536680/3/14749_ 0.3436018152174880.00.00175.97 167.172.232.142http/1.1localhost:443GET /server-status HTTP/1.1 0-9536680/4/15196_ 0.723630135139180.00.00225.18 161.35.27.144http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-9536680/5/14688_ 0.723630155579090.00.01199.17 45.55.193.222http/1.1localhost:443GET / HTTP/1.1 0-9536680/6/14951_ 0.733620145815250.00.02185.22 161.35.27.144http/1.1localhost:443GET /.git/config HTTP/1.1 1-9539560/6/15737_ 0.373577138460120.00.03219.31 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 1-9539560/3/15816_ 0.373570136849590.00.00198.68 159.203.94.228http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-9539560/5/15607_ 0.433590174090270.00.00199.96 178.128.151.41http/1.1 1-9539560/4/15322_ 0.613570150896120.00.00189.47 178.128.151.41http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-9539560/6/15282_ 0.603590146566340.00.02197.95 45.55.193.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-9539560/3/15658_ 0.603580134151800.00.00198.79 178.128.151.41http/1.1localhost:443GET /_all_dbs HTTP/1.1 1-9539560/4/15355_ 0.603580172789940.00.00188.15 178.128.151.41http/1.1localhost:443GET /login.action HTTP/1.1 1-9539560/6/15191_ 0.583578165483480.00.02189.09 161.35.27.144http/1.1localhost:443GET /server-status HTTP/1.1 1-9539560/1/15336_ 0.063570127395500.00.00211.76 178.128.151.41h2localhost:443[0/0] Software caused connection abort 1-9539560/4/14960_ 0.613560152319140.00.00188.75 178.128.151.41http/1.1localhost:443GET /.env HTTP/1.1 1-9539560/4/15045_ 0.583560148013870.00.01204.87 161.35.27.144http/1.1localhost:443GET /login.action HTTP/1.1 1-9539560/3/15509_ 0.413560159268170.00.00208.73 45.55.193.222h2localhost:443[0/0] Software caused connection abort 1-9539560/4/15333_ 0.563598159504120.00.01200.57 178.128.151.41http/1.1localhost:443GET /server-status HTTP/1.1 1-9539560/5/15194_ 0.613540137016430.00.01183.04 45.55.193.222http/1.1localhost:443GET /.git/config HTTP/1.1
Found on 2024-02-02 21:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07f43fd3b80Apache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 19:21:18 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 9 hours 19 minutes 57 seconds Server load: 3.17 3.03 2.89 Total accesses: 949181 - Total Traffic: 12.7 GB - Total Duration: 1148503891 CPU Usage: u149.47 s14.45 cu16091.2 cs845.71 - 8.29% CPU load 4.6 requests/sec - 64.4 kB/second - 14.0 kB/request - 1209.99 ms/request 7 requests currently being processed, 89 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 013357no0yes230000 116903no4yes428000 221656no1yes131001 Sum305 789001 ___W___________W_______________________W___________R_________WR_ _____R__________________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7133570/147/7638_ 88.361184799305010.01.92109.44 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /tainxge-12512vitems/etidm55gnv.html HTTP/1.1 0-7133570/129/8126_ 88.361084077227810.01.47110.78 52.70.240.171http/1.1www.chonlateeboi.com:443GET /20774zypyitems/etidm11a.html HTTP/1.1 0-7133570/153/7705_ 88.041384584051710.01.66108.46 52.70.240.171http/1.1www.chonlateeboi.com:443GET /29415gzgqitems/etidm85jq.htm HTTP/1.1 0-7133571/163/8140W 88.020080981580.02.08102.14 52.70.240.171http/1.1www.chonlateeboi.com:443GET /45064sstyetidm94gsv HTTP/1.1 0-7133570/149/7969_ 88.462081183330.01.6799.05 64.227.126.135http/1.1localhost:80GET / HTTP/1.1 0-7133570/166/8111_ 88.44661593930910.01.89105.81 217.182.175.38http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%95%E0%B8%A3%E0%B8%B2%E0%B8%A2 0-7133570/130/7881_ 87.68534378043110.01.39117.90 66.249.77.98http/1.1www.twinbuilt.co.th:443GET /?e=widecombe-aromatic-loose-pipe-tobacco-mcgahey-the-tobac 0-7133570/143/7887_ 87.93584386976920.01.58101.58 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qkfnxge-32997sitems/etidm44.htm HTTP/1.1 0-7133570/174/8115_ 87.5612183480877850.02.09152.61 198.244.167.101http/1.1www.summer-techthai.com:443POST /wp-login.php HTTP/1.1 0-7133570/158/7986_ 86.87584283708930.01.82100.07 157.245.33.178h2www.tkadvicesystem.com:443[0/0] Software caused connection abort 0-7133570/169/7886_ 87.591161891943790.02.02122.05 217.182.175.38http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%95%E0%B8%A3%E0%B8%B2%E0%B8%A2 0-7133570/146/7499_ 88.25484289933360.01.5995.99 3.224.220.101http/1.1www.chonlateeboi.com:443GET /29364gzgqetidm4.htm HTTP/1.1 0-7133570/144/7585_ 88.29084468763980.01.6499.91 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ordnxge-34971qitems/etidm.htm HTTP/1.1 0-7133570/160/7797_ 86.731211075103201290.01.72105.44 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /mkbnxge-34969oitems/eti HTTP/1.1 0-7133570/155/8464_ 88.301284677186630.01.86105.44 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /jtynxge-12502letidm86w HTTP/1.1 0-7133571/137/7622W 88.280098996740.01.6997.00 82.221.136.1http/1.1www.chonlateeseal.com:443POST /xmlrpc.php HTTP/1.1 0-7133570/152/7798_ 88.121035080240510.01.6298.83 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=riceboysleeps-facebook-3-ii-3GggWUn HTTP/1.1 0-7133570/143/7822_ 87.821290178551810.01.67103.18 185.191.171.11http/1.1www.chonlateefood.com:443GET /items/mrb50426pdrbtidm.html HTTP/1.1 0-7133570/143/7871_ 87.73284397420630.01.4197.61 52.70.240.171http/1.1www.chonlateeboi.com:443GET /20632jbwjetidm33ojd HTTP/1.1 0-7133570/141/7951_ 87.8013180072000.01.45104.68 217.182.175.38http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 0-7133570/204/7995_ 88.445832120321830.02.31109.26 3.224.220.101http/1.1www.chonlateeboi.com:443GET /44671zvqcitems/etidm14dc HTTP/1.1 0-7133570/156/7617_ 88.465384091530.01.78101.00 217.182.175.38http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%B2%E0%B8%87 0-7133570/153/8363_ 88.3312171991524740.01.77108.53 198.71.240.28http/1.1www.thaidaoherb.com:443POST /xmlrpc.php HTTP/1.1 0-7133570/151/7751_ 87.6913213376327580.01.73107.01 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /jtynxge-12502letidm86w HTTP/1.1 0-7133570/150/7789_ 88.19534299723550.01.4997.51 66.249.77.98http/1.1www.twinbuilt.co.th:443GET /?e=bosch-engine-oil-filter-72271ws-the-home-depot-3-ii-982 0-7133570/148/7904_ 88.091260068488750.01.8199.80 217.182.175.38http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%95%E0%B8%A3%E0%B8%B2%E0%B8%A2 0-7133570/171/7795_ 88.301386084373530.02.49108.79 185.191.171.2http/1.1www.chonlateeboi.com:443GET /47586cafjetid.htm HTTP/1.1 0-7133570/158/7856_ 88.18676394170390.01.67129.30 217.182.175.38http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A3 0-7133570/183/7687_ 88.490082192850.01.9495.31 64.227.126.135http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-7133570/148/7868_ 88.44584187300810.01.61133.56 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /baqnxge-12572ditems/etidm6.html HTTP/1.1 0-7133570/136/7551_ 88.0513102490723570.01.51107.41 203.170.192.183http/1.1www.12gobiz.com:443GET /%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3%E0% 0-7133570/147/7901_ 88.44634081690230.01.85100.03 66.249.77.98http/1.1www.twinbuilt.co.th:443GET /?e=lord-of-the-rings-the-fellowship-of-the-ring-6-ii-Lo8jB 1-7169030/74/7857_ 47.75359489761870.00.86128.40 31.184.236.41http/1.1 1-7169030/79/7666_ 49.03094284569600.01.0896.11 217.182.175.38http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A3 1-7169030/79/7757_ 50.203853111450770.00.84100.86 31.184.236.41http/1.1 1-7169030/82/7374_ 49.53183990158610.00.9394.98 52.70.240.171http/1.1www.chonlateeboi.com:443GET /30835sstyitems/etidm HTTP/1.1 1-7169030/84/7463_ 50.68184496435590.00.93108.05 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2394rvsoetid.htm HTTP/1.1 1-7169030/90/7635_ 50.38484785492630.01.09101.42 31.184.236.41http/1.1 1-7169030/77/7680_ 50.63410103117570.00.8998.54 203.170.192.183http/1.1www.summer-techthai.com:443POST /wp-cron.php?doing_wp_cron=1704630074.29351305961608886718 1-7169031/89/7702W 50.300096320320.01.05102.64 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /baqnxge-38728detidm92ond HTTP/1.1 1-7169030/93/7739_ 50.59984779668660.01.1197.48 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /yknnxge-12569aeti.html HTTP/1.1 1-7169030/85/7507_ 50.25256594635870.01.02102.51 66.249.77.98http/1.1www.twinbuilt.co.th:443GET /?e=greggo-lace-up-shoes-patinated-calf-leather-black-chris 1-7169030/76/7282_ 49.7910991
Found on 2024-01-07 12:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07f5a6d63c7Apache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 10:58:56 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 4 Parent Server MPM Generation: 3 Server uptime: 1 day 57 minutes 35 seconds Server load: 2.67 2.83 2.78 Total accesses: 437682 - Total Traffic: 6.0 GB - Total Duration: 474286563 CPU Usage: u401.31 s23.34 cu7122.88 cs375.23 - 8.82% CPU load 4.87 requests/sec - 69.9 kB/second - 14.3 kB/request - 1083.63 ms/request 11 requests currently being processed, 85 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 027257no0yes032000 122697no3yes527000 330342no6yes626000 Sum309 1185000 ________________________________W_W_____________W______W_R______ ................................__W____WW____W____________WW____ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-3272570/384/3936_ 179.282252355055810.09.7361.35 66.249.69.228http/1.1www.chonlateenextbiz.com:443GET /g2303251.shtml HTTP/1.1 0-3272570/273/4164_ 179.30384037730920.03.6054.65 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /mrbarie-25895oetidm80ze.html HTTP/1.1 0-3272570/355/3913_ 179.46184151611240.03.3962.60 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?gecvrsm-173777pitems/etid.html HTTP/1.1 0-3272570/346/4155_ 179.488040245140.04.3352.72 203.170.192.183http/1.1www.chonlateefbc.com:443POST /wp-cron.php?doing_wp_cron=1704513528.08799600601196289062 0-3272570/355/4009_ 179.362104835776280.04.1450.35 47.128.20.174h2www.chonlateenextbiz.com:443GET /pc1fih/craigslist-dc.html HTTP/2.0 0-3272570/388/4260_ 179.67384247205330.07.3856.59 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?eteggdh-105785retidm28r.htm HTTP/1.1 0-3272570/354/4035_ 179.57485036805560.03.6964.90 52.70.240.171http/1.1www.chonlateeboi.com:443GET /2173sstyitems/etidm80 HTTP/1.1 0-3272570/335/4043_ 178.858034007640.04.5852.56 17.246.15.113http/1.1www.focusfilmthailand.com:443GET /wp-content/uploads/siteorigin-widgets/sow-image-default-05 0-3272570/310/4084_ 179.48784436555440.04.0694.71 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /ordarie-20463qitems/etidm58be.htm HTTP/1.1 0-3272570/318/4025_ 179.564104831934490.04.1952.16 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?weshsbr-65763fetidm7.htm HTTP/1.1 0-3272570/285/3883_ 179.740037478250.03.9748.97 206.81.1.88http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-3272570/350/3806_ 179.63484449184710.04.0348.31 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /pvearie-39158ritems/etidm57c.html HTTP/1.1 0-3272570/322/3861_ 179.73285032976250.04.0551.93 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /grvarie-20507ietidm.html HTTP/1.1 0-3272570/290/4089_ 179.48784349078140.03.4955.85 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ojoecaw-177347betidm70bwb.htm HTTP/1.1 0-3272570/451/4320_ 179.151738235570.04.4056.05 203.170.192.183http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST /wp-cron.php?doing_wp_cron=1704513520.73611807823181152343 0-3272570/311/3794_ 179.672054483960.03.7048.64 206.81.1.88http/1.1localhost:80GET / HTTP/1.1 0-3272570/364/3988_ 178.35284338341620.04.5951.15 207.46.13.107h2www.thaidaoherb.com:443[0/0] init 0-3272570/371/4233_ 178.88284433591500.03.6355.18 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /xnmarie-24320zitems/etidm43kaz.html HTTP/1.1 0-3272570/336/4062_ 179.74184631594180.03.8752.31 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?pnpecaw-300094cetidm.html HTTP/1.1 0-3272570/349/3967_ 179.672105337193480.04.6056.69 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /hnwarie-39644jitems/etidm8.html HTTP/1.1 0-3272570/316/3937_ 179.74184446373820.03.9058.99 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ueyvrsm-17505litems/etid.html HTTP/1.1 0-3272570/285/3892_ 178.87484552485750.02.8054.00 3.224.220.101http/1.1www.chonlateeboi.com:443GET /42337unwsitems/eti HTTP/1.1 0-3272570/289/4337_ 179.731037932970.03.6455.75 206.81.1.88http/1.1localhost:80GET /about HTTP/1.1 0-3272570/326/3941_ 179.226331534910.03.9250.61 17.246.19.132http/1.1www.focusfilmthailand.com:443GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=2.6 HTTP 0-3272570/309/3885_ 178.981133453420.03.4249.33 17.246.23.213http/1.1www.focusfilmthailand.com:443GET /wp-content/uploads/maxmegamenu/style.css?ver=b36ada HTTP/1 0-3272570/428/4040_ 179.72284532494580.04.9351.83 23.22.35.162http/1.1www.chonlateeboi.com:443GET /25753yxnoitems/eti HTTP/1.1 0-3272570/292/3981_ 178.17295235492660.03.6860.79 52.167.144.214h2www.chonlateefbc.com:443[2/2] done: stream 3, GET /sitemap1336.xml 0-3272570/282/3953_ 179.09263641145420.03.1781.19 47.128.20.174h2www.chonlateenextbiz.com:443[1/1] done: stream 1, GET /pc1fih/craigslist-dc.html 0-3272570/271/3811_ 179.072136094510.03.9449.03 66.249.69.227http/1.1www.chonlateenextbiz.com:443GET /g2140815.shtml HTTP/1.1 0-3272570/302/4169_ 179.227137182050.04.0288.82 17.246.15.5http/1.1www.focusfilmthailand.com:443GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css 0-3272570/322/3911_ 177.94491134608940.04.2858.33 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?rfqsvcw-164376detidm6.htm HTTP/1.1 0-3272570/289/4274_ 179.72284434651200.03.8253.52 66.249.69.228http/1.1www.chonlateenextbiz.com:443GET /g2303251.shtml HTTP/1.1 1-3226971/89/3460W 55.590037247930.01.1345.46 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?afehlzs-52403retidm3 HTTP/1.1 1-3226970/103/3321_ 56.348105733047370.01.2342.45 85.208.96.205http/1.1www.chonlateeboi.com:443GET /44716oswzetidm5 HTTP/1.1 1-3226971/68/3237W 54.970058057460.00.9143.57 206.81.1.88http/1.1localhost:80GET /server-status HTTP/1.1 1-3226970/98/3185_ 56.424105340946840.01.1041.38 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?seuvrsm-175869hetidm9.htm HTTP/1.1 1-3226970/93/3242_ 55.71483951031760.01.2445.75 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?ldlqgmy-322060yeti.html HTTP/1.1 1-3226970/102/3427_ 56.46284126330590.01.3744.80 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?ojoecaw-72879betidm6 HTTP/1.1 1-3226970/98/3341_ 55.26280626857050.01.2141.52 85.208.96.205http/1.1www.chonlateefood.com:443GET /items/hxw46547oeuxtidm4.html HTTP/1.1 1-3226970/87/3413_ 55.236042882240.01.0946.00 203.170.192.183http/1.1www.chonlateeadmin.com:443POST /wp-cron.php?doing_wp_cron=1704513495.65148401260375976562 1-3226970/95/3415_ 56.348104127441210.01.3144.94 66.249.71.7http/1.1www.chonlateenextbiz.com:443GET /g2408932.shtml HTTP/1.1 1-3226970/98/3284_ 56.23284433293570.01.8742.95 23.22.35.162http/1.1www.chonlateeboi.com:443GET /7105tquxitems/eti HTTP/1.1
Found on 2024-01-06 03:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07f6e566efeApache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:12 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 31 minutes 53 seconds Server load: 2.15 2.07 1.75 Total accesses: 1082451 - Total Traffic: 11.9 GB - Total Duration: 678432465 CPU Usage: u25.78 s13.68 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.756 ms/request 13 requests currently being processed, 115 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no9yes428015 315011no3yes230002 415163no2yes329000 615166no0yes428000 Sum4014 13115017 ................................RW____________R________________L ................................________________W______________R __W_____R______________________R................................ RR_R_________________W__________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0046062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0046259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0046130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0046057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.004689958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.004687062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0046056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0046157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.004686455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0046059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.004687056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0046055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0046315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00461662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0046161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0046107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0046062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.004686960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0046058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00461256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0046498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0046160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0046074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00461192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0046058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0046083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0046122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00461163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0046859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0046261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0046157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0046059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-13150120/0/9126R 0.00286454194400.00.00142.47 31.184.236.42http/1.1 1-13150121/3/8968W 1.190055124980.00.02107.49 165.232.76.155http/1.1localhost:80GET /server-status HTTP/1.1 1-13150120/3/9102_ 1.192055516790.00.02131.73 139.59.230.191http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-13150120/3/9376_ 1.192057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150120/1/9354_ 0.55197656503180.00.01111.86 52.167.144.174h2www.chonlateeaa.com:443[2/2] done: stream 3, GET /?s=22-best-beach-towels-that-aren-t- 1-13150120/1/9080_ 1.192056147260.00.0099.02 139.59.230.191http/1.1www.tspaccount.net:80GET /telescope/requests HTTP/1.1 1-13150120/1/9263_ 0.77287056057710.00.01109.58 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?zqoggdh-209754betid.htm HTTP/1.1 1-13150120/3/9351_ 1.251056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150120/1/9213_ 0.84191155728780.00.0190.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?82724himsitems/etidm2.html HTTP/1.1 1-13150120/2/9161_ 1.092073740340.00.01108.70 52.167.144.174h2www.chonlateeaa.com:443GET /?s=433mhz-lora-sx1278-long-range-rf-transceiver-wireless-m 1-13150120/3/9389_ 1.202055724450.00.0195.48 52.167.144.235h2www.chonlateeaa.com:443GET /?s=bo
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6ca7421b07Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 05:25:45 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 1 hour 23 minutes 33 seconds Server load: 0.18 0.25 0.32 Total accesses: 3849 - Total Traffic: 26.0 MB - Total Duration: 5424915 CPU Usage: u3412.38 s6003.59 cu56632700 cs13845800 - 1410000% CPU load .768 requests/sec - 5.3 kB/second - 6.9 kB/request - 1409.43 ms/request 3 requests currently being processed, 7 idle workers ____W_W...W__..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079264610/83/411_ 34.76015283190.00.492.82 128.199.62.55http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-2079265750/69/387_ 38.10015642160.00.472.52 128.199.62.55http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-2079269260/40/353_ 16.78115152140.00.212.62 128.199.62.55http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 3-2079270020/36/345_ 16.27114884910.00.221.98 128.199.62.55http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 4-2079264670/73/321W 35.30204259460.00.411.98 178.62.3.65http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 5-2079270510/33/307_ 14.88214108990.00.252.64 128.199.62.55http/1.1localhost:80GET / HTTP/1.0 6-2079270610/30/309W 17.79004604390.00.242.14 128.199.62.55http/1.1localhost:80GET /server-status HTTP/1.0 7-2079-0/0/284. 0.0079513880800.00.001.77 172.71.102.83http/1.1www.farmoflove.com:80POST /xmlrpc.php HTTP/1.0 8-2079-0/0/245. 0.0087813330390.00.001.51 162.142.125.14http/1.1localhost:443GET / HTTP/1.1 9-2079-0/0/258. 0.0075013090100.00.002.32 162.158.138.19http/1.1www.khlangkaew.com:443POST /xmlrpc.php HTTP/1.1 10-2079264060/78/182W 36.12202736920.00.441.03 161.35.190.56http/1.1www.tspaccount.net:443GET / HTTP/1.1 11-2079264070/75/174_ 33.960193091830.00.361.02 172.70.142.33http/1.1www.orderaccounting.com:80GET /category/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0% 12-2079264690/76/173_ 33.63112630970.00.491.10 128.199.62.55http/1.1localhost:80GET /about HTTP/1.0 13-2079-0/0/100. 0.0028005171552810.00.000.60 198.41.242.185http/1.1www.99accountant.com:80GET /wp-admin/user/wp-login.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 2subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 296 seconds, (range: 296...297)index usage: 0%, cache usage: 0%total entries stored since starting: 52total entries replaced since starting: 0total entries expired since starting: 50total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1215 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-23 22:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6ce6178d85Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 06:43:40 +07 Restart Time: Tuesday, 12-Dec-2023 04:02:13 +07 Parent Server Config. Generation: 2043 Parent Server MPM Generation: 2042 Server uptime: 2 hours 41 minutes 27 seconds Server load: 0.28 0.56 0.58 Total accesses: 6607 - Total Traffic: 69.9 MB - Total Duration: 11610151 CPU Usage: u3525.75 s5955.99 cu56308000 cs13769600 - 724000% CPU load .682 requests/sec - 7.4 kB/second - 10.8 kB/request - 1757.25 ms/request 6 requests currently being processed, 5 idle workers W_W_R__RW_W....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-204228370/44/638W 22.071010821580.011.0615.47 178.128.151.41http/1.1www.yuttanaluckchonlatee.in.th:GET / HTTP/1.1 1-204228630/42/618_ 54.630010367240.00.304.18 165.232.76.155http/1.1 2-204222280/78/575W 71.53009850000.00.624.10 167.99.182.39http/1.1localhost:80GET /server-status HTTP/1.0 3-204235900/3/594_ 1.400010332240.00.014.16 159.65.138.217http/1.1 4-204236110/0/567R 0.000010258740.00.003.89 159.65.138.217http/1.1www.kncintergroup.com:443 5-204223830/66/597_ 71.170110341020.00.483.99 159.65.138.217http/1.1 6-204223850/65/422_ 97.640318483720.00.593.19 159.65.138.217http/1.1 7-204229800/33/504R 37.20018646310.00.2515.15 165.232.76.155http/1.1www.tspaccount.net:443 8-204230020/34/461W 18.76107493710.00.363.81 172.68.234.184http/1.1www.lawbizeasy.com:80POST /wp-cron.php?doing_wp_cron=1702338218.94254302978515625000 9-204230120/33/361_ 42.15006987080.00.272.64 159.65.138.217http/1.1 10-204230180/30/376W 33.23407072290.00.172.68 172.71.22.226http/1.1www.lawbizeasy.com:80POST /wp-login.php HTTP/1.0 11-2042-0/0/208. 0.00546113912840.00.001.39 172.71.22.187http/1.1www.chorsiam.com:80GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layo 12-2042-0/0/56. 0.0023550778200.00.000.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-2042-0/0/5. 0.004397093890.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-2042-0/0/6. 0.004395083390.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2042-0/0/6. 0.004396085430.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2042-0/0/96. 0.00287611724390.00.000.74 159.89.83.196http/1.1localhost:443GET /config.json HTTP/1.1 17-2042-0/0/6. 0.0043800120140.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2042-0/0/4. 0.004389040280.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2042-0/0/96. 0.0028868801688110.00.001.21 172.70.82.81http/1.1www.singkansard.com:443GET /wp-login.php HTTP/1.1 20-2042-0/0/4. 0.004388042290.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2042-0/0/94. 0.0028847661831770.00.000.63 172.70.82.80http/1.1www.singkansard.com:443POST /wp-login.php HTTP/1.1 22-2042-0/0/4. 0.004384097710.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2042-0/0/2. 0.004410020800.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2042-0/0/93. 0.0028905781683360.00.000.78 172.70.114.176http/1.1www.mgacccount.com:80POST /wp-login.php HTTP/1.0 25-2042-0/0/5. 0.004379093760.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-2042-0/0/1. 0.004426000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-2042-0/0/5. 0.004383068830.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-2042-0/0/1. 0.004425010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-2042-0/0/1. 0.004424010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-2042-0/0/1. 0.004423010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-2042-0/0/1. 0.004422010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-2042-0/0/1. 0.004421010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-2042-0/0/1. 0.004420010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-2042-0/0/1. 0.004419010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-2042-0/0/96. 0.002938281559790.00.000.67 108.162.241.84http/1.1www.chonlateecoffee.com:80GET /wp-content/cache/wpfc-minified/dsh1e8lw/apjo.css HTTP/1.0 36-2042-0/0/1. 0.004418010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-2042-0/0/93. 0.00295127651452420.00.000.58 172.71.130.236http/1.1www.business.co.th:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 38-2042-0/0/5. 0.004386069930.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-2042-0/0/1. 0.004416110.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 294 seconds, (range: 291...297)index usage: 0%, cache usage: 0%total entries stored since starting: 89total entries replaced since starting: 0total entries expired since starting: 85total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3256 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 23:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6ca39712a6Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 05:39:11 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 1 hour 37 minutes Server load: 0.69 0.83 0.82 Total accesses: 7290 - Total Traffic: 68.8 MB - Total Duration: 9096115 CPU Usage: u3287.78 s5871.51 cu55535600 cs13589800 - 1190000% CPU load 1.25 requests/sec - 12.1 kB/second - 9.7 kB/request - 1247.75 ms/request 3 requests currently being processed, 6 idle workers _..W__.R___.W..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965219260/87/717_ 54.44017238760490.01.886.33 143.42.118.5http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 1-1965-0/0/644. 0.0015818424760.00.0016.04 159.65.58.104http/1.1localhost:443GET /.git/config HTTP/1.1 2-1965-0/0/634. 0.00186168729110.00.006.38 162.158.110.139http/1.1www.makeregist.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%A5 3-1965223360/48/614W 29.44007556310.00.654.91 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 4-1965223520/46/554_ 32.7606976220550.00.534.60 172.71.182.254http/1.1www.makeregist.com:80GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%AB 5-1965228240/13/627_ 7.53007202710.00.065.07 143.42.118.5http/1.1 6-1965-0/0/464. 0.004468284942130.00.002.86 172.69.22.182http/1.1www.chonlateeauto.com:443POST //wp-login.php HTTP/1.1 7-1965219000/93/523R 58.85216084000.00.613.04 64.227.126.135http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 8-1965219410/87/554_ 52.87017039760.00.714.35 64.227.126.135http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-1965220500/73/425_ 46.61114703380.00.512.68 64.227.126.135http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 10-1965221220/65/345_ 41.82005510840.00.513.03 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1965-0/0/272. 0.004745553637600.00.002.12 172.68.234.133http/1.1www.yuritrading.com:80POST /wp-cron.php?doing_wp_cron=1700173876.46055889129638671875 12-1965221240/70/294W 42.79004411080.00.532.40 142.93.158.96http/1.1www.tspaccount.net:443GET / HTTP/1.1 13-1965-0/0/201. 0.0054402431330.00.001.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1965-0/0/142. 0.00282201789420.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1965-0/0/5. 0.003347020290.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1965-0/0/186. 0.00269912337840.00.001.47 161.35.155.246http/1.1localhost:443GET /config.json HTTP/1.1 17-1965-0/0/89. 0.00270011159450.00.000.65 178.62.3.65http/1.1localhost:443GET /.DS_Store HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 213 seconds, (range: 126...298)index usage: 0%, cache usage: 0%total entries stored since starting: 440total entries replaced since starting: 0total entries expired since starting: 436total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3445 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 22:37 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c747d773aApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 10:57:26 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 6 hours 55 minutes 14 seconds Server load: 0.22 0.42 0.38 Total accesses: 38709 - Total Traffic: 620.4 MB - Total Duration: 75432906 CPU Usage: u3059.78 s5771.83 cu55150000 cs13501700 - 276000% CPU load 1.55 requests/sec - 25.5 kB/second - 16.4 kB/request - 1948.72 ms/request 4 requests currently being processed, 8 idle workers W_W_____W_...W_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932303050/49/3254W 13.70109062920780.00.6739.78 172.69.59.87http/1.1www.siamerp.com:443GET /wp-content/uploads/2022/01/video.mp4 HTTP/1.1 1-1932304180/52/3192_ 20.500162701400.00.4739.83 139.144.150.23http/1.1 2-1932301680/93/3207W 21.081062517420.01.0042.31 161.35.190.56http/1.1www.spamechanicssystem.com:443GET / HTTP/1.1 3-1932305370/42/3120_ 15.790061839010.00.3848.31 128.199.61.251http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1932305810/36/3141_ 10.430162115330.00.5552.08 139.59.182.142http/1.1 5-1932306600/23/2892_ 9.300454484210.00.1435.97 139.144.150.23http/1.1 6-1932306940/16/2826_ 5.1501057140480.00.1134.41 139.59.182.142http/1.1 7-1932303120/61/2789_ 18.900135558364570.00.6683.57 139.59.182.142http/1.1 8-1932307330/10/2621W 2.340053338600.00.0734.11 128.199.61.251http/1.1localhost:80GET /server-status HTTP/1.0 9-1932307610/6/2404_ 1.260145707590.00.0429.94 128.199.61.251http/1.1localhost:80GET /v2/_catalog HTTP/1.0 10-1932-0/0/2135. 0.00261041205490.00.0037.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1932-0/0/1673. 0.00485033324170.00.0025.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1932-0/0/1523. 0.00476028097900.00.0030.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1932303330/50/1343W 15.75107026251480.00.3956.95 172.70.131.80http/1.1www.siamerp.com:443GET /wp-content/uploads/2022/01/video.mp4 HTTP/1.1 14-1932303430/61/774_ 15.050114816230.00.638.96 139.144.150.23http/1.1 15-1932-0/0/396. 0.001897025849970.00.003.97 172.69.58.249http/1.1www.accgoing.com:80GET /wp-includes/Requests/Text/admin.php HTTP/1.0 16-1932-0/0/299. 0.00504104808140.00.002.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/163. 0.00505402138780.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/257. 0.00436104374050.00.002.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/163. 0.00501702780690.00.002.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/262. 0.00506304486550.00.003.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/31. 0.0050400550010.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/175. 0.00436202692490.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/3. 0.005068028600.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1932-0/0/3. 0.005052060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/40. 0.00461001125780.00.001.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/17. 0.0048530560250.00.000.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/2. 0.005061020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.0050620140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.0050510108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 5subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 169 seconds, (range: 38...297)index usage: 0%, cache usage: 0%total entries stored since starting: 264total entries replaced since starting: 0total entries expired since starting: 259total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 23294 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 03:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cf44eea27Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:33 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 46 seconds Server load: 6.51 7.07 6.76 Total accesses: 586 - Total Traffic: 16.6 MB - Total Duration: 1067859 CPU Usage: u3017.73 s5666.8 cu54400400 cs13297400 - 1.47e+8% CPU load 12.7 requests/sec - 369.0 kB/second - 29.0 kB/request - 1822.29 ms/request 29 requests currently being processed, 16 idle workers R__RRR_WWWWC_WRWWW__W___WWWW_RW_RW__W_WRW_R_W..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-190214680/7/11R 1.7231042204670.00.080.09 65.154.226.170http/1.1www.tspaccount.net:443 1-190211230/21/21_ 5.8500349010.00.190.19 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reune.php?igpevst115539citems/etidm HTTP/1.1 2-190211470/14/14_ 6.1301423790.00.270.27 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.0 3-190211560/23/23R 9.180418430890.00.120.12 51.81.245.138http/1.1www.tspaccount.net:443GET / HTTP/1.1 4-190211620/22/22R 8.7400391720.00.180.18 205.169.39.155http/1.1www.tafa.or.th:443 5-190211740/19/19R 7.7810416330.00.290.29 198.44.140.139http/1.1 6-190211800/30/30_ 5.1801251410.00.280.28 159.203.94.228http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-190214830/6/21W 1.5620237050.00.040.15 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-review-pricing-and-specs-mm-Qkp 8-190211880/16/16W 4.0420291610.00.540.54 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=2021-chevrolet-corvette-stingray-vs-2022-chevy-corvette 9-190211940/17/17W 7.0900418220.00.570.57 159.223.108.26http/1.1localhost:80GET /server-status HTTP/1.0 10-190212000/21/21W 5.9320335660.00.160.16 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0040855488.html HTTP/1.1 11-190212131/19/19C 7.4000369430.20.270.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-190212190/17/17_ 5.9500372120.00.160.16 164.90.222.93http/1.1localhost:443GET / HTTP/1.1 13-190214920/7/10W 2.4300113410.00.080.09 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=chevrolet-corvette-stingray-2lt-coupe-2022-price-in-rus 14-190212310/20/20R 5.3100339140.00.170.17 51.81.245.138http/1.1localhost:443GET /favicon.ico HTTP/1.1 15-190214980/4/11W 4.0100265320.00.050.14 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0039641984.html HTTP/1.1 16-190212430/13/13W 5.8200473900.02.262.26 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?ajpsvcw-142311citems/etidm52nw.htm HTTP/1.1 17-190212490/25/25W 5.4820207390.00.220.22 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-bg.png HTTP/1.1 18-190212510/17/17_ 9.6102335476920.00.190.19 167.172.20.95http/1.1www.tspaccount.net:443GET / HTTP/1.1 19-190212670/24/24_ 4.8300239650.00.280.28 104.131.1.32http/1.1 20-190212730/12/12W 3.2220387610.02.822.82 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-Recovered.png HTTP/1.1 21-190212790/15/15_ 8.640534422190.00.320.32 185.191.171.9http/1.1www.mkandptfoods.com:443GET /wzy.php?m69117615844.html HTTP/1.1 22-190212850/20/20_ 6.4601303480.00.260.26 159.223.108.26http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 23-190215310/5/7_ 0.06091921710.00.040.05 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?lpasvcw-147990netidm33y.htm HTTP/1.1 24-190212920/18/18W 3.8020305110.00.580.58 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 25-190212980/17/17W 5.6830356980.00.440.44 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=open-box]-gemoro-dual-ultrasonic-jewelry-cleaner-steame 26-190213040/15/15W 3.7600340440.01.691.69 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 27-190215400/2/5W 0.0120360.00.000.02 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=gemoro-3qth-next-gen-ultrasonic-cleaner-quarts-contenti 28-190213110/21/21_ 6.8001699337210.00.570.57 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa2-1024x576.png HTTP/1.1 29-190213140/17/17R 2.9701680394220.02.332.33 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-1-1024x576.png HTTP/1.1 30-190215420/3/11W 0.0120209790.00.000.22 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 31-190213260/17/17_ 7.4604444369740.00.220.22 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gemoro-sparklespa-pro-ultrasonic-cleaner-black-or-grey- 32-190215560/1/9R 0.0102162070.00.000.14 51.81.245.138http/1.1www.tspaccount.net:443 33-190215580/0/2W 0.001070530.00.000.03 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0045204004.html HTTP/1.1 34-190213480/16/16_ 8.4700370650.00.240.24 198.199.121.22http/1.1www.tspaccount.net:80GET /_all_dbs HTTP/1.0 35-190215640/3/3_ 0.03092118460.00.020.02 23.22.35.162http/1.1www.chonlateeboi.com:443GET /21118emxgetidm87g HTTP/1.1 36-190215660/1/1W 0.001030.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg1.png HTTP/1.1 37-190215850/2/2_ 0.000010.00.000.00 138.197.88.136http/1.1www.tspaccount.net:80GET /_all_dbs HTTP/1.0 38-190215910/0/0W 0.000000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-1024x576.png HTTP/1.1 39-190215970/1/1R 0.000120.00.000.00 52.70.240.171http/1.1 40-190216030/0/0W 0.001000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg2.png HTTP/1.1 41-190216090/1/1_ 0.000240.00.000.00 161.35.190.56http/1.1 42-190216150/2/2R 0.000010.00.000.00 138.197.88.136http/1.1www.tspaccount.net:80GET /login.action HTTP/1.0 43-190216190/1/1_ 0.000000.00.000.00 178.128.151.41http/1.1 44-190216270/2/2W 0.000080.00.000.00 159.203.94.228http/1.1localhost:80GET /server-status HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 235subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 258 seconds, (range: 252...273)index usage: 8%, cache usage: 10%total entries stored since starting: 235total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 105 misstotal removes si
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c644ea8d8Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 12:55:41 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 8 hours 53 minutes 30 seconds Server load: 2.92 2.79 1.96 Total accesses: 55261 - Total Traffic: 981.0 MB - Total Duration: 77499609 CPU Usage: u3088.41 s5243.75 cu51109700 cs12503800 - 199000% CPU load 1.73 requests/sec - 31.4 kB/second - 18.2 kB/request - 1402.43 ms/request 11 requests currently being processed, 2 idle workers __WW.WWWWWRW...W.C................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762124700/0/4444_ 0.000120157726660.00.0083.63 51.79.24.51http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 1-1762123860/20/4294_ 9.170060461930.00.4285.25 164.92.192.25http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-1762120120/84/4441W 81.160060812750.01.8563.47 172.68.234.203http/1.1www.99accountant.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 3-1762123350/33/4123W 19.061053506110.00.6059.76 172.70.90.123http/1.1www.99accountant.com:80GET /wp-login.php HTTP/1.0 4-1762-0/0/4162. 0.0017154716170.00.0076.44 110.168.24.194http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/css/slider/slider.css 5-1762123950/17/3987W 9.660061485880.00.3857.39 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.0 6-1762121390/52/3805W 70.120055022480.00.4880.08 172.68.234.144http/1.1www.99accountant.com:80POST /wp-cron.php?doing_wp_cron=1695448540.55060195922851562500 7-1762122250/51/3507W 32.970155550549430.00.5751.73 172.69.65.197http/1.1www.chonlateefarm.com:443GET /%E0%B8%8A%E0%B8%A5%E0%B8%98%E0%B8%B5%E0%B8%9F%E0%B8%B2%E0% 8-1762119260/86/3489W 91.691048203590.05.3563.32 51.79.24.51http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 9-1762120710/70/3100W 40.520045635800.05.3345.39 172.70.135.185http/1.1www.chonlateeit.com:443GET /2022/05/05/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B9%88%E 10-1762120770/69/3000R 81.45784241175900.01.1844.30 39.101.185.186http/1.1www.thaiquickservice.net:443 11-1762124010/17/2888W 7.770042591600.00.2563.21 172.70.42.224http/1.1www.proplustech.co.th:443GET /robots.txt HTTP/1.1 12-1762-0/0/2172. 0.0082028817260.00.0044.77 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/1873. 0.00105027747080.00.0030.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/1642. 0.0081024553640.00.0031.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762122920/34/1488W 25.180020183800.00.4628.53 194.247.173.99http/1.1www.chonlateemeet.com:443GET /tag/%E0%B8%AB%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%81%E0%B8%A7 16-1762-0/0/1070. 0.0037014079730.00.0021.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762121861/62/377C 46.48091148221213.80.837.89 51.79.24.51http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 18-1762-0/0/304. 0.0010006011380.00.006.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/315. 0.0072204427670.00.005.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1762-0/0/130. 0.0073001508130.00.006.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/108. 0.0072301241820.00.005.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/63. 0.0071602534870.00.009.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/35. 0.007290235960.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/118. 0.0027301364080.00.003.02 49.0.249.187http/1.1www.uniqueworkthailand.com:80POST /xmlrpc.php HTTP/1.0 25-1762-0/0/28. 0.007170173890.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1762-0/0/4. 0.007130157610.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1762-0/0/3. 0.00721096260.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1762-0/0/4. 0.007180111560.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1762-0/0/58. 0.006430579870.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1762-0/0/100. 0.002727711412600.00.001.40 51.79.24.51http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 31-1762-0/0/3. 0.007140124930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1762-0/0/4. 0.00731079740.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1762-0/0/4. 0.007060129440.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1762-0/0/4. 0.007080108370.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1762-0/0/9. 0.007150178550.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1762-0/0/6. 0.006990134700.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1762-0/0/2. 0.00737570.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1762-0/0/3. 0.00719086730.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1762-0/0/1. 0.00736000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1762-0/0/84. 0.0030502081880.00.001.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1762-0/0/1. 0.00735000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1762-0/0/8. 0.006840123820.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 102subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 87 seconds, (range: 0...271)index usage: 3%, cache usage: 4%total entries stored since starting: 8754total entries replaced since starting: 0total entries expired since starting: 8652total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 364 hit, 18095 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 05:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6ce4ca0c26Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 05:55:53 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 1 hour 53 minutes 41 seconds Server load: 0.95 0.67 0.60 Total accesses: 6543 - Total Traffic: 109.2 MB - Total Duration: 9808359 CPU Usage: u2836.24 s5161.65 cu50855700 cs12450200 - 928000% CPU load .959 requests/sec - 16.4 kB/second - 17.1 kB/request - 1499.06 ms/request 2 requests currently being processed, 8 idle workers _W__R_____........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-174310300/46/589_ 22.66008502350.00.606.84 172.69.64.249http/1.1www.singkansard.com:443GET //.well-known/acme-challenge/moon.php HTTP/1.1 1-174310510/43/584W 23.31009107560.00.749.43 159.203.94.228http/1.1localhost:80GET /server-status HTTP/1.0 2-174313050/20/611_ 8.42119645210.00.2519.51 159.203.94.228http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-174313680/14/563_ 3.29017617660.00.1020.43 159.203.94.228http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-17434720/93/507R 47.0988027586620.00.956.39 185.158.106.4http/1.1www.pokaorganize.com:443 5-17434950/85/551_ 40.36218400340.01.178.03 159.203.94.228http/1.1localhost:80GET /about HTTP/1.0 6-17437740/76/449_ 34.7028496472710.01.986.72 217.182.175.38http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%95%E0%B8%A3%E0%B8%B2%E0%B8%A2 7-174313180/19/538_ 7.73117772280.00.125.82 159.203.94.228http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-17438990/60/555_ 32.231199730860.00.876.99 172.71.118.26http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%AA%E0%B8%AD%E0%B8%99%E0% 9-17439640/46/378_ 26.1326774910260.00.584.00 172.69.64.248http/1.1www.singkansard.com:443GET /.tmb/moon.php HTTP/1.1 10-1743-0/0/323. 0.00168204574660.00.004.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/208. 0.0051111683570730.00.002.24 164.90.205.35http/1.1www.chonlateefood.com:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1743-0/0/285. 0.00168303504610.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/296. 0.0049810965266750.00.004.69 164.90.205.35http/1.1www.chonlateefood.com:80GET /config.json HTTP/1.0 14-1743-0/0/3. 0.001681017350.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/4. 0.001679036090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/99. 0.0030595551367480.00.001.07 4.151.108.4http/1.1www.uniqueworkthailand.com:443GET /admin-heade.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 33subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 195 seconds, (range: 16...283)index usage: 1%, cache usage: 1%total entries stored since starting: 1017total entries replaced since starting: 0total entries expired since starting: 984total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 13 hit, 2469 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-18 22:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c72a616caApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 05:34:40 +07 Restart Time: Sunday, 17-Sep-2023 04:02:10 +07 Parent Server Config. Generation: 1735 Parent Server MPM Generation: 1734 Server uptime: 1 hour 32 minutes 29 seconds Server load: 3.89 4.15 3.58 Total accesses: 17725 - Total Traffic: 215.8 MB - Total Duration: 28724654 CPU Usage: u2965.9 s5187.89 cu50725300 cs12422200 - 1140000% CPU load 3.19 requests/sec - 39.8 kB/second - 12.5 kB/request - 1620.57 ms/request 6 requests currently being processed, 6 idle workers _WWWW........_...._..._..W..R__................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1734248260/82/1325_ 57.37058520383240.00.6813.98 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 1-1734252020/40/1317W 26.580020313430.00.3216.19 64.227.126.135http/1.1localhost:80GET /server-status HTTP/1.0 2-1734253100/9/1264W 7.150020037930.00.1114.60 103.145.163.219http/1.1www.chonlateeboi.com:80POST /wp-login.php HTTP/1.0 3-1734252470/25/1216W 22.010018905590.00.2713.74 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 4-1734252760/15/1204W 9.900019334800.00.1213.19 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 5-1734-0/0/1185. 0.00172017992710.00.0013.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1734-0/0/1013. 0.0014776616337310.00.0010.78 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 7-1734-0/0/1022. 0.00160015673220.00.0011.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1734-0/0/1121. 0.00168017389100.00.0011.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1734-0/0/915. 0.00117126714464940.00.0010.95 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 10-1734-0/0/947. 0.00167014260160.00.0012.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1734-0/0/729. 0.00161011249400.00.006.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1734-0/0/738. 0.0053012608840.00.009.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1734248760/63/483_ 42.90012398329920.00.565.14 103.145.163.219http/1.1www.chonlateeboi.com:80POST /wp-login.php HTTP/1.0 14-1734-0/0/406. 0.0017006831280.00.005.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1734-0/0/299. 0.0014404701820.00.004.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1734-0/0/273. 0.0014104278890.00.003.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1734-0/0/296. 0.0014605122730.00.003.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1734248930/63/203_ 41.06003320190.00.642.90 64.227.126.135http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-1734-0/0/44. 0.001510962590.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1734-0/0/123. 0.0015002666150.00.004.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1734-0/0/75. 0.0010401429110.00.001.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1734249270/65/213_ 40.06013230080.00.542.67 172.71.166.96http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%9B 23-1734-0/0/160. 0.001802599070.00.002.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1734-0/0/118. 0.0015701666850.00.002.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1734249410/58/75W 48.66010001702560.00.651.44 172.71.135.60http/1.1www.anumotanaboon.com:443GET /category/%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B8%9C%E0%B9%89%E0% 26-1734-0/0/116. 0.0015202237850.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1734-0/0/80. 0.0017401325610.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1734249760/66/83R 41.5718421524710.00.510.96 74.249.236.214http/1.1www.nptpropertythailand.com:443 29-1734249770/62/83_ 49.9506101685560.00.591.40 103.145.163.219http/1.1www.chonlateefbl.com:80POST /wp-login.php HTTP/1.0 30-1734249790/63/91_ 46.26014511671180.00.561.49 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 31-1734-0/0/13. 0.001750640820.00.000.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1734-0/0/16. 0.001640517260.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1734-0/0/14. 0.001550543930.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1734-0/0/19. 0.001690678620.00.000.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1734-0/0/15. 0.001660686020.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1734-0/0/106. 0.0016302067420.00.001.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1734-0/0/18. 0.001560580050.00.000.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1734-0/0/18. 0.001540605920.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1734-0/0/15. 0.001760352150.00.000.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1734-0/0/12. 0.001530377780.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1734-0/0/104. 0.0016202123750.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1734-0/0/13. 0.001450360070.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1734-0/0/102. 0.0017301990500.00.001.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1734-0/0/10. 0.001470496810.00.000.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1734-0/0/13. 0.001490333150.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1734-0/0/6. 0.001590164940.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1734-0/0/6. 0.001580154150.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1734-0/0/6. 0.001480218630.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1734-0/0/2. 0.001710117480.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-09-16 22:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c53669edeApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 06:24:00 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 2 hours 21 minutes 48 seconds Server load: 0.97 0.73 0.56 Total accesses: 9203 - Total Traffic: 128.1 MB - Total Duration: 10247124 CPU Usage: u2947.26 s5154.72 cu50516000 cs12376400 - 739000% CPU load 1.08 requests/sec - 15.4 kB/second - 14.2 kB/request - 1113.45 ms/request 3 requests currently being processed, 8 idle workers ____R_W.._...W_._................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720203630/53/731_ 33.66019289530.00.468.44 164.92.192.25http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1720201070/87/798_ 51.29219126880.00.7513.22 164.92.192.25http/1.1localhost:80GET / HTTP/1.0 2-1720203480/54/673_ 30.96117518580.00.377.64 164.92.192.25http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 3-1720199980/92/726_ 56.19007505540.00.898.14 164.92.192.25http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-1720204760/37/736R 24.2725789140300.00.3316.94 65.108.0.71http/1.1www.chonlateeseal.com:443 5-1720204870/34/582_ 27.21112116207610.00.396.39 65.108.0.71http/1.1www.chonlateeseal.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95%E0% 6-1720206980/2/604W 0.87006758940.00.037.03 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.0 7-1720-0/0/665. 0.0030007499640.00.009.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1720-0/0/528. 0.0072806466920.00.008.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1720201680/88/634_ 51.98107442020.00.808.65 164.92.192.25http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 10-1720-0/0/516. 0.003286725242370.00.006.50 137.184.162.65http/1.1 11-1720-0/0/425. 0.0072704475140.00.005.71 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1720-0/0/309. 0.0073002732470.00.003.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1720201390/88/146W 47.95001656500.00.611.12 162.158.245.42http/1.1www.siamautomation.com:443GET /siamautomation.backup.tar HTTP/1.1 14-1720200750/86/259_ 52.64112839660.00.672.68 164.92.192.25http/1.1localhost:80GET /about HTTP/1.0 15-1720-0/0/63. 0.007240436660.00.001.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720201870/82/219_ 50.3516723164330.00.823.18 162.158.245.57http/1.1www.siamautomation.com:443GET /siamautomation.backup.rar HTTP/1.1 17-1720-0/0/170. 0.0073101503340.00.005.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/106. 0.00259501291690.00.001.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/41. 0.0026030403400.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/131. 0.001919173848380.00.001.42 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 21-1720-0/0/40. 0.0026010364570.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/2. 0.0025940370.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/97. 0.001916199556150.00.000.99 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 24-1720-0/0/2. 0.0025910120.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 28subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 157 seconds, (range: 48...256)index usage: 0%, cache usage: 1%total entries stored since starting: 2017total entries replaced since starting: 0total entries expired since starting: 1989total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3653 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 23:22 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c99d67c2fApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 04:56:32 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 54 minutes 20 seconds Server load: 0.74 0.50 0.47 Total accesses: 4396 - Total Traffic: 49.7 MB - Total Duration: 5170062 CPU Usage: u2662.7 s5081.55 cu50458800 cs12364300 - 1930000% CPU load 1.35 requests/sec - 15.6 kB/second - 11.6 kB/request - 1176.08 ms/request 2 requests currently being processed, 9 idle workers .__._.C_..W___..__................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716-0/0/427. 0.00805387390.00.003.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1716126790/12/406_ 2.59104400820.00.033.08 164.90.222.93http/1.1localhost:80GET /about HTTP/1.0 2-1716125120/28/426_ 10.45015192520.00.133.52 164.90.222.93http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-1716-0/0/380. 0.00905227590.00.0010.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1716126850/8/292_ 3.0407903670780.00.052.34 142.93.158.96http/1.1www.thesungolden.com:443GET /telescope/requests HTTP/1.1 5-1716-0/0/397. 0.001104211580.00.003.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1716126981/9/231C 2.64002634400.20.031.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1716127080/8/366_ 2.45114005070.00.022.59 164.90.222.93http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-1716-0/0/340. 0.001303589610.00.002.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1716-0/0/387. 0.00204855250.00.009.20 164.90.222.93http/1.1localhost:80GET / HTTP/1.0 10-1716127100/8/340W 0.88003722040.00.022.95 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 11-1716118900/90/271_ 34.60015123542100.00.802.10 172.71.123.167http/1.1www.business.co.th:443GET /?of=1 HTTP/1.1 12-1716124290/44/44_ 12.141679482230.01.211.21 142.93.158.96http/1.1www.thesungolden.com:443GET /config.json HTTP/1.1 13-1716124360/43/43_ 11.5401482300.00.580.58 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1716-0/0/25. 0.00120170190.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/5. 0.0022030270.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716127290/6/10_ 2.38050050980.00.010.03 142.93.158.96http/1.1www.thesungolden.com:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 17-1716127350/6/6_ 2.191145400.00.020.02 164.90.222.93http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 76subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 122 seconds, (range: 0...282)index usage: 2%, cache usage: 3%total entries stored since starting: 728total entries replaced since starting: 0total entries expired since starting: 652total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 36 hit, 1187 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 21:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c030d4c8cApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 21:24:47 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 17 hours 22 minutes 32 seconds Server load: 0.57 0.86 0.91 Total accesses: 90324 - Total Traffic: 1.3 GB - Total Duration: 130691147 CPU Usage: u2739.98 s5082.89 cu50291700 cs12327400 - 1.e+5% CPU load 1.44 requests/sec - 21.6 kB/second - 15.0 kB/request - 1446.91 ms/request 3 requests currently being processed, 7 idle workers ______WW_W........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170214140/33/7683_ 15.1600107051520.00.33108.01 144.126.198.24http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-170211460/78/7657_ 32.3411107679240.00.68116.44 144.126.198.24http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-170214970/13/7372_ 6.6101109737760.00.08110.27 144.126.198.24http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-170211870/68/7256_ 39.2801103205460.00.6899.24 51.15.173.36http/1.1www.chonlateedesign.com:443POST /xmlrpc.php HTTP/1.1 4-170212230/68/6746_ 41.6101100103970.01.1198.60 185.196.213.39http/1.1www.chonlateedesign.com:443POST /xmlrpc.php HTTP/1.1 5-170212960/44/7107_ 21.161198117050.00.2592.84 144.126.198.24http/1.1localhost:80GET /about HTTP/1.0 6-170215520/7/6547W 2.581099721860.00.0789.29 172.69.214.117http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 7-170213760/34/6763W 16.850099274370.00.2099.71 172.68.234.168http/1.1www.siamautomation.com:443POST /wp-cron.php?doing_wp_cron=1694355886.80965995788574218750 8-170215890/2/6176_ 1.602187890190.00.0181.25 144.126.198.24http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 9-170212310/61/5752W 28.620081895510.00.5588.48 144.126.198.24http/1.1localhost:80GET /server-status HTTP/1.0 10-1702-0/0/5072. 0.00295071923780.00.0080.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1702-0/0/4472. 0.0010061399190.00.0074.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1702-0/0/4112. 0.00720061850170.00.0066.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1702-0/0/2108. 0.002375032645190.00.0043.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702-0/0/1764. 0.001701135624652010.00.0026.43 162.158.106.47http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 15-1702-0/0/1167. 0.002376014904440.00.0014.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/525. 0.001648225810731050.00.008.04 67.207.85.29http/1.1 17-1702-0/0/370. 0.00236304247590.00.003.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/73. 0.0031440909090.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.00311701786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.00535501383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.0052640344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.00536204959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.0053670735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.005348077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.0053610103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.0053510121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.00483842131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.00534701402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.005374074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.0052300299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.00526701458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.0052110524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.00537301921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.00536002967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.00537203934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.005359057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.0048698722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.00537102571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.005357045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0052556060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 99subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 82 seconds, (range: 0...220)index usage: 3%, cache usage: 4%total entries stored since starting: 15914total entries replaced since starting: 0total entries expired since starting: 15815total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 397 hit, 36527 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 14:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c447ba695Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 13:02:03 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 8 hours 59 minutes 51 seconds Server load: 1.09 1.34 1.34 Total accesses: 74740 - Total Traffic: 1.1 GB - Total Duration: 118805465 CPU Usage: u2574.55 s5016.33 cu50083100 cs12282800 - 193000% CPU load 2.31 requests/sec - 36.4 kB/second - 15.8 kB/request - 1589.58 ms/request 2 requests currently being processed, 9 idle workers W_W___._..____.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-168574860/8/6035W 3.480094750260.00.0686.22 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 1-168575020/9/5913_ 2.91051492325510.00.0587.40 139.144.150.26http/1.1 2-168575150/8/5758W 3.270092978430.00.0375.08 172.69.95.36http/1.1www.chonlateefarm.com:443GET //wp-admin/includes/xmrlpc.php?p= HTTP/1.1 3-168575460/8/5506_ 1.700389795760.00.0574.10 172.68.234.133http/1.1www.biztaste.com:80GET /category/type-b/ HTTP/1.0 4-168575560/8/5469_ 0.700884664380.00.0573.95 172.68.234.224http/1.1www.biztaste.com:80GET /category/type-a/ HTTP/1.0 5-168574390/20/5080_ 7.030178822750.00.1276.54 161.35.27.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1685-0/0/5165. 0.0018076610960.00.0074.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-168575720/5/5226_ 0.67082884169810.00.0288.20 172.68.234.184http/1.1www.biztaste.com:80POST /wp-cron.php?doing_wp_cron=1694066521.60084795951843261718 8-1685-0/0/4984. 0.0016085983470.00.0076.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1685-0/0/5107. 0.002078577600770.00.0081.13 49.237.14.239http/1.1 10-168574790/16/4189_ 6.160067006040.00.1176.26 139.144.150.26http/1.1 11-168575740/2/3680_ 0.710157058140.00.0156.84 161.35.27.144http/1.1localhost:80GET /v2/_catalog HTTP/1.0 12-168575800/4/3267_ 1.070141350532610.00.0342.72 162.158.111.72http/1.1www.biztaste.com:80GET /%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b9%88%e0%b8%ad%e0% 13-168575860/5/3092_ 0.020049021540.00.0190.00 45.55.193.222http/1.1 14-1685-0/0/2154. 0.00414036860350.00.0029.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685-0/0/1856. 0.001509033483650.00.0028.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1685-0/0/917. 0.001522016364190.00.0012.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/405. 0.00152605545760.00.005.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/135. 0.00262002328620.00.001.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/161. 0.00242901969440.00.001.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1685-0/0/103. 0.001381213311644320.00.001.01 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 21-1685-0/0/185. 0.001383603156980.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/194. 0.00137666583469950.00.002.36 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 23-1685-0/0/100. 0.001372111431318330.00.001.61 172.68.234.148http/1.1www.accprogress.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 24-1685-0/0/39. 0.00139120480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/5. 0.001402302860.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/8. 0.0014009074820.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0029894011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0029895012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.002989209920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0029906010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 77subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 78 seconds, (range: 0...255)index usage: 2%, cache usage: 3%total entries stored since starting: 10523total entries replaced since starting: 0total entries expired since starting: 10446total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 179 hit, 17044 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 06:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c27e10fb2Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 04:14:23 +07 Restart Time: Monday, 04-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1676 Parent Server MPM Generation: 1675 Server uptime: 12 minutes 11 seconds Server load: 1.10 2.05 5.27 Total accesses: 1791 - Total Traffic: 19.1 MB - Total Duration: 3887131 CPU Usage: u2711.28 s5017.35 cu49772600 cs12213300 - 8480000% CPU load 2.45 requests/sec - 26.8 kB/second - 10.9 kB/request - 2170.37 ms/request 5 requests currently being processed, 4 idle workers .W_W_W._R.._....W................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1675-0/0/133. 0.00703118280.00.001.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1675242450/34/117W 19.94002955810.00.231.23 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.0 2-1675245010/6/121_ 2.57012351080.00.041.20 167.71.185.75http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1675245120/3/133W 3.04003108590.00.031.38 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 4-1675244270/14/124_ 10.45010172397820.00.171.33 159.203.94.228http/1.1 5-1675245190/5/107W 2.08002562690.00.031.22 27.254.96.168http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /wp-cron.php?doing_wp_cron=1693775662.31098604202270507812 6-1675-0/0/97. 0.001601917010.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1675240740/63/108_ 48.1605922612020.00.731.19 159.203.94.228http/1.1 8-1675245210/5/108R 1.60002236940.00.021.15 206.81.1.88http/1.1 9-1675-0/0/57. 0.003720999600.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1675-0/0/21. 0.004780338500.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1675239010/95/127_ 68.300113082850.01.091.34 172.71.146.222http/1.1www.99accountant.com:80GET /favicon.ico HTTP/1.0 12-1675-0/0/29. 0.004320508090.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1675-0/0/120. 0.00610382203290.00.001.31 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 14-1675-0/0/73. 0.0038301934290.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1675-0/0/48. 0.004980788310.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1675239480/97/99W 68.82101986620.01.071.07 143.110.177.0http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /wp-login.php HTTP/1.0 17-1675-0/0/83. 0.0035401802340.00.000.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1675-0/0/85. 0.0034901967060.00.001.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1675-0/0/1. 0.00724110.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 79subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 116 seconds, (range: 4...295)index usage: 2%, cache usage: 3%total entries stored since starting: 352total entries replaced since starting: 0total entries expired since starting: 273total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 755 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 21:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c7407646fApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 01:07:47 +07 Restart Time: Friday, 01-Sep-2023 00:22:12 +07 Parent Server Config. Generation: 1655 Parent Server MPM Generation: 1654 Server uptime: 45 minutes 34 seconds Server load: 2.78 3.12 2.90 Total accesses: 11986 - Total Traffic: 92.5 MB - Total Duration: 13397312 CPU Usage: u2756.88 s4943.63 cu48747100 cs11951100 - 2220000% CPU load 4.38 requests/sec - 34.7 kB/second - 7.9 kB/request - 1117.75 ms/request 8 requests currently being processed, 4 idle workers W_RW._W.C.._...W.WR_.............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-165497750/17/879W 7.990010016070.00.116.65 162.158.210.191http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 1-165497940/9/847_ 3.8803639544940.00.036.65 162.158.90.39http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 2-165497250/43/836R 21.47009168390.00.226.68 159.203.44.43http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-165498050/0/797W 0.00009010480.00.006.42 159.203.44.43http/1.1localhost:80GET /server-status HTTP/1.0 4-1654-0/0/797. 0.0012308751480.00.006.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-165496310/72/830_ 36.3903829296180.00.465.66 167.71.48.191http/1.1 6-165496560/62/907W 30.380010083880.00.266.17 172.71.222.92http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 7-1654-0/0/649. 0.001085457342290.00.005.21 162.158.90.39http/1.1www.99accountant.com:80POST //xmlrpc.php HTTP/1.0 8-165496641/63/788C 32.22041587439013.20.336.88 172.173.110.210http/1.1www.leadingservice.co.th:443POST //wp-login.php HTTP/1.1 9-1654-0/0/773. 0.00947588800460.00.005.36 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 10-1654-0/0/630. 0.0012807125530.00.004.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-165495470/98/690_ 51.7904637821100.00.505.99 172.71.222.92http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 12-1654-0/0/561. 0.00428446394590.00.004.54 172.69.65.152http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 13-1654-0/0/586. 0.0011406947970.00.004.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1654-0/0/377. 0.0011804039300.00.003.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-165496660/65/317W 31.88003654520.00.682.51 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 16-1654-0/0/151. 0.001001475120.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-165496830/61/341W 30.98003379650.00.372.56 172.69.65.151http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 18-165496890/62/65R 31.660540657740.00.320.32 162.158.110.4http/1.1 19-165496950/63/165_ 32.9003951719450.00.321.02 206.81.1.88http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 39subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 71 seconds, (range: 1...286)index usage: 1%, cache usage: 1%total entries stored since starting: 841total entries replaced since starting: 0total entries expired since starting: 802total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3609 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-31 18:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c019499f0Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:37:27 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 35 minutes 9 seconds Server load: 6.53 5.91 5.59 Total accesses: 176325 - Total Traffic: 1.0 GB - Total Duration: 229823656 CPU Usage: u2798.58 s4892.93 cu47928600 cs11731900 - 297000% CPU load 8.77 requests/sec - 53.2 kB/second - 6.1 kB/request - 1303.41 ms/request 12 requests currently being processed, 5 idle workers WW.CWW_.R_R_W_W.R._R.R............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164561880/26/10655W 19.0500139184590.00.1063.92 172.71.166.63http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 1-164561990/33/10488W 17.2600134600890.00.1460.66 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 2-1645-0/0/10291. 0.00110134161000.00.0057.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-164562441/8/10170C 4.010756132744915.80.0355.52 172.71.174.181http/1.1www.dr-rpi.com:443POST //wp-login.php HTTP/1.1 4-164560010/57/10174W 36.9800131309860.00.2754.13 172.71.170.152http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 5-164560730/42/9879W 31.8000131622260.02.3654.63 172.69.67.22http/1.1www.makeregist.com:80POST //xmlrpc.php HTTP/1.0 6-164562250/11/9792_ 6.8700129476130.00.0560.14 159.203.63.67http/1.1 7-1645-0/0/9996. 0.0011497129281340.00.0071.57 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 8-164562370/5/9506R 4.420805123702550.00.0363.97 23.99.196.19http/1.1 9-164560530/44/9226_ 29.730822121716050.00.1751.08 23.99.196.19http/1.1www.thaiquickservice.net:443POST //xmlrpc.php HTTP/1.1 10-164560080/50/9138R 32.101847115624370.00.3046.33 172.71.174.158http/1.1 11-164561470/36/9250_ 22.520941122396240.00.1850.06 144.126.202.105http/1.1 12-164560890/32/8837W 22.1500116776430.00.1547.86 134.122.89.242http/1.1localhost:80GET /server-status HTTP/1.0 13-164562500/7/8225_ 4.030519108635540.00.0347.52 137.184.222.107http/1.1 14-164560140/49/7881W 34.6600102715510.00.3256.98 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 15-1645-0/0/7383. 0.0032094103440.00.0041.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-164560220/52/6813R 36.791102590168940.00.2840.77 172.71.170.152http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 17-1645-0/0/5520. 0.0038071912690.00.0032.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-164561030/50/4075_ 25.44057653577740.00.3236.44 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 19-164561160/44/2845R 28.640035790180.00.2815.88 159.203.63.67http/1.1www.tspaccount.net:443 20-1645-0/0/2353. 0.0077031348740.00.0014.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-164561250/40/1145R 25.57063013907130.00.206.06 40.122.174.22http/1.1www.ss-cool.com:443 22-1645-0/0/455. 0.0016319916243560.00.002.62 172.68.234.226http/1.1www.smebkk.com:80GET /category/type-b/ HTTP/1.0 23-1645-0/0/385. 0.0016059144735560.00.002.34 172.69.65.48http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 24-1645-0/0/256. 0.00178303451990.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/248. 0.00178103167430.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/128. 0.00342201633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0034590296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00346301155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0033425411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00333002410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00329921789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0017634000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00174744221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00174764021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00174813661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00174753821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0017628011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0017624018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0017632030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00176090118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0017615054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0017611072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00174803841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00174794171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 111subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 127 seconds, (range: 6...290)index usage: 3%, cache usage: 5%total entries stored since starting: 6784total entries replaced since starting: 0total entries expired since starting: 6673total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 31592 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cf822ddabApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:50 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 21 seconds Server load: 6.39 6.07 6.47 Total accesses: 277 - Total Traffic: 2.1 MB - Total Duration: 247019 CPU Usage: u2575.68 s4828.19 cu47808400 cs11700400 - 2.83e+8% CPU load 13.2 requests/sec - 100.1 kB/second - 7.6 kB/request - 891.765 ms/request 16 requests currently being processed, 4 idle workers W__RRRCWWWW_CR.RW_WWW............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209850/21/21W 5.8110122430.00.140.14 172.71.182.96http/1.1www.torrong.com:80POST /wp-login.php?action=register HTTP/1.0 1-1644209860/15/15_ 8.6301173430.00.090.09 167.71.185.75http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-1644209890/18/18_ 6.0501136280.00.120.12 165.227.146.2http/1.1localhost:80GET /login.action HTTP/1.0 3-1644210010/19/19R 6.5100129570.00.080.08 167.99.182.39http/1.1www.tafa.or.th:443 4-1644210080/19/19R 5.0100211560.00.060.06 139.144.96.150http/1.1www.tspaccount.net:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-1644210310/15/15R 7.5001453168500.00.170.17 35.188.86.252http/1.1 6-1644210371/14/14C 6.250745127347.10.120.12 167.99.182.39http/1.1www.tafa.or.th:443GET /about HTTP/1.1 7-1644210390/12/12W 6.2200123630.00.090.09 172.68.234.134http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1693329949.72525501251220703125 8-1644211390/1/13W 0.010078400.00.000.08 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 9-1644210550/9/9W 3.970099550.00.050.05 139.144.96.150http/1.1www.tafa.or.th:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-1644210570/9/9W 4.0200100540.00.050.05 172.173.110.230http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST //wp-login.php HTTP/1.1 11-1644210630/15/15_ 6.1200125510.00.110.11 159.223.108.26http/1.1 12-1644210731/17/17C 5.2004501221613.40.060.06 168.61.149.69http/1.1www.uniqueworkthailand.com:443POST //wp-login.php HTTP/1.1 13-1644210750/12/12R 6.100660124630.00.150.15 172.173.110.177http/1.1www.dinocoffees.com:443 14-1644-0/0/1. 0.0015010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1644210870/15/15R 6.180772124260.00.070.07 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 16-1644210930/10/10W 4.940946106800.00.080.08 77.68.23.56http/1.1www.thaiquickservice.net:443GET / HTTP/1.1 17-1644210990/6/6_ 3.970802106400.00.320.32 164.90.222.93http/1.1 18-1644211050/15/15W 4.330088200.00.100.10 74.249.252.222http/1.1www.chonlateevip.com:443POST //wp-login.php HTTP/1.1 19-1644211110/13/13W 6.0200124750.00.080.08 178.62.3.65http/1.1localhost:80GET /server-status HTTP/1.0 20-1644211220/9/9W 3.870076140.00.060.06 23.99.197.177http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 27subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 287 seconds, (range: 283...297)index usage: 0%, cache usage: 1%total entries stored since starting: 27total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 105 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cf772539fApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:37 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 34 seconds Server load: 0.60 0.84 1.22 Total accesses: 222 - Total Traffic: 3.9 MB - Total Duration: 53914 CPU Usage: u653.02 s1259.53 cu12804600 cs3078510 - 4.67e+7% CPU load 6.53 requests/sec - 118.3 kB/second - 18.1 kB/request - 242.856 ms/request 12 requests currently being processed, 0 idle workers WWWRWWRRWRRR...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439060/20/20W 3.001067650.00.570.57 172.70.142.110http/1.1www.chorsiam.com:80GET /%E0%B9%80%E0%B8%81%E0%B9%89%E0%B8%B2%E0%B8%AD%E0%B8%B5%E0% 1-45439070/32/32W 3.420071740.00.670.67 172.68.234.188http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1666604796.41800594329833984375 2-45439120/21/21W 1.330046500.00.610.61 103.130.219.13http/1.1www.siamsolarrooftop.com:443POST /wp-login.php HTTP/1.1 3-45439220/31/31R 2.300067800.00.480.48 178.62.220.177http/1.1www.tspaccount.net:80GET /debug/default/view?panel=config HTTP/1.0 4-45439320/24/24W 1.750038770.00.370.37 172.68.189.136http/1.1www.accprogress.com:80GET /category/type-b/ HTTP/1.0 5-45439550/38/38W 2.960093350.00.550.55 134.209.227.71http/1.1localhost:80GET /server-status HTTP/1.0 6-45439900/25/25R 1.900179670.00.460.46 134.209.227.71http/1.1localhost:80GET /.DS_Store HTTP/1.0 7-45440090/18/18R 0.660034150.00.190.19 134.209.227.71http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-45440190/2/2W 0.571022800.00.020.02 172.68.234.186http/1.1www.accprogress.com:80POST /wp-cron.php?doing_wp_cron=1666604795.26289892196655273437 9-45440430/3/3R 0.710016500.00.010.01 178.62.220.177http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 10-45440540/4/4R 0.060080.00.000.00 178.62.220.177http/1.1www.tspaccount.net:80GET /info.php HTTP/1.0 11-45440560/4/4R 0.000080.00.000.00 178.128.227.119http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 296 seconds, (range: 288...298)index usage: 0%, cache usage: 0%total entries stored since starting: 8total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 28 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 18:01
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63a50d36761Apache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 01:01:27 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 95 Parent Server MPM Generation: 94 Server uptime: 28 days 15 hours 6 seconds Server load: 2.01 2.02 2.07 Total accesses: 1850634 - Total Traffic: 23.8 GB - Total Duration: 2141120972 CPU Usage: u173.02 s105.93 cu32159.4 cs2232.06 - 1.4% CPU load .748 requests/sec - 10.1 kB/second - 13.5 kB/request - 1156.97 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031725no0yes032000 231729no0yes131000 331728no0yes032000 531726no0yes032000 Sum400 1127000 ________________________________................................ ___________________________W____________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-94317250/1/14806_ 0.4080160261020.00.00193.82 139.144.150.45http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-94317250/0/15296_ 0.0080139013540.00.00198.97 164.90.205.35http/1.1localhost:443GET /.env HTTP/1.1 0-94317250/1/14868_ 0.4060150309570.00.00192.75 139.144.150.45http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-94317250/0/15048_ 0.0050145875140.00.00186.02 138.197.88.136http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-94317250/1/14951_ 0.4050147711750.00.00185.46 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.1 0-94317250/1/15173_ 0.4050156649260.00.00188.55 139.144.150.8http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/1/14848_ 0.4120145588920.00.00200.31 165.232.76.155http/1.1localhost:80GET / HTTP/1.1 0-94317250/0/15155_ 0.0020150182090.00.00187.60 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 0-94317250/0/15114_ 0.0020145226990.00.00229.90 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-94317250/0/15248_ 0.0020148853450.00.00194.92 159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/1/14813_ 0.4110154393450.00.00200.74 139.144.150.8http/1.1localhost:80GET /.env HTTP/1.1 0-94317250/1/14825_ 0.4110147156450.00.00195.47 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 0-94317250/1/14694_ 0.4100137182790.00.00185.56 139.144.150.8http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/14845_ 0.0000169086640.00.00186.04 159.203.94.228h2localhost:443[0/0] Software caused connection abort 0-94317250/0/15799_ 0.0020620141615400.00.00187.81 146.190.64.200http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/14849_ 0.0020620165341270.00.00182.52 162.243.184.251http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-94317250/0/14900_ 0.0020620143405120.00.00206.40 74.207.237.114http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/14959_ 0.0020620144940050.00.00189.33 138.197.88.136http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-94317250/0/14780_ 0.0020620160388390.00.00200.58 146.190.64.200http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/0/15001_ 0.0020620144639410.00.00193.85 162.243.161.105h2localhost:443[0/0] Software caused connection abort 0-94317250/0/14992_ 0.0020620181496050.00.00193.47 162.243.161.105http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/15016_ 0.0020620147053800.00.00204.12 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.1 0-94317250/0/15472_ 0.0020620150756110.00.00188.31 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x0c\x01 0-94317250/0/14676_ 0.00206214138765560.00.00190.21 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 0-94317250/0/14987_ 0.0020620162205960.00.00186.91 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/14661_ 0.0020620135981680.00.00197.05 164.90.222.93http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/15159_ 0.0020620144713590.00.00194.53 142.93.158.96http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-94317250/0/14942_ 0.0020620159195750.00.00213.34 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 0-94317250/0/14742_ 0.0020620152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-94317250/0/15189_ 0.0020620135139150.00.00225.17 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/14678_ 0.0020620155573090.00.00199.16 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-94317250/0/14940_ 0.0020620145815220.00.00185.19 162.243.184.251http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-94-0/0/15731. 0.0020570138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-94-0/0/15813. 0.0020570136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15602. 0.0020570174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15318. 0.0020570150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-94-0/0/15276. 0.0020570146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-94-0/0/15655. 0.0020570134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-94-0/0/15351. 0.0020570172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-94-0/0/15185. 0.0020570165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15335. 0.0020570127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/14956. 0.0020570152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-94-0/0/15041. 0.0020570148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15506. 0.0020570159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-94-0/0/15329. 0.0020570159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0
Found on 2024-02-02 18:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63ade6f7358Apache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:21:37 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 20 minutes 16 seconds Server load: 2.62 2.99 3.04 Total accesses: 859391 - Total Traffic: 11.6 GB - Total Duration: 1067361282 CPU Usage: u188.13 s16.82 cu14583.6 cs765.51 - 8.42% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1242 ms/request 5 requests currently being processed, 59 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 014738no6yes428003 14311no3yes131000 Sum209 559003 _______W_R_W________W____________R______________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7147380/296/6848_ 153.94184490644470.03.99100.40 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /xrmemnz-20056zetidm93kez HTTP/1.1 0-7147380/252/7305_ 154.09135971967920.02.46101.57 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=efv-550p-1av-casio-middle-east-africa-0-ii-apv6pnCl HTT 0-7147380/330/6886_ 154.20068478444990.03.5499.42 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 0-7147380/289/7123_ 154.101075478490.03.0791.86 207.154.240.169http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7147380/536/7095_ 154.191075937800.03.9389.03 137.184.150.232http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-7147380/250/7228_ 153.28184488676530.03.2495.63 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147380/294/7032_ 154.24063670208450.03.62105.77 52.70.240.171http/1.1www.chonlateeboi.com:443GET /7652tbrmitems/etidm7.html HTTP/1.1 0-7147381/281/7119W 153.830073504340.03.2593.09 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /wmlemnz-17975yetidm30jz.html HTTP/1.1 0-7147380/234/7271_ 153.941075573140.02.93143.07 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-7147380/346/7151R 154.062077956850.03.2590.16 3.224.220.101http/1.1www.chonlateeadmin.com:443 0-7147380/460/6951_ 154.21035882288770.05.17111.51 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=nike-air-max-sp-x-kasina-won-ang-orange-7-ii-34XJXWun H 0-7147381/279/6721W 154.090083932330.03.3987.44 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.1 0-7147380/278/6764_ 154.040063590720.04.4089.98 159.223.108.26http/1.1 0-7147380/267/6968_ 153.33135094453330.03.4995.19 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=the-history-of-the-casio-g-shock-52%-off-11-ii-qpL80nho 0-7147380/310/7636_ 153.96163671932500.03.2196.27 137.184.150.232http/1.1localhost:80\x16\x03\x01\x01\r\x01 0-7147380/313/6823_ 154.2401493625770.02.7687.57 164.90.205.35http/1.1localhost:80GET /server-status HTTP/1.1 0-7147380/283/6965_ 153.971072509040.03.3990.07 128.199.195.68http/1.1localhost:80GET /about HTTP/1.1 0-7147380/269/7062_ 154.191071378910.02.9394.33 164.90.205.35http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-7147380/278/7028_ 154.0401188336480.02.9788.49 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147380/336/7090_ 153.83154974616670.03.3495.65 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=folk-art-of-france-milner-craft-series-1-ii-vlB3gLfO HT 0-7147381/334/7137W 150.43750112391820.04.9999.02 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7147380/269/6802_ 154.24053878442490.02.7991.09 93.183.131.53http/1.1www.ltclevelup.com:443GET /wp-login.php HTTP/1.1 0-7147380/299/7366_ 154.101086193700.03.6297.55 164.90.205.35http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7147380/290/6906_ 154.040069652500.03.1297.57 164.90.205.35http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-7147380/409/6954_ 153.71084691768200.04.7788.04 52.70.240.171http/1.1www.chonlateeboi.com:443GET /30330ztiaetid.htm HTTP/1.1 0-7147380/316/7120_ 153.89185063195590.04.2190.70 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147380/278/6941_ 153.51184876740180.03.4898.51 85.208.96.197http/1.1www.chonlateeboi.com:443GET /18737zypyeti.html HTTP/1.1 0-7147380/309/6991_ 154.200087448790.03.26119.54 207.154.240.169http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-7147380/268/6817_ 153.781106175805550.02.7485.52 159.223.108.26http/1.1 0-7147380/262/7109_ 154.240078661190.02.77124.48 137.184.150.232http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-7147380/239/6749_ 153.941084397100.02.5897.81 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-7147380/292/7126_ 154.07064276122630.03.3991.18 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lraemnz-17964netidm8.htm HTTP/1.1 1-743110/62/6873_ 30.281077595210.00.6289.25 164.90.205.35http/1.1localhost:80GET /about HTTP/1.1 1-743110/128/6671R 30.232078142550.01.4884.99 52.70.240.171http/1.1 1-743110/60/6620_ 30.101836104720480.00.5284.97 3.224.220.101http/1.1www.chonlateeboi.com:443GET /25249ztiaitems/eti HTTP/1.1 1-743110/64/6358_ 30.271082443890.00.5684.03 128.199.195.68http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-743110/68/6552_ 29.59183879586140.00.6697.41 159.223.108.26h2localhost:443[0/0] Software caused connection abort 1-743110/138/6653_ 30.281077589110.03.2089.53 128.199.195.68http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-743110/70/6590_ 30.182089704870.00.6884.10 165.22.108.223http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-743110/72/6691_ 30.182090110050.00.7089.10 165.22.108.223http/1.1localhost:80GET /.git/config HTTP/1.1 1-743110/84/6746_ 30.220060127660.00.6386.76 128.199.195.68http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-743110/49/6606_ 27.58054882529610.00.5591.62 40.77.167.52h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B 1-743110/26/6348_ 30.15084789126170.00.2789.83 164.92.84.255http/1.1 1-743110/71/6855_ 30.281078399210.00.8698.84 128.199.195.68http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/68/6631_ 30.290093797970.00.6788.31 207.154.240.169http/1.1localhost:80GET /v2/_catalog HTTP/1.1
Found on 2024-01-07 06:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63ac31d5b2eApache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 20:31:35 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 10 hours 30 minutes 14 seconds Server load: 2.48 2.52 2.51 Total accesses: 189222 - Total Traffic: 2.8 GB - Total Duration: 150802754 CPU Usage: u271.27 s14.6 cu2734.05 cs151.16 - 8.39% CPU load 5 requests/sec - 76.3 kB/second - 15.2 kB/request - 796.962 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06904no11yes4280010 25731no3yes428000 Sum2014 8560010 __________________RW____W_W_____................................ _________W______R_______W______W................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-069040/245/2218_ 137.511018163700.02.9034.69 206.81.1.88http/1.1localhost:80GET /about HTTP/1.1 0-069040/232/2347_ 137.511017299080.02.9929.09 144.126.202.105http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-069040/228/2177_ 137.6001029471390.02.9342.35 144.126.202.105http/1.1localhost:80GET /server-status HTTP/1.1 0-069040/252/2383_ 137.420017577140.03.1631.04 159.65.58.104http/1.1 0-069040/224/2307_ 137.401018014550.02.7928.95 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-069040/260/2566_ 137.470017963890.03.4732.18 206.81.1.88http/1.1localhost:80GET / HTTP/1.1 0-069040/253/2193_ 137.580017660480.02.8527.13 167.172.20.95http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-069040/229/2302_ 137.470018317830.02.9030.16 134.122.89.242http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-069040/232/2318_ 137.590108717302460.02.9663.76 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?cudggdh-335883qeti.html HTTP/1.1 0-069040/232/2278_ 137.580017272400.03.0029.44 139.59.230.191http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-069040/243/2257_ 137.470108420924110.02.8627.59 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?lnmecaw-311582zetidm4 HTTP/1.1 0-069040/232/2188_ 137.51199117343330.02.9928.64 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?nuohsbr-19188bitems/etid.html HTTP/1.1 0-069040/205/2157_ 137.401132417760740.03.1530.74 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?lnhecaw-45134uetidm10ya.html HTTP/1.1 0-069040/275/2470_ 137.511018343020.03.1832.58 139.59.230.191http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-069040/213/2502_ 137.381020336590.02.7434.31 134.122.89.242http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-069040/239/2225_ 137.25197717659330.02.8029.77 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/235/2183_ 137.470017907790.03.2328.90 167.172.20.95http/1.1localhost:80GET / HTTP/1.1 0-069040/223/2350_ 137.590017532830.02.7332.79 134.122.89.242http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-069040/229/2372R 137.413017114250.02.8931.29 3.224.220.101http/1.1 0-069041/231/2211W 136.490019265130.02.7827.01 147.182.130.98http/1.1localhost:80GET /server-status HTTP/1.1 0-069040/226/2277_ 137.580017480010.02.5633.10 134.122.89.242http/1.1localhost:80GET /login.action HTTP/1.1 0-069040/228/2279_ 137.411018400420.03.5033.71 134.122.89.242http/1.1localhost:80GET /about HTTP/1.1 0-069040/235/2540_ 137.470017076840.03.5131.51 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069040/239/2196_ 137.35034416889490.02.9229.42 159.65.58.104http/1.1 0-069041/216/2211W 136.670017921960.02.5729.15 85.208.96.208http/1.1www.chonlateefood.com:443GET /items/gzv18362kezutidm.html HTTP/1.1 0-069040/224/2215_ 137.340017102530.02.7428.61 142.93.158.96h2localhost:443[0/0] Software caused connection abort 0-069041/221/2145W 136.370016650930.02.6927.42 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ehtjupk-34233gitems/eti.htm HTTP/1.1 0-069040/236/2289_ 137.580017191010.03.1559.79 147.182.130.98http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069040/238/2164_ 137.391017397780.02.8627.43 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 0-069040/223/2502_ 137.411016693260.02.8568.19 159.65.58.104http/1.1localhost:443GET / HTTP/1.1 0-069040/234/2177_ 137.580017356020.02.6935.00 206.81.1.88http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-069040/389/2512_ 137.371017484630.03.8130.54 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 1-0-0/0/1494. 0.00283284410789900.00.0019.95 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1 1-0-0/0/1277. 0.00283290410369240.00.0016.79 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1 1-0-0/0/1292. 0.00283284310629170.00.0018.86 52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1 1-0-0/0/1320. 0.00283284010544740.00.0017.61 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1 1-0-0/0/1329. 0.00283284010311000.00.0021.84 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1 1-0-0/0/1313. 0.00283283710077550.00.0017.92 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1 1-0-0/0/1347. 0.00283286610387560.00.0016.37 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1 1-0-0/0/1346. 0.00283289710630850.00.0016.65 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1 1-0-0/0/1346. 0.00283283910436060.00.0017.96 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1 1-0-0/0/1273. 0.00283284110395360.00.0016.70 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1 1-0-0/0/1214. 0.00283292410022070.00.0015.53 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wuxaonh-247555kitems/eti.htm HTTP/1.1 1-0-0/0/1373. 0.002832107410816380.00.0018.55 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22932oqmietidm9.htm HTTP/1.1 1-0-0/0/1300. 0.00283284210566390.00.0017.35 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?uethsbr-171347getidm21hr.html HTTP/1.1
Found on 2024-01-05 13:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb319665a63a9665a63a95d2d4c3Apache Status Apache Server Status for ftp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:14 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 31 minutes 54 seconds Server load: 2.15 2.07 1.75 Total accesses: 1082487 - Total Traffic: 11.9 GB - Total Duration: 678439927 CPU Usage: u26.05 s13.7 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.742 ms/request 12 requests currently being processed, 116 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no6yes725004 315011no3yes230002 415163no2yes230000 615166no0yes131000 Sum4011 12116006 ................................__________W___WR_RW___RR________ ................................____________________R_______R___ _W__________R___________________................................ __________W_____________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0048062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0048259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0048130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0048057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.004889958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.004887062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0048056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0048157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.004886455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0048059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.004887056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0048055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0048315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00481662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0048161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0048107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0048062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.004886960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0048058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00481256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0048498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0048160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0048074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00481192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0048058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0048083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0048122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00481163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0048859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0048261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0048157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0048059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-13150120/0/9126_ 0.00186454194400.00.00142.47 159.203.182.222http/1.1 1-13150120/4/8969_ 1.311655125040.00.03107.50 165.232.76.155http/1.1localhost:80GET /server-status HTTP/1.1 1-13150120/3/9102_ 1.191055516790.00.02131.73 139.59.230.191http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-13150120/3/9376_ 1.191057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150120/2/9355_ 1.330056503180.00.01111.87 165.232.76.155http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-13150120/1/9080_ 1.191056147260.00.0099.02 139.59.230.191http/1.1www.tspaccount.net:80GET /telescope/requests HTTP/1.1 1-13150120/1/9263_ 0.77187056057710.00.01109.58 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?zqoggdh-209754betid.htm HTTP/1.1 1-13150120/3/9351_ 1.250056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150120/1/9213_ 0.84091155728780.00.0190.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?82724himsitems/etidm2.html HTTP/1.1 1-13150120/2/9161_ 1.091073740340.00.01108.70 52.167.144.174h2www.chonlateeaa.com:443GET /?s=433mhz-lora-sx1278-long-range-rf-transceiver-wireless-m 1-13150121/3/9389W 1.200055724450.00.0195.48 154.28.229.245http/1.1www.tspaccount.net:443GET / HTTP/1.1 1-1315012
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675159d419fApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 14:11:54 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 10 hours 9 minutes 42 seconds Server load: 1.04 0.67 0.42 Total accesses: 29251 - Total Traffic: 367.5 MB - Total Duration: 39441469 CPU Usage: u3391.95 s6002.8 cu56642000 cs13848000 - 193000% CPU load .8 requests/sec - 10.3 kB/second - 12.9 kB/request - 1348.38 ms/request 3 requests currently being processed, 7 idle workers _W__W____W........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079233340/78/2772_ 40.140034328240.00.5631.26 138.68.133.118http/1.1localhost:443GET / HTTP/1.1 1-2079236430/48/2788W 21.740038806710.00.3743.45 172.71.98.64http/1.1www.chorsiam.com:80POST //wp-login.php HTTP/1.0 2-2079233430/74/2594_ 35.820036082610.00.4128.50 167.172.20.95http/1.1 3-2079234970/54/2598_ 27.480034495390.00.6442.08 74.207.237.114http/1.1 4-2079233640/62/2453W 36.700032873900.00.3124.46 143.110.156.182http/1.1localhost:80GET /server-status HTTP/1.0 5-2079233790/73/2485_ 33.450032062320.00.3226.00 143.110.156.182http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-2079236570/43/2327_ 26.810032996020.00.1624.79 104.236.193.132http/1.1localhost:80GET /login.action HTTP/1.0 7-2079237470/27/2169_ 21.510128695280.00.1638.82 167.99.184.41http/1.1localhost:80GET /server-status HTTP/1.0 8-2079238140/16/1980_ 6.000026241600.00.0435.07 164.92.192.25http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 9-2079238700/8/1859W 4.200025651120.00.0222.84 172.68.234.131http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1703401914.31930804252624511718 10-2079-0/0/1682. 0.0014025650110.00.0016.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-2079-0/0/1419. 0.00301555419939820.00.0014.13 108.162.212.45http/1.1www.chonlateecamping.com:80POST /wp-login.php HTTP/1.0 12-2079-0/0/882. 0.003027111435390.00.006.91 172.68.242.243http/1.1www.time2hand.com:80GET /wp-content/plugins/widgets-for-siteorigin/css/defaults.css 13-2079-0/0/719. 0.00302729211190.00.005.22 172.68.242.201http/1.1www.time2hand.com:80GET /wp-content/themes/chonlateedesign/fonts/font-awesome.min.c 14-2079-0/0/45. 0.0069320504170.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2079-0/0/124. 0.00692901903560.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2079-0/0/140. 0.00693601669140.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2079-0/0/49. 0.0069520430560.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2079-0/0/96. 0.00196887051161230.00.000.75 172.71.178.161http/1.1www.chonlateecamping.com:80GET / HTTP/1.0 19-2079-0/0/3. 0.0020793030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.0020796010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2079-0/0/5. 0.0020782070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2079-0/0/5. 0.0020787080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2079-0/0/52. 0.00202870275920.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2079-0/0/4. 0.0020784090.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 269 seconds, (range: 212...298)index usage: 0%, cache usage: 0%total entries stored since starting: 237total entries replaced since starting: 0total entries expired since starting: 228total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 10722 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 07:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675f41b3528Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 03:07:48 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 2 hours 42 minutes 58 seconds Server load: 0.91 1.09 1.06 Total accesses: 9359 - Total Traffic: 89.0 MB - Total Duration: 15301610 CPU Usage: u3314.05 s5952.54 cu56303300 cs13768500 - 717000% CPU load .957 requests/sec - 9.3 kB/second - 9.7 kB/request - 1634.96 ms/request 4 requests currently being processed, 6 idle workers __W__R.W_...W._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041219370/35/883_ 22.850114752840.00.369.17 139.59.182.142http/1.1 1-2041216360/72/830_ 39.560014050650.00.657.88 139.59.182.142http/1.1 2-2041217300/49/820W 34.740014077150.00.438.41 162.158.86.199http/1.1www.accprogress.com:80GET /tag/%E0%B9%80%E0%B8%AA%E0%B8%B4%E0%B8%87%E0%B8%AA%E0%B8%B2 3-2041219580/30/752_ 13.550011608360.00.216.41 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-2041220060/24/775_ 11.86049812693980.00.218.99 139.59.182.142http/1.1 5-2041220130/22/653R 11.27089210481350.00.245.87 139.59.182.142http/1.1 6-2041-0/0/579. 0.0015609639720.00.005.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-2041217370/54/607W 30.340010117940.00.505.91 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 8-2041220200/22/731_ 13.060012072460.00.206.96 139.59.182.142http/1.1 9-2041-0/0/598. 0.00348010474300.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-2041-0/0/554. 0.002738708839130.00.005.09 172.71.167.55http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%88%E0%B8%A3 11-2041-0/0/317. 0.002185985119190.00.002.97 172.68.234.163http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81 12-2041217550/50/188W 30.33002288980.00.491.24 172.68.26.106http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 13-2041-0/0/207. 0.0023010973220100.00.001.81 172.69.64.180http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 14-2041217610/49/136_ 28.99001893230.00.461.12 46.101.103.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 15-2041-0/0/139. 0.0015702209180.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2041-0/0/20. 0.001481054740.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2041-0/0/14. 0.001494047850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2041-0/0/12. 0.001492040310.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2041-0/0/98. 0.0087001631250.00.000.86 138.197.88.136http/1.1 20-2041-0/0/178. 0.0095703353390.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2041-0/0/157. 0.00112902513850.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2041-0/0/104. 0.00147301813100.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2041-0/0/2. 0.001498050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2041-0/0/5. 0.001478022870.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 6subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 180 seconds, (range: 118...297)index usage: 0%, cache usage: 0%total entries stored since starting: 121total entries replaced since starting: 0total entries expired since starting: 115total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3732 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 20:07 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675b3ac7bb4Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 08:56:40 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 4 hours 54 minutes 29 seconds Server load: 0.85 0.67 0.56 Total accesses: 17876 - Total Traffic: 342.7 MB - Total Duration: 25518120 CPU Usage: u3245.17 s5860.93 cu55539900 cs13590800 - 391000% CPU load 1.01 requests/sec - 19.9 kB/second - 19.6 kB/request - 1427.51 ms/request 2 requests currently being processed, 8 idle workers .W_______W._...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965-0/0/1555. 0.00100023265450.00.0037.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-196539660/83/1559W 50.860021000440.01.0833.80 128.199.195.68http/1.1localhost:80GET /server-status HTTP/1.0 2-196542450/48/1584_ 25.240023035770.01.8424.45 164.92.192.25http/1.1 3-196540890/69/1545_ 38.110121212560.00.9434.20 139.144.150.23http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-196541170/67/1413_ 41.310119601390.00.7628.25 128.199.195.68http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-196541290/63/1374_ 42.470119428290.00.8517.41 128.199.195.68http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 6-196541360/66/1203_ 37.800015838690.01.7412.71 128.199.195.68http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-196542130/50/1237_ 26.570117476160.00.4812.31 104.131.1.32http/1.1localhost:80GET / HTTP/1.0 8-196541420/62/1162_ 37.530115620470.01.1212.56 159.203.63.67http/1.1 9-196547500/15/990W 4.813014445050.015.2942.28 146.190.64.200http/1.1www.chonlateefood.com:443GET / HTTP/1.1 10-1965-0/0/834. 0.00103013121390.00.009.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-196547580/19/828_ 8.360113183660.00.1524.71 164.92.192.25http/1.1 12-1965-0/0/544. 0.00124407785360.00.007.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1965-0/0/407. 0.00496615995814690.00.004.44 162.158.170.247http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 14-1965-0/0/213. 0.00626102611590.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1965-0/0/207. 0.00626003153320.00.005.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1965-0/0/463. 0.00626406605010.00.006.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1965-0/0/197. 0.0046085773086220.00.002.13 162.158.239.34http/1.1www.chonlateetravel.com:80GET /wp-content/outcms.php?up HTTP/1.0 18-1965-0/0/140. 0.00706215341865060.00.002.38 162.158.189.248http/1.1www.thaidocuments.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A3%E0%B8%AD%E0%B8%87 19-1965-0/0/105. 0.00828802193620.00.0015.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1965-0/0/199. 0.00705113122340.00.004.02 137.184.162.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 21-1965-0/0/10. 0.008265086660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1965-0/0/4. 0.008283025900.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1965-0/0/4. 0.008291017650.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1965-0/0/96. 0.0070564821570840.00.001.29 137.184.150.232http/1.1 25-1965-0/0/1. 0.008300000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1965-0/0/2. 0.008298013470.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 296 seconds, (range: 295...298)index usage: 0%, cache usage: 0%total entries stored since starting: 558total entries replaced since starting: 0total entries expired since starting: 554total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 7388 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-17 01:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236751e97d5f8Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:33:44 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 31 minutes 32 seconds Server load: 0.83 0.72 0.56 Total accesses: 50881 - Total Traffic: 932.5 MB - Total Duration: 97431783 CPU Usage: u3024.42 s5768.69 cu55152900 cs13502400 - 2.e+5% CPU load 1.48 requests/sec - 27.8 kB/second - 18.8 kB/request - 1914.9 ms/request 3 requests currently being processed, 6 idle workers ______W.RW........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193277110/6/4261_ 1.090186835390.00.03118.14 178.62.3.65http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-193273220/65/4193_ 23.320180365910.00.4752.79 46.101.103.192http/1.1 2-193276770/16/4196_ 1.660179334440.00.0755.73 138.68.163.10http/1.1 3-193273330/73/4065_ 30.920179370710.00.5570.40 104.236.193.132http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-193276840/18/4114_ 4.050178659180.00.0763.63 138.68.163.10http/1.1 5-193277350/3/3810_ 0.000169415510.00.0046.33 138.197.88.136http/1.1localhost:80GET / HTTP/1.0 6-193276860/14/3798W 2.391073478280.00.0558.30 178.62.3.65http/1.1www.chonlateefood.com:443GET / HTTP/1.1 7-1932-0/0/3685. 0.004096373374820.00.0093.88 172.71.102.39http/1.1www.ptatun.or.th:80GET /assets/uploads/alfacgiapi/perl.alfa HTTP/1.0 8-193273860/62/3433R 21.510165741720.00.3555.54 64.227.126.135http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 9-193273930/60/3022W 24.450057063600.00.4035.77 104.236.193.132http/1.1localhost:80GET /server-status HTTP/1.0 10-1932-0/0/2781. 0.004252676990.00.0043.50 172.71.222.29http/1.1www.jbbgarment.com:80POST /xmlrpc.php HTTP/1.0 11-1932-0/0/2105. 0.0021041595730.00.0030.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1932-0/0/1991. 0.000135730940.00.0034.48 178.62.3.65http/1.1localhost:80GET /about HTTP/1.0 13-1932-0/0/1743. 0.001325037768610.00.00116.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/944. 0.001258017948590.00.0010.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/563. 0.00628268683030.00.0020.48 162.158.78.106http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 16-1932-0/0/444. 0.0061217363220.00.003.83 172.71.150.27http/1.1www.anumotanaboon.com:443POST /xmlrpc.php HTTP/1.1 17-1932-0/0/250. 0.00389002763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00473807137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00538702780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00538805022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0053780690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00538202695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.004580192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.005383029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00523401528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00486202033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00467701828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00144400140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00144290108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 12subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 249 seconds, (range: 226...298)index usage: 0%, cache usage: 0%total entries stored since starting: 397total entries replaced since starting: 0total entries expired since starting: 385total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 29257 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367560f55f73Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:33 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 46 seconds Server load: 6.51 7.07 6.76 Total accesses: 586 - Total Traffic: 16.6 MB - Total Duration: 1067859 CPU Usage: u3017.73 s5666.8 cu54400400 cs13297400 - 1.47e+8% CPU load 12.7 requests/sec - 369.0 kB/second - 29.0 kB/request - 1822.29 ms/request 29 requests currently being processed, 16 idle workers R__RRR_WWWWC_WRWWW__W___WWWW_RW_RW__W_WRW_R_R..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-190214680/7/11R 1.7231042204670.00.080.09 65.154.226.170http/1.1www.tspaccount.net:443 1-190211230/21/21_ 5.8500349010.00.190.19 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reune.php?igpevst115539citems/etidm HTTP/1.1 2-190211470/14/14_ 6.1301423790.00.270.27 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.0 3-190211560/23/23R 9.180418430890.00.120.12 51.81.245.138http/1.1www.tspaccount.net:443GET / HTTP/1.1 4-190211620/22/22R 8.7400391720.00.180.18 205.169.39.155http/1.1www.tafa.or.th:443 5-190211740/19/19R 7.7810416330.00.290.29 198.44.140.139http/1.1 6-190211800/30/30_ 5.1801251410.00.280.28 159.203.94.228http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-190214830/6/21W 1.5620237050.00.040.15 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-review-pricing-and-specs-mm-Qkp 8-190211880/16/16W 4.0420291610.00.540.54 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=2021-chevrolet-corvette-stingray-vs-2022-chevy-corvette 9-190211940/17/17W 7.0900418220.00.570.57 159.223.108.26http/1.1localhost:80GET /server-status HTTP/1.0 10-190212000/21/21W 5.9320335660.00.160.16 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0040855488.html HTTP/1.1 11-190212131/19/19C 7.4000369430.20.270.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-190212190/17/17_ 5.9500372120.00.160.16 164.90.222.93http/1.1localhost:443GET / HTTP/1.1 13-190214920/7/10W 2.4300113410.00.080.09 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=chevrolet-corvette-stingray-2lt-coupe-2022-price-in-rus 14-190212310/20/20R 5.3100339140.00.170.17 51.81.245.138http/1.1localhost:443GET /favicon.ico HTTP/1.1 15-190214980/4/11W 4.0100265320.00.050.14 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0039641984.html HTTP/1.1 16-190212430/13/13W 5.8200473900.02.262.26 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?ajpsvcw-142311citems/etidm52nw.htm HTTP/1.1 17-190212490/25/25W 5.4820207390.00.220.22 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-bg.png HTTP/1.1 18-190212510/17/17_ 9.6102335476920.00.190.19 167.172.20.95http/1.1www.tspaccount.net:443GET / HTTP/1.1 19-190212670/24/24_ 4.8300239650.00.280.28 104.131.1.32http/1.1 20-190212730/12/12W 3.2220387610.02.822.82 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-Recovered.png HTTP/1.1 21-190212790/15/15_ 8.640534422190.00.320.32 185.191.171.9http/1.1www.mkandptfoods.com:443GET /wzy.php?m69117615844.html HTTP/1.1 22-190212850/20/20_ 6.4601303480.00.260.26 159.223.108.26http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 23-190215310/5/7_ 0.06091921710.00.040.05 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?lpasvcw-147990netidm33y.htm HTTP/1.1 24-190212920/18/18W 3.8020305110.00.580.58 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 25-190212980/17/17W 5.6830356980.00.440.44 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=open-box]-gemoro-dual-ultrasonic-jewelry-cleaner-steame 26-190213040/15/15W 3.7600340440.01.691.69 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 27-190215400/2/5W 0.0120360.00.000.02 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=gemoro-3qth-next-gen-ultrasonic-cleaner-quarts-contenti 28-190213110/21/21_ 6.8001699337210.00.570.57 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa2-1024x576.png HTTP/1.1 29-190213140/17/17R 2.9701680394220.02.332.33 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-1-1024x576.png HTTP/1.1 30-190215420/3/11W 0.0120209790.00.000.22 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 31-190213260/17/17_ 7.4604444369740.00.220.22 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gemoro-sparklespa-pro-ultrasonic-cleaner-black-or-grey- 32-190215560/1/9R 0.0102162070.00.000.14 51.81.245.138http/1.1www.tspaccount.net:443 33-190215580/0/2W 0.001070530.00.000.03 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0045204004.html HTTP/1.1 34-190213480/16/16_ 8.4700370650.00.240.24 198.199.121.22http/1.1www.tspaccount.net:80GET /_all_dbs HTTP/1.0 35-190215640/3/3_ 0.03092118460.00.020.02 23.22.35.162http/1.1www.chonlateeboi.com:443GET /21118emxgetidm87g HTTP/1.1 36-190215660/1/1W 0.001030.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg1.png HTTP/1.1 37-190215850/2/2_ 0.000010.00.000.00 138.197.88.136http/1.1www.tspaccount.net:80GET /_all_dbs HTTP/1.0 38-190215910/0/0W 0.000000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-1024x576.png HTTP/1.1 39-190215970/1/1R 0.000120.00.000.00 52.70.240.171http/1.1 40-190216030/0/0W 0.001000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg2.png HTTP/1.1 41-190216090/1/1_ 0.000240.00.000.00 161.35.190.56http/1.1 42-190216150/2/2R 0.000010.00.000.00 138.197.88.136http/1.1www.tspaccount.net:80GET /login.action HTTP/1.0 43-190216190/1/1_ 0.000000.00.000.00 178.128.151.41http/1.1 44-190216270/2/2W 0.000080.00.000.00 159.203.94.228http/1.1localhost:80GET /server-status HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 235subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 258 seconds, (range: 252...273)index usage: 8%, cache usage: 10%total entries stored since starting: 235total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 105 misstotal removes si
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236756ae68e09Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 05:25:48 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 1 hour 23 minutes 37 seconds Server load: 0.42 0.51 0.63 Total accesses: 7677 - Total Traffic: 78.4 MB - Total Duration: 9458944 CPU Usage: u2797.04 s5183.07 cu51090200 cs12499800 - 1270000% CPU load 1.53 requests/sec - 16.0 kB/second - 10.5 kB/request - 1232.11 ms/request 2 requests currently being processed, 7 idle workers ______W_R......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762117660/12/661_ 6.91018305530.00.116.12 159.223.108.26http/1.1localhost:443GET / HTTP/1.1 1-1762112360/78/595_ 34.38007272080.00.477.45 46.101.103.192http/1.1localhost:80GET / HTTP/1.0 2-1762116660/35/679_ 17.29008069110.00.276.06 207.154.240.169http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1762113210/67/551_ 19.99016404770.00.566.76 159.223.108.26http/1.1 4-1762115620/47/671_ 19.34027348570.00.466.44 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.0 5-1762115100/53/743_ 19.220110048950.00.346.86 46.101.103.192http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 6-1762113330/67/536W 24.39006948880.00.454.11 68.183.64.176http/1.1localhost:80GET /server-status HTTP/1.0 7-1762115320/48/525_ 20.38016105510.00.415.72 68.183.64.176http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1762117440/14/495R 5.413911016498140.00.125.17 47.122.1.41http/1.1 9-1762-0/0/340. 0.006847814132100.00.003.94 66.55.64.206http/1.1www.chonlateedesign.com:443GET /marijuana.php HTTP/1.1 10-1762-0/0/572. 0.00457107366430.00.004.74 40.77.167.47http/1.1www.ozonepluswater.net:443GET /wp-content/uploads/2019/11/02-product-07-230x173.jpg HTTP/ 11-1762-0/0/218. 0.002948192703360.00.002.72 172.68.244.210http/1.1www.lawbizeasy.com:80GET /adminer-3.3.2-en.php HTTP/1.0 12-1762-0/0/54. 0.0010220282130.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/381. 0.0052204988590.00.003.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/298. 0.00109103815530.00.002.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/233. 0.0048502434370.00.002.49 139.144.150.45http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 16-1762-0/0/98. 0.00106201709330.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/19. 0.0010460123810.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/8. 0.001079032160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 32subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 141 seconds, (range: 6...298)index usage: 1%, cache usage: 1%total entries stored since starting: 824total entries replaced since starting: 0total entries expired since starting: 792total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 4 hit, 2221 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-22 22:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675850ef7b3Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 10:37:40 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 6 hours 35 minutes 27 seconds Server load: 1.63 1.39 1.45 Total accesses: 40208 - Total Traffic: 714.4 MB - Total Duration: 58027836 CPU Usage: u2746.98 s5147.48 cu50870900 cs12453100 - 267000% CPU load 1.69 requests/sec - 30.8 kB/second - 18.2 kB/request - 1443.19 ms/request 4 requests currently being processed, 6 idle workers _.___R_W_WW....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743211470/58/3281_ 15.960048349450.01.5670.89 139.59.182.142http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1743-0/0/3257. 0.0026047139910.00.0067.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1743213400/18/3402_ 6.100148874630.00.0565.29 138.68.133.118http/1.1 3-1743213590/10/3313_ 3.200144739620.00.0562.56 178.62.73.12http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-1743213660/8/3035_ 2.550142017650.00.0642.38 164.90.205.35http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1743210340/68/3162R 28.701143808100.01.4159.21 138.68.133.118http/1.1 6-1743213720/9/2926_ 4.190140912630.00.0654.04 178.62.73.12http/1.1localhost:80GET /.git/config HTTP/1.0 7-1743209880/90/2914W 24.300039502230.03.4448.89 172.71.182.150http/1.1www.singkansard.com:443GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1 8-1743210130/77/2867_ 26.78083741910140.00.7740.94 85.208.96.203http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 9-1743211600/58/2534W 12.930036779120.02.1836.92 164.90.205.35http/1.1localhost:80GET /server-status HTTP/1.0 10-1743211730/62/2134W 15.170032032000.01.1334.94 162.158.175.124http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET //wp-includes/shell20211028.php HTTP/1.0 11-1743-0/0/1662. 0.00673026348540.00.0028.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/1478. 0.00663019985210.00.0030.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/1294. 0.00683021748900.00.0022.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743-0/0/901. 0.00670013446970.00.0017.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/548. 0.0066207324100.00.008.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/543. 0.0066408771470.00.008.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/205. 0.0038703058470.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/104. 0.0067401612270.00.002.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/73. 0.0049101440450.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/15. 0.006710238140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/14. 0.006870278290.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/100. 0.0025701733890.00.001.85 172.71.250.45http/1.1www.proplustech.co.th:443POST /xmlrpc.php HTTP/1.1 23-1743-0/0/12. 0.006580191960.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/101. 0.0029501209760.00.001.42 203.158.193.247http/1.1 25-1743-0/0/9. 0.006590283310.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/8. 0.006560353910.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/6. 0.006570264130.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743-0/0/4. 0.006750218360.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1743-0/0/7. 0.006690307910.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/7. 0.006780184790.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743-0/0/5. 0.006720391520.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1743-0/0/78. 0.0041501026520.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743-0/0/8. 0.006810210680.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1743-0/0/7. 0.006860184990.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/10. 0.006400367420.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743-0/0/4. 0.006770174810.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1743-0/0/8. 0.006800163710.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/7. 0.006530227090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/10. 0.006610153750.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743-0/0/96. 0.0015111061279840.00.001.36 172.68.234.188http/1.1www.accsmile.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 41-1743-0/0/2. 0.00679078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.00684041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.006550128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.004830756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.00691000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.00654080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.00667050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.00690010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.00666025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status:
Found on 2023-09-19 03:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675fb82fb85Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:23:31 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 1 hour 55 minutes 34 seconds Server load: 0.84 0.93 0.82 Total accesses: 10074 - Total Traffic: 141.6 MB - Total Duration: 13662978 CPU Usage: u2828.21 s5147.48 cu50713100 cs12419200 - 911000% CPU load 1.45 requests/sec - 20.9 kB/second - 14.4 kB/request - 1356.26 ms/request 7 requests currently being processed, 4 idle workers CW__WW__WWW....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733100501/92/832C 40.590010801942.60.6711.21 144.126.202.105http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1733101340/77/869W 36.242011809070.00.6010.23 34.249.22.105http/1.1www.theangelluxury.com:80POST /wp-login.php HTTP/1.0 2-1733102750/57/813_ 27.26028011573440.00.899.70 144.126.202.105http/1.1localhost:443GET / HTTP/1.1 3-1733102370/47/792_ 24.101011534070.00.589.89 207.154.240.169http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-1733103850/33/751W 16.38109571230.00.188.96 49.232.138.60http/1.1www.1smestartup.com:443GET /?author=21 HTTP/1.1 5-1733105200/5/754W 2.051909646770.00.059.86 172.71.223.37http/1.1www.khlangkaew.com:443GET /wp-content/uploads/2022/01/663999484.363759.mp4 HTTP/1.1 6-1733105770/2/684_ 0.010011464930.00.0011.06 207.154.240.169http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1733101840/70/627_ 32.80018573490.00.489.94 199.249.230.42http/1.1www.spamechanicssystem.com:443POST /xmlrpc.php HTTP/1.1 8-1733102580/56/761W 26.60009858400.00.3911.33 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1694892210.71602988243103027343 9-1733102690/56/608W 27.54108162750.00.407.31 142.93.153.3http/1.1www.tspaccount.net:443GET / HTTP/1.1 10-1733102820/49/567W 25.06007047180.00.466.48 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.0 11-1733-0/0/408. 0.0035615275174640.00.005.96 27.254.96.168http/1.1www.thaicarsale.com:80POST /wp-cron.php?doing_wp_cron=1694891852.70569300651550292968 12-1733-0/0/316. 0.0087304061270.00.003.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/243. 0.0092603211470.00.0013.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1733-0/0/210. 0.0092703085090.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/236. 0.0092503313960.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/139. 0.0070702192300.00.001.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/138. 0.00132602080160.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/46. 0.0011670437180.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/9. 0.003070051440.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/20. 0.0030820165770.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1733-0/0/103. 0.00231901522820.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1733-0/0/13. 0.0030750106800.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/5. 0.003081026900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/2. 0.003090020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/3. 0.006923018690.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1733-0/0/86. 0.0062141959350.00.000.99 167.71.48.191http/1.1 27-1733-0/0/34. 0.0068430178140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/5. 0.0069140380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 40subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 149 seconds, (range: 14...298)index usage: 1%, cache usage: 1%total entries stored since starting: 1414total entries replaced since starting: 0total entries expired since starting: 1374total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4323 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 19:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675b3e0d43eApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 06:11:48 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 2 hours 9 minutes 36 seconds Server load: 0.97 0.48 0.40 Total accesses: 8351 - Total Traffic: 121.0 MB - Total Duration: 9052165 CPU Usage: u2672.49 s5091.18 cu50515900 cs12376300 - 809000% CPU load 1.07 requests/sec - 15.9 kB/second - 14.8 kB/request - 1083.96 ms/request 5 requests currently being processed, 13 idle workers __R___W__C______CC................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720198910/20/651_ 13.06108072810.00.697.84 167.71.48.191http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1720201070/3/714_ 2.96007933210.00.0312.50 159.223.108.26http/1.1localhost:80GET /telescope/requests HTTP/1.0 2-1720201140/6/615R 0.02106614340.00.017.26 138.68.163.10http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1720199980/7/641_ 8.06126716306620.00.077.32 162.158.155.58http/1.1www.time2hand.com:80GET /tag/ulysse-nardin/ HTTP/1.0 4-1720201540/5/697_ 1.67010368604200.00.0116.61 172.68.234.208http/1.1www.ptatun.or.th:80POST /wp-cron.php?doing_wp_cron=1694646705.78212690353393554687 5-1720201620/1/547_ 0.00015535180.00.006.00 138.68.163.10http/1.1localhost:443GET /about HTTP/1.1 6-1720200100/7/572W 7.44006178040.00.096.77 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 7-1720200570/6/611_ 5.62016866640.00.068.77 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 8-1720201270/6/526_ 1.95106466910.00.038.05 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1720201681/1/547C 1.070133063306216.00.027.86 51.15.17.105http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-admin/repeater.php HTTP/1.1 10-1720196360/48/471_ 16.79004804980.01.766.15 138.68.163.10http/1.1localhost:443GET /v2/_catalog HTTP/1.1 11-1720196420/53/423_ 20.92004475130.01.665.71 46.101.103.192http/1.1localhost:80GET /login.action HTTP/1.0 12-1720201750/1/308_ 0.00012732460.00.003.57 159.223.108.26http/1.1localhost:80GET /config.json HTTP/1.0 13-1720201390/5/63_ 1.9100620870.00.020.53 167.71.48.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1720200750/5/178_ 7.4708351521430.00.082.08 172.70.246.19http/1.1www.ptatun.or.th:80POST /wp-login.php HTTP/1.0 15-1720201810/1/60_ 0.0001436640.00.001.20 167.71.48.191http/1.1localhost:80GET /v2/_catalog HTTP/1.0 16-1720201871/1/138C 0.00002053421.40.002.36 138.68.163.10http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1720201931/1/170C 0.00001503340.20.005.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/106. 0.00186301291690.00.001.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/41. 0.0018710403400.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/131. 0.001187173848380.00.001.42 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 21-1720-0/0/40. 0.0018690364570.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/2. 0.0018620370.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/97. 0.001184199556150.00.000.99 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 24-1720-0/0/2. 0.0018590120.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 44subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 158 seconds, (range: 1...297)index usage: 1%, cache usage: 2%total entries stored since starting: 1904total entries replaced since starting: 0total entries expired since starting: 1860total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3086 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 23:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367535c4346cApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 06:45:54 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 2 hours 43 minutes 42 seconds Server load: 0.62 0.62 0.65 Total accesses: 13760 - Total Traffic: 199.7 MB - Total Duration: 16764823 CPU Usage: u2699 s5090.78 cu50462400 cs12365000 - 640000% CPU load 1.4 requests/sec - 20.8 kB/second - 14.9 kB/request - 1218.37 ms/request 2 requests currently being processed, 8 idle workers __R.___........._.._W._........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716194040/17/1213_ 5.230115226930.00.1313.49 64.227.126.135http/1.1 1-1716191550/51/1277_ 18.610114959790.00.8413.68 164.90.205.35http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-1716194120/15/1230R 3.991114349600.00.4313.69 162.158.238.51http/1.1www.siamerp.com:443 3-1716-0/0/1170. 0.0016014785510.00.0019.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1716189220/83/1115_ 31.960114324250.00.8014.01 147.182.130.98http/1.1localhost:80GET / HTTP/1.0 5-1716194180/16/1050_ 5.300111758210.00.4414.43 64.227.126.135http/1.1localhost:443GET / HTTP/1.1 6-1716194940/4/970_ 2.270011440890.00.0312.07 164.90.205.35http/1.1localhost:80GET /about HTTP/1.0 7-1716-0/0/1113. 0.0061012956760.00.0011.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1716-0/0/942. 0.0049011477870.00.0016.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1716-0/0/947. 0.0062010783130.00.0016.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1716-0/0/920. 0.0051011269360.00.0020.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716-0/0/614. 0.0025807594910.00.005.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1716-0/0/423. 0.0025707188860.00.0018.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/283. 0.0023304193770.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/94. 0.00580612810.00.002.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/10. 0.00235032890.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716192000/45/145_ 14.76011972040.00.401.45 134.122.89.242http/1.1localhost:80GET /v2/_catalog HTTP/1.0 17-1716-0/0/96. 0.0025901216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.002600110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716192150/39/39_ 16.2401514870.00.430.43 134.122.89.242http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 20-1716192250/45/45W 15.7800478550.00.520.52 134.122.89.242http/1.1localhost:80GET /server-status HTTP/1.0 21-1716-0/0/12. 0.00198067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716192320/46/46_ 15.6201402640.00.510.51 147.182.130.98http/1.1localhost:80GET / HTTP/1.0 23-1716-0/0/4. 0.00249040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 79subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 52 seconds, (range: 9...232)index usage: 2%, cache usage: 3%total entries stored since starting: 2111total entries replaced since starting: 0total entries expired since starting: 2032total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 114 hit, 5127 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 23:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367590ba6d85Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 19:34:08 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 15 hours 31 minutes 53 seconds Server load: 0.36 0.65 0.72 Total accesses: 78203 - Total Traffic: 1.1 GB - Total Duration: 112347205 CPU Usage: u2893.27 s5097.91 cu50285700 cs12326200 - 112000% CPU load 1.4 requests/sec - 20.7 kB/second - 14.8 kB/request - 1436.61 ms/request 1 requests currently being processed, 9 idle workers __W__..__..__._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702261850/79/6648_ 27.550091624520.00.6293.30 143.110.156.182http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1702261310/78/6612_ 36.120192677680.03.94102.70 185.123.204.86http/1.1www.chonlateedesign.com:443POST /xmlrpc.php HTTP/1.1 2-1702265020/37/6425W 17.980093655400.00.3899.47 172.105.37.32http/1.1localhost:80GET /server-status HTTP/1.0 3-1702265080/33/6328_ 47.370091732380.00.3288.64 138.68.133.118http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-1702266120/21/5871_ 40.640085509010.00.1786.78 172.105.37.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1702-0/0/6318. 0.00193086255740.00.0083.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1702-0/0/5652. 0.00201086051270.00.0078.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1702266640/20/5930_ 9.350086661670.00.2986.24 172.105.37.32http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1702261380/84/5445_ 69.000077607610.00.8870.89 178.62.3.65http/1.1 9-1702-0/0/4977. 0.00425070362040.00.0065.10 172.68.174.168http/1.1www.smetast.com:80POST /xmlrpc.php HTTP/1.0 10-1702-0/0/4338. 0.00684061043180.00.0071.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1702261510/84/3819_ 34.000052377550.00.9665.35 138.68.133.118http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1702261570/65/3659_ 58.790055178160.012.5460.31 172.105.37.32http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 13-1702-0/0/1748. 0.00195024827990.00.0022.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702261690/78/1363_ 34.320120218861850.00.9720.07 178.62.3.65http/1.1 15-1702-0/0/1002. 0.00671012623620.00.0012.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/421. 0.00295808412010.00.006.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/352. 0.00312004099350.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/67. 0.00176986888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.001651101655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001770001344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0017695037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.001648904933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00177150733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0017704036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0017714086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0017687068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0017713010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.00164835501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0017697074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0017712010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.001681601144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0017711010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.00164377261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.001650902967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.001626703934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0017710041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0017684095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.00162686982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0045931000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0045917060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 48subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 105 seconds, (range: 3...297)index usage: 1%, cache usage: 2%total entries stored since starting: 14207total entries replaced since starting: 0total entries expired since starting: 14159total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 303 hit, 30857 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 12:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367555f7112dApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:22:06 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 19 minutes 55 seconds Server load: 1.65 1.84 1.70 Total accesses: 22495 - Total Traffic: 278.4 MB - Total Duration: 29441323 CPU Usage: u2842.85 s5085.46 cu50053600 cs12276500 - 4.e+5% CPU load 1.44 requests/sec - 18.3 kB/second - 12.7 kB/request - 1308.79 ms/request 9 requests currently being processed, 5 idle workers WR___WRWRWW_.W._.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685198840/54/2055W 30.500028517010.00.4727.76 180.247.192.81http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 1-1685199690/32/1980R 20.901125047490.00.2825.58 167.94.138.36http/1.1 2-1685199290/41/1900_ 33.10073223951180.00.5021.46 164.92.84.255http/1.1 3-1685200310/17/1782_ 10.620124716270.00.1522.92 162.158.203.62http/1.1www.business.co.th:443POST /xmlrpc.php HTTP/1.1 4-1685197930/70/1748_ 49.250023460410.00.7521.32 167.172.20.95http/1.1localhost:80GET /about HTTP/1.0 5-1685200400/12/1569W 7.853017609620.00.1518.80 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1694049722.90244293212890625000 6-1685201000/2/1737R 1.190121764780.00.0220.63 27.254.96.168http/1.1www.1smestartup.com:443GET /wp-content/themes/sydney/js/functions.min.js?ver=20210823 7-1685197610/74/1812W 48.310023939600.01.0019.73 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 8-1685197860/71/1589R 42.319102720192910.00.8218.05 120.48.112.141http/1.1 9-1685201080/1/1567W 0.000020989990.00.0023.09 180.247.192.81http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 10-1685198000/65/1106W 43.150014933090.00.9213.55 162.254.205.82http/1.1www.1smestartup.com:443POST /wp-login.php HTTP/1.1 11-1685201140/2/894_ 0.040011073970.00.0010.30 178.62.3.65http/1.1localhost:80GET /v2/_catalog HTTP/1.0 12-1685-0/0/768. 0.00217011441080.00.008.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1685198210/66/601W 40.20009392090.00.789.51 27.254.96.168http/1.1www.1smestartup.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 14-1685-0/0/464. 0.0025406654360.00.005.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685198300/65/388_ 41.14004556590.00.604.48 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 16-1685-0/0/105. 0.00447401181390.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/118. 0.00436701201320.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/3. 0.0013107019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.001241411391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0013093015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001238310331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001240331185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001310008790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0013102010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0013099030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0013110010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0013097011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0013098012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001309509920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0013109010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 96subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 71 seconds, (range: 1...290)index usage: 3%, cache usage: 4%total entries stored since starting: 3620total entries replaced since starting: 0total entries expired since starting: 3524total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 64 hit, 7025 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367588875762Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 02:37:10 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 11 hours 13 minutes 55 seconds Server load: 6.95 5.34 6.05 Total accesses: 167016 - Total Traffic: 1.2 GB - Total Duration: 382754680 CPU Usage: u3211.85 s5122.54 cu49743300 cs12206400 - 153000% CPU load 4.13 requests/sec - 30.2 kB/second - 7.3 kB/request - 2291.72 ms/request 23 requests currently being processed, 4 idle workers WCW_CW_WW_WRWWWWWCWWW_WWWWW....................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-167471690/13/10370W 6.5100204731860.00.0482.37 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769829.3303 HTTP/1.0 1-167474131/2/10236C 0.7410201107771.40.0083.90 144.126.202.105http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 2-167471950/11/10321W 7.7100201524170.00.0178.49 172.68.234.120http/1.1www.dr-rpi.com:443POST /wp-cron.php?doing_wp_cron=1693769829.36664199829101562500 3-167461330/56/10034_ 38.7001649193198010.00.1081.89 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769828.3493 HTTP/1.0 4-167462191/49/9808C 34.3210195733761.30.0888.47 144.126.202.105http/1.1localhost:443GET /.git/config HTTP/1.1 5-167455030/96/9693W 61.8910194222150.00.2777.88 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769828.3502 HTTP/1.0 6-167472410/11/9209_ 5.7301657186688480.00.0173.12 172.68.234.205http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769828.0627 HTTP/1.0 7-167458450/71/8993W 48.9400179853440.00.1765.07 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769829.05491709709167480468 8-167460850/57/8792W 38.5200179533050.00.1065.65 172.68.234.179http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769829.94983100891113281250 9-167462500/45/8919_ 32.0301837183030960.00.1082.45 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693769828.04464411735534667968 10-167462600/48/8313W 32.2600170317150.00.0675.22 172.68.234.205http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769829.3973 HTTP/1.0 11-167455370/94/7719R 62.0401741164963840.00.2149.95 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769827.72199392318725585937 12-167462660/45/7112W 32.6510154487060.00.0549.27 172.69.33.213http/1.1www.dr-rpi.com:443GET /wp-login.php HTTP/1.1 13-167466450/32/5909W 20.6500139286580.00.0833.88 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769829.98027801513671875000 14-167455800/93/5642W 59.6810138365440.00.1848.75 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769828.78464889526367187500 15-167455910/84/4737W 58.7200122735820.00.2026.73 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769829.7299 HTTP/1.0 16-167455930/87/3679W 62.3300105156640.00.1716.71 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.0 17-167463631/44/3188C 29.320091446921.30.0714.37 144.126.202.105http/1.1localhost:443GET /config.json HTTP/1.1 18-167463690/40/3202W 27.682094603360.00.0813.66 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 19-167463890/41/2599W 27.640079665450.00.098.94 172.68.234.205http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769829.6823 HTTP/1.0 20-167463950/39/2305W 28.831074352440.00.107.84 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769829.01486897468566894531 21-167464010/46/1970_ 28.340166063982660.00.0511.17 172.68.234.205http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769828.1067 HTTP/1.0 22-167464070/41/2028W 26.121063777220.00.079.16 172.68.234.139http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769828.70284390449523925781 23-167464510/41/1506W 28.971049863040.00.055.29 172.68.234.197http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769828.74220705032348632812 24-167464950/39/1181W 26.160041357560.00.053.59 172.68.234.204http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769829.5152 HTTP/1.0 25-167472950/8/1309W 4.750044361640.00.015.26 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693769829.92403507232666015625 26-167473300/7/1047W 3.031035796930.00.003.20 172.68.234.173http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693769828.6995 HTTP/1.0 27-1674-0/0/1104. 0.001372038076940.00.004.41 198.54.120.17http/1.1www.uniqueworkthailand.com:443POST /xmlrpc.php HTTP/1.1 28-1674-0/0/760. 0.001720027264780.00.003.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/656. 0.001671823557150.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/579. 0.001702022425880.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/634. 0.001515205623673610.00.002.86 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768312.39440798759460449218 32-1674-0/0/575. 0.001423021754950.00.001.46 64.227.126.135http/1.1localhost:80GET /config.json HTTP/1.0 33-1674-0/0/492. 0.002123018286840.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/409. 0.002094015185930.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/304. 0.001970012136060.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1674-0/0/280. 0.002020011005120.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/317. 0.002048262011664300.00.001.10 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693767778.21682310104370117187 38-1674-0/0/155. 0.00193006854850.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/167. 0.00212107727360.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1674-0/0/151. 0.00199016704480.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/201. 0.00186124859094560.00.000.42 172.68.234.196http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693767966.2283 HTTP/1.0 42-1674-0/0/190. 0.00185522349099890.00.000.76 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693767971.9458 HTTP/1.0 43-1674-0/0/121. 0.001576015754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.001574419884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-09-03 19:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b236752420eafdApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 02:00:07 +07 Restart Time: Friday, 01-Sep-2023 00:22:12 +07 Parent Server Config. Generation: 1655 Parent Server MPM Generation: 1654 Server uptime: 1 hour 37 minutes 54 seconds Server load: 3.93 4.30 4.39 Total accesses: 36012 - Total Traffic: 235.7 MB - Total Duration: 41706754 CPU Usage: u2785.16 s4959.59 cu48757700 cs11953900 - 1030000% CPU load 6.13 requests/sec - 41.1 kB/second - 6.7 kB/request - 1158.13 ms/request 8 requests currently being processed, 7 idle workers _R...W__W.W.W...._.W_..C....__W................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1654141450/3/2340_ 1.20059927421840.00.0215.05 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 1-1654141540/1/2283R 0.001126151490.00.0016.30 119.29.156.110http/1.1 2-1654-0/0/2336. 0.0079026715160.00.0014.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1654-0/0/2216. 0.0063025110950.00.0013.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1654-0/0/2227. 0.0019025740950.00.0019.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1654138740/62/2280W 31.860026322270.00.3613.43 172.69.65.152http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 6-1654137930/81/2265_ 41.550026140980.00.4713.02 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1654138650/59/1990_ 27.090023040730.00.4612.87 207.154.240.169http/1.1localhost:80GET /login.action HTTP/1.0 8-1654140680/38/2129W 19.670024532070.00.1818.21 20.7.172.55http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 9-1654-0/0/2091. 0.006952024015230.00.0012.32 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 10-1654140740/41/1892W 18.991022208270.00.2611.58 172.68.234.166http/1.1www.business.co.th:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 11-1654-0/0/1860. 0.004683322088070.00.0012.12 172.70.42.152http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 12-1654138950/55/1641W 29.450019021990.00.419.98 172.71.166.192http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 13-1654-0/0/1696. 0.0075020186350.00.0010.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1654-0/0/1287. 0.0088014701390.00.009.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1654-0/0/1177. 0.0096013766060.00.007.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1654-0/0/771. 0.0010708948630.00.004.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1654138350/53/930_ 30.25050111029640.00.375.58 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 18-1654-0/0/466. 0.003505617810.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1654139190/45/644W 26.64007255680.00.243.18 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 20-1654139250/54/349_ 27.08013762150.00.392.17 161.35.27.144http/1.1localhost:80GET /server-status HTTP/1.0 21-1654-0/0/96. 0.00890945250.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1654-0/0/214. 0.005402577820.00.001.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1654139441/49/246C 24.2809133065503.80.281.38 172.70.42.153http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 24-1654-0/0/174. 0.007601732400.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1654-0/0/125. 0.008201461770.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1654-0/0/109. 0.0011001529610.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1654-0/0/14. 0.00860100910.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1654139710/47/47_ 24.6102613510.00.300.30 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.0 29-1654139770/53/53_ 24.9701525380.00.300.30 46.101.103.192http/1.1 30-1654139790/51/51W 27.0950604800.00.330.33 172.68.234.190http/1.1www.business.co.th:443POST /wp-cron.php?doing_wp_cron=1693508401.42536306381225585937 31-1654-0/0/12. 0.00900132710.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1654-0/0/1. 0.00113000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 169subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 138 seconds, (range: 2...192)index usage: 6%, cache usage: 7%total entries stored since starting: 1875total entries replaced since starting: 0total entries expired since starting: 1706total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 11008 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-31 18:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367598975059Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:06:17 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 3 minutes 59 seconds Server load: 8.23 5.93 5.48 Total accesses: 160447 - Total Traffic: 935.1 MB - Total Duration: 207671928 CPU Usage: u2866.61 s4899.65 cu47920800 cs11729900 - 327000% CPU load 8.8 requests/sec - 52.5 kB/second - 6.0 kB/request - 1294.33 ms/request 21 requests currently being processed, 1 idle workers CWWWCCCWWRC_CCCCWWWC..CR.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164531501/1/9782C 0.0001126987661.30.0058.30 142.93.64.15http/1.1localhost:443GET /.env HTTP/1.1 1-164530610/23/9605W 14.2800121988600.00.0953.77 172.71.242.220http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 2-164530780/20/9402W 12.3110122450080.00.1149.70 52.167.144.225http/1.1www.theangelluxury.com:443GET /wp-content/uploads/2023/07/%E0%B9%80%E0%B8%9E%E0%B8%B4%E0% 3-164529030/49/9341W 32.1800120843920.00.2349.96 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 4-164529271/40/9263C 25.3610118991481.30.2049.02 165.22.108.223http/1.1localhost:443GET /login.action HTTP/1.1 5-164527611/64/9066C 70.3610119210671.30.3448.15 165.22.108.223http/1.1localhost:443GET /.env HTTP/1.1 6-164530041/38/8984C 17.9210118159591.40.1553.49 165.22.108.223http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-164530990/13/9073W 4.8300117440230.00.0464.98 143.110.218.229http/1.1localhost:80GET /server-status HTTP/1.0 8-164529480/32/8698W 21.9200111443000.00.1858.43 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 9-164531110/7/8485R 2.9400110242740.00.0346.05 172.71.166.60http/1.1 10-164530151/33/8362C 18.9600105533191.30.1641.26 165.22.108.223http/1.1localhost:443GET /info.php HTTP/1.1 11-164528060/73/8457_ 45.9001111570470.00.3645.68 134.122.34.144http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-164531171/7/8089C 4.2910105380091.30.0543.49 165.22.108.223http/1.1localhost:443GET /telescope/requests HTTP/1.1 13-164531441/2/7391C 0.001097347231.40.0041.81 165.22.108.223http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 14-164531181/7/7237C 4.341094083981.30.0253.04 165.22.108.223http/1.1localhost:443GET /config.json HTTP/1.1 15-164529641/18/6609C 41.850184271234.60.0936.31 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 16-164529740/29/6242W 22.290081851380.00.1837.32 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 17-164531560/1/5069W 0.000064948590.00.0029.14 172.69.214.131http/1.1www.time2hand.com:80POST /wp-login.php HTTP/1.0 18-164529820/33/3611W 21.410047321060.00.1833.23 172.69.67.118http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 19-164529831/37/2391C 23.281029827351.30.1712.54 165.22.108.223http/1.1localhost:443GET /.git/config HTTP/1.1 20-1645-0/0/1942. 0.0056226103190.00.0011.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1645-0/0/987. 0.00135011403700.00.005.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-164528181/44/347C 28.9907174967433.80.252.13 172.71.167.105http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 23-164528240/81/269R 44.1008003134570.00.451.75 40.122.174.22http/1.1www.ss-cool.com:443 24-1645-0/0/205. 0.0014563692785260.00.001.78 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 25-1645-0/0/201. 0.0014377702551110.00.001.11 172.71.166.56http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 26-1645-0/0/128. 0.00155201633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0015880296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00159201155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0014725411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00146002410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00142921789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0015763000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00156044221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00156064021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00156113661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00156053821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0015757011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0015753018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0015761030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00157390118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0015744054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0015741072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00156103841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00156094171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 120subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 67 seconds, (range: 3...283)index usage: 4%, cache usage: 5%total entries stored since starting: 6170total entries replaced since starting: 0total entries expired since starting: 6050total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 27760 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:05 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b2367526cc2357Apache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:51 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 23 seconds Server load: 6.52 6.10 6.48 Total accesses: 312 - Total Traffic: 2.2 MB - Total Duration: 266487 CPU Usage: u2582.88 s4830.23 cu47808400 cs11700400 - 2.59e+8% CPU load 13.6 requests/sec - 97.0 kB/second - 7.1 kB/request - 854.125 ms/request 19 requests currently being processed, 3 idle workers W_R_RWRRWRRWWCRCRWC_RR............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209850/22/22W 6.9100164070.00.140.14 139.144.96.150http/1.1www.tafa.or.th:443GET /config.json HTTP/1.1 1-1644209860/18/18_ 8.6400173450.00.090.09 128.199.62.55http/1.1 2-1644209890/20/20R 6.0501136310.00.120.12 165.232.76.155http/1.1 3-1644210010/20/20_ 7.150655142680.00.080.08 164.90.222.93http/1.1 4-1644210080/21/21R 5.0200211590.00.070.07 178.249.214.10http/1.1www.tafa.or.th:443 5-1644210310/15/15W 7.5010168500.00.170.17 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 6-1644210370/14/14R 6.250745127340.00.120.12 167.99.182.39http/1.1www.tafa.or.th:443GET /about HTTP/1.1 7-1644210390/16/16R 7.0301139050.00.090.09 165.227.146.2http/1.1localhost:80GET /.git/config HTTP/1.0 8-1644211390/4/16W 0.940097330.00.000.08 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 9-1644210550/11/11R 4.5901111640.00.050.05 178.249.214.10http/1.1www.tafa.or.th:443 10-1644210570/10/10R 4.900879118130.00.060.06 91.213.50.8http/1.1www.tspaccount.net:443 11-1644210630/15/15W 6.1200125510.00.110.11 172.71.146.220http/1.1www.chorsiam.com:80GET /%E0%B8%8A%E0%B8%B8%E0%B8%94%E0%B9%82%E0%B8%95%E0%B9%8A%E0% 12-1644210730/17/17W 5.2000122160.00.060.06 168.61.149.69http/1.1www.uniqueworkthailand.com:443POST //wp-login.php HTTP/1.1 13-1644210751/13/13C 6.8607651399416.50.160.16 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 14-1644211460/2/3R 0.010090.00.000.00 74.249.252.222http/1.1 15-1644210871/16/16C 6.610403132325.90.080.08 77.68.23.56http/1.1www.thaiquickservice.net:443GET /wp-touch.js HTTP/1.1 16-1644210930/12/12R 5.8500118340.00.100.10 167.99.182.39http/1.1www.tafa.or.th:443 17-1644210990/9/9W 4.4200115280.00.330.33 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.0 18-1644211051/17/17C 5.2300105990.20.110.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1644211110/17/17_ 6.1000124800.00.080.08 159.223.108.26http/1.1 20-1644211220/10/10R 4.59070590260.00.070.07 23.99.197.177http/1.1 21-1644211480/0/0R 0.000000.00.000.00 172.173.110.230http/1.1www.xn--12cx2bef7bl0boq4ch6gugw SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 29subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 286 seconds, (range: 282...296)index usage: 1%, cache usage: 1%total entries stored since starting: 29total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 128 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3137b2367537b23675879cf38cApache Status Apache Server Status for ftp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:37 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 34 seconds Server load: 0.60 0.84 1.22 Total accesses: 239 - Total Traffic: 4.0 MB - Total Duration: 60156 CPU Usage: u654.77 s1260.09 cu12804600 cs3078510 - 4.67e+7% CPU load 7.03 requests/sec - 119.3 kB/second - 17.0 kB/request - 251.699 ms/request 12 requests currently being processed, 0 idle workers WWCRWRRLWRRW...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439060/21/21W 3.8100100580.00.580.58 45.33.122.234http/1.1localhost:80GET / HTTP/1.0 1-45439070/33/33W 4.160086890.00.670.67 45.33.122.234http/1.1localhost:80GET /server-status HTTP/1.0 2-45439121/22/22C 2.07071060718.80.620.62 103.130.219.13http/1.1www.siamsolarrooftop.com:443POST /wp-login.php HTTP/1.1 3-45439220/31/31R 2.300067800.00.480.48 178.62.220.177http/1.1www.tspaccount.net:80GET /debug/default/view?panel=config HTTP/1.0 4-45439320/24/24W 1.750038770.00.370.37 172.68.189.136http/1.1www.accprogress.com:80GET /category/type-b/ HTTP/1.0 5-45439550/51/51R 2.980093470.00.560.56 27.254.96.168http/1.1 6-45439900/25/25R 1.900179670.00.460.46 134.209.227.71http/1.1localhost:80GET /.DS_Store HTTP/1.0 7-45440090/19/19R 0.660134160.00.190.19 27.254.96.168http/1.1 8-45440190/2/2W 0.572022800.00.020.02 172.68.234.186http/1.1www.accprogress.com:80POST /wp-cron.php?doing_wp_cron=1666604795.26289892196655273437 9-45440430/3/3R 0.710016500.00.010.01 178.62.220.177http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 10-45440540/4/4R 0.060080.00.000.00 178.62.220.177http/1.1www.tspaccount.net:80GET /info.php HTTP/1.0 11-45440560/4/4W 0.000080.00.000.00 178.128.227.119http/1.1www.tspaccount.net:443GET / HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 296 seconds, (range: 288...298)index usage: 0%, cache usage: 0%total entries stored since starting: 8total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 29 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 02:37
Open for 465 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07f59cf413bApache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 02-Feb-2024 09:37:58 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 93 Parent Server MPM Generation: 92 Server uptime: 27 days 23 hours 36 minutes 37 seconds Server load: 2.00 2.00 2.00 Total accesses: 1845110 - Total Traffic: 23.8 GB - Total Duration: 2140724335 CPU Usage: u185.19 s108.82 cu32089.3 cs2210.25 - 1.43% CPU load .763 requests/sec - 10.3 kB/second - 13.5 kB/request - 1160.22 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 029373no0yes131000 229661no0yes032000 329394no0yes032000 529374no0yes032000 Sum400 1127000 ____________W___________________................................ ________________________________________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-92293730/14/14762_ 5.1040160256560.00.01193.64 139.144.150.205h2localhost:443[0/0] Software caused connection abort 0-92293730/13/15256_ 5.0822960139008970.00.03198.89 143.198.72.96http/1.1localhost:443GET /login.action HTTP/1.1 0-92293730/18/14831_ 5.0922950150306340.00.05192.62 178.62.73.12http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/15/15008_ 5.1317510145868980.00.01185.89 143.198.72.96http/1.1localhost:443GET /.git/config HTTP/1.1 0-92293730/15/14913_ 5.1422920147705900.00.05185.32 159.223.102.13http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/13/15140_ 4.832295490156642950.00.02188.43 147.182.168.210h2localhost:443[0/0] Software caused connection abort 0-92293730/12/14812_ 4.6917650145587210.00.03200.13 143.198.72.96http/1.1 0-92293730/11/15118_ 5.1122950150176790.00.03187.53 142.93.64.15http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/20/15087_ 5.1322960145223170.00.02229.82 159.223.102.13http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-92293730/18/15212_ 5.2417560148852880.00.07194.80 192.53.126.23http/1.1localhost:80GET /login.action HTTP/1.1 0-92293730/17/14777_ 5.0922950154280510.00.02200.61 142.93.64.15http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-92293730/18/14791_ 4.8622930147116930.00.01195.38 147.182.168.210http/1.1 0-92293731/19/14650W 5.0800137181700.00.04185.40 139.144.150.205http/1.1localhost:443GET /server-status HTTP/1.1 0-92293730/22/14813_ 5.1217570169077180.00.04185.97 143.198.72.96http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/16/15762_ 4.842293529141543210.00.06187.72 178.128.151.41h2localhost:443[0/0] Software caused connection abort 0-92293730/18/14810_ 4.8222970165338320.00.02182.41 146.190.160.11h2localhost:443[0/0] Software caused connection abort 0-92293730/18/14857_ 5.2417570143397190.00.02206.28 192.53.126.23http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-92293730/19/14926_ 5.1322960144891060.00.04189.22 143.198.72.96http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/15/14743_ 5.1317530160243160.00.01200.49 142.93.64.15http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/19/14964_ 5.2317670144636790.00.04193.71 192.53.126.23http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-92293730/12/14949_ 4.832296503181446080.00.02193.28 143.198.72.96h2localhost:443[0/0] Software caused connection abort 0-92293730/17/14982_ 5.5630147004840.00.02204.00 139.144.150.205http/1.1localhost:443GET / HTTP/1.1 0-92293730/19/15437_ 5.1422920150748210.00.05188.17 161.35.190.56http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/14/14645_ 5.1222900138763960.00.01190.06 178.62.73.12http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-92293730/18/14942_ 5.2417540162204880.00.02186.79 192.53.126.23http/1.1localhost:80GET /.git/config HTTP/1.1 0-92293730/15/14618_ 5.1322960135973720.00.03196.88 161.35.190.56http/1.1localhost:443GET /.env HTTP/1.1 0-92293730/14/15121_ 5.1022950144712730.00.01194.46 143.198.72.96http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-92293730/15/14900_ 5.0830159153260.00.01213.25 147.182.168.210http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-92293730/18/14705_ 5.1222920152163350.00.03175.84 178.62.73.12http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-92293730/15/15163_ 4.8722970135117420.00.03225.07 178.62.73.12h2localhost:443[0/0] Software caused connection abort 0-92293730/21/14640_ 5.1022960155554200.00.02199.10 178.128.151.41http/1.1localhost:443GET /config.json HTTP/1.1 0-92293730/15/14905_ 5.0522920145814300.00.02185.01 178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-92-0/0/15731. 0.00194630138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-92-0/0/15813. 0.00194630136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15602. 0.00194630174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15318. 0.00194630150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-92-0/0/15276. 0.00194630146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-92-0/0/15655. 0.00194630134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-92-0/0/15351. 0.00194630172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-92-0/0/15185. 0.00194630165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-92-0/0/15335. 0.00194630127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-0/0/14956. 0.00194630152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-92-0/0/15041. 0.00194630148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-92-0/0/15506. 0.00194630159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-92-0/0/15329. 0.00194630159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-92-
Found on 2024-02-02 02:37 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07f75af5dccApache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 07:04:20 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 1 day 21 hours 2 minutes 59 seconds Server load: 2.68 2.74 2.75 Total accesses: 770638 - Total Traffic: 10.5 GB - Total Duration: 948892748 CPU Usage: u369.77 s25.03 cu12936.9 cs678.28 - 8.64% CPU load 4.75 requests/sec - 67.8 kB/second - 14.3 kB/request - 1231.31 ms/request 8 requests currently being processed, 56 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 129818no2yes527001 229622no2yes329002 Sum204 856003 ................................_______________WW__R_____RW_____ ___R_________________W_______W__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/5888. 0.001022784682151280.00.0087.53 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ztoitgo-3314bitems/etid.html HTTP/1.1 0-7-0/0/6352. 0.001022753759595630.00.0084.46 114.119.133.42http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 0-7-0/0/5904. 0.001022790171251600.00.0088.30 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /znoaebb-23464betidm76mab HTTP/1.1 0-7-0/0/6208. 0.0010227250968961020.00.0080.99 185.126.202.247http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.1 0-7-0/0/5945. 0.001022784365868080.00.0077.28 85.208.96.212http/1.1www.chonlateeadmin.com:443GET /hjwkawv-9666jetid.htm HTTP/1.1 0-7-0/0/6246. 0.0010227190877062280.00.0082.16 66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /db.php?g1807522.shtml HTTP/1.1 0-7-0/0/6107. 0.001022784857888050.00.0094.42 185.6.8.216http/1.1www.chonlateevip.com:443POST /xmlrpc.php HTTP/1.1 0-7-0/0/6158. 0.001022796566786600.00.0080.85 66.249.65.234http/1.1www.chonlateenextbiz.com:443GET /db.php?g1807522.shtml HTTP/1.1 0-7-0/0/6114. 0.0010227061876620.00.00122.86 217.34.133.56http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /xmlrpc.php HTTP/1.1 0-7-0/0/6043. 0.0010227105170721940.00.0078.24 3.224.220.101http/1.1 0-7-0/0/5861. 0.0010227128175625990.00.0075.21 68.178.149.194http/1.1www.thefixup333.com:443POST /xmlrpc.php HTTP/1.1 0-7-0/0/5806. 0.001022784974679720.00.0075.82 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ioxaebb-23447ketidm54vb.html HTTP/1.1 0-7-0/0/5859. 0.001022783852382760.00.0077.93 23.22.35.162http/1.1 0-7-0/0/6065. 0.001022763180836290.00.0082.29 39.101.185.186http/1.1www.dreamhightravel.com:443POST /xmlrpc.php HTTP/1.1 0-7-0/0/6519. 0.001022784655832350.00.0084.42 23.22.35.162http/1.1www.chonlateeboi.com:443GET /32900idtuitems/etidm1.html HTTP/1.1 0-7-0/0/5775. 0.0010227169982286170.00.0076.34 52.70.240.171http/1.1 0-7-0/0/5996. 0.0010227104963883560.00.0078.67 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wrlaebb-39061yitems/etidm66 HTTP/1.1 0-7-0/0/6151. 0.001022784058247790.00.0080.39 52.70.240.171http/1.1 0-7-0/0/6163. 0.0010227182061270520.00.0078.79 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /nncaebb-40976pitems/etidm20aap.html HTTP/1.1 0-7-0/0/5936. 0.001022785267721970.00.0083.83 3.224.220.101http/1.1www.chonlateeboi.com:443GET /4874gcmpitems/etid.html HTTP/1.1 0-7-0/0/6117. 0.0010227214189378220.00.0086.19 52.70.240.171http/1.1 0-7-0/0/5908. 0.001022784170185010.00.0080.72 23.22.35.162http/1.1 0-7-0/0/6480. 0.001022784972795280.00.0086.56 3.224.220.101http/1.1www.chonlateeboi.com:443GET /33953gcmpeti.html HTTP/1.1 0-7-0/0/5965. 0.001022786362107390.00.0086.95 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /pneaebb-6268retidm4 HTTP/1.1 0-7-0/0/5811. 0.001022784474402960.00.0073.45 52.70.240.171http/1.1 0-7-0/0/6008. 0.001022752256710170.00.0078.13 23.22.35.162http/1.1 0-7-0/0/6018. 0.001022786955869190.00.0087.88 52.70.240.171http/1.1www.chonlateeboi.com:443GET /33998gcmpitems/etidm60q.html HTTP/1.1 0-7-0/0/5996. 0.0010227135669609890.00.00108.11 68.178.226.214http/1.1www.partymanagementthailand.comPOST /xmlrpc.php HTTP/1.1 0-7-0/0/5936. 0.001022785353380510.00.0075.38 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /aopaebb-23387cetidm.html HTTP/1.1 0-7-0/0/6099. 0.001022785571644760.00.00113.13 23.22.35.162http/1.1www.chonlateeboi.com:443GET /3165gcmpitems/etidm47.htm HTTP/1.1 0-7-0/0/5911. 0.001022784366501140.00.0087.66 52.70.240.171http/1.1 0-7-0/0/6201. 0.0010227635664263310.00.0079.76 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /toiaebb-30062vitems/etidm57g.html HTTP/1.1 1-7298180/321/6102_ 204.71184172145740.04.6879.54 52.70.240.171http/1.1www.chonlateeboi.com:443GET /33573idtuitems/etidm69.htm HTTP/1.1 1-7298180/330/5862_ 204.67284665894810.04.2674.94 137.184.222.107http/1.1localhost:80\x16\x03\x01\x01\b\x01 1-7298180/315/5875_ 205.13185092543790.04.0376.23 185.191.171.13http/1.1www.chonlateeboi.com:443GET /3490ubgzetid HTTP/1.1 1-7298180/318/5559_ 204.9121175265120.05.9873.82 203.170.192.183http/1.1www.thaidaoherb.com:443POST /wp-cron.php?doing_wp_cron=1704585851.04850292205810546875 1-7298180/305/5811_ 204.953221674555930.03.9886.75 3.224.220.101http/1.1www.chonlateeboi.com:443GET /25651tzwaitems/etidm HTTP/1.1 1-7298180/308/5871_ 205.322064065920.04.3477.44 167.99.182.39http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-7298180/302/5932_ 205.091135464692830.04.2275.24 66.249.71.192http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 1-7298180/304/5998_ 205.273075580320.05.1279.84 3.224.220.101http/1.1www.chonlateeboi.com:443GET /25651tzwaitems/etidm HTTP/1.1 1-7298180/284/5946_ 205.230054784550.03.7376.71 167.99.182.39http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-7298180/292/5918_ 203.971112468952690.04.4483.22 114.119.137.190http/1.1www.dreamhightravel.com:443GET /dhtpe65-b-may-oct23-5d4n/?sow-85685=6 HTTP/1.1 1-7298180/295/5715_ 205.37185675482150.03.9882.20 66.249.71.192http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 1-7298180/286/6233_ 204.692058195450.03.7390.71 137.184.222.107http/1.1localhost:80GET / HTTP/1.1 1-7298180/299/5933_ 205.43043778574800.03.5480.44 107.173.251.187http/1.1www.winnerpropest.com:443POST /wp-login.php HTTP/1.1 1-7298180/311/5841_ 204.40
Found on 2024-01-07 00:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07f59e98515Apache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 20:31:33 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 10 hours 30 minutes 12 seconds Server load: 2.52 2.53 2.51 Total accesses: 189183 - Total Traffic: 2.8 GB - Total Duration: 150794275 CPU Usage: u270.88 s14.58 cu2734.05 cs151.16 - 8.39% CPU load 5 requests/sec - 76.3 kB/second - 15.2 kB/request - 797.082 ms/request 7 requests currently being processed, 57 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06904no13yes131019 25731no3yes626000 Sum2016 757019 ___________W____________________................................ ________________W______RW_R_WW__................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-069040/244/2217_ 136.98185218163700.02.9034.69 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zwojupk-2404betidm8 HTTP/1.1 0-069040/231/2346_ 137.391106217299080.02.9929.09 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?gqcadej-137949petidm36t.htm HTTP/1.1 0-069040/227/2176_ 137.20185429471280.02.9342.34 3.224.220.101http/1.1www.chonlateeboi.com:443GET /23704ztiaetidm93szh HTTP/1.1 0-069040/252/2383_ 137.420017577140.03.1631.04 144.126.202.105http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-069040/224/2307_ 137.401018014550.02.7928.95 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-069040/260/2566_ 137.470017963890.03.4732.18 206.81.1.88http/1.1localhost:80GET / HTTP/1.1 0-069040/252/2192_ 137.470017660470.02.8527.13 54.38.85.37http/1.1www.1smestartup.com:80GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 0-069040/229/2302_ 137.470018317830.02.9030.16 134.122.89.242http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-069040/231/2317_ 136.641105717291590.02.9463.75 3.224.220.101http/1.1www.chonlateeboi.com:443GET /6415bzlnitems/etidm40tn HTTP/1.1 0-069040/231/2277_ 137.28084417272400.03.0029.44 147.182.130.98http/1.1localhost:80\x16\x03\x01\x01\x05\x01 0-069040/243/2257_ 137.470108420924110.02.8627.59 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?lnmecaw-311582zetidm4 HTTP/1.1 0-069041/231/2187W 136.730017333420.02.9828.63 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?nuohsbr-19188bitems/etid.html HTTP/1.1 0-069040/205/2157_ 137.401132417760740.03.1530.74 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?lnhecaw-45134uetidm10ya.html HTTP/1.1 0-069040/274/2469_ 137.381018343020.03.1832.58 206.81.1.88http/1.1localhost:80\x16\x03\x01\x01\r\x01 0-069040/213/2502_ 137.381020336590.02.7434.31 134.122.89.242http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-069040/239/2225_ 137.25197717659330.02.8029.77 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/235/2183_ 137.470017907790.03.2328.90 167.172.20.95http/1.1localhost:80GET / HTTP/1.1 0-069040/221/2348_ 136.88185217532820.02.7332.79 23.22.35.162http/1.1www.chonlateeboi.com:443GET /4095ztiaitems/etidm22na.htm HTTP/1.1 0-069040/229/2372_ 137.411017114250.02.8931.29 147.182.130.98http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-069040/231/2211_ 136.49186419265130.02.7827.01 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/225/2276_ 137.420017480010.02.5633.10 139.59.230.191http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-069040/228/2279_ 137.411018400420.03.5033.71 134.122.89.242http/1.1localhost:80GET /about HTTP/1.1 0-069040/235/2540_ 137.470017076840.03.5131.51 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069040/239/2196_ 137.35134416889490.02.9229.42 40.77.167.53h2www.nakindogtraining.com:443GET /wzy.php?n60341036609.shtm HTTP/2.0 0-069040/216/2211_ 136.67163017921960.02.5729.15 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/224/2215_ 137.340017102530.02.7428.61 142.93.158.96h2localhost:443[0/0] Software caused connection abort 0-069040/221/2145_ 136.371409416650930.02.6927.42 66.249.69.227http/1.1www.chonlateenextbiz.com:443GET /sitemap83.xml HTTP/1.1 0-069040/235/2288_ 137.07084817191000.03.1559.79 139.59.230.191http/1.1 0-069040/238/2164_ 137.391017397780.02.8627.43 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 0-069040/223/2502_ 137.411016693260.02.8568.19 159.65.58.104http/1.1localhost:443GET / HTTP/1.1 0-069040/233/2176_ 136.97073417356020.02.6935.00 54.38.85.37http/1.1www.1smestartup.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 0-069040/389/2512_ 137.371017484630.03.8130.54 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 1-0-0/0/1494. 0.00283084410789900.00.0019.95 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1 1-0-0/0/1277. 0.00283090410369240.00.0016.79 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1 1-0-0/0/1292. 0.00283084310629170.00.0018.86 52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1 1-0-0/0/1320. 0.00283084010544740.00.0017.61 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1 1-0-0/0/1329. 0.00283084010311000.00.0021.84 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1 1-0-0/0/1313. 0.00283083710077550.00.0017.92 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1 1-0-0/0/1347. 0.00283086610387560.00.0016.37 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1 1-0-0/0/1346. 0.00283089710630850.00.0016.65 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1 1-0-0/0/1346. 0.00283083910436060.00.0017.96 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1 1-0-0/0/1273. 0.00283084110395360.00.0016.70 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1 1-0-0/0/1214. 0.00283092410022070.00.0015.53 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wuxaonh-247555kitems/eti.htm HTTP/1.1 1-0-0/0/1373. 0.002830107410816380.00.0018.55 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22932oqmietidm9.htm HTTP/1.1 1-0-0/0/1300. 0.00283084210566390.00.0017.
Found on 2024-01-05 13:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3124a3c07f24a3c07facd029bdApache Status Apache Server Status for pop.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:17 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 31 minutes 58 seconds Server load: 2.22 2.08 1.75 Total accesses: 1082561 - Total Traffic: 11.9 GB - Total Duration: 678450042 CPU Usage: u26.48 s13.72 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.708 ms/request 9 requests currently being processed, 119 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no11yes329008 315011no3yes329002 415163no14yes131009 615166no0yes230000 Sum4028 91190019 ................................R_______R_____R_________________ ................................____________________W_____R_R___ W_______________________________................................ ________________________W___W___................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0051062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0051259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0051130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0051057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.005189958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.005187062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0051056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0051157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.005186455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0051059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.005187056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0051055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0051315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00511662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0051161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0051107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0051062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.005186960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0051058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00511256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0051498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0051160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0051074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00511192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0051058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0051083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0051122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00511163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0051859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0051261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0051157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0051059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-13150120/1/9127R 1.45242554198660.00.00142.47 65.154.226.170http/1.1www.tspaccount.net:443 1-13150120/5/8970_ 1.410055125040.00.03107.50 142.93.64.15http/1.1www.tspaccount.net:80GET /v2/_catalog HTTP/1.1 1-13150120/3/9102_ 1.190055516790.00.02131.73 139.59.230.191http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-13150120/3/9376_ 1.190057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150120/3/9356_ 1.540056503180.00.02111.87 205.169.39.149http/1.1localhost:80GET / HTTP/1.1 1-13150120/2/9081_ 1.500056147270.00.0099.02 139.144.150.205http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-13150120/1/9263_ 0.77087056057710.00.01109.58 154.28.229.245http/1.1 1-13150120/3/9351_ 1.251056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150120/1/9213R 0.84191155728780.00.0190.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?82724himsitems/etidm2.html HTTP/1.1 1-13150120/3/9162_ 1.450073740350.00.01108.70 143.110.218.229http/1.1localhost:443GET / HTTP/1.1 1-13150120/4/9390_ 1.40028655727310.00.0295.48 154.28.229.245http/1.1www.tspaccount.net:443GET / HTTP/1.1 1-13150120/5/9134_ 1.49105
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cbf9c8228Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 14:12:02 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 10 hours 9 minutes 49 seconds Server load: 1.04 0.68 0.43 Total accesses: 29313 - Total Traffic: 367.6 MB - Total Duration: 39456073 CPU Usage: u3396.95 s6004.18 cu56642000 cs13848000 - 193000% CPU load .801 requests/sec - 10.3 kB/second - 12.8 kB/request - 1346.03 ms/request 8 requests currently being processed, 3 idle workers _CCRCCC__WC....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079233340/84/2778_ 40.160034328360.00.5731.27 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 1-2079236431/54/2794C 24.540038883191.40.3943.47 167.172.20.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-2079233431/80/2600C 35.850036082691.40.4128.50 138.68.133.118http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 3-2079234970/60/2604R 28.431034514250.00.6542.09 74.207.237.114http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-2079233641/70/2461C 36.721032874011.30.3124.47 138.68.133.118http/1.1localhost:443GET /.env HTTP/1.1 5-2079233791/78/2490C 33.470032062381.40.3326.01 74.207.237.114http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-2079236571/50/2334C 26.830132996113.80.1724.80 167.172.20.95http/1.1localhost:443GET /server-status HTTP/1.1 7-2079237470/34/2176_ 22.18066528708660.00.1738.83 172.70.243.123http/1.1www.chonlateebranding.com:443POST /wp-login.php HTTP/1.1 8-2079238140/19/1983_ 7.00098426261310.00.0535.08 172.71.98.64http/1.1www.chorsiam.com:80POST //wp-login.php HTTP/1.0 9-2079238700/14/1865W 5.050025668260.00.0222.84 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 10-2079239251/2/1684C 0.001025650141.30.0016.62 138.68.133.118http/1.1localhost:443GET /.git/config HTTP/1.1 11-2079-0/0/1419. 0.00302255419939820.00.0014.13 108.162.212.45http/1.1www.chonlateecamping.com:80POST /wp-login.php HTTP/1.0 12-2079-0/0/882. 0.003034111435390.00.006.91 172.68.242.243http/1.1www.time2hand.com:80GET /wp-content/plugins/widgets-for-siteorigin/css/defaults.css 13-2079-0/0/719. 0.00303429211190.00.005.22 172.68.242.201http/1.1www.time2hand.com:80GET /wp-content/themes/chonlateedesign/fonts/font-awesome.min.c 14-2079-0/0/45. 0.0069390504170.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2079-0/0/124. 0.00693601903560.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2079-0/0/140. 0.00694301669140.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2079-0/0/49. 0.0069590430560.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2079-0/0/96. 0.00196957051161230.00.000.75 172.71.178.161http/1.1www.chonlateecamping.com:80GET / HTTP/1.0 19-2079-0/0/3. 0.0020800030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.0020803010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2079-0/0/5. 0.0020789070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2079-0/0/5. 0.0020794080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2079-0/0/52. 0.00202950275920.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2079-0/0/4. 0.0020791090.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 11subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 265 seconds, (range: 204...293)index usage: 0%, cache usage: 0%total entries stored since starting: 239total entries replaced since starting: 0total entries expired since starting: 228total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 10735 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 07:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cc85243acApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 03:07:54 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 2 hours 43 minutes 4 seconds Server load: 0.85 1.07 1.05 Total accesses: 9467 - Total Traffic: 89.2 MB - Total Duration: 15313608 CPU Usage: u3317.64 s5953.5 cu56303300 cs13768500 - 716000% CPU load .968 requests/sec - 9.3 kB/second - 9.6 kB/request - 1617.58 ms/request 7 requests currently being processed, 4 idle workers ___WRCCW_...C.C................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041219370/46/894_ 22.930014752970.00.379.18 165.22.74.203http/1.1localhost:80GET /config.json HTTP/1.0 1-2041216360/83/841_ 39.640114050790.00.667.89 139.144.150.45http/1.1localhost:80GET /telescope/requests HTTP/1.0 2-2041217300/65/836_ 35.270014088460.00.458.43 146.190.160.11http/1.1localhost:80GET /.git/config HTTP/1.0 3-2041219580/43/765W 13.580011618210.00.226.42 172.68.27.44http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 4-2041220060/37/788R 12.590012710390.00.239.01 161.35.27.144http/1.1 5-2041220131/28/659C 11.310010491821.40.275.89 139.59.182.142http/1.1localhost:443GET /_all_dbs HTTP/1.1 6-2041221721/3/582C 0.00009639761.30.005.00 139.59.182.142http/1.1localhost:443GET /login.action HTTP/1.1 7-2041217370/61/614W 30.380010118040.00.515.93 139.59.182.142http/1.1localhost:443GET /server-status HTTP/1.1 8-2041220200/37/746_ 13.810012089170.00.226.98 159.223.102.13http/1.1localhost:80GET /.DS_Store HTTP/1.0 9-2041-0/0/598. 0.00355010474300.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-2041-0/0/554. 0.002808708839130.00.005.09 172.71.167.55http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%88%E0%B8%A3 11-2041-0/0/317. 0.002245985119190.00.002.97 172.68.234.163http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81 12-2041217551/57/195C 31.86002325761.40.521.28 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-2041-0/0/207. 0.0023710973220100.00.001.81 172.69.64.180http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 14-2041217611/55/142C 29.72101911261.40.481.14 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-2041-0/0/139. 0.0016302209180.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2041-0/0/20. 0.001488054740.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2041-0/0/14. 0.001501047850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2041-0/0/12. 0.001499040310.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2041-0/0/98. 0.0087601631250.00.000.86 138.197.88.136http/1.1 20-2041-0/0/178. 0.0096303353390.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2041-0/0/157. 0.00113502513850.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2041-0/0/104. 0.00148001813100.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2041-0/0/2. 0.001505050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2041-0/0/5. 0.001485022870.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 222 seconds, (range: 112...298)index usage: 0%, cache usage: 0%total entries stored since starting: 125total entries replaced since starting: 0total entries expired since starting: 115total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3759 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 20:07 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cd617dd34Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 08:56:52 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 4 hours 54 minutes 42 seconds Server load: 0.73 0.65 0.55 Total accesses: 17988 - Total Traffic: 343.0 MB - Total Duration: 25539783 CPU Usage: u3177.63 s5844.65 cu55540000 cs13590800 - 391000% CPU load 1.02 requests/sec - 19.9 kB/second - 19.5 kB/request - 1419.82 ms/request 4 requests currently being processed, 10 idle workers _.__W__W._C___C._................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-196548520/2/1557_ 0.012023265480.00.0037.03 104.131.1.32http/1.1localhost:80GET /telescope/requests HTTP/1.0 1-1965-0/0/1568. 0.005021000620.00.0033.80 161.35.27.144http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 2-196542450/60/1596_ 25.311123035990.01.8424.46 164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-196540890/78/1554_ 38.151121212760.00.9534.21 159.203.63.67http/1.1localhost:443GET /about HTTP/1.1 4-196541170/75/1421W 41.370019601590.00.7828.26 172.71.99.38http/1.1www.rooffurnish.com:443GET /robots.txt HTTP/1.1 5-196541290/70/1381_ 42.571119428470.00.8617.42 159.203.63.67http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-196541360/76/1213_ 37.850115838920.01.7512.72 164.92.192.25http/1.1localhost:443GET /.DS_Store HTTP/1.1 7-196542130/62/1249W 26.630017476420.00.4912.32 159.203.63.67http/1.1localhost:443GET /server-status HTTP/1.1 8-1965-0/0/1175. 0.002015653940.00.0012.59 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-196547500/18/993_ 8.752114626080.015.4542.44 159.203.63.67http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 10-196548581/3/837C 0.010113121471.40.009.65 159.203.63.67http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-196547580/32/841_ 8.451113183930.00.1624.72 164.92.192.25http/1.1localhost:443GET /_all_dbs HTTP/1.1 12-196548600/5/549_ 0.02017785470.00.007.85 164.92.192.25http/1.1localhost:443GET /login.action HTTP/1.1 13-196548700/1/408_ 0.01225814740.00.004.44 159.203.63.67http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 14-196548721/2/215C 0.01002611640.20.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1965-0/0/208. 0.00303153330.00.005.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-196548840/2/465_ 0.00116605090.00.006.19 104.131.1.32http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 17-1965-0/0/197. 0.0046205773086220.00.002.13 162.158.239.34http/1.1www.chonlateetravel.com:80GET /wp-content/outcms.php?up HTTP/1.0 18-1965-0/0/140. 0.00707515341865060.00.002.38 162.158.189.248http/1.1www.thaidocuments.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A3%E0%B8%AD%E0%B8%87 19-1965-0/0/105. 0.00830002193620.00.0015.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1965-0/0/199. 0.00706413122340.00.004.02 137.184.162.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 21-1965-0/0/10. 0.008277086660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1965-0/0/4. 0.008295025900.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1965-0/0/4. 0.008303017650.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1965-0/0/96. 0.0070694821570840.00.001.29 137.184.150.232http/1.1 25-1965-0/0/1. 0.008312000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1965-0/0/2. 0.008310013470.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 7subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 286 seconds, (range: 283...290)index usage: 0%, cache usage: 0%total entries stored since starting: 561total entries replaced since starting: 0total entries expired since starting: 554total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 7414 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-17 01:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6ca0fc51c1Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:33:52 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 31 minutes 40 seconds Server load: 0.92 0.74 0.56 Total accesses: 50959 - Total Traffic: 932.8 MB - Total Duration: 97465366 CPU Usage: u3030.32 s5770 cu55152900 cs13502400 - 2.e+5% CPU load 1.49 requests/sec - 27.8 kB/second - 18.7 kB/request - 1912.62 ms/request 5 requests currently being processed, 10 idle workers ____WC__W__CC.__.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193277110/10/4265_ 1.140186871780.00.04118.16 165.232.76.155http/1.1localhost:80GET /.env HTTP/1.0 1-193273220/69/4197_ 24.370180383930.00.4852.80 138.197.88.136http/1.1localhost:80GET /telescope/requests HTTP/1.0 2-193276770/25/4205_ 3.130179364570.00.0955.75 138.68.163.10http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 3-193273330/84/4076_ 30.980179370990.00.5670.42 138.68.163.10http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-193276840/23/4119W 4.110078704030.00.0963.64 172.71.102.39http/1.1www.ptatun.or.th:80GET /assets/uploads/ALFA_DATA/alfacgiapi/404.php?bx=0e215962017 5-193277351/11/3818C 0.070169451392.30.0246.35 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 6-193276860/17/3801_ 5.740173584910.00.2858.53 165.232.76.155http/1.1localhost:80GET /.git/config HTTP/1.0 7-193277460/6/3691_ 0.810173393460.00.0293.90 178.62.3.65http/1.1 8-193273860/67/3438W 21.560065786120.00.3755.56 74.207.237.46http/1.1localhost:443GET /server-status HTTP/1.1 9-193273930/68/3030_ 24.600157063820.00.4135.78 138.197.88.136http/1.1localhost:80GET /config.json HTTP/1.0 10-193277530/4/2785_ 0.010152677070.00.0043.50 178.62.3.65http/1.1 11-193277561/5/2110C 0.020141595871.40.0030.86 74.207.237.46http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-193277651/1/1992C 0.011235730991.30.0034.48 138.68.163.10http/1.1localhost:443GET /about HTTP/1.1 13-1932-0/0/1745. 0.000037768650.00.00116.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-193277730/2/946_ 0.010117948660.00.0010.26 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.0 15-193277800/1/564_ 0.02028683070.00.0020.48 138.68.163.10http/1.1localhost:443GET /v2/_catalog HTTP/1.1 16-1932-0/0/444. 0.0061917363220.00.003.83 172.71.150.27http/1.1www.anumotanaboon.com:443POST /xmlrpc.php HTTP/1.1 17-1932-0/0/250. 0.00389802763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00474607137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00539402780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00539505022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0053850690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00538902695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.004587192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.005390029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00524201528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00487002033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00468401828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00144480140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00144370108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 253 seconds, (range: 218...298)index usage: 0%, cache usage: 0%total entries stored since starting: 400total entries replaced since starting: 0total entries expired since starting: 385total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 29289 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cc9fca99aApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:41 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 54 seconds Server load: 6.23 7.00 6.74 Total accesses: 737 - Total Traffic: 19.4 MB - Total Duration: 1248502 CPU Usage: u3038.85 s5673.37 cu54400400 cs13297400 - 1.25e+8% CPU load 13.6 requests/sec - 367.4 kB/second - 26.9 kB/request - 1694.03 ms/request 32 requests currently being processed, 8 idle workers ._W_R_WRWC_.WCCWCWRRWWW_RCCCRCCCRWW__.W_W..WW..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1902-0/0/13. 0.0030212370.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-190211230/24/24_ 6.290231359830.00.230.23 38.240.225.43http/1.1 2-190211470/17/17W 6.2110440740.00.290.29 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=used-2022-chevrolet-corvette-stingray-coupe-2lt-z51-for 3-190211560/28/28_ 9.6200439400.00.150.15 38.240.225.43http/1.1 4-190211620/26/26R 8.820834412060.00.220.22 217.113.194.205http/1.1www.1smestartup.com:443 5-190211740/21/21_ 8.240461430030.00.380.38 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2019/08/Icon_Home-04.png HTTP/1.1 6-190211800/31/31W 5.2050251430.00.290.29 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2021-chevrolet-corvette-stingray-vs-2022-chevy-corvette 7-190214830/8/23R 3.971788333810.00.050.17 162.158.87.150http/1.1www.khlangkaew.com:443GET /category/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0% 8-190211880/21/21W 5.6300370350.00.550.55 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0045773572.html HTTP/1.1 9-190211941/23/23C 7.4701429671.30.640.64 159.203.182.222http/1.1localhost:443GET /v2/_catalog HTTP/1.1 10-190212000/24/24_ 8.1401422490.00.190.19 161.35.190.56http/1.1localhost:443GET /about HTTP/1.1 11-1902-0/0/19. 0.0070369430.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-190212190/20/20W 7.5100442950.00.170.17 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=painite-value-price-and-jewelry-information-gem-society 13-190214921/10/13C 4.1400196251.40.100.12 164.90.222.93http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 14-190212311/25/25C 6.0410369051.30.200.20 164.90.222.93http/1.1localhost:443GET /.git/config HTTP/1.1 15-190214980/7/14W 6.2100334400.00.090.17 178.128.151.41http/1.1localhost:443GET /server-status HTTP/1.1 16-190212431/19/19C 5.9801532571.42.312.31 161.35.190.56http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-190212490/25/25W 5.4890207390.00.220.22 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-bg.png HTTP/1.1 18-190212510/22/22R 9.6300476990.00.200.20 3.224.220.101http/1.1 19-190212670/27/27R 4.9010262430.00.300.30 205.169.39.86http/1.1localhost:80GET / HTTP/1.0 20-190212730/12/12W 3.2290387610.02.822.82 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-Recovered.png HTTP/1.1 21-190212790/17/17W 8.6640422220.00.320.32 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 22-190212850/23/23W 6.5510303900.00.270.27 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 23-190215310/6/8_ 1.8904105101280.00.060.07 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-review-pricing-and-specs-mm-Qkp 24-190212920/21/21R 5.451697406210.00.660.66 5.255.125.196http/1.1www.chonlateevip.com:443 25-190212981/21/21C 8.1406944504714.50.490.49 85.208.96.210http/1.1www.mkandptfoods.com:443GET /m7869001564.html HTTP/1.1 26-190213041/18/18C 5.2911432661.31.701.70 159.203.182.222http/1.1localhost:443GET /about HTTP/1.1 27-190215401/9/12C 1.960184141.30.040.05 164.90.222.93http/1.1localhost:443GET /config.json HTTP/1.1 28-190213110/25/25R 8.1801384850.00.610.61 167.172.20.95http/1.1www.tspaccount.net:443 29-190213141/23/23C 3.0000398951.42.392.39 178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 30-190215421/8/16C 1.7811286061.30.020.24 164.90.222.93http/1.1localhost:443GET /.env HTTP/1.1 31-190213261/19/19C 9.47032294318025.60.240.24 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0047110408.html HTTP/1.1 32-190215560/5/13R 0.0801162360.00.020.15 3.224.220.101http/1.1 33-190215580/8/10W 2.2500137830.00.030.06 104.131.1.32http/1.1www.tspaccount.net:443GET /debug/default/view?panel=config HTTP/1.1 34-190213480/20/20W 10.0800442760.00.260.26 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-classic-cars-for-sale-michigan- 35-190215640/8/8_ 0.090295577600.00.030.03 40.77.167.63http/1.1www.mkandptfoods.com:443GET /wzy.php?biological-GINGER.xml HTTP/1.1 36-190215660/4/4_ 0.0400125400.01.401.40 85.208.96.211http/1.1www.seasabithailand.com:443GET /8aj1/2017-ford-focus-display-screen-not-working.html HTTP/ 37-1902-0/0/4. 0.005030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-190215910/7/7W 0.090058760.00.330.33 104.197.69.115http/1.1www.tafa.or.th:443GET / HTTP/1.1 39-190215970/5/5_ 2.54090278690.00.090.09 167.172.20.95http/1.1www.tspaccount.net:443GET / HTTP/1.1 40-190216030/0/0W 0.008000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg2.png HTTP/1.1 41-1902-0/0/2. 0.006050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1902-0/0/4. 0.004020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-190216190/6/6W 0.020060.00.000.00 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 44-190216270/4/4W 0.853017450.00.020.02 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=gemoro-sparkle-spa-jewelry-and-watch-ultrasonic-cleaner SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 265subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 250 seconds, (range: 244...265)index usage: 9%, cache usage: 12%total entries stored since starting: 265total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 163 misstotal removes since starting: 0 hit, 0 miss <
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c4ca0fd5bApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 05:26:00 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 1 hour 23 minutes 49 seconds Server load: 0.35 0.49 0.62 Total accesses: 7720 - Total Traffic: 78.5 MB - Total Duration: 9459029 CPU Usage: u2797.3 s5183.14 cu51090200 cs12499800 - 1260000% CPU load 1.54 requests/sec - 16.0 kB/second - 10.4 kB/request - 1225.26 ms/request 2 requests currently being processed, 7 idle workers ______W_C......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762117660/18/667_ 6.93208305610.00.126.12 191.96.52.4http/1.1www.ss-cool.com:80POST /xmlrpc.php HTTP/1.0 1-1762112360/83/600_ 34.41317272210.00.477.46 159.223.108.26http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-1762116660/42/686_ 17.34308069310.00.286.07 61.14.233.38http/1.1www.ss-cool.com:443POST /xmlrpc.php HTTP/1.1 3-1762113210/68/552_ 20.06216404790.00.566.76 159.223.108.26http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-1762115620/51/675_ 19.36317348640.00.466.44 159.223.108.26http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 5-1762115100/59/749_ 19.242110049040.00.356.87 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 6-1762113330/73/542W 24.40006949010.00.454.11 159.223.108.26http/1.1localhost:443GET /server-status HTTP/1.1 7-1762115320/55/532_ 20.44106105620.00.425.73 191.96.52.4http/1.1www.ss-cool.com:443POST /xmlrpc.php HTTP/1.1 8-1762117441/15/496C 5.46116498161.40.135.17 159.223.108.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1762-0/0/340. 0.006957814132100.00.003.94 66.55.64.206http/1.1www.chonlateedesign.com:443GET /marijuana.php HTTP/1.1 10-1762-0/0/572. 0.00468107366430.00.004.74 40.77.167.47http/1.1www.ozonepluswater.net:443GET /wp-content/uploads/2019/11/02-product-07-230x173.jpg HTTP/ 11-1762-0/0/218. 0.003068192703360.00.002.72 172.68.244.210http/1.1www.lawbizeasy.com:80GET /adminer-3.3.2-en.php HTTP/1.0 12-1762-0/0/54. 0.0010340282130.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/381. 0.0053304988590.00.003.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/298. 0.00110303815530.00.002.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/233. 0.0049602434370.00.002.49 139.144.150.45http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 16-1762-0/0/98. 0.00107401709330.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/19. 0.0010580123810.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/8. 0.001091032160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 30subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 154 seconds, (range: 10...286)index usage: 1%, cache usage: 1%total entries stored since starting: 825total entries replaced since starting: 0total entries expired since starting: 795total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 4 hit, 2232 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-22 22:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6cd9d759dcApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 10:37:44 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 6 hours 35 minutes 32 seconds Server load: 1.50 1.36 1.44 Total accesses: 40245 - Total Traffic: 714.5 MB - Total Duration: 58038849 CPU Usage: u2751.35 s5148.59 cu50870900 cs12453100 - 267000% CPU load 1.7 requests/sec - 30.8 kB/second - 18.2 kB/request - 1442.14 ms/request 3 requests currently being processed, 7 idle workers _.__W___WC_....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743211470/60/3283_ 16.66069148363300.01.5670.90 162.158.175.124http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET //adminfuns.php HTTP/1.0 1-1743-0/0/3257. 0.0031047139910.00.0067.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1743213400/22/3406_ 6.140148874700.00.0665.30 196.203.63.106http/1.1www.thaidaoherb.com:443POST /xmlrpc.php HTTP/1.1 3-1743213590/14/3317_ 3.880044753390.00.0562.56 164.90.205.35http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 4-1743213660/11/3038W 3.220042031930.00.0742.39 124.120.27.176http/1.1www.chonlateefbc.com:80POST /wp-admin/admin-ajax.php HTTP/1.0 5-1743210340/73/3167_ 28.720043808180.01.4259.22 139.59.182.142http/1.1localhost:80GET /config.json HTTP/1.0 6-1743213720/13/2930_ 5.580140940650.00.0754.05 139.59.182.142http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 7-1743209880/92/2916_ 24.830139513090.03.4548.90 138.68.133.118http/1.1localhost:443GET /about HTTP/1.1 8-1743210130/80/2870W 27.580041926830.00.7840.95 138.68.133.118http/1.1localhost:443GET /server-status HTTP/1.1 9-1743211601/63/2539C 12.950036779211.42.1936.92 138.68.133.118http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1743211730/67/2139_ 15.800032044430.01.1434.95 164.90.205.35http/1.1localhost:80GET /telescope/requests HTTP/1.0 11-1743-0/0/1662. 0.00678026348540.00.0028.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/1478. 0.00668019985210.00.0030.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/1294. 0.00688021748900.00.0022.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743-0/0/901. 0.00675013446970.00.0017.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/548. 0.0066707324100.00.008.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/543. 0.0066908771470.00.008.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/205. 0.0039103058470.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/104. 0.0067901612270.00.002.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/73. 0.0049501440450.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/15. 0.006760238140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/14. 0.006920278290.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/100. 0.0026101733890.00.001.85 172.71.250.45http/1.1www.proplustech.co.th:443POST /xmlrpc.php HTTP/1.1 23-1743-0/0/12. 0.006630191960.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/101. 0.0029901209760.00.001.42 203.158.193.247http/1.1 25-1743-0/0/9. 0.006640283310.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/8. 0.006610353910.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/6. 0.006620264130.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743-0/0/4. 0.006800218360.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1743-0/0/7. 0.006740307910.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/7. 0.006830184790.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743-0/0/5. 0.006770391520.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1743-0/0/78. 0.0041901026520.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743-0/0/8. 0.006860210680.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1743-0/0/7. 0.006910184990.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/10. 0.006450367420.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743-0/0/4. 0.006820174810.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1743-0/0/8. 0.006850163710.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/7. 0.006580227090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/10. 0.006660153750.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743-0/0/96. 0.0015511061279840.00.001.36 172.68.234.188http/1.1www.accsmile.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 41-1743-0/0/2. 0.00684078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.00689041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.006600128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.004870756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.00696000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.00659080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.00672050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.00695010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.00671025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status:
Found on 2023-09-19 03:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6caca0bf15Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:23:19 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 1 hour 55 minutes 22 seconds Server load: 0.80 0.93 0.82 Total accesses: 10049 - Total Traffic: 141.0 MB - Total Duration: 13655498 CPU Usage: u2827.47 s5147.36 cu50713100 cs12419200 - 912000% CPU load 1.45 requests/sec - 20.9 kB/second - 14.4 kB/request - 1358.89 ms/request 4 requests currently being processed, 6 idle workers __R__W.__CW....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733100500/89/829_ 40.562110801890.00.6711.21 178.62.73.12http/1.1localhost:80GET /telescope/requests HTTP/1.0 1-1733101340/74/866_ 36.181111807740.00.5910.23 128.199.61.251http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-1733102750/54/810R 27.192011521270.00.379.18 52.167.144.141http/1.1www.nptpropertythailand.com:443 3-1733102370/44/789_ 24.091111534040.00.579.89 128.199.61.251http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-1733103850/31/749_ 16.37109571190.00.188.96 128.199.61.251http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1733105200/5/754W 2.05809646770.00.059.86 172.71.223.37http/1.1www.khlangkaew.com:443GET /wp-content/uploads/2022/01/663999484.363759.mp4 HTTP/1.1 6-1733-0/0/682. 0.0021049411464880.00.0011.06 172.70.130.125http/1.1www.tun36.com:80GET /wikindex.php HTTP/1.0 7-1733101840/69/626_ 32.76018573470.00.489.93 128.199.61.251http/1.1localhost:443GET /about HTTP/1.1 8-1733102580/53/758_ 25.99119837400.00.3911.33 178.62.73.12http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 9-1733102691/54/606C 27.53018162701.40.377.29 128.199.61.251http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1733102820/46/564W 25.05007047110.00.456.47 128.199.61.251http/1.1localhost:443GET /server-status HTTP/1.1 11-1733-0/0/408. 0.0034415275174640.00.005.96 27.254.96.168http/1.1www.thaicarsale.com:80POST /wp-cron.php?doing_wp_cron=1694891852.70569300651550292968 12-1733-0/0/316. 0.0086104061270.00.003.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/243. 0.0091403211470.00.0013.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1733-0/0/210. 0.0091503085090.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/236. 0.0091303313960.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/139. 0.0069502192300.00.001.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/138. 0.00131402080160.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/46. 0.0011550437180.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/9. 0.003058051440.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/20. 0.0030700165770.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1733-0/0/103. 0.00230701522820.00.001.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1733-0/0/13. 0.0030630106800.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/5. 0.003069026900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/2. 0.003078020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/3. 0.006911018690.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1733-0/0/86. 0.0062021959350.00.000.99 167.71.48.191http/1.1 27-1733-0/0/34. 0.0068310178140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/5. 0.0069020380.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 35subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 140 seconds, (range: 26...289)index usage: 1%, cache usage: 1%total entries stored since starting: 1409total entries replaced since starting: 0total entries expired since starting: 1374total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4309 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 19:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c8fc72f52Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 06:11:48 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 2 hours 9 minutes 36 seconds Server load: 0.97 0.48 0.40 Total accesses: 8353 - Total Traffic: 121.0 MB - Total Duration: 9052168 CPU Usage: u2672.49 s5091.19 cu50515900 cs12376300 - 809000% CPU load 1.07 requests/sec - 15.9 kB/second - 14.8 kB/request - 1083.7 ms/request 3 requests currently being processed, 15 idle workers __W_____________CC................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720198910/21/652_ 13.07008072820.00.697.84 159.223.108.26http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 1-1720201070/3/714_ 2.96007933210.00.0312.50 159.223.108.26http/1.1localhost:80GET /telescope/requests HTTP/1.0 2-1720201140/6/615W 0.02006614340.00.017.26 138.68.163.10http/1.1localhost:443GET /server-status HTTP/1.1 3-1720199980/7/641_ 8.06126716306620.00.077.32 162.158.155.58http/1.1www.time2hand.com:80GET /tag/ulysse-nardin/ HTTP/1.0 4-1720201540/5/697_ 1.67110368604200.00.0116.61 172.68.234.208http/1.1www.ptatun.or.th:80POST /wp-cron.php?doing_wp_cron=1694646705.78212690353393554687 5-1720201620/1/547_ 0.00015535180.00.006.00 138.68.163.10http/1.1localhost:443GET /about HTTP/1.1 6-1720200100/8/573_ 7.44016178060.00.096.77 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 7-1720200570/6/611_ 5.62016866640.00.068.77 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 8-1720201270/6/526_ 1.95106466910.00.038.05 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1720201680/1/547_ 1.07013306330620.00.027.86 51.15.17.105http/1.1www.xn--12cx2bef7bl0boq4ch6gugwGET /wp-admin/repeater.php HTTP/1.1 10-1720196360/48/471_ 16.79004804980.01.766.15 138.68.163.10http/1.1localhost:443GET /v2/_catalog HTTP/1.1 11-1720196420/53/423_ 20.92004475130.01.665.71 46.101.103.192http/1.1localhost:80GET /login.action HTTP/1.0 12-1720201750/1/308_ 0.00112732460.00.003.57 159.223.108.26http/1.1localhost:80GET /config.json HTTP/1.0 13-1720201390/5/63_ 1.9100620870.00.020.53 167.71.48.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1720200750/5/178_ 7.4708351521430.00.082.08 172.70.246.19http/1.1www.ptatun.or.th:80POST /wp-login.php HTTP/1.0 15-1720201810/1/60_ 0.0001436640.00.001.20 167.71.48.191http/1.1localhost:80GET /v2/_catalog HTTP/1.0 16-1720201871/1/138C 0.00002053421.40.002.36 138.68.163.10http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1720201931/1/170C 0.00001503340.20.005.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/106. 0.00186301291690.00.001.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/41. 0.0018710403400.00.000.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/131. 0.001187173848380.00.001.42 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 21-1720-0/0/40. 0.0018690364570.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/2. 0.0018620370.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/97. 0.001184199556150.00.000.99 172.173.66.58http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 24-1720-0/0/2. 0.0018590120.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 44subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 158 seconds, (range: 1...297)index usage: 1%, cache usage: 2%total entries stored since starting: 1904total entries replaced since starting: 0total entries expired since starting: 1860total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3086 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 23:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c4a77977cApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 06:46:04 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 2 hours 43 minutes 52 seconds Server load: 0.61 0.62 0.65 Total accesses: 13814 - Total Traffic: 200.0 MB - Total Duration: 16789034 CPU Usage: u2704.81 s5091.94 cu50462400 cs12365000 - 639000% CPU load 1.41 requests/sec - 20.8 kB/second - 14.8 kB/request - 1215.36 ms/request 4 requests currently being processed, 6 idle workers _W_.R__.........W..C_._........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716194040/22/1218_ 5.971115261150.00.1313.50 64.227.126.135http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-1716191550/56/1282W 18.640014959960.00.8513.69 64.227.126.135http/1.1localhost:443GET /server-status HTTP/1.1 2-1716194120/21/1236_ 5.630114114394000.00.4813.75 162.158.238.246http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 3-1716-0/0/1170. 0.0026014785510.00.0019.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1716189220/89/1121R 33.781138614367860.00.8314.03 172.71.166.247http/1.1www.khlangkaew.com:443 5-1716194180/23/1057_ 5.331111758350.00.4514.44 147.182.130.98http/1.1localhost:80GET /telescope/requests HTTP/1.0 6-1716194940/10/976_ 2.980111454730.00.0412.08 147.182.130.98http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 7-1716-0/0/1113. 0.0071012956760.00.0011.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1716-0/0/942. 0.0059011477870.00.0016.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1716-0/0/947. 0.0072010783130.00.0016.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1716-0/0/920. 0.0061011269360.00.0020.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716-0/0/614. 0.0026807594910.00.005.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1716-0/0/423. 0.0026707188860.00.0018.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/283. 0.0024304193770.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/94. 0.00680612810.00.002.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/10. 0.00245032890.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716192000/48/148W 15.63002056540.00.571.62 128.199.248.104http/1.1www.theangelluxury.com:80GET /repeater.php HTTP/1.0 17-1716-0/0/96. 0.0026901216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.002700110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716192151/46/46C 16.3201515021.40.430.43 64.227.126.135http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 20-1716192250/51/51_ 16.820507499600.00.550.55 128.199.248.104http/1.1www.theangelluxury.com:80GET /wp-consar.php HTTP/1.0 21-1716-0/0/12. 0.00208067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716192320/49/49_ 15.6301402690.00.510.51 64.227.126.135http/1.1localhost:443GET /about HTTP/1.1 23-1716-0/0/4. 0.00259040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 79subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 48 seconds, (range: 0...222)index usage: 2%, cache usage: 3%total entries stored since starting: 2112total entries replaced since starting: 0total entries expired since starting: 2033total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 114 hit, 5142 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 23:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c68d941e7Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 19:34:14 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 15 hours 32 minutes Server load: 0.38 0.64 0.71 Total accesses: 78245 - Total Traffic: 1.1 GB - Total Duration: 112355119 CPU Usage: u2896.02 s5098.57 cu50285700 cs12326200 - 112000% CPU load 1.4 requests/sec - 20.7 kB/second - 14.8 kB/request - 1435.94 ms/request 2 requests currently being processed, 8 idle workers _W___.._C..__._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702261850/82/6651_ 28.36296591643870.00.6393.32 172.70.34.106http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 1-1702261310/83/6617W 36.140092677780.03.94102.70 178.62.3.65http/1.1localhost:443GET /server-status HTTP/1.1 2-1702265020/42/6430_ 17.990193655490.00.3999.48 178.62.3.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-1702265080/36/6331_ 47.390091732440.00.3288.65 178.62.3.65http/1.1localhost:443GET /about HTTP/1.1 4-1702266120/26/5876_ 41.34080485525150.00.1986.80 162.158.238.60http/1.1www.siamerp.com:443GET /category/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0% 5-1702-0/0/6318. 0.00199086255740.00.0083.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1702-0/0/5652. 0.00207086051270.00.0078.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1702266640/25/5935_ 9.372086661740.00.2986.24 143.110.156.182http/1.1localhost:80GET /config.json HTTP/1.0 8-1702261381/87/5448C 69.970077629911.40.9170.91 178.62.3.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1702-0/0/4977. 0.00431070362040.00.0065.10 172.68.174.168http/1.1www.smetast.com:80POST /xmlrpc.php HTTP/1.0 10-1702-0/0/4338. 0.00691061043180.00.0071.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1702261510/88/3823_ 34.011052377610.00.9765.35 178.62.3.65http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 12-1702261570/68/3662_ 59.571055199070.012.5660.33 143.110.156.182http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 13-1702-0/0/1748. 0.00201024827990.00.0022.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702261690/84/1369_ 34.390018861930.00.9820.08 178.62.3.65http/1.1localhost:443GET /v2/_catalog HTTP/1.1 15-1702-0/0/1002. 0.00678012623620.00.0012.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/421. 0.00296408412010.00.006.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/352. 0.00312604099350.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/67. 0.00177046888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.001651701655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001770601344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0017701037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.001649604933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00177210733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0017710036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0017720086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0017693068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0017719010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.00164905501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0017703074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0017718010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.001682201144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0017717010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.00164447261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.001651502967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.001627403934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0017716041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0017690095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.00162756982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0045937000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0045923060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 47subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 111 seconds, (range: 10...295)index usage: 1%, cache usage: 2%total entries stored since starting: 14208total entries replaced since starting: 0total entries expired since starting: 14161total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 303 hit, 30867 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 12:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c87f13169Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:22:13 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 20 minutes 2 seconds Server load: 1.76 1.86 1.70 Total accesses: 22558 - Total Traffic: 278.8 MB - Total Duration: 29498235 CPU Usage: u2858.04 s5089.16 cu50053600 cs12276500 - 4.e+5% CPU load 1.45 requests/sec - 18.3 kB/second - 12.7 kB/request - 1307.66 ms/request 7 requests currently being processed, 7 idle workers WWWW_____CWW._._.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685198840/59/2060W 32.400028554810.00.5027.79 180.247.192.81http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 1-1685199690/35/1983W 22.140025074520.00.3225.61 180.247.192.81http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 2-1685199290/47/1906W 33.770023964320.00.5221.48 164.92.84.255http/1.1localhost:443GET /server-status HTTP/1.1 3-1685200310/24/1789W 10.640024716350.00.1622.92 167.94.138.36http/1.1www.chonlateeseal.com:443GET /favicon.ico HTTP/1.1 4-1685197930/77/1755_ 49.86060223472600.00.7621.33 172.70.90.170http/1.1www.dealaccounting.com:80GET /wp-login.php HTTP/1.0 5-1685200400/13/1570_ 8.810967217803070.00.1618.81 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1694049722.90244293212890625000 6-1685201000/6/1741_ 2.410120321788920.00.0420.64 180.247.192.81http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 7-1685197610/79/1817_ 50.820214323995660.01.0619.80 27.254.96.168http/1.1www.1smestartup.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 8-1685197860/76/1594_ 43.78088520221760.00.8418.07 180.247.192.81http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 9-1685201081/6/1572C 1.480021019241.40.0323.12 164.92.84.255http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1685198000/68/1109W 46.000014995760.00.9713.60 54.88.179.33http/1.1www.plastandtrans.com:443GET / HTTP/1.1 11-1685201140/6/898W 0.850011089940.00.0210.32 162.158.110.65http/1.1www.time2hand.com:80GET /wp-content/plugins/media-library-assistant/readme.txt HTTP 12-1685-0/0/768. 0.00224011441080.00.008.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1685198210/70/605_ 42.16019437200.00.829.55 164.92.84.255http/1.1localhost:443GET /about HTTP/1.1 14-1685-0/0/464. 0.0026106654360.00.005.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685198300/69/392_ 42.33004579980.00.614.49 167.172.20.95http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 16-1685-0/0/105. 0.00448101181390.00.001.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/118. 0.00437401201320.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/3. 0.0013114019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.001242111391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0013100015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001239010331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001241031185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001310708790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0013109010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0013106030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0013117010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0013104011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0013105012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001310209920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0013116010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 94subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 106 seconds, (range: 9...283)index usage: 3%, cache usage: 4%total entries stored since starting: 3629total entries replaced since starting: 0total entries expired since starting: 3535total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 64 hit, 7034 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c90f4a837Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 02:37:04 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 11 hours 13 minutes 50 seconds Server load: 6.95 5.31 6.04 Total accesses: 166952 - Total Traffic: 1.2 GB - Total Duration: 382583316 CPU Usage: u3182.67 s5115.56 cu49743300 cs12206400 - 153000% CPU load 4.13 requests/sec - 30.2 kB/second - 7.3 kB/request - 2291.58 ms/request 18 requests currently being processed, 8 idle workers W.WWWWWW____W_WWWWWWC_W__WW....................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-167471690/10/10367W 4.5900204673330.00.0382.36 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693769824.27607893943786621093 1-1674-0/0/10234. 0.0061941201071790.00.0083.90 172.68.234.197http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769816.1666 HTTP/1.0 2-167471950/9/10319W 6.1000201451670.00.0178.49 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769824.86467599868774414062 3-167461330/53/10031W 36.7800193099260.00.1081.89 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769824.2008 HTTP/1.0 4-167462190/46/9805W 32.9310195666050.00.0888.47 172.68.234.196http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769823.2199 HTTP/1.0 5-167455030/94/9691W 60.4600194153230.00.2777.88 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769823.92586803436279296875 6-167472410/8/9206W 3.7410186587850.00.0173.11 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769823.60639500617980957031 7-167458450/69/8991W 47.7000179788600.00.1765.07 172.68.234.204http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769824.5362 HTTP/1.0 8-167460850/55/8790_ 37.3401908179509130.00.1065.64 172.68.234.203http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693769822.8378 HTTP/1.0 9-167462500/43/8917_ 30.5101665182960430.00.1082.45 172.68.234.178http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769823.0644 HTTP/1.0 10-167462600/46/8311_ 30.8300170248510.00.0675.22 144.126.202.105http/1.1localhost:443GET /about HTTP/1.1 11-167455370/92/7717_ 60.5701659164892740.00.2149.95 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769822.8469 HTTP/1.0 12-167462660/43/7110W 31.3200154420700.00.0549.27 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769823.89617395401000976562 13-167466450/30/5907_ 19.9801094139252660.00.0833.88 172.70.250.70http/1.1www.altaccount.com:80GET /system_log.php HTTP/1.0 14-167455800/91/5640W 58.3400138298460.00.1848.75 172.68.234.5http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693769824.3886 HTTP/1.0 15-167455910/82/4735W 57.9900122699190.00.2026.72 144.126.202.105http/1.1localhost:443GET /server-status HTTP/1.1 16-167455930/84/3676W 60.4010105056140.00.1716.70 172.68.234.197http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769823.53963398933410644531 17-167463630/41/3185W 27.541091351080.00.0514.35 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 18-167463690/38/3200W 26.841094566500.00.0813.66 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693769823.74974989891052246093 19-167463890/37/2595W 26.171079596030.00.088.94 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693769823.74914002418518066406 20-167463951/38/2304C 28.310074321831.40.107.84 144.126.202.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 21-167464010/43/1967_ 27.010163915970.00.0511.17 164.92.192.25http/1.1localhost:80GET / HTTP/1.0 22-167464070/39/2026W 24.760063710030.00.079.16 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769824.2661 HTTP/1.0 23-167464510/38/1503_ 28.200167649827700.00.055.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769823.2017 HTTP/1.0 24-167464950/37/1179_ 24.740170641288840.00.053.59 172.68.234.179http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769822.8787 HTTP/1.0 25-167472950/5/1306W 3.440044295570.00.015.26 172.68.234.205http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769824.5248 HTTP/1.0 26-167473300/5/1045W 1.510035726440.00.003.20 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693769824.4389 HTTP/1.0 27-1674-0/0/1104. 0.001367038076940.00.004.41 198.54.120.17http/1.1www.uniqueworkthailand.com:443POST /xmlrpc.php HTTP/1.1 28-1674-0/0/760. 0.001715027264780.00.003.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/656. 0.001666823557150.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/579. 0.001697022425880.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/634. 0.001510205623673610.00.002.86 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768312.39440798759460449218 32-1674-0/0/575. 0.001417021754950.00.001.46 64.227.126.135http/1.1localhost:80GET /config.json HTTP/1.0 33-1674-0/0/492. 0.002118018286840.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/409. 0.002089015185930.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/304. 0.001965012136060.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1674-0/0/280. 0.002015011005120.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/317. 0.002043262011664300.00.001.10 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693767778.21682310104370117187 38-1674-0/0/155. 0.00192506854850.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/167. 0.00211607727360.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1674-0/0/151. 0.00198516704480.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/201. 0.00185524859094560.00.000.42 172.68.234.196http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693767966.2283 HTTP/1.0 42-1674-0/0/190. 0.00184922349099890.00.000.76 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693767971.9458 HTTP/1.0 43-1674-0/0/121. 0.001575515754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.001573919884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status:
Found on 2023-09-03 19:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c1ec23891Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 02:00:12 +07 Restart Time: Friday, 01-Sep-2023 00:22:12 +07 Parent Server Config. Generation: 1655 Parent Server MPM Generation: 1654 Server uptime: 1 hour 37 minutes 59 seconds Server load: 3.70 4.25 4.37 Total accesses: 36080 - Total Traffic: 235.9 MB - Total Duration: 41748358 CPU Usage: u2797.28 s4962.98 cu48757700 cs11953900 - 1030000% CPU load 6.14 requests/sec - 41.1 kB/second - 6.7 kB/request - 1157.11 ms/request 9 requests currently being processed, 6 idle workers WC...WCW_.R._....W.__..W...._W_................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1654141450/9/2346W 1.220027421930.00.0215.06 172.71.166.193http/1.1www.singkansard.com:443POST //xmlrpc.php HTTP/1.1 1-1654141541/2/2284C 0.65163626164227.00.0116.31 119.29.156.110http/1.1www.uniqueworkthailand.com:443POST /xmlrpc.php HTTP/1.1 2-1654-0/0/2336. 0.0084026715160.00.0014.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1654-0/0/2216. 0.0068025110950.00.0013.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1654-0/0/2227. 0.0024025740950.00.0019.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1654138740/70/2288W 32.530026335530.00.3713.44 46.101.103.192http/1.1localhost:443GET /server-status HTTP/1.1 6-1654137931/87/2271C 42.280026155211.40.4813.04 46.101.103.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1654138650/62/1993W 28.400023066670.00.4812.88 20.7.172.55http/1.1www.chonlateedesign.com:443POST //xmlrpc.php HTTP/1.1 8-1654140680/45/2136_ 21.06063224559670.00.2118.23 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 9-1654-0/0/2091. 0.007452024015230.00.0012.32 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 10-1654140740/45/1896R 21.02083522250920.00.3011.63 172.70.42.153http/1.1 11-1654-0/0/1860. 0.005183322088070.00.0012.12 172.70.42.152http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 12-1654138950/59/1645_ 31.15052919055890.00.4310.00 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 13-1654-0/0/1696. 0.0080020186350.00.0010.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1654-0/0/1287. 0.0093014701390.00.009.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1654-0/0/1177. 0.00101013766060.00.007.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1654-0/0/771. 0.0011208948630.00.004.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1654138350/56/933W 31.440011053520.00.375.59 103.179.191.214http/1.1www.uniqueworkthailand.com:443POST /xmlrpc.php HTTP/1.1 18-1654-0/0/466. 0.004005617810.00.002.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1654139190/50/649_ 26.67017255780.00.253.19 46.101.103.192http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 20-1654139250/58/353_ 28.48003790290.00.402.18 46.101.103.192http/1.1localhost:80GET /info.php HTTP/1.0 21-1654-0/0/96. 0.00940945250.00.000.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1654-0/0/214. 0.005902577820.00.001.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1654139440/52/249W 25.33003086530.00.281.39 172.69.65.151http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 24-1654-0/0/174. 0.008101732400.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1654-0/0/125. 0.008701461770.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1654-0/0/109. 0.0011501529610.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1654-0/0/14. 0.00910100910.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1654139710/51/51_ 25.1000623290.00.310.31 161.35.27.144http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 29-1654139770/57/57W 26.4200554500.00.300.30 23.100.82.46http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /xmlrpc.php HTTP/1.0 30-1654139790/57/57_ 28.4900738410.00.340.34 161.35.27.144http/1.1localhost:80GET /telescope/requests HTTP/1.0 31-1654-0/0/12. 0.00950132710.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1654-0/0/1. 0.00118000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 169subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 135 seconds, (range: 13...187)index usage: 6%, cache usage: 7%total entries stored since starting: 1876total entries replaced since starting: 0total entries expired since starting: 1707total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 11021 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-31 18:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c8fae27d8Apache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:06:15 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 3 minutes 57 seconds Server load: 8.25 5.89 5.47 Total accesses: 160404 - Total Traffic: 935.0 MB - Total Duration: 207645283 CPU Usage: u2905.34 s4909.08 cu47920800 cs11729900 - 327000% CPU load 8.8 requests/sec - 52.5 kB/second - 6.0 kB/request - 1294.51 ms/request 18 requests currently being processed, 2 idle workers WCRW_WC_RCWCW.WRR.WW..CW.......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164527060/97/9779W 60.2000126987590.00.5058.29 165.22.108.223http/1.1localhost:443GET /server-status HTTP/1.1 1-164530611/23/9605C 14.2800121988601.30.0953.77 165.22.108.223http/1.1localhost:443GET /about HTTP/1.1 2-164530780/20/9402R 12.310597122450080.00.1149.70 52.167.144.225http/1.1 3-164529030/47/9339W 31.1800120823950.00.2249.95 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 4-164529270/39/9262_ 25.360681118991470.00.2049.02 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 5-164527610/62/9064W 69.5800119191770.00.3448.14 172.71.167.105http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 6-164530041/38/8984C 17.9200118159591.40.1553.49 165.22.108.223http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-164530990/7/9067_ 3.970719117422940.00.0364.96 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 8-164529480/30/8696R 20.9700111422880.00.1758.42 172.71.166.60http/1.1 9-164531111/7/8485C 2.9400110242742.60.0346.05 165.22.108.223http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-164530150/28/8357W 18.0900105512820.00.1541.26 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 11-164528061/71/8455C 45.34019111558961.40.3645.68 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-164531170/5/8087W 3.1000105353990.00.0443.49 172.69.67.119http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 13-1645-0/0/7389. 0.006140697347180.00.0041.81 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 14-164531180/5/7235W 3.490094061950.00.0253.04 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 15-164529640/16/6607R 41.250197884258360.00.0836.29 168.61.158.165http/1.1 16-164529740/29/6242R 22.29293981851380.00.1837.32 147.182.130.98http/1.1 17-1645-0/0/5068. 0.003183064948570.00.0029.14 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 18-164529820/30/3608W 20.060047289880.00.1733.21 172.71.123.103http/1.1www.siamautomation.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B9%82%E0%B8%99 19-164529830/34/2388W 22.750029814500.00.1712.54 172.71.178.30http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 20-1645-0/0/1942. 0.0054226103190.00.0011.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1645-0/0/987. 0.00133011403700.00.005.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-164528181/42/345C 27.860134449445212.80.242.12 172.70.110.167http/1.1www.chonlateeauto.com:443GET /info.php HTTP/1.1 23-164528240/78/266W 42.74003104350.00.451.74 162.158.30.103http/1.1www.jbbgarment.com:80POST //xmlrpc.php HTTP/1.0 24-1645-0/0/205. 0.0014543692785260.00.001.78 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 25-1645-0/0/201. 0.0014357702551110.00.001.11 172.71.166.56http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 26-1645-0/0/128. 0.00155001633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0015860296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00159001155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0014705411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00145802410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00142721789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0015761000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00156024221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00156044021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00156093661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00156033821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0015755011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0015751018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0015759030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00157370118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0015742054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0015739072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00156083841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00156074171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 120subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 69 seconds, (range: 5...285)index usage: 4%, cache usage: 5%total entries stored since starting: 6170total entries replaced since starting: 0total entries expired since starting: 6050total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 27757 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:05 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c943d3eafApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:56 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 27 seconds Server load: 6.63 6.13 6.48 Total accesses: 410 - Total Traffic: 2.6 MB - Total Duration: 323534 CPU Usage: u2599.55 s4835.35 cu47808400 cs11700400 - 2.2e+8% CPU load 15.2 requests/sec - 100.2 kB/second - 6.6 kB/request - 789.107 ms/request 17 requests currently being processed, 6 idle workers C__W_RC_CCW_WWCC_CRCWCC........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209851/27/27C 9.6204812179413.40.170.17 168.61.149.69http/1.1www.uniqueworkthailand.com:443POST //wp-login.php HTTP/1.1 1-1644209860/22/22_ 8.990337180240.00.100.10 64.227.126.135http/1.1www.tspaccount.net:443GET /debug/default/view?panel=config HTTP/1.1 2-1644209890/24/24_ 7.420374163210.00.150.15 178.249.214.10http/1.1 3-1644210010/25/25W 9.2200185170.00.100.10 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 4-1644210080/23/23_ 5.700641224430.00.070.07 167.99.182.39http/1.1www.tafa.or.th:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1644210310/19/19R 9.2200202720.00.180.18 167.99.182.39http/1.1www.tafa.or.th:443 6-1644210371/19/19C 7.6500154991.40.150.15 144.126.202.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1644210390/23/23_ 8.270716165320.00.110.11 23.99.197.177http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 8-1644211391/10/22C 2.9403137663.80.020.10 128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1 9-1644210551/18/18C 4.9710118682.60.060.06 159.223.108.26http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1644210570/12/12W 5.2600125030.00.070.07 74.249.252.222http/1.1www.chonlateevip.com:443POST //wp-login.php HTTP/1.1 11-1644210630/19/19_ 7.410343177240.00.120.12 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 12-1644210730/28/28W 6.4210146280.00.080.08 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 13-1644210750/18/18W 8.0100163160.00.180.18 144.126.202.105http/1.1localhost:443GET /server-status HTTP/1.1 14-1644211461/5/6C 2.30032645785.50.040.04 164.90.222.93http/1.1www.tspaccount.net:443GET /about HTTP/1.1 15-1644210871/18/18C 8.020583163087.10.110.11 167.99.182.39http/1.1www.tafa.or.th:443GET /server-status HTTP/1.1 16-1644210930/19/19_ 7.320734147610.00.120.12 172.70.242.76http/1.1www.ptatun.or.th:80GET /wp-login.php?login-error=<script>alert(document.domain)</s 17-1644210991/12/12C 4.4311115331.40.330.33 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1644211810/0/17R 0.0000105990.00.000.11 178.249.214.10http/1.1 19-1644211111/20/20C 6.8713511433010.40.160.16 164.90.222.93http/1.1www.tspaccount.net:443GET /.vscode/sftp.json HTTP/1.1 20-1644211220/13/13W 5.6600111400.00.090.09 172.173.110.230http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST //wp-login.php HTTP/1.1 21-1644211481/4/4C 2.050140641.30.030.03 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 22-1644211691/2/2C 0.010031.40.000.00 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 36subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 283 seconds, (range: 277...295)index usage: 1%, cache usage: 1%total entries stored since starting: 36total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 150 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318f50fb6c8f50fb6c30d44f0fApache Status Apache Server Status for pop.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:44 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 41 seconds Server load: 0.82 0.88 1.23 Total accesses: 359 - Total Traffic: 4.4 MB - Total Duration: 98263 CPU Usage: u662.85 s1262.67 cu12804600 cs3078510 - 3.87e+7% CPU load 8.76 requests/sec - 110.4 kB/second - 12.6 kB/request - 273.713 ms/request 22 requests currently being processed, 0 idle workers WWRCCCCCCCRCCCWRCCCCCC............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439060/29/29W 5.1500126750.00.600.60 93.188.2.5http/1.1www.kncintergroup.com:443GET /wp-content/themes/seotheme/mar.php HTTP/1.1 1-45440980/1/41W 0.000096740.00.000.70 5.188.62.174http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.POST /wp-login.php?wp_lang=en_US HTTP/1.0 2-45439120/27/27R 3.3001102570.00.630.63 157.230.99.82http/1.1 3-45439221/37/37C 3.601192312.60.510.51 157.230.99.82http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-45439321/33/33C 3.171171572.70.400.40 157.230.99.82http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-45439551/60/60C 3.4411101432.60.580.58 144.126.213.222http/1.1localhost:443GET /info.php HTTP/1.1 6-45439901/33/33C 3.7100124302.30.490.49 157.230.99.82http/1.1localhost:443GET / HTTP/1.1 7-45440091/26/26C 1.520149172.60.200.20 157.230.99.82http/1.1localhost:443GET /.git/config HTTP/1.1 8-45440191/8/8C 1.540175272.70.040.04 157.230.99.82http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-45440431/8/8C 1.580032442.60.040.04 157.230.99.82http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-45440540/9/9R 0.870115330.00.020.02 172.105.91.149http/1.1localhost:443GET /api/search?folderIds=0 HTTP/1.1 11-45440561/9/9C 0.961023782.60.080.08 144.126.213.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 12-45440661/18/18C 0.44017932.60.040.04 157.230.99.82http/1.1localhost:443GET /.DS_Store HTTP/1.1 13-45440681/3/3C 0.951136722.60.010.01 157.230.99.82http/1.1localhost:443GET /.env HTTP/1.1 14-45440760/4/4W 0.890016470.00.010.01 157.230.99.82http/1.1localhost:443GET /server-status HTTP/1.1 15-45440840/6/6R 0.47018990.00.050.05 144.126.213.222http/1.1localhost:443GET /.git/config HTTP/1.1 16-45441071/1/1C 0.011242.70.000.00 144.126.213.222http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 17-45441091/3/3C 0.0100582.60.020.02 157.230.99.82http/1.1localhost:443GET /info.php HTTP/1.1 18-45441211/1/1C 0.000242.70.000.00 157.230.99.82http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 19-45441231/1/1C 0.000241.30.000.00 172.105.91.149http/1.1localhost:443GET /login.action HTTP/1.1 20-45441291/1/1C 0.000111.30.000.00 172.105.91.149http/1.1localhost:443GET /about HTTP/1.1 21-45441351/1/1C 0.000241.30.000.00 172.105.91.149http/1.1localhost:443GET /config.json HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 17subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 292 seconds, (range: 281...298)index usage: 0%, cache usage: 0%total entries stored since starting: 17total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 128 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 18:01
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d461a5431bafApache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 01:01:40 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 95 Parent Server MPM Generation: 94 Server uptime: 28 days 15 hours 19 seconds Server load: 2.01 2.02 2.07 Total accesses: 1850694 - Total Traffic: 23.8 GB - Total Duration: 2141121044 CPU Usage: u173.28 s105.98 cu32159.4 cs2232.06 - 1.4% CPU load .748 requests/sec - 10.1 kB/second - 13.5 kB/request - 1156.93 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031725no0yes032000 231729no0yes032000 331728no0yes131000 531726no0yes032000 Sum400 1127000 ________________________________................................ __________________________________W_____________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-94317250/2/14807_ 0.4680160261020.00.02193.84 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/15296_ 0.0070139013540.00.00198.97 147.182.130.98http/1.1 0-94317250/1/14868_ 0.4070150309570.00.00192.75 139.144.150.45http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-94317250/1/15049_ 0.4670145875140.00.00186.02 138.197.88.136http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/1/14951_ 0.4060147711750.00.00185.46 147.182.130.98h2localhost:443[0/0] Software caused connection abort 0-94317250/2/15174_ 0.4660156649260.00.00188.55 161.35.155.246http/1.1localhost:80GET /.git/config HTTP/1.1 0-94317250/1/14848_ 0.4150145588920.00.00200.31 165.232.76.155http/1.1localhost:80GET / HTTP/1.1 0-94317250/0/15155_ 0.0050150182090.00.00187.60 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 0-94317250/0/15114_ 0.0040145226990.00.00229.90 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-94317250/1/15249_ 0.4740148853460.00.00194.93 159.203.94.228http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-94317250/2/14814_ 0.4730154393450.00.00200.74 147.182.130.98http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-94317250/1/14825_ 0.4130147156450.00.00195.47 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 0-94317250/1/14694_ 0.4130137182790.00.00185.56 139.144.150.8http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/1/14846_ 0.4730169086640.00.00186.04 147.182.130.98http/1.1localhost:443GET /about HTTP/1.1 0-94317250/1/15800_ 0.4210141615400.00.00187.81 138.197.88.136http/1.1localhost:80GET /about HTTP/1.1 0-94317250/1/14850_ 0.4200165341270.00.00182.52 139.144.150.8http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/0/14900_ 0.00120143405120.00.00206.40 74.207.237.114http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/1/14960_ 0.42120144940050.00.00189.33 165.232.76.155http/1.1localhost:80GET /login.action HTTP/1.1 0-94317250/0/14780_ 0.00110160388390.00.00200.58 146.190.64.200http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/0/15001_ 0.00110144639410.00.00193.85 159.203.94.228http/1.1 0-94317250/0/14992_ 0.00110181496050.00.00193.47 162.243.161.105http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/15016_ 0.00110147053800.00.00204.12 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.1 0-94317250/1/15473_ 0.43100150756120.00.00188.31 161.35.155.246http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/0/14676_ 0.00914138765560.00.00190.21 159.203.94.228h2localhost:443[0/0] Software caused connection abort 0-94317250/0/14987_ 0.00100162205960.00.00186.91 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/14661_ 0.0090135981680.00.00197.05 164.90.222.93http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/1/15160_ 0.4490144713600.00.00194.53 165.232.76.155http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/1/14943_ 0.4490159195750.00.00213.34 161.35.155.246http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-94317250/0/14742_ 0.0090152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-94317250/0/15189_ 0.0090135139150.00.00225.17 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/14678_ 0.00817155573270.00.00199.16 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/1/14941_ 0.4480145815220.00.00185.19 138.197.88.136http/1.1localhost:80GET /.env HTTP/1.1 1-94-0/0/15731. 0.0020700138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-94-0/0/15813. 0.0020700136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15602. 0.0020700174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15318. 0.0020700150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-94-0/0/15276. 0.0020700146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-94-0/0/15655. 0.0020700134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-94-0/0/15351. 0.0020700172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-94-0/0/15185. 0.0020700165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15335. 0.0020700127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/14956. 0.0020700152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-94-0/0/15041. 0.0020700148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15506. 0.0020700159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-94-0/0/15329. 0.0020700159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/15189. 0.0020700137016410.00.00183.04 159.223.102.13http/1.1localhost:80GET /config.json HTT
Found on 2024-02-02 18:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d46116b360b7Apache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:21:44 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 20 minutes 23 seconds Server load: 2.83 3.02 3.05 Total accesses: 859457 - Total Traffic: 11.6 GB - Total Duration: 1067380108 CPU Usage: u188.89 s16.87 cu14583.6 cs765.51 - 8.42% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1241.92 ms/request 9 requests currently being processed, 55 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 014738no6yes428003 14311no3yes527000 Sum209 955003 ______R________R____W_______W_____R____W____WW____W_____________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7147380/298/6850_ 154.58167790651240.04.00100.41 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 0-7147380/253/7306_ 154.63084071976320.02.47101.59 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /brqemnz-19696detidm94oed HTTP/1.1 0-7147380/332/6888_ 154.630078445000.03.5499.42 137.184.150.232http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-7147380/290/7124_ 154.401075478500.03.0791.86 207.154.240.169http/1.1localhost:80GET /config.json HTTP/1.1 0-7147380/538/7097_ 154.472075946240.03.9489.04 137.184.150.232http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-7147380/251/7229_ 154.30134888680010.03.2595.64 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=refurbished-apple-watch-se-2nd-generation-gps-cellular- 0-7147380/294/7032R 154.24263670208450.03.62105.77 52.70.240.171http/1.1www.chonlateeboi.com:443GET /7652tbrmitems/etidm7.html HTTP/1.1 0-7147380/283/7121_ 154.42142073516990.03.2793.11 85.190.254.166http/1.1www.ozonepluswater.net:443POST /wp-login.php HTTP/1.1 0-7147380/234/7271_ 153.941075573140.02.93143.07 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-7147380/348/7153_ 154.430077965370.03.2690.17 137.184.150.232http/1.1localhost:80GET /.env HTTP/1.1 0-7147380/460/6951_ 154.21035882288770.05.17111.51 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=nike-air-max-sp-x-kasina-won-ang-orange-7-ii-34XJXWun H 0-7147380/281/6723_ 154.360083932380.03.4087.45 207.154.240.169http/1.1localhost:80GET /.git/config HTTP/1.1 0-7147380/279/6765_ 154.66035363594250.04.4189.99 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=4g-android-smartwatch-with-simcard-insert%E2%9A%A1%EF%B 0-7147380/268/6969_ 154.64085294461850.03.5195.21 85.208.96.193http/1.1www.chonlateeboi.com:443GET /19918eslwetidm31c HTTP/1.1 0-7147380/311/7637_ 154.401071932510.03.2196.27 164.90.205.35http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-7147380/314/6824R 154.362093625770.02.7787.57 3.224.220.101http/1.1www.chonlateeadmin.com:443 0-7147380/283/6965_ 153.971072509040.03.3990.07 128.199.195.68http/1.1localhost:80GET /about HTTP/1.1 0-7147380/270/7063_ 154.421071378920.02.9394.33 207.154.240.169http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-7147380/280/7030_ 154.460088336480.02.9788.49 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 0-7147380/337/7091_ 154.56184574625130.03.3595.66 185.191.171.15http/1.1www.chonlateeadmin.com:443GET /hvwarie-42790jetidm25u HTTP/1.1 0-7147381/334/7137W 150.43820112391820.04.9999.02 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7147380/271/6804_ 154.460078442500.02.7991.09 137.184.150.232http/1.1localhost:80GET /.git/config HTTP/1.1 0-7147380/300/7367_ 154.66044086198100.03.6397.55 139.59.209.23http/1.1www.importantaccount.com:443POST /wp-login.php HTTP/1.1 0-7147380/290/6906_ 154.040069652500.03.1297.57 164.90.205.35http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-7147380/411/6956_ 154.46293391777540.04.7788.05 162.0.231.109http/1.1www.dtacsme.com:80GET /wp-login.php HTTP/1.1 0-7147380/318/7122_ 154.392063195600.04.2190.71 164.90.205.35http/1.1localhost:80GET /config.json HTTP/1.1 0-7147380/279/6942_ 154.272076740180.03.4898.51 164.90.205.35http/1.1localhost:80GET /login.action HTTP/1.1 0-7147380/309/6991_ 154.200087448790.03.26119.54 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147381/268/6817W 153.781075805550.02.7485.52 23.22.35.162http/1.1www.chonlateeboi.com:443GET /9480qbkeetidm57qqf.htm HTTP/1.1 0-7147380/263/7110_ 154.42084878669680.02.79124.49 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /wzlemnz-33913yitems/eti HTTP/1.1 0-7147380/240/6750_ 154.58148584401960.02.5897.82 139.59.209.23http/1.1www.importantaccount.com:443GET /wp-login.php HTTP/1.1 0-7147380/294/7128_ 154.58184476131140.03.4191.21 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /triemnz-17972vitems/etidm7.html HTTP/1.1 1-743110/63/6874_ 30.50262477601460.00.6389.26 85.190.254.166http/1.1www.ozonepluswater.net:443GET /wp-login.php HTTP/1.1 1-743110/130/6673_ 30.60235178154650.01.5185.02 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=terroni-queen-gruppo-terroni-0-ii-JZjrA3SJ HTTP/1.1 1-743110/60/6620R 30.103836104720480.00.5284.97 23.22.35.162http/1.1www.chonlateeboi.com:443 1-743110/65/6359_ 30.511082443890.00.5684.03 137.184.150.232http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-743110/70/6554_ 30.631079592250.00.6897.43 159.223.108.26http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-743110/138/6653_ 30.281077589110.03.2089.53 164.92.84.255http/1.1 1-743110/71/6591_ 30.342089704870.00.6884.10 137.184.150.232http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-743111/74/6693W 30.511090110050.00.7089.10 162.0.231.109http/1.1www.dtacsme.com:80POST /wp-login.php HTTP/1.1 1-743110/84/6746_ 30.223060127660.00.6386.76 164.92.84.255h2localhost:443[0/0] Software caused connection abort 1-743110/51/6608_ 30.641082538020.00.5691.63 137.184.150.232http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-743110/26/6348_ 30.15284789126170.00.2789.83 164.92.84.255http/1.1 1-743110/72/6856_ 30.541078399210.00.8798.84 159.223.108.26http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-743111/68/6631W 30.290093797970.00.6788.31 159.223.108.26http/1.1localhost:443GET /server-status HTTP/1.1 1-7
Found on 2024-01-07 06:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d461f04e1e2cApache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 20:31:45 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 10 hours 30 minutes 24 seconds Server load: 2.41 2.50 2.50 Total accesses: 189342 - Total Traffic: 2.8 GB - Total Duration: 150838091 CPU Usage: u272.14 s14.66 cu2734.05 cs151.16 - 8.39% CPU load 5.01 requests/sec - 76.3 kB/second - 15.2 kB/request - 796.644 ms/request 6 requests currently being processed, 58 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06904no14yes5270010 25731no3yes131000 Sum2017 6580010 __W_W____________W_____R____W___................................ W_______________________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-069040/245/2218_ 137.513018163700.02.9034.69 206.81.1.88http/1.1localhost:80GET /about HTTP/1.1 0-069040/234/2349_ 137.95284417317180.03.0229.11 3.224.220.101http/1.1www.chonlateeboi.com:443GET /17469tlkaitems/etidm90.htm HTTP/1.1 0-069041/228/2177W 137.600029471390.02.9342.35 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /wxljupk-28011yitems/etidm.htm HTTP/1.1 0-069040/253/2384_ 137.751017577140.03.1631.04 162.243.184.251http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-069041/226/2309W 137.910018026600.02.8028.96 142.93.158.96http/1.1localhost:443GET /server-status HTTP/1.1 0-069040/263/2569_ 137.890017963970.03.4832.19 142.93.158.96http/1.1localhost:443GET /about HTTP/1.1 0-069040/254/2194_ 137.861017660490.02.8527.14 159.65.58.104http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-069040/229/2302_ 137.471128018330640.02.9030.16 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?nfmvrsm-67470zetid.htm HTTP/1.1 0-069040/235/2321_ 137.95398017312280.02.9763.77 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?ifhhsbr-303389ueti.html HTTP/1.1 0-069040/234/2280_ 137.74392717281680.03.0029.44 54.38.85.37http/1.1www.1smestartup.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 0-069040/246/2260_ 138.010020924180.02.8827.62 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069040/234/2190_ 137.96284517351790.03.0128.66 66.249.72.67http/1.1www.chonlateeadmin.com:443GET /trust.php?hngecaw-329622tetid.htm HTTP/1.1 0-069040/207/2159_ 137.823017760740.03.1530.74 162.243.184.251http/1.1localhost:80GET /.git/config HTTP/1.1 0-069040/277/2472_ 137.862109018363640.03.2132.61 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?tpssvcw-320898fetidm83g.htm HTTP/1.1 0-069040/216/2505_ 137.913020336600.02.7434.31 167.172.20.95http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-069040/241/2227_ 137.913017659340.02.8129.77 162.243.184.251http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-069040/236/2184_ 137.661017907790.03.2328.90 147.182.130.98http/1.1localhost:80GET /_all_dbs HTTP/1.1 0-069041/224/2351W 137.750017532840.02.7332.79 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?nikvrsm-27404xetidm41a.htm HTTP/1.1 0-069040/231/2374_ 137.753017124180.02.9131.31 159.65.58.104http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-069040/232/2212_ 137.613519265190.02.7927.02 147.182.130.98http/1.1localhost:80GET /server-status HTTP/1.1 0-069040/227/2278_ 137.853017480010.02.5633.10 147.182.130.98http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-069040/229/2280_ 137.943018400420.03.5233.73 54.38.85.37http/1.1www.1smestartup.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 0-069040/236/2541_ 137.793017076840.03.5131.51 142.93.158.96http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-069040/240/2197R 137.913016889490.02.9229.42 66.249.72.66http/1.1 0-069040/219/2214_ 137.852017930270.02.5829.16 162.243.184.251http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-069040/225/2216_ 137.753017102530.02.7428.62 167.172.20.95http/1.1localhost:80GET /.env HTTP/1.1 0-069040/222/2146_ 137.662123216663250.02.7127.43 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ehtjupk-34233gitems/eti.htm HTTP/1.1 0-069040/238/2291_ 138.04033717204280.03.1759.82 66.249.77.72http/1.1www.chonlateeaa.com:443GET /?w=electric-outboard-motors-all-you-need-to-know-2023-yy-d 0-069041/240/2166W 137.890017407710.02.8827.44 52.70.240.171http/1.1www.chonlateeboi.com:443GET /17116cafjetidm3 HTTP/1.1 0-069040/225/2504_ 137.852016693270.02.8568.19 167.172.20.95http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-069040/235/2178_ 137.74347317360760.02.7035.01 66.249.77.72http/1.1www.chonlateeaa.com:443GET /?w=find-great-deals-for-your-trip-yy-NlxWqMf2 HTTP/1.1 0-069040/390/2513_ 137.89088717493510.03.8330.55 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /twijupk-27384vetidm42gjv.htm HTTP/1.1 1-0-0/0/1494. 0.00284284410789900.00.0019.95 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1 1-0-0/0/1277. 0.00284290410369240.00.0016.79 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1 1-0-0/0/1292. 0.00284284310629170.00.0018.86 52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1 1-0-0/0/1320. 0.00284284010544740.00.0017.61 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1 1-0-0/0/1329. 0.00284284010311000.00.0021.84 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1 1-0-0/0/1313. 0.00284283710077550.00.0017.92 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1 1-0-0/0/1347. 0.00284286610387560.00.0016.37 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1 1-0-0/0/1346. 0.00284289710630850.00.0016.65 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1 1-0-0/0/1346. 0.00284283910436060.00.0017.96 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1 1-0-0/0/1273. 0.00284284110395360.00.0016.70 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1 1-0-0/0/1214. 0.00284292410022070.00.0015.53 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wuxaonh-247555kitems/eti.htm HTTP/1.1 1-0-0/0/1373. 0.002842107410816380.00.0018.55 23.22.35.162http/1.1
Found on 2024-01-05 13:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d4614e36bf9bApache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:17 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 31 minutes 58 seconds Server load: 2.22 2.08 1.75 Total accesses: 1082562 - Total Traffic: 11.9 GB - Total Duration: 678450049 CPU Usage: u26.48 s13.72 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.708 ms/request 8 requests currently being processed, 120 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no11yes329008 315011no3yes230002 415163no14yes131009 615166no0yes230000 Sum4028 81200019 ................................R_______W_____R_________________ ................................__________________________R_R___ W_______________________________................................ ________________________W___W___................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0051062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0051259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0051130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0051057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.005189958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.005187062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0051056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0051157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.005186455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0051059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.005187056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0051055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0051315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00511662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0051161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0051107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0051062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.005186960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0051058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00511256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0051498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0051160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0051074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00511192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0051058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0051083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0051122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00511163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0051859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0051261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0051157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0051059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-13150120/1/9127R 1.45242554198660.00.00142.47 65.154.226.170h2www.tspaccount.net:443[1/0] schedule: stream 1, GET / 1-13150120/5/8970_ 1.410055125040.00.03107.50 142.93.64.15http/1.1www.tspaccount.net:80GET /v2/_catalog HTTP/1.1 1-13150120/3/9102_ 1.190055516790.00.02131.73 139.59.230.191http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-13150120/3/9376_ 1.190057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150120/3/9356_ 1.540056503180.00.02111.87 205.169.39.149http/1.1localhost:80GET / HTTP/1.1 1-13150120/2/9081_ 1.500056147270.00.0099.02 139.144.150.205http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-13150120/1/9263_ 0.77087056057710.00.01109.58 154.28.229.245http/1.1 1-13150120/3/9351_ 1.251056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150121/1/9213W 0.840055728780.00.0190.53 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 1-13150120/3/9162_ 1.450073740350.00.01108.70 143.110.218.229http/1.1localhost:443GET / HTTP/1.1 1-13150120/4/9390_ 1.40028655727310.00.0295.48 154.28.229.245http/1.1www.tspaccount.net:443GET / HTTP/1.1 1-13150120/5/9134_ 1.49105592797</
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e3bcd8e61Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 14:12:01 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 10 hours 9 minutes 49 seconds Server load: 1.04 0.68 0.43 Total accesses: 29312 - Total Traffic: 367.6 MB - Total Duration: 39456071 CPU Usage: u3396.94 s6004.18 cu56642000 cs13848000 - 193000% CPU load .801 requests/sec - 10.3 kB/second - 12.8 kB/request - 1346.07 ms/request 8 requests currently being processed, 3 idle workers _CC_CCWC_RC....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079233340/84/2778_ 40.160034328360.00.5731.27 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 1-2079236431/54/2794C 24.540038883191.40.3943.47 167.172.20.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-2079233431/80/2600C 35.850036082691.40.4128.50 138.68.133.118http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 3-2079234970/60/2604_ 28.431034514250.00.6542.09 74.207.237.114http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-2079233641/70/2461C 36.721032874011.30.3124.47 138.68.133.118http/1.1localhost:443GET /.env HTTP/1.1 5-2079233791/78/2490C 33.470032062381.40.3326.01 74.207.237.114http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-2079236570/49/2333W 26.820032996090.00.1724.80 167.172.20.95http/1.1localhost:443GET /server-status HTTP/1.1 7-2079237471/34/2176C 22.18066528708665.60.1738.83 172.70.243.123http/1.1www.chonlateebranding.com:443POST /wp-login.php HTTP/1.1 8-2079238140/19/1983_ 7.00098426261310.00.0535.08 172.71.98.64http/1.1www.chorsiam.com:80POST //wp-login.php HTTP/1.0 9-2079238700/14/1865R 5.051025668260.00.0222.84 167.172.20.95http/1.1localhost:443GET /about HTTP/1.1 10-2079239251/2/1684C 0.000025650141.30.0016.62 138.68.133.118http/1.1localhost:443GET /.git/config HTTP/1.1 11-2079-0/0/1419. 0.00302255419939820.00.0014.13 108.162.212.45http/1.1www.chonlateecamping.com:80POST /wp-login.php HTTP/1.0 12-2079-0/0/882. 0.003034111435390.00.006.91 172.68.242.243http/1.1www.time2hand.com:80GET /wp-content/plugins/widgets-for-siteorigin/css/defaults.css 13-2079-0/0/719. 0.00303429211190.00.005.22 172.68.242.201http/1.1www.time2hand.com:80GET /wp-content/themes/chonlateedesign/fonts/font-awesome.min.c 14-2079-0/0/45. 0.0069390504170.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2079-0/0/124. 0.00693601903560.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2079-0/0/140. 0.00694301669140.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2079-0/0/49. 0.0069590430560.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2079-0/0/96. 0.00196957051161230.00.000.75 172.71.178.161http/1.1www.chonlateecamping.com:80GET / HTTP/1.0 19-2079-0/0/3. 0.0020800030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.0020803010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2079-0/0/5. 0.0020789070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2079-0/0/5. 0.0020794080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2079-0/0/52. 0.00202950275920.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2079-0/0/4. 0.0020791090.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 11subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 266 seconds, (range: 205...294)index usage: 0%, cache usage: 0%total entries stored since starting: 239total entries replaced since starting: 0total entries expired since starting: 228total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 10735 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 07:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e5623680bApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 03:07:53 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 2 hours 43 minutes 3 seconds Server load: 0.84 1.07 1.05 Total accesses: 9448 - Total Traffic: 89.2 MB - Total Duration: 15311890 CPU Usage: u3317.07 s5953.34 cu56303300 cs13768500 - 716000% CPU load .966 requests/sec - 9.3 kB/second - 9.7 kB/request - 1620.65 ms/request 6 requests currently being processed, 5 idle workers CC___R__W...W.C................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041219371/45/893C 22.931014752961.30.379.18 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 1-2041216361/81/839C 39.631014050752.60.667.89 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-2041217300/62/833_ 35.270014088430.00.448.42 139.144.150.45http/1.1localhost:80GET /.git/config HTTP/1.0 3-2041219580/41/763_ 13.580011618190.00.226.42 159.223.102.13http/1.1localhost:80GET /login.action HTTP/1.0 4-2041220060/35/786_ 12.59081412710370.00.239.01 161.35.27.144http/1.1 5-2041220130/25/656R 11.290010491310.00.255.87 139.144.150.45http/1.1localhost:80GET /.env HTTP/1.0 6-2041221720/2/581_ 0.00009639750.00.005.00 165.22.74.203http/1.1localhost:80GET /.env HTTP/1.0 7-2041217370/60/613_ 30.370010118030.00.505.92 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 8-2041220200/35/744W 13.130012072690.00.216.97 172.71.167.56http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 9-2041-0/0/598. 0.00353010474300.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-2041-0/0/554. 0.002788708839130.00.005.09 172.71.167.55http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%88%E0%B8%A3 11-2041-0/0/317. 0.002235985119190.00.002.97 172.68.234.163http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81 12-2041217550/55/193W 31.85002325720.00.521.27 139.59.182.142http/1.1localhost:443GET /server-status HTTP/1.1 13-2041-0/0/207. 0.0023510973220100.00.001.81 172.69.64.180http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 14-2041217611/55/142C 29.72001911261.40.481.14 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-2041-0/0/139. 0.0016202209180.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2041-0/0/20. 0.001487054740.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2041-0/0/14. 0.001500047850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2041-0/0/12. 0.001498040310.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2041-0/0/98. 0.0087501631250.00.000.86 138.197.88.136http/1.1 20-2041-0/0/178. 0.0096203353390.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2041-0/0/157. 0.00113402513850.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2041-0/0/104. 0.00147901813100.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2041-0/0/2. 0.001504050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2041-0/0/5. 0.001484022870.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 215 seconds, (range: 113...296)index usage: 0%, cache usage: 0%total entries stored since starting: 124total entries replaced since starting: 0total entries expired since starting: 115total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3757 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 20:07 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7ec8674503Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 08:56:43 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 4 hours 54 minutes 32 seconds Server load: 0.87 0.67 0.56 Total accesses: 17918 - Total Traffic: 342.7 MB - Total Duration: 25518211 CPU Usage: u3245.44 s5861.01 cu55539900 cs13590800 - 391000% CPU load 1.01 requests/sec - 19.9 kB/second - 19.6 kB/request - 1424.17 ms/request 6 requests currently being processed, 4 idle workers ._CCWCR__W._...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965-0/0/1555. 0.00103023265450.00.0037.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-196539660/89/1565_ 50.890121000570.01.0833.80 161.35.27.144http/1.1localhost:80GET /.DS_Store HTTP/1.0 2-196542451/54/1590C 25.271123035881.31.8424.45 165.22.108.223http/1.1localhost:443GET /about HTTP/1.1 3-196540891/73/1549C 38.130021212671.40.9534.20 165.22.108.223http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-196541170/71/1417W 41.340019601490.00.7728.26 165.22.108.223http/1.1localhost:443GET /server-status HTTP/1.1 5-196541291/65/1376C 42.551119428372.60.8517.42 165.22.108.223http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-196541360/69/1206R 37.820115838740.01.7412.71 139.144.150.23http/1.1localhost:80GET /.DS_Store HTTP/1.0 7-196542130/55/1242_ 26.600117476260.00.4812.31 159.203.63.67http/1.1 8-196541420/68/1168_ 37.580115620570.01.1312.57 104.131.1.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-196547500/15/990W 4.816014445050.015.2942.28 146.190.64.200http/1.1www.chonlateefood.com:443GET / HTTP/1.1 10-1965-0/0/834. 0.00106013121390.00.009.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-196547580/25/834_ 8.420213183800.00.1524.72 128.199.61.251http/1.1localhost:80GET /server-status HTTP/1.0 12-1965-0/0/544. 0.00124807785360.00.007.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1965-0/0/407. 0.00496915995814690.00.004.44 162.158.170.247http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 14-1965-0/0/213. 0.00626402611590.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1965-0/0/207. 0.00626303153320.00.005.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1965-0/0/463. 0.00626706605010.00.006.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1965-0/0/197. 0.0046115773086220.00.002.13 162.158.239.34http/1.1www.chonlateetravel.com:80GET /wp-content/outcms.php?up HTTP/1.0 18-1965-0/0/140. 0.00706515341865060.00.002.38 162.158.189.248http/1.1www.thaidocuments.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A3%E0%B8%AD%E0%B8%87 19-1965-0/0/105. 0.00829102193620.00.0015.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1965-0/0/199. 0.00705413122340.00.004.02 137.184.162.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 21-1965-0/0/10. 0.008268086660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1965-0/0/4. 0.008286025900.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1965-0/0/4. 0.008294017650.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1965-0/0/96. 0.0070594821570840.00.001.29 137.184.150.232http/1.1 25-1965-0/0/1. 0.008303000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1965-0/0/2. 0.008301013470.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 5subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 294 seconds, (range: 292...297)index usage: 0%, cache usage: 0%total entries stored since starting: 559total entries replaced since starting: 0total entries expired since starting: 554total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 7405 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-17 01:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e2417d3fdApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:33:58 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 31 minutes 45 seconds Server load: 0.93 0.74 0.56 Total accesses: 50995 - Total Traffic: 933.0 MB - Total Duration: 97480534 CPU Usage: u3035.65 s5771.14 cu55152900 cs13502400 - 2.e+5% CPU load 1.49 requests/sec - 27.8 kB/second - 18.7 kB/request - 1911.57 ms/request 10 requests currently being processed, 5 idle workers CC_CC__WWR_CC.C_.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193277111/14/4269C 1.160186871871.40.05118.16 46.101.103.192http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-193273221/73/4201C 24.380080383991.30.4852.80 138.68.163.10http/1.1localhost:443GET /config.json HTTP/1.1 2-193276770/27/4207_ 3.150179364620.00.1055.76 138.68.163.10http/1.1localhost:443GET /.env HTTP/1.1 3-193273331/86/4078C 31.001179371031.40.5770.42 138.68.163.10http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 4-193276841/26/4122C 5.331178729341.40.1063.66 74.207.237.46http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-193277350/13/3820_ 0.090169451430.00.0246.35 74.207.237.46http/1.1localhost:443GET /.env HTTP/1.1 6-193276860/20/3804_ 5.761073584990.00.2958.54 46.101.103.192http/1.1localhost:443GET /v2/_catalog HTTP/1.1 7-193277460/8/3693W 1.600073410100.00.0393.91 178.62.3.65http/1.1www.chonlateefood.com:443GET /.vscode/sftp.json HTTP/1.1 8-193273860/69/3440W 21.570065786180.00.3755.56 46.101.103.192http/1.1localhost:443GET /server-status HTTP/1.1 9-193273930/69/3031R 24.601057063830.00.4235.78 46.101.103.192http/1.1localhost:443GET /about HTTP/1.1 10-193277530/6/2787_ 0.92092752695630.00.0243.52 172.71.102.39http/1.1www.ptatun.or.th:80GET /wp-content/alfacgiapi/perl.alfa HTTP/1.0 11-193277561/7/2112C 0.031041595901.30.0130.86 138.68.163.10http/1.1localhost:443GET /.git/config HTTP/1.1 12-193277651/3/1994C 0.011035731011.30.0034.48 74.207.237.46http/1.1localhost:443GET /.git/config HTTP/1.1 13-1932-0/0/1745. 0.005037768650.00.00116.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-193277731/6/950C 0.020017948721.30.0110.26 74.207.237.46http/1.1localhost:443GET /config.json HTTP/1.1 15-193277800/2/565_ 3.43045308773680.00.1020.57 178.62.3.65http/1.1www.chonlateefood.com:443GET / HTTP/1.1 16-1932-0/0/444. 0.0062517363220.00.003.83 172.71.150.27http/1.1www.anumotanaboon.com:443POST /xmlrpc.php HTTP/1.1 17-1932-0/0/250. 0.00390302763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00475107137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00540002780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00540105022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0053910690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00539502695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.004593192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.005396029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00524801528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00487502033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00469001828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00144530140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00144420108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 16subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 251 seconds, (range: 212...294)index usage: 0%, cache usage: 0%total entries stored since starting: 401total entries replaced since starting: 0total entries expired since starting: 385total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 29293 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7ee8c8b47dApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:37 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 50 seconds Server load: 6.51 7.07 6.76 Total accesses: 659 - Total Traffic: 17.3 MB - Total Duration: 1162788 CPU Usage: u3027.93 s5670.12 cu54400400 cs13297400 - 1.35e+8% CPU load 13.2 requests/sec - 354.0 kB/second - 26.9 kB/request - 1764.47 ms/request 29 requests currently being processed, 12 idle workers CCRWR_WRRR_.WWR_WW_RWW_WRCW_C_W___W_W._WW..RC..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-190214681/9/13C 2.1300212370.20.090.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-190211231/23/23C 6.2904243575117.00.210.21 38.240.225.43http/1.1www.tspaccount.net:443GET / HTTP/1.1 2-190211470/15/15R 6.1401423810.00.270.27 52.70.240.171http/1.1www.chonlateeadmin.com:443 3-190211560/25/25W 9.1900430930.00.120.12 65.154.226.170http/1.1www.tspaccount.net:443GET / HTTP/1.1 4-190211620/24/24R 8.7701395220.00.190.19 65.154.226.170http/1.1www.tspaccount.net:443 5-190211740/20/20_ 8.230453425400.00.310.31 198.44.140.139http/1.1www.tspaccount.net:443GET / HTTP/1.1 6-190211800/31/31W 5.2010251430.00.290.29 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2021-chevrolet-corvette-stingray-vs-2022-chevy-corvette 7-190214830/7/22R 3.2204049318040.00.040.16 162.158.87.150http/1.1 8-190211880/19/19R 5.6000370320.00.540.54 198.199.121.22http/1.1www.tspaccount.net:80GET /config.json HTTP/1.0 9-190211940/20/20R 7.1101418290.00.580.58 205.169.39.155http/1.1www.tafa.or.th:443 10-190212000/22/22_ 8.1205446422440.00.190.19 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0040855488.html HTTP/1.1 11-1902-0/0/19. 0.0030369430.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-190212190/19/19W 5.9600372130.00.160.16 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 13-190214920/7/10W 2.4330113410.00.080.09 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=chevrolet-corvette-stingray-2lt-coupe-2022-price-in-rus 14-190212310/21/21R 5.350820355560.00.180.18 104.131.1.32http/1.1www.tspaccount.net:443 15-190214980/5/12_ 6.1903576334290.00.080.16 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0039641984.html HTTP/1.1 16-190212430/15/15W 5.9300499520.02.282.28 3.224.220.101http/1.1www.chonlateeboi.com:443GET /21233emxgeti.html HTTP/1.1 17-190212490/25/25W 5.4850207390.00.220.22 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-bg.png HTTP/1.1 18-190212510/20/20_ 9.6201476960.00.200.20 159.203.94.228http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 19-190212670/25/25R 4.8801136262390.00.300.30 178.128.151.41http/1.1 20-190212730/12/12W 3.2250387610.02.822.82 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-Recovered.png HTTP/1.1 21-190212790/17/17W 8.6600422220.00.320.32 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 22-190212850/21/21_ 6.5401303500.00.270.27 161.35.190.56http/1.1localhost:443GET / HTTP/1.1 23-190215310/5/7W 0.060021710.00.040.05 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-review-pricing-and-specs-mm-Qkp 24-190212920/20/20R 5.4401399220.00.590.59 205.169.39.155http/1.1www.tafa.or.th:443 25-190212981/20/20C 7.4400436571.40.480.48 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 26-190213040/15/15W 3.7630340440.01.691.69 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 27-190215400/6/9_ 1.940084080.00.030.05 198.199.121.22http/1.1www.tspaccount.net:80GET /telescope/requests HTTP/1.0 28-190213111/22/22C 8.11025023847727.20.600.60 3.224.220.101http/1.1www.chonlateeboi.com:443GET /21142emxgetidm12e HTTP/1.1 29-190213140/20/20_ 2.9800394260.02.342.34 159.223.108.26http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 30-190215420/5/13W 1.7300286000.00.010.23 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 31-190213260/18/18_ 7.4700369750.00.220.22 164.90.222.93http/1.1localhost:443GET /about HTTP/1.1 32-190215560/3/11_ 0.0600162320.00.020.15 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2019/08/Icon_TAFA-07.png HTTP/1.1 33-190215580/3/5_ 2.2300137750.00.030.05 167.71.185.75http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 34-190213480/18/18W 8.5010371090.00.260.26 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=2022-chevrolet-corvette-classic-cars-for-sale-michigan- 35-190215640/7/7_ 0.050018500.00.020.02 104.131.1.32http/1.1 36-190215660/1/1W 0.004030.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg1.png HTTP/1.1 37-1902-0/0/4. 0.001030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-190215910/3/3_ 0.050041850.00.320.32 138.197.88.136http/1.1www.tspaccount.net:80GET /telescope/requests HTTP/1.0 39-190215970/1/1W 0.000315331560.00.000.00 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0043606556.html HTTP/1.1 40-190216030/0/0W 0.004000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg2.png HTTP/1.1 41-1902-0/0/2. 0.002050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1902-0/0/4. 0.000020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-190216190/5/5R 0.010040.00.000.00 159.203.182.222http/1.1 44-190216271/4/4C 0.850865174514.50.020.02 185.191.171.11http/1.1www.mkandptfoods.com:443GET /m01310657929.html HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 248subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 255 seconds, (range: 248...269)index usage: 8%, cache usage: 11%total entries stored since starting: 248total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 137 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e56915e83Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 10:46:50 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 6 hours 44 minutes 39 seconds Server load: 0.60 0.67 0.73 Total accesses: 39431 - Total Traffic: 587.9 MB - Total Duration: 53172655 CPU Usage: u2805.43 s5188.64 cu51103100 cs12502500 - 262000% CPU load 1.62 requests/sec - 24.8 kB/second - 15.3 kB/request - 1348.5 ms/request 5 requests currently being processed, 5 idle workers ._.._C_.C._.WW.._C................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762-0/0/3224. 0.00277040705190.00.0057.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-176216680/60/3094_ 14.140142110160.00.3959.56 146.190.98.165http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-1762-0/0/3225. 0.00280128842578310.00.0039.94 172.68.234.181http/1.1www.smebkk.com:80POST /wp-cron.php?doing_wp_cron=1695440527.94292497634887695312 3-1762-0/0/2942. 0.00268038675340.00.0040.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-176217490/49/3134_ 16.090139466510.00.4353.58 146.190.98.165http/1.1localhost:443GET / HTTP/1.1 5-176217111/52/2974C 13.370142859291.40.4135.58 146.190.98.165http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-176217560/46/2817_ 18.940038058530.00.6235.43 146.190.98.165http/1.1 7-1762-0/0/2596. 0.00278035491230.00.0037.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-176217011/52/2360C 20.740132480191.30.5630.17 146.190.98.165http/1.1localhost:443GET /about HTTP/1.1 9-1762-0/0/2293. 0.00267030894000.00.0030.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-176215350/78/2247_ 21.690129568560.00.6128.53 146.190.98.165http/1.1localhost:443GET /v2/_catalog HTTP/1.1 11-1762-0/0/2039. 0.00279029964430.00.0029.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-176217190/46/1491W 14.420021082500.00.4330.88 146.190.98.165http/1.1localhost:443GET /server-status HTTP/1.1 13-176215770/72/1317W 26.160018673790.01.8418.15 47.128.21.255http/1.1www.nptpropertythailand.com:443GET /wp-content/uploads/2022/07/2997.jpg HTTP/1.1 14-1762-0/0/1131. 0.00276016367270.00.0020.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/974. 0.00275012116160.00.0013.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-176217730/43/720_ 18.3103439272340.00.489.91 146.190.98.165http/1.1 17-176217791/47/164C 14.80011594622.60.373.12 146.190.98.165http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 18-1762-0/0/230. 0.0027404522590.00.004.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/193. 0.00249902580020.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1762-0/0/119. 0.00249101371060.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/97. 0.00200101093080.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/13. 0.002482069640.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/23. 0.002492092140.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/13. 0.002496039470.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/1. 0.004871000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 158subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 60 seconds, (range: 7...141)index usage: 5%, cache usage: 7%total entries stored since starting: 5613total entries replaced since starting: 0total entries expired since starting: 5455total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 218 hit, 13335 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 03:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e976cbc28Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 08:43:05 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 4 hours 40 minutes 52 seconds Server load: 1.60 2.00 1.75 Total accesses: 25159 - Total Traffic: 379.8 MB - Total Duration: 34708868 CPU Usage: u2855.35 s5168.14 cu50863800 cs12451700 - 376000% CPU load 1.49 requests/sec - 23.1 kB/second - 15.5 kB/request - 1379.58 ms/request 8 requests currently being processed, 8 idle workers __WC_WWW_CCR___._................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743123720/5/2164_ 0.020030646390.00.0428.13 68.183.64.176http/1.1localhost:443GET /about HTTP/1.1 1-1743121340/56/2234_ 34.280030451520.00.6232.36 23.129.64.142http/1.1www.tspaccount.net:443POST /xmlrpc.php HTTP/1.1 2-1743121860/55/2312W 28.910031090400.00.6341.52 68.183.64.176http/1.1localhost:443GET /server-status HTTP/1.1 3-1743120181/83/2158C 49.5701428478185.30.9443.14 172.173.82.109http/1.1www.1smestartup.com:443GET /wp-content/index.php HTTP/1.1 4-1743121920/51/1984_ 21.941135826443640.00.4724.58 172.173.82.109http/1.1www.1smestartup.com:443GET /wp-content/plugins/ccx/ HTTP/1.1 5-1743123780/1/2034W 0.001528546190.00.0035.23 49.230.122.76http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/2019/07/edit-Slide_Home-03.jpg HTTP/1.1 6-1743123050/23/1837W 13.220120125310900.00.2931.96 49.230.122.76http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/2019/07/edit-Slide_Home-04.jpg HTTP/1.1 7-1743123120/19/1849W 5.041824815710.00.1423.84 49.230.122.76http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/2019/07/edit-Slide_Home-02.jpg HTTP/1.1 8-1743123190/22/1816_ 10.611025420840.00.3023.02 172.173.82.109http/1.1www.1smestartup.com:80GET /wp-content/index.php HTTP/1.0 9-1743123801/4/1688C 0.020022727381.40.0521.52 68.183.64.176http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1743120411/82/1380C 47.0911009202474169.51.2120.69 49.230.122.76http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/2019/07/edit-feature_Home-03.jpg HTTP/1 11-1743123900/1/1046R 0.001116127380.00.0015.41 192.42.116.181http/1.1www.tspaccount.net:443 12-1743123920/1/927_ 0.000136312194720.00.2212.97 49.230.122.76http/1.1www.hotlineservicethailand.com:GET /wp-content/themes/chonlateedesign/images/header.jpg HTTP/1 13-1743124000/2/678_ 0.67075410607180.00.029.93 23.22.35.162http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%9F%E0%B8%B4%E0%B8%A1 14-1743124040/1/279_ 0.00010093083440.00.044.64 49.230.122.76http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/2019/07/edit-Slide_Home-01.jpg HTTP/1.1 15-1743-0/0/301. 0.00294214810.00.004.00 49.230.122.76http/1.1www.hotlineservicethailand.com:GET /wp-content/plugins/so-widgets-bundle/js/jquery.cycle.swipe 16-1743119470/94/370_ 58.82004865120.01.185.12 192.227.156.98http/1.1www.nptpropertythailand.com:80GET /wp-login.php HTTP/1.0 17-1743-0/0/102. 0.0034801817380.00.001.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 303subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 25 seconds, (range: 0...65)index usage: 10%, cache usage: 13%total entries stored since starting: 5170total entries replaced since starting: 0total entries expired since starting: 4867total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 108 hit, 7284 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-19 01:41 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e2f155652Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 16-Sep-2023 21:14:15 +07 Restart Time: Saturday, 16-Sep-2023 04:02:13 +07 Parent Server Config. Generation: 1732 Parent Server MPM Generation: 1731 Server uptime: 17 hours 12 minutes 2 seconds Server load: 0.99 0.86 0.67 Total accesses: 114951 - Total Traffic: 1.7 GB - Total Duration: 218979370 CPU Usage: u2795.63 s5137.36 cu50703300 cs12416900 - 102000% CPU load 1.86 requests/sec - 29.0 kB/second - 15.6 kB/request - 1904.98 ms/request 3 requests currently being processed, 8 idle workers ___W_____..CW..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1731167470/49/9127_ 26.721878170590160.00.52153.93 162.158.179.40http/1.1www.solucare.co.th:80GET /wp-login.php HTTP/1.0 1-1731168640/26/9269_ 16.3901693165266760.00.21154.23 67.205.12.218http/1.1www.wecanfixtrading.com:443GET /wp-login.php HTTP/1.1 2-1731169440/16/8524_ 13.524790185096180.00.13115.15 162.158.182.122http/1.1www.siamautomation.com:443GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B9%82%E0%B8%99%E0%B9%8A 3-1731165770/59/8544W 28.5010160645320.00.81109.00 172.71.215.34http/1.1www.solucare.co.th:80POST /wp-login.php HTTP/1.0 4-1731166080/69/7977_ 30.880837180073600.00.66137.78 27.254.96.168http/1.1www.wecanfixtrading.com:443POST /wp-cron.php?doing_wp_cron=1694873653.84176397323608398437 5-1731166160/63/8558_ 38.1220153531940.01.01131.11 167.99.184.41http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-1731168800/30/8134_ 18.692791139742700.00.38113.59 162.158.238.69http/1.1www.siamautomation.com:443GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2 7-1731167220/53/7947_ 27.8530142047530.01.30117.33 167.99.184.41http/1.1localhost:443GET /about HTTP/1.1 8-1731169530/16/7475_ 11.7230132346080.00.11128.46 167.99.184.41http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 9-1731-0/0/6516. 0.00230110856620.00.0092.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1731-0/0/6165. 0.00220108509770.00.0094.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1731170771/7/5762C 3.4610134036141.40.0393.57 167.99.184.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-1731170830/5/5231W 3.8200100290080.00.0864.58 167.99.184.41http/1.1localhost:443GET /server-status HTTP/1.1 13-1731-0/0/3839. 0.00810673964400.00.0090.59 172.70.142.173http/1.1www.siamerp.com:443GET /wp-content/plugins/cookie-law-info/public/js/cookie-law-in 14-1731-0/0/2895. 0.001256059211320.00.0041.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1731-0/0/2239. 0.00678116543172440.00.0026.28 162.158.182.122http/1.1www.siamautomation.com:443GET /category/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0% 16-1731-0/0/1309. 0.001257032167860.00.0017.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1731-0/0/870. 0.0076059414056970.00.0011.77 162.158.182.123http/1.1www.siamautomation.com:443GET /%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B8%99%E0%B9%88%E0%B8%B2%E0% 18-1731-0/0/812. 0.007782013448240.00.0010.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1731-0/0/560. 0.00778609111300.00.007.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1731-0/0/421. 0.00778895715910.00.005.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1731-0/0/438. 0.0072275646412060.00.005.02 172.70.254.39http/1.1www.orderaccounting.com:80GET /?author=25 HTTP/1.0 22-1731-0/0/202. 0.00777903983050.00.003.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1731-0/0/488. 0.0072325059714010.00.005.91 172.70.55.52http/1.1www.orderaccounting.com:80GET /?author=21 HTTP/1.0 24-1731-0/0/226. 0.001797504109940.00.003.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1731-0/0/131. 0.002376802622980.00.001.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1731-0/0/42. 0.002377101476380.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1731-0/0/121. 0.002376502604270.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1731-0/0/26. 0.00237630598360.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1731-0/0/65. 0.002351101486320.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1731-0/0/145. 0.00232772272841110.00.001.39 34.212.135.232http/1.1www.cnb.co.th:443GET /wp-content/themes/sydney/fonts/font-awesome-v5/all.min.css 31-1731-0/0/23. 0.00237810558830.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1731-0/0/17. 0.00237840177300.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1731-0/0/44. 0.00237620514260.00.000.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1731-0/0/123. 0.00232685683168160.00.001.37 34.212.135.232http/1.1www.cnb.co.th:443GET /wp-content/uploads/2023/08/golden-abacus-with-chinese-rmb- 35-1731-0/0/152. 0.00232864042613490.00.001.51 51.79.161.78http/1.1www.pentorproperty.com:80GET /wp-login.php HTTP/1.0 36-1731-0/0/31. 0.00237740643540.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1731-0/0/132. 0.002364603673140.00.001.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1731-0/0/45. 0.00236180622800.00.000.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1731-0/0/23. 0.00237670459730.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1731-0/0/27. 0.00237590478010.00.000.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1731-0/0/12. 0.00472460248910.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1731-0/0/105. 0.00467063942319840.00.001.87 23.97.205.210http/1.1www.ss-cool.com:443POST /wp-login.php HTTP/1.1 43-1731-0/0/10. 0.0047274362040.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1731-0/0/15. 0.00472450357110.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1731-0/0/99. 0.004661416283147040.00.001.20 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 46-1731-0/0/9. 0.00472260303520.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1731-0/0/8. 0.00472500271660.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1731-0/0/7. 0.00472470237160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1731-0/0/11. 0.00472387207120.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request Req
Found on 2023-09-16 14:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e8ff96ad4Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 05:24:43 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 1 hour 22 minutes 31 seconds Server load: 0.61 0.54 0.42 Total accesses: 4346 - Total Traffic: 55.2 MB - Total Duration: 5387787 CPU Usage: u2787.59 s5116.05 cu50514600 cs12376000 - 1270000% CPU load .878 requests/sec - 11.4 kB/second - 13.0 kB/request - 1239.71 ms/request 2 requests currently being processed, 7 idle workers __.._..C___W_..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720177290/36/363_ 10.24415536540.00.674.16 161.35.155.246http/1.1localhost:80GET /config.json HTTP/1.0 1-1720177700/31/410_ 7.53105026010.00.325.41 165.232.76.155http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-1720-0/0/345. 0.0051204192030.00.004.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1720-0/0/338. 0.0049403719660.00.004.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1720173380/71/371_ 32.53315254900.00.724.11 161.35.155.246http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 5-1720-0/0/314. 0.002136763616120.00.003.62 162.158.239.43http/1.1www.siamerp.com:443GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B9%82%E0%B8%9B%E0%B8%A3 6-1720-0/0/369. 0.002730424409670.00.003.60 52.167.144.238http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 7-1720173741/69/321C 32.43013969071.40.853.78 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1720175000/56/282_ 26.60103834350.00.643.51 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 9-1720175120/56/338_ 22.28113856430.00.733.94 165.232.76.155http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 10-1720172120/81/265_ 40.43113087210.01.212.93 165.232.76.155http/1.1localhost:443GET /v2/_catalog HTTP/1.1 11-1720173610/72/206W 33.08002320460.00.832.51 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 12-1720175180/56/142_ 24.34311243940.00.551.29 161.35.155.246http/1.1localhost:80GET /telescope/requests HTTP/1.0 13-1720-0/0/14. 0.00510037750.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/13. 0.003136091560.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1720-0/0/12. 0.0031330109620.00.000.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720-0/0/91. 0.0018774771562900.00.001.69 172.68.234.226http/1.1www.jbbgarment.com:80GET /gallery_home-04/ HTTP/1.0 17-1720-0/0/59. 0.0022500781850.00.004.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/93. 0.00179110961227700.00.001.43 172.70.38.246http/1.1www.99accountant.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 46subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 105 seconds, (range: 30...269)index usage: 1%, cache usage: 2%total entries stored since starting: 705total entries replaced since starting: 0total entries expired since starting: 659total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1449 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 22:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e9e5b3f01Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 07:17:33 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 3 hours 15 minutes 20 seconds Server load: 0.52 0.47 0.51 Total accesses: 16014 - Total Traffic: 236.6 MB - Total Duration: 19638668 CPU Usage: u2780.1 s5105.97 cu50463100 cs12365200 - 536000% CPU load 1.37 requests/sec - 20.7 kB/second - 15.1 kB/request - 1226.34 ms/request 3 requests currently being processed, 7 idle workers ____WC_R__........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716207380/46/1435_ 27.962118217760.00.5617.21 162.243.186.177http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-1716211010/16/1490_ 8.891117555670.00.2217.32 162.243.186.177http/1.1localhost:443GET /about HTTP/1.1 2-1716211930/7/1442_ 4.19274516804680.00.0317.38 172.68.234.133http/1.1www.biztaste.com:80POST /wp-cron.php?doing_wp_cron=1694564249.20363402366638183593 3-1716211140/14/1376_ 6.872117455690.00.0823.67 162.243.186.177http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 4-1716203520/95/1338W 44.370016938470.01.8217.59 162.243.186.177http/1.1localhost:443GET /server-status HTTP/1.1 5-1716207541/46/1275C 25.980014576861.40.5217.67 162.243.186.177http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1716203890/84/1162_ 38.95077313854230.00.9215.26 209.141.55.144http/1.1www.thesungolden.com:443POST /wp-login.php HTTP/1.1 7-1716209360/30/1246R 16.812514742580.00.3513.48 205.185.116.37http/1.1www.siamsolarrooftop.com:443 8-1716204060/73/1113_ 40.642814519120.00.9319.31 172.68.234.155http/1.1www.biztaste.com:80GET /category/type-b/ HTTP/1.0 9-1716209840/29/1073_ 11.411112447060.00.2118.48 162.243.186.177http/1.1localhost:443GET /v2/_catalog HTTP/1.1 10-1716-0/0/977. 0.001056012015080.00.0021.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716-0/0/714. 0.008519103120.00.007.53 27.254.96.168http/1.1www.1smestartup.com:443GET /wp-content/themes/sydney/js/functions.min.js?ver=20210823 12-1716-0/0/423. 0.00215607188860.00.0018.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/283. 0.00213204193770.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/94. 0.0019560612810.00.002.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/10. 0.002134032890.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/198. 0.00162712462551970.00.002.37 162.158.238.61http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 17-1716-0/0/96. 0.00215801216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.0021590110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/60. 0.0018440551080.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1716-0/0/96. 0.001714424847590.00.001.07 172.71.223.193http/1.1www.yuritrading.com:80GET //wp-content/dropdown.php HTTP/1.0 21-1716-0/0/12. 0.002096067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/95. 0.0016751706852810.00.002.11 54.36.149.3http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 23-1716-0/0/4. 0.002148040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 74subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 103 seconds, (range: 1...275)index usage: 2%, cache usage: 3%total entries stored since starting: 2463total entries replaced since starting: 0total entries expired since starting: 2389total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 114 hit, 5923 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 00:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7ef6c1f98aApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 19:00:16 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 14 hours 58 minutes 1 second Server load: 0.63 0.85 0.92 Total accesses: 75484 - Total Traffic: 1.0 GB - Total Duration: 108437154 CPU Usage: u2736.55 s5071.07 cu50284700 cs12326000 - 116000% CPU load 1.4 requests/sec - 20.4 kB/second - 14.6 kB/request - 1436.56 ms/request 3 requests currently being processed, 7 idle workers W__.C_.W.____..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702247870/0/6392W 0.000088694980.00.0090.46 138.197.88.136http/1.1localhost:443GET /server-status HTTP/1.1 1-1702246040/33/6390_ 10.16168088884020.00.5596.85 172.68.234.139http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST /wp-cron.php?doing_wp_cron=1694347213.94767403602600097656 2-1702242070/78/6195_ 60.121191590070.00.8795.98 138.197.88.136http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-1702-0/0/6141. 0.0015115588680370.00.0086.55 172.71.167.174http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%8B%E0%B9%88%E0%B8%AD%E0%B8%A1%E0%B8%84%E0%B8%AD 4-1702246611/24/5704C 9.510082651961.40.3684.66 138.197.88.136http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1702246670/22/6068_ 6.631117583020070.00.3280.34 34.212.137.198http/1.1www.chonlateepro.com:443GET / HTTP/1.1 6-1702-0/0/5527. 0.00137085068990.00.0073.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1702242590/76/5701W 25.69092684206420.00.9983.61 162.158.175.33http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%94%E0%B8%B9%E0%B9%81 8-1702-0/0/5265. 0.00121074455410.00.0065.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1702244310/49/4796_ 12.802167406730.00.8163.17 138.197.88.136http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 10-1702245660/41/4265_ 14.541059538390.00.9870.00 138.197.88.136http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 11-1702245750/40/3649_ 40.691174649360810.00.5863.46 172.70.46.18http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /444.php HTTP/1.1 12-1702245830/33/3441_ 11.591051221320.00.3645.24 138.197.88.136http/1.1localhost:443GET /about HTTP/1.1 13-1702-0/0/1671. 0.00478109223211730.00.0021.42 45.61.184.58http/1.1www.mgrandstructure.com:443POST /wp-login.php HTTP/1.1 14-1702-0/0/1275. 0.001140017820210.00.0018.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1702-0/0/936. 0.001139012137680.00.0011.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/421. 0.0092608412010.00.006.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/352. 0.00108804099350.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/67. 0.00156666888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.001447801655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001566801344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0015663037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.001445704933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00156830733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0015672036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0015682086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0015655068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0015681010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.00144515501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0015665074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0015680010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.001478401144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0015679010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.00144057261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.001447602967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.001423503934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0015678041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0015652095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.00142366982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0043899000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0043885060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 59subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 85 seconds, (range: 1...204)index usage: 2%, cache usage: 2%total entries stored since starting: 13768total entries replaced since starting: 0total entries expired since starting: 13709total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 173 hit, 29496 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 11:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e2676fd6bApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:51:10 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 48 minutes 58 seconds Server load: 3.31 2.28 1.94 Total accesses: 28302 - Total Traffic: 369.4 MB - Total Duration: 37333212 CPU Usage: u2933.62 s5103.94 cu50056100 cs12277200 - 360000% CPU load 1.63 requests/sec - 21.8 kB/second - 13.4 kB/request - 1319.1 ms/request 5 requests currently being processed, 8 idle workers ._R____WW_C__W.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685-0/0/2416. 0.0020033996850.00.0034.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1685218710/55/2415_ 49.671139930992760.00.4332.96 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 2-1685220190/31/2327R 29.921129754450.00.2828.13 157.230.253.54http/1.1 3-1685218040/67/2191_ 54.800029677810.00.7627.96 178.62.3.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-1685218800/50/2185_ 38.781029050880.00.3627.77 178.62.3.65http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-1685218160/71/1978_ 60.690141923471500.00.8025.26 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 6-1685216890/91/2144_ 64.27186127189830.00.9826.09 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 7-1685218820/53/2216W 46.390029173440.00.4724.43 178.62.3.65http/1.1localhost:443GET /server-status HTTP/1.1 8-1685220260/26/2000W 23.790025358140.00.2923.74 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 9-1685221160/12/1985_ 14.52081126264100.00.1228.51 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 10-1685221231/14/1506C 9.560020433191.40.2423.91 178.62.3.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1685220280/26/1214_ 26.180015812720.00.2817.02 178.62.3.65http/1.1localhost:443GET /about HTTP/1.1 12-1685218280/66/1039_ 50.78034115526680.00.6913.11 5.189.130.31http/1.1www.pndintertrade.com:80POST /wp-login.php HTTP/1.0 13-1685221290/12/844W 8.031012655470.00.0912.98 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 14-1685-0/0/747. 0.0090010461760.00.009.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685-0/0/534. 0.006411526890930.00.006.68 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 16-1685-0/0/131. 0.0021501630220.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/118. 0.00611101201320.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/3. 0.0014851019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.001415811391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0014837015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001412710331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001414731185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001484408790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0014846010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0014843030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0014854010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0014841011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0014842012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001483909920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0014853010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 102subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 59 seconds, (range: 0...230)index usage: 3%, cache usage: 4%total entries stored since starting: 4313total entries replaced since starting: 0total entries expired since starting: 4211total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 98 hit, 8027 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e1c39c3c0Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 01:46:56 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 10 hours 23 minutes 41 seconds Server load: 1.23 2.66 4.06 Total accesses: 143808 - Total Traffic: 1.1 GB - Total Duration: 303192360 CPU Usage: u2653.17 s4997.94 cu49730600 cs12203400 - 166000% CPU load 3.84 requests/sec - 30.8 kB/second - 8.0 kB/request - 2108.31 ms/request 5 requests currently being processed, 6 idle workers __.__CW_W.W.._W................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674154920/54/9376_ 24.1311235172311120.00.8379.52 172.70.42.127http/1.1www.xn--72cz8bp5a1a1b8d.com:443GET / HTTP/1.1 1-1674157490/21/9236_ 11.1611168404120.00.1281.13 172.71.246.132http/1.1www.tun36.com:80POST /xmlrpc.php HTTP/1.0 2-1674-0/0/9329. 0.00560169645360.00.0075.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1674158310/16/9041_ 5.7911161342960.00.2579.43 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 4-1674158120/21/8834_ 5.1911164068510.01.7185.78 159.223.108.26http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-1674158441/18/8696C 6.9101161141701.40.1575.21 159.223.108.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1674152100/77/8237W 41.6900154064310.00.6270.22 172.70.175.141http/1.1www.xn--72cz8bp5a1a1b8d.com:443GET / HTTP/1.1 7-1674153370/73/8098_ 35.8212892149991510.00.6362.40 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 8-1674158520/14/7843W 4.3400148601390.00.1562.77 159.223.108.26http/1.1localhost:443GET /server-status HTTP/1.1 9-1674-0/0/7962. 0.00690153131700.00.0079.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1674158650/15/7375W 5.1100139431670.00.1272.70 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 11-1674-0/0/6774. 0.00720133425660.00.0047.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1674-0/0/6303. 0.00730127563460.00.0047.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1674158530/16/4989_ 4.1910109834810.00.3731.31 159.223.108.26http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 14-1674158670/14/4831W 7.7500111481510.00.2346.55 172.68.234.137http/1.1www.xn--72cz8bp5a1a1b8d.com:443POST /wp-cron.php?doing_wp_cron=1693766815.75083494186401367187 15-1674-0/0/3889. 0.0068094600010.00.0024.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1674-0/0/2897. 0.0070078341320.00.0014.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1674-0/0/2449. 0.0066065629530.00.0011.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1674-0/0/2460. 0.00282069671840.00.0011.59 162.158.158.190http/1.1www.chonlateeit.com:443POST /xmlrpc.php HTTP/1.1 19-1674-0/0/1936. 0.00653057282660.00.007.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1674-0/0/1695. 0.00409052749470.00.005.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/1492. 0.00591208446323600.00.009.95 172.68.234.141http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693766221.86524391174316406250 22-1674-0/0/1445. 0.00621042596020.00.007.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1674-0/0/1141. 0.00401174536074130.00.004.55 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693766412.3577 HTTP/1.0 24-1674-0/0/885. 0.00424029813030.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/902. 0.00364165528664230.00.004.25 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693766449.4602 HTTP/1.0 26-1674-0/0/735. 0.001856023810270.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/773. 0.002820024880470.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1674-0/0/565. 0.002818018692190.00.002.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/513. 0.002736617752930.00.001.71 179.43.169.218http/1.1www.tkadvicesystem.com:443GET /config/config.php HTTP/1.1 30-1674-0/0/385. 0.0027331713935110.00.001.59 194.31.173.201http/1.1www.thairuamthaiparty.com:443GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?v 31-1674-0/0/418. 0.002746186714720090.00.002.37 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693764067.2714 HTTP/1.0 32-1674-0/0/353. 0.002900012743660.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1674-0/0/426. 0.002823015652510.00.001.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/322. 0.002808011395600.00.002.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/197. 0.00285707990170.00.001.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1674-0/0/177. 0.00268506926660.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/218. 0.00264417087825030.00.000.86 172.68.234.197http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693764169.0834 HTTP/1.0 38-1674-0/0/46. 0.001297602531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.001283727385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.001290403865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.001288304242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.001283304803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.001274615754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.001273019884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 238subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 44 seconds, (range: 0...226)index usage: 8%, cache usage: 10%total entries stored since starting: 20847total entries replaced since starting: 0total entries expired since starting: 20609total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 252 hit, 20566 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 18:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7ef6aa9503Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 19:35:07 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 1 hour 47 minutes 7 seconds Server load: 2.23 2.82 3.56 Total accesses: 39179 - Total Traffic: 352.6 MB - Total Duration: 49621402 CPU Usage: u2629.18 s4908.1 cu48678700 cs11933600 - 943000% CPU load 6.1 requests/sec - 56.2 kB/second - 9.2 kB/request - 1266.53 ms/request 18 requests currently being processed, 8 idle workers RRRRCR_RCRC__WRC_CRRRW____........................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-165289450/7/2597R 0.570131926010.00.1021.40 172.70.210.163http/1.1 1-165286940/82/2547R 41.580131081450.01.5431.23 172.70.210.159http/1.1www.dr-rpi.com:443 2-165289690/3/2498R 0.510030634270.00.0123.28 172.70.210.254http/1.1 3-165287550/49/2241R 22.770028820050.00.4419.03 172.70.210.41http/1.1 4-165289751/1/2438C 0.001129921461.30.0022.26 178.62.73.12http/1.1localhost:443GET /config.json HTTP/1.1 5-165289810/2/2269R 0.010028778840.00.0118.82 172.70.211.135http/1.1 6-165289110/14/2285_ 5.16022228717420.00.1419.24 172.70.210.6http/1.1www.dr-rpi.com:443GET /wp-includes/css/dashicons.min.css?ver=5.5.12 HTTP/1.1 7-165287200/64/2415R 33.620028982210.00.8018.97 172.70.211.39http/1.1 8-165288341/23/2246C 10.821027575491.40.1718.10 164.90.222.93http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-165288430/22/2120R 10.350226745100.00.1418.02 172.70.210.99http/1.1 10-165289871/2/2093C 0.010126990857.60.0131.31 172.70.211.215http/1.1www.dr-rpi.com:443GET /wp-content/themes/chonlateedesign/css/bootstrap/bootstrap. 11-165288490/24/1894_ 10.610101422849790.00.1919.58 172.173.110.189http/1.1www.chonlateevip.com:443POST //wp-login.php HTTP/1.1 12-165289220/11/1866_ 5.05022723663030.00.0616.51 172.70.211.200http/1.1www.dr-rpi.com:443GET /wp-content/themes/chonlateedesign/style.css?ver=5.5.12 HTT 13-165288510/22/1675W 9.220021145100.00.1111.99 164.90.222.93http/1.1localhost:443GET /server-status HTTP/1.1 14-165289280/11/1849R 5.780022806440.00.0714.43 172.70.210.64http/1.1 15-165289931/2/1114C 0.010013690883.50.019.86 172.70.210.8http/1.1www.dr-rpi.com:443GET /wp-content/uploads/siteorigin-widgets/sow-image-default-17 16-165289990/1/1212_ 0.50050414968330.00.019.56 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 17-165290031/2/973C 0.0102120209510.20.017.40 172.70.210.250http/1.1www.dr-rpi.com:443GET /wp-content/themes/chonlateedesign/fonts/font-awesome.min.c 18-165290110/0/691R 0.0009248707690.00.005.73 144.217.77.80http/1.1www.nptpropertythailand.com:443 19-165290150/0/157R 0.00002113320.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-165290190/0/202R 0.0004153529280.00.001.62 172.70.39.160http/1.1www.siamautomation.com:443 21-165290250/0/162W 0.00003201850.00.002.74 162.158.110.200http/1.1www.chonlateecamping.com:80GET /wp-login.php HTTP/1.0 22-165290310/0/146_ 0.0005982865280.00.001.61 103.93.131.178http/1.1www.thaiquickservice.net:443GET /xmlrpc.php HTTP/1.1 23-165290370/0/36_ 0.0000934510.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-165290430/0/69_ 0.00001698990.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-165290490/0/137_ 0.0005072399230.00.000.61 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 26-1652-0/0/110. 0.0020075042172870.00.000.55 172.71.167.87http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 27-1652-0/0/81. 0.00203701658530.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/47. 0.00215701000020.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/114. 0.00202811983960.00.000.70 194.169.175.26http/1.1www.dtacbusiness.com:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.0 30-1652-0/0/3. 0.003727080530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1652-0/0/11. 0.003726092740.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1652-0/0/37. 0.0036710566180.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1652-0/0/60. 0.0036530565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.0036510696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.0036470719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.0037020349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.0035044061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.0037227143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.0036780530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.0037040257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.0037100208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.0037160142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.0036810543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.0035414221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.0036920415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.0035017931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.00351310251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.0034929421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.0037210109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-08-31 12:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7efa0129c2Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:55 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 27 seconds Server load: 6.63 6.13 6.48 Total accesses: 397 - Total Traffic: 2.6 MB - Total Duration: 315272 CPU Usage: u2596.4 s4834.41 cu47808400 cs11700400 - 2.2e+8% CPU load 14.7 requests/sec - 97.9 kB/second - 6.7 kB/request - 794.136 ms/request 23 requests currently being processed, 0 idle workers RWRRCCRWWCRCWWWCWCRCRWC........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209850/26/26R 9.120327208310.00.160.16 168.61.149.69http/1.1 1-1644209860/21/21W 8.6600173500.00.100.10 64.227.126.135http/1.1www.tspaccount.net:443GET /debug/default/view?panel=config HTTP/1.1 2-1644209890/24/24R 7.420374163210.00.150.15 178.249.214.10http/1.1www.tafa.or.th:443 3-1644210010/25/25R 9.220865185170.00.100.10 172.173.110.177http/1.1www.dinocoffees.com:443 4-1644210081/23/23C 5.701641224437.20.070.07 167.99.182.39http/1.1www.tafa.or.th:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1644210311/19/19C 9.2210202721.30.180.18 144.126.202.105http/1.1localhost:443GET /about HTTP/1.1 6-1644210370/18/18R 7.6500154980.00.150.15 167.71.185.75http/1.1localhost:80GET /config.json HTTP/1.0 7-1644210390/22/22W 7.5500151000.00.100.10 23.99.197.177http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 8-1644211390/8/20W 2.9300137530.00.020.09 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 9-1644210551/18/18C 4.9700118682.60.060.06 159.223.108.26http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1644210570/12/12R 5.2600125030.00.070.07 74.249.252.222http/1.1www.chonlateevip.com:443 11-1644210631/17/17C 7.0711170351.30.120.12 128.199.62.55http/1.1localhost:443GET /about HTTP/1.1 12-1644210730/28/28W 6.4200146280.00.080.08 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 13-1644210750/17/17W 7.2500147120.00.170.17 162.158.110.218http/1.1www.ptatun.or.th:80GET /LetsEncrypt/Index?fileName=/etc/passwd HTTP/1.0 14-1644211460/4/5W 1.970039260.00.030.03 164.90.222.93http/1.1www.tspaccount.net:443GET /about HTTP/1.1 15-1644210871/18/18C 8.020583163087.10.110.11 167.99.182.39http/1.1www.tafa.or.th:443GET /server-status HTTP/1.1 16-1644210930/18/18W 6.6000132930.00.120.12 172.70.242.76http/1.1www.ptatun.or.th:80GET /wp-login.php?login-error=<script>alert(document.domain)</s 17-1644210991/12/12C 4.4301115331.40.330.33 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1644211810/0/17R 0.0000105990.00.000.11 178.249.214.10http/1.1www.tafa.or.th:443 19-1644211111/20/20C 6.8703511433010.40.160.16 164.90.222.93http/1.1www.tspaccount.net:443GET /.vscode/sftp.json HTTP/1.1 20-1644211220/13/13R 5.660309111400.00.090.09 172.173.110.230http/1.1 21-1644211480/2/2W 1.670032990.00.030.03 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 22-1644211691/2/2C 0.010031.40.000.00 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 36subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 284 seconds, (range: 278...296)index usage: 1%, cache usage: 1%total entries stored since starting: 36total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 150 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7eca99b8bfApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:43 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 41 seconds Server load: 0.72 0.86 1.23 Total accesses: 348 - Total Traffic: 4.4 MB - Total Duration: 98232 CPU Usage: u662.8 s1262.64 cu12804600 cs3078510 - 3.87e+7% CPU load 8.49 requests/sec - 109.8 kB/second - 12.9 kB/request - 282.276 ms/request 22 requests currently being processed, 0 idle workers RCRCCCCCCCRCCCWCCCRRRR............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439060/29/29R 5.1501126750.00.600.60 93.188.2.5http/1.1www.kncintergroup.com:443 1-45440981/1/41C 0.001196742.60.000.70 144.126.213.222http/1.1localhost:443GET /.env HTTP/1.1 2-45439120/26/26R 3.2901102550.00.630.63 172.105.91.149http/1.1localhost:443GET /.git/config HTTP/1.1 3-45439221/37/37C 3.600192312.60.510.51 157.230.99.82http/1.1localhost:443GET /telescope/requests HTTP/1.1 4-45439321/33/33C 3.170171572.70.400.40 157.230.99.82http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-45439551/60/60C 3.4411101432.60.580.58 144.126.213.222http/1.1localhost:443GET /info.php HTTP/1.1 6-45439901/32/32C 3.7100124292.70.490.49 157.230.99.82http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 7-45440091/26/26C 1.520149172.60.200.20 157.230.99.82http/1.1localhost:443GET /.git/config HTTP/1.1 8-45440191/7/7C 1.530175252.50.030.03 157.230.99.82http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 9-45440431/7/7C 1.570032432.70.030.03 157.230.99.82http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 10-45440540/8/8R 0.850215310.00.010.01 172.105.91.149http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-45440561/9/9C 0.961023782.60.080.08 144.126.213.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 12-45440661/17/17C 0.42117902.70.030.03 144.126.213.222http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-45440681/3/3C 0.950136722.60.010.01 157.230.99.82http/1.1localhost:443GET /.env HTTP/1.1 14-45440760/3/3W 0.880016420.00.010.01 157.230.99.82http/1.1localhost:443GET /server-status HTTP/1.1 15-45440841/6/6C 0.47118992.60.050.05 144.126.213.222http/1.1localhost:443GET /.git/config HTTP/1.1 16-45441071/1/1C 0.010242.70.000.00 144.126.213.222http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 17-45441091/3/3C 0.0100582.60.020.02 157.230.99.82http/1.1localhost:443GET /info.php HTTP/1.1 18-45441210/0/0R 0.000000.00.000.00 19-45441230/0/0R 0.000000.00.000.00 20-45441290/0/0R 0.000000.00.000.00 21-45441350/0/0R 0.000000.00.000.00 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 15subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 293 seconds, (range: 282...299)index usage: 0%, cache usage: 0%total entries stored since starting: 15total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 120 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 18:01
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b2e802898eApache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 01:01:19 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 95 Parent Server MPM Generation: 94 Server uptime: 28 days 14 hours 59 minutes 58 seconds Server load: 2.02 2.02 2.07 Total accesses: 1850594 - Total Traffic: 23.8 GB - Total Duration: 2141120919 CPU Usage: u172.93 s105.92 cu32159.4 cs2232.06 - 1.4% CPU load .748 requests/sec - 10.1 kB/second - 13.5 kB/request - 1156.99 ms/request 1 requests currently being processed, 127 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031725no0yes032000 231729no0yes032000 331728no0yes032000 531726no0yes131000 Sum400 1127000 ________________________________................................ ________________________________________________________________ ................................____W___________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-94317250/1/14806_ 0.4010160261020.00.00193.82 139.144.150.45http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-94317250/0/15296_ 0.0000139013540.00.00198.97 164.90.205.35http/1.1localhost:443GET /.env HTTP/1.1 0-94317250/0/14867_ 0.0020550150309570.00.00192.75 64.227.126.135http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/0/15048_ 0.0020550145875140.00.00186.02 138.197.88.136http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-94317250/0/14950_ 0.0020550147711740.00.00185.46 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-94317250/0/15172_ 0.0020558156649250.00.00188.55 161.35.190.56http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/14847_ 0.0020550145588910.00.00200.31 162.243.184.251http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-94317250/0/15155_ 0.0020550150182090.00.00187.60 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 0-94317250/0/15114_ 0.0020550145226990.00.00229.90 162.243.184.251h2localhost:443[0/0] Software caused connection abort 0-94317250/0/15248_ 0.0020550148853450.00.00194.92 159.203.182.222http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/0/14812_ 0.0020550154393440.00.00200.74 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/14824_ 0.0020550147156450.00.00195.47 164.90.205.35http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/0/14693_ 0.0020550137182780.00.00185.56 138.197.88.136http/1.1localhost:443GET /config.json HTTP/1.1 0-94317250/0/14845_ 0.0020550169086640.00.00186.04 164.90.205.35http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-94317250/0/15799_ 0.0020550141615400.00.00187.81 146.190.64.200http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/14849_ 0.0020550165341270.00.00182.52 162.243.184.251http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-94317250/0/14900_ 0.0020550143405120.00.00206.40 74.207.237.114http/1.1localhost:443GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/14959_ 0.0020550144940050.00.00189.33 138.197.88.136http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-94317250/0/14780_ 0.0020550160388390.00.00200.58 146.190.64.200http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/0/15001_ 0.0020550144639410.00.00193.85 162.243.161.105h2localhost:443[0/0] Software caused connection abort 0-94317250/0/14992_ 0.0020550181496050.00.00193.47 162.243.161.105http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/15016_ 0.0020550147053800.00.00204.12 64.227.126.135http/1.1localhost:80GET /.env HTTP/1.1 0-94317250/0/15472_ 0.0020550150756110.00.00188.31 64.227.126.135http/1.1localhost:80\x16\x03\x01\x01\x0c\x01 0-94317250/0/14676_ 0.00205514138765560.00.00190.21 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 0-94317250/0/14987_ 0.0020550162205960.00.00186.91 74.207.237.114http/1.1localhost:443GET / HTTP/1.1 0-94317250/0/14661_ 0.0020550135981680.00.00197.05 164.90.222.93http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/0/15159_ 0.0020550144713590.00.00194.53 142.93.158.96http/1.1localhost:443GET /v2/_catalog HTTP/1.1 0-94317250/0/14942_ 0.0020550159195750.00.00213.34 74.207.237.114http/1.1localhost:443GET /server-status HTTP/1.1 0-94317250/0/14742_ 0.0020550152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-94317250/0/15189_ 0.0020550135139150.00.00225.17 146.190.64.200http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/14678_ 0.0020550155573090.00.00199.16 142.93.158.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-94317250/0/14940_ 0.0020550145815220.00.00185.19 162.243.184.251http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-94-0/0/15731. 0.0020500138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-94-0/0/15813. 0.0020500136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15602. 0.0020500174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15318. 0.0020500150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-94-0/0/15276. 0.0020500146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-94-0/0/15655. 0.0020500134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-94-0/0/15351. 0.0020500172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-94-0/0/15185. 0.0020500165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15335. 0.0020500127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/14956. 0.0020500152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-94-0/0/15041. 0.0020500148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15506. 0.0020500159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-94-0/0/15329. 0.0020500159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/req
Found on 2024-02-02 18:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b2624a0d73Apache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 13:21:35 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 3 hours 20 minutes 14 seconds Server load: 2.62 2.99 3.04 Total accesses: 859356 - Total Traffic: 11.6 GB - Total Duration: 1067355486 CPU Usage: u187.85 s16.81 cu14583.6 cs765.51 - 8.42% CPU load 4.65 requests/sec - 65.7 kB/second - 14.1 kB/request - 1242.04 ms/request 6 requests currently being processed, 58 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 014738no6yes626003 14311no3yes032000 Sum209 658003 _R__R______W______W_W__________W________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7147380/296/6848_ 153.94084490644470.03.99100.40 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /xrmemnz-20056zetidm93kez HTTP/1.1 0-7147380/251/7304R 153.812071964320.02.45101.56 66.249.73.132http/1.1 0-7147380/329/6885_ 153.89136078438140.03.5399.41 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=nike-alphafly-men-s-road-racing-nike-my-2-ii-LOmae2HJ H 0-7147380/288/7122_ 153.81047775478490.03.0791.86 138.68.129.241http/1.1www.xn--m3cbp0adb4cva5bee03a.coPOST /wp-login.php HTTP/1.1 0-7147380/535/7094R 153.622575937800.03.9389.03 165.22.108.223http/1.1localhost:80GET /server-status HTTP/1.1 0-7147380/250/7228_ 153.28084488676530.03.2495.63 164.92.84.255h2localhost:443[0/0] Software caused connection abort 0-7147380/293/7031_ 153.820070202090.03.60105.76 165.22.108.223http/1.1localhost:80GET /login.action HTTP/1.1 0-7147380/281/7119_ 153.830073504340.03.2593.09 165.22.108.223http/1.1localhost:80GET /.DS_Store HTTP/1.1 0-7147380/234/7271_ 153.940075573140.02.93143.07 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-7147380/345/7150_ 153.501117577956850.03.2590.16 72.167.67.76http/1.1www.chonlateeboi.com:443POST /wp-login.php HTTP/1.1 0-7147380/459/6950_ 154.020082285190.05.16111.50 128.199.195.68http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-7147381/278/6720W 153.760083923930.03.3887.43 52.70.240.171http/1.1www.chonlateeboi.com:443GET /18807crwditems/etidm98jd.htm HTTP/1.1 0-7147380/277/6763_ 153.871063590720.04.4089.98 159.223.108.26http/1.1localhost:443GET / HTTP/1.1 0-7147380/267/6968_ 153.33035094453330.03.4995.19 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=the-history-of-the-casio-g-shock-52%-off-11-ii-qpL80nho 0-7147380/310/7636_ 153.96063671932500.03.2196.27 137.184.150.232http/1.1localhost:80\x16\x03\x01\x01\r\x01 0-7147380/311/6821_ 153.720105293625620.02.7587.56 159.223.108.26h2localhost:443[0/0] Software caused connection abort 0-7147380/283/6965_ 153.970072509040.03.3990.07 128.199.195.68http/1.1localhost:80GET /about HTTP/1.1 0-7147380/267/7060_ 153.851071378900.02.9394.33 165.22.108.223http/1.1localhost:80GET /config.json HTTP/1.1 0-7147381/277/7027W 152.770088336360.02.9588.47 128.199.195.68http/1.1localhost:80GET /server-status HTTP/1.1 0-7147380/336/7090_ 153.83054974616670.03.3495.65 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=folk-art-of-france-milner-craft-series-1-ii-vlB3gLfO HT 0-7147381/334/7137W 150.43730112391820.04.9999.02 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-7147380/268/6801_ 153.12135178437110.02.7991.08 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=how-to-tell-which-wheel-bearing-is-bad-front-4-ii-xQ0PW 0-7147380/298/7365_ 153.960086193700.03.6297.55 207.154.240.169http/1.1localhost:80GET / HTTP/1.1 0-7147380/289/6905_ 153.871069652500.03.1297.57 165.22.108.223http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-7147380/409/6954_ 153.71184691768200.04.7788.04 52.70.240.171http/1.1www.chonlateeboi.com:443GET /30330ztiaetid.htm HTTP/1.1 0-7147380/316/7120_ 153.89085063195590.04.2190.70 207.154.240.169http/1.1localhost:80\x16\x03\x01\x01\x05\x01 0-7147380/278/6941_ 153.51084876740180.03.4898.51 85.208.96.197http/1.1www.chonlateeboi.com:443GET /18737zypyeti.html HTTP/1.1 0-7147380/307/6989_ 152.62170787448790.03.26119.54 52.167.144.184h2www.thaidaoherb.com:443GET /a58a1/srk307728ryyhvynb490m4.htm HTTP/2.0 0-7147380/268/6817_ 153.780106175805550.02.7485.52 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /baqemnz-20034detid.htm HTTP/1.1 0-7147380/260/7107_ 153.940078661180.02.77124.48 164.90.205.35http/1.1localhost:80GET / HTTP/1.1 0-7147380/239/6749_ 153.940084397100.02.5897.81 128.199.195.68http/1.1localhost:80GET / HTTP/1.1 0-7147381/291/7125W 153.510076116210.03.3891.17 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lraemnz-17964netidm8.htm HTTP/1.1 1-743110/61/6872_ 29.551107177595210.00.6289.25 192.95.30.21http/1.1www.chonlateeseal.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%95 1-743110/128/6671_ 30.230078142550.01.4884.99 128.199.195.68http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-743110/60/6620_ 30.100836104720480.00.5284.97 3.224.220.101http/1.1www.chonlateeboi.com:443GET /25249ztiaitems/eti HTTP/1.1 1-743110/63/6357_ 30.181082443880.00.5684.03 165.22.108.223http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 1-743110/68/6552_ 29.59083879586140.00.6697.41 159.223.108.26h2localhost:443[0/0] Software caused connection abort 1-743110/137/6652_ 30.20184577589100.03.2089.53 23.22.35.162http/1.1www.chonlateeboi.com:443GET /30401xhlfeti.html HTTP/1.1 1-743110/70/6590_ 30.182089704870.00.6884.10 165.22.108.223http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-743110/72/6691_ 30.181090110050.00.7089.10 165.22.108.223http/1.1localhost:80GET /.git/config HTTP/1.1 1-743110/84/6746_ 30.220060127660.00.6386.76 128.199.195.68http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 1-743110/49/6606_ 27.58054882529610.00.5591.62 40.77.167.52h2www.xn--12cx2bef7bl0boq4ch6gugw[1/1] done: stream 1, GET /tag/%E0%B8%88%E0%B8%B3%E0%B8%AB%E0%B 1-743110/26/6348_ 30.15084789126170.00.2789.83 3.224.220.101http/1.1www.chonlateeboi.com:443GET /30336ztiaetidm90uzj.htm HTTP/1.1 1-743110/70/6854_ 29.421199178399200.00.8698.84 85.208.96.193http/1.1www.chonlateefbc.com:443GET /tag/%E0%B8%84%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87 1-743110/67/6630_ 30.22009379797
Found on 2024-01-07 06:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b2fbe42e5fApache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 05-Jan-2024 20:31:34 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 10 hours 30 minutes 13 seconds Server load: 2.52 2.53 2.51 Total accesses: 189200 - Total Traffic: 2.8 GB - Total Duration: 150798351 CPU Usage: u271.08 s14.59 cu2734.05 cs151.16 - 8.39% CPU load 5 requests/sec - 76.3 kB/second - 15.2 kB/request - 797.031 ms/request 7 requests currently being processed, 57 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06904no11yes1310010 25731no3yes626000 Sum2014 7570010 ________W_______________________................................ __RW__________W__R_______WW_____................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-069040/244/2217_ 136.98285218163700.02.9034.69 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zwojupk-2404betidm8 HTTP/1.1 0-069040/232/2347_ 137.510017299080.02.9929.09 144.126.202.105http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-069040/227/2176_ 137.20085429471280.02.9342.34 3.224.220.101http/1.1www.chonlateeboi.com:443GET /23704ztiaetidm93szh HTTP/1.1 0-069040/252/2383_ 137.421017577140.03.1631.04 144.126.202.105http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-069040/224/2307_ 137.400018014550.02.7928.95 139.59.230.191http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-069040/260/2566_ 137.471017963890.03.4732.18 206.81.1.88http/1.1localhost:80GET / HTTP/1.1 0-069040/252/2192_ 137.471017660470.02.8527.13 54.38.85.37http/1.1www.1smestartup.com:80GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 0-069040/229/2302_ 137.471018317830.02.9030.16 134.122.89.242http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-069041/231/2317W 136.640017291590.02.9463.75 66.249.71.169http/1.1www.chonlateeadmin.com:443GET /trust.php?cudggdh-335883qeti.html HTTP/1.1 0-069040/231/2277_ 137.28184417272400.03.0029.44 147.182.130.98http/1.1localhost:80\x16\x03\x01\x01\x05\x01 0-069040/243/2257_ 137.470108420924110.02.8627.59 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?lnmecaw-311582zetidm4 HTTP/1.1 0-069040/232/2188_ 137.51099117343330.02.9928.64 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?nuohsbr-19188bitems/etid.html HTTP/1.1 0-069040/205/2157_ 137.400132417760740.03.1530.74 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?lnhecaw-45134uetidm10ya.html HTTP/1.1 0-069040/275/2470_ 137.510018343020.03.1832.58 139.59.230.191http/1.1localhost:443GET /_all_dbs HTTP/1.1 0-069040/213/2502_ 137.380020336590.02.7434.31 134.122.89.242http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-069040/239/2225_ 137.25097717659330.02.8029.77 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/235/2183_ 137.471017907790.03.2328.90 167.172.20.95http/1.1localhost:80GET / HTTP/1.1 0-069040/222/2349_ 137.470017532820.02.7332.79 162.243.184.251http/1.1localhost:80GET / HTTP/1.1 0-069040/229/2372_ 137.411017114250.02.8931.29 147.182.130.98http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-069040/231/2211_ 136.49086419265130.02.7827.01 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/225/2276_ 137.421017480010.02.5633.10 139.59.230.191http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-069040/228/2279_ 137.410018400420.03.5033.71 134.122.89.242http/1.1localhost:80GET /about HTTP/1.1 0-069040/235/2540_ 137.471017076840.03.5131.51 139.59.230.191http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-069040/239/2196_ 137.35034416889490.02.9229.42 40.77.167.53h2www.nakindogtraining.com:443GET /wzy.php?n60341036609.shtm HTTP/2.0 0-069040/216/2211_ 136.67163017921960.02.5729.15 139.59.230.191h2localhost:443[0/0] Software caused connection abort 0-069040/224/2215_ 137.340017102530.02.7428.61 142.93.158.96h2localhost:443[0/0] Software caused connection abort 0-069040/221/2145_ 136.371409416650930.02.6927.42 66.249.69.227http/1.1www.chonlateenextbiz.com:443GET /sitemap83.xml HTTP/1.1 0-069040/235/2288_ 137.07184817191000.03.1559.79 139.59.230.191http/1.1 0-069040/238/2164_ 137.390017397780.02.8627.43 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 0-069040/223/2502_ 137.411016693260.02.8568.19 159.65.58.104http/1.1localhost:443GET / HTTP/1.1 0-069040/233/2176_ 136.97173417356020.02.6935.00 54.38.85.37http/1.1www.1smestartup.com:443GET /tag/%E0%B8%97%E0%B8%B3%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A 0-069040/389/2512_ 137.370017484630.03.8130.54 144.126.202.105http/1.1localhost:80GET / HTTP/1.1 1-0-0/0/1494. 0.00283184410789900.00.0019.95 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /mrbktze-3483oitems/etidm.htm HTTP/1.1 1-0-0/0/1277. 0.00283190410369240.00.0016.79 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?oqkqxjd-346711xetidm56bdx HTTP/1.1 1-0-0/0/1292. 0.00283184310629170.00.0018.86 52.70.240.171http/1.1www.chonlateeboi.com:443GET /31095ivkuitems/etidm39zu.htm HTTP/1.1 1-0-0/0/1320. 0.00283184010544740.00.0017.61 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /ugjktze-47561weti.html HTTP/1.1 1-0-0/0/1329. 0.00283184010311000.00.0021.84 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?prladej-53510yetidm65ce.html HTTP/1.1 1-0-0/0/1313. 0.00283183710077550.00.0017.92 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?lfjvrsm-276950witems/eti HTTP/1.1 1-0-0/0/1347. 0.00283186610387560.00.0016.37 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /qrfktze-47531setidm.html HTTP/1.1 1-0-0/0/1346. 0.00283189710630850.00.0016.65 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /yrnktze-47539aitems/etidm HTTP/1.1 1-0-0/0/1346. 0.00283183910436060.00.0017.96 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?gweadej-171307retidm41t.htm HTTP/1.1 1-0-0/0/1273. 0.00283184110395360.00.0016.70 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /nmcktze-47346petid.htm HTTP/1.1 1-0-0/0/1214. 0.00283192410022070.00.0015.53 66.249.71.168http/1.1www.chonlateeadmin.com:443GET /trust.php?wuxaonh-247555kitems/eti.htm HTTP/1.1 1-0-0/0/1373. 0.002831107410816380.00.0018.55 23.22.35.162http/1.1www.chonlateeboi.com:443GET /22932oqmietidm9.htm HTTP/1.1 1-0-0/0/1300. 0.00283184210566390.00.0017.35 66.249.71.168http/1.
Found on 2024-01-05 13:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b24200e35aApache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:13 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 31 minutes 53 seconds Server load: 2.15 2.07 1.75 Total accesses: 1082464 - Total Traffic: 11.9 GB - Total Duration: 678438458 CPU Usage: u25.87 s13.68 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.754 ms/request 12 requests currently being processed, 116 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no9yes230015 315011no3yes131002 415163no2yes626000 615166no0yes329000 Sum4014 12116017 ................................______________R_______________R_ ................................W_______________________________ _WW_R__W______R________________R................................ ________R_R_____W_______________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0047062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0047259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0047130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0047057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.004789958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.004787062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0047056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0047157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.004786455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0047059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.004787056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0047055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0047315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00471662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0047161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0047107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0047062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.004786960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0047058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00471256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0047498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0047160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0047074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00471192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0047058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0047083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0047122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00471163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0047859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0047261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0047157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0047059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-13150120/0/9126_ 0.00086454194400.00.00142.47 159.203.182.222http/1.1 1-13150120/4/8969_ 1.310655125040.00.03107.50 165.232.76.155http/1.1localhost:80GET /server-status HTTP/1.1 1-13150120/3/9102_ 1.190055516790.00.02131.73 139.59.230.191http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-13150120/3/9376_ 1.190057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150120/1/9354_ 0.55297656503180.00.01111.86 52.167.144.174h2www.chonlateeaa.com:443[2/2] done: stream 3, GET /?s=22-best-beach-towels-that-aren-t- 1-13150120/1/9080_ 1.190056147260.00.0099.02 139.59.230.191http/1.1www.tspaccount.net:80GET /telescope/requests HTTP/1.1 1-13150120/1/9263_ 0.77087056057710.00.01109.58 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?zqoggdh-209754betid.htm HTTP/1.1 1-13150120/3/9351_ 1.252056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150120/1/9213_ 0.84291155728780.00.0190.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?82724himsitems/etidm2.html HTTP/1.1 1-13150120/2/9161_ 1.090073740340.00.01108.70 52.167.144.174h2www.chonlateeaa.com:443GET /?s=433mhz-lora-sx1278-long-range-rf-transceiver-wireless-m 1-13150120/3/9389_ 1.202055724450.00.0195.48 52.167.144.235h2www.chonlateeaa.com:443GET /?s=bogle-essenti
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d136d7088Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 14:11:53 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 10 hours 9 minutes 41 seconds Server load: 1.04 0.67 0.42 Total accesses: 29243 - Total Traffic: 367.5 MB - Total Duration: 39441455 CPU Usage: u3391.94 s6002.79 cu56642000 cs13848000 - 193000% CPU load .799 requests/sec - 10.3 kB/second - 12.9 kB/request - 1348.75 ms/request 3 requests currently being processed, 7 idle workers _W__R_W___........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079233340/77/2771_ 40.120034328230.00.5631.26 74.207.237.114http/1.1 1-2079236430/48/2788W 21.740038806710.00.3743.45 172.71.98.64http/1.1www.chorsiam.com:80POST //wp-login.php HTTP/1.0 2-2079233430/74/2594_ 35.820036082610.00.4128.50 167.172.20.95http/1.1 3-2079234970/54/2598_ 27.480034495390.00.6442.08 143.110.156.182http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-2079233640/62/2453R 36.700032873900.00.3124.46 143.110.156.182http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 5-2079233790/72/2484_ 33.45096132062310.00.3226.00 162.158.107.14http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%B1%E0%B8%94 6-2079236570/41/2325W 26.810032995970.00.1624.79 104.236.193.132http/1.1localhost:80GET /server-status HTTP/1.0 7-2079237470/25/2167_ 21.510028695230.00.1538.81 164.92.192.25http/1.1localhost:80GET /.env HTTP/1.0 8-2079238140/15/1979_ 6.000126241580.00.0435.07 138.68.133.118http/1.1 9-2079238700/7/1858_ 4.200025651100.00.0122.84 167.172.20.95http/1.1 10-2079-0/0/1682. 0.0013025650110.00.0016.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-2079-0/0/1419. 0.00301455419939820.00.0014.13 108.162.212.45http/1.1www.chonlateecamping.com:80POST /wp-login.php HTTP/1.0 12-2079-0/0/882. 0.003026111435390.00.006.91 172.68.242.243http/1.1www.time2hand.com:80GET /wp-content/plugins/widgets-for-siteorigin/css/defaults.css 13-2079-0/0/719. 0.00302629211190.00.005.22 172.68.242.201http/1.1www.time2hand.com:80GET /wp-content/themes/chonlateedesign/fonts/font-awesome.min.c 14-2079-0/0/45. 0.0069310504170.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2079-0/0/124. 0.00692801903560.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2079-0/0/140. 0.00693501669140.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2079-0/0/49. 0.0069510430560.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2079-0/0/96. 0.00196877051161230.00.000.75 172.71.178.161http/1.1www.chonlateecamping.com:80GET / HTTP/1.0 19-2079-0/0/3. 0.0020792030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.0020795010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2079-0/0/5. 0.0020781070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2079-0/0/5. 0.0020786080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2079-0/0/52. 0.00202860275920.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2079-0/0/4. 0.0020783090.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 265 seconds, (range: 213...296)index usage: 0%, cache usage: 0%total entries stored since starting: 236total entries replaced since starting: 0total entries expired since starting: 228total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 10720 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 07:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d62d9d71fApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 03:07:52 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 2 hours 43 minutes 1 second Server load: 0.84 1.07 1.05 Total accesses: 9427 - Total Traffic: 89.1 MB - Total Duration: 15310225 CPU Usage: u3316.5 s5953.14 cu56303300 cs13768500 - 717000% CPU load .964 requests/sec - 9.3 kB/second - 9.7 kB/request - 1624.08 ms/request 5 requests currently being processed, 5 idle workers _C_W_C.C_...C._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041219370/44/892_ 22.930014752950.00.379.18 159.223.102.13http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-2041216361/81/839C 39.630014050752.60.667.89 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 2-2041217300/56/827_ 35.240014088340.00.448.42 161.35.27.144http/1.1 3-2041219580/36/758W 13.560011618070.00.216.41 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.0 4-2041220060/34/785_ 11.890012694080.00.219.00 146.190.160.11http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-2041220131/24/655C 11.291010491302.60.255.87 139.59.182.142http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-2041-0/0/579. 0.0016009639720.00.005.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-2041217371/60/613C 30.370010118031.30.505.92 139.59.182.142http/1.1localhost:443GET /about HTTP/1.1 8-2041220200/32/741_ 13.130312072620.00.216.96 139.144.150.45http/1.1localhost:80GET /server-status HTTP/1.0 9-2041-0/0/598. 0.00352010474300.00.005.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-2041-0/0/554. 0.002778708839130.00.005.09 172.71.167.55http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%88%E0%B8%A3 11-2041-0/0/317. 0.002225985119190.00.002.97 172.68.234.163http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B9%80%E0%B8%AD%E0%B8%81 12-2041217551/55/193C 31.85002325721.30.521.27 139.59.182.142http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 13-2041-0/0/207. 0.0023410973220100.00.001.81 172.69.64.180http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 14-2041217610/53/140_ 29.71001911240.00.471.14 139.144.150.45http/1.1localhost:80GET /login.action HTTP/1.0 15-2041-0/0/139. 0.0016102209180.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2041-0/0/20. 0.001485054740.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2041-0/0/14. 0.001498047850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2041-0/0/12. 0.001496040310.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2041-0/0/98. 0.0087301631250.00.000.86 138.197.88.136http/1.1 20-2041-0/0/178. 0.0096103353390.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2041-0/0/157. 0.00113302513850.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2041-0/0/104. 0.00147701813100.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2041-0/0/2. 0.001502050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2041-0/0/5. 0.001482022870.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 9subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 216 seconds, (range: 114...297)index usage: 0%, cache usage: 0%total entries stored since starting: 124total entries replaced since starting: 0total entries expired since starting: 115total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 3753 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 20:07 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dae1a0a82Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 08:56:43 +07 Restart Time: Friday, 17-Nov-2023 04:02:10 +07 Parent Server Config. Generation: 1966 Parent Server MPM Generation: 1965 Server uptime: 4 hours 54 minutes 32 seconds Server load: 0.87 0.67 0.56 Total accesses: 17917 - Total Traffic: 342.7 MB - Total Duration: 25518206 CPU Usage: u3245.44 s5861.01 cu55539900 cs13590800 - 391000% CPU load 1.01 requests/sec - 19.9 kB/second - 19.6 kB/request - 1424.25 ms/request 6 requests currently being processed, 4 idle workers ._CC_CR__W.W...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1965-0/0/1555. 0.00103023265450.00.0037.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-196539660/89/1565_ 50.890121000570.01.0833.80 161.35.27.144http/1.1localhost:80GET /.DS_Store HTTP/1.0 2-196542451/54/1590C 25.270123035881.31.8424.45 165.22.108.223http/1.1localhost:443GET /about HTTP/1.1 3-196540891/73/1549C 38.130021212671.40.9534.20 165.22.108.223http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-196541170/71/1417_ 41.340219601490.00.7728.26 164.92.192.25http/1.1 5-196541291/65/1376C 42.551119428372.60.8517.42 165.22.108.223http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-196541360/69/1206R 37.820115838740.01.7412.71 139.144.150.23http/1.1localhost:80GET /.DS_Store HTTP/1.0 7-196542130/55/1242_ 26.600117476260.00.4812.31 159.203.63.67http/1.1 8-196541420/68/1168_ 37.580115620570.01.1312.57 104.131.1.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-196547500/15/990W 4.816014445050.015.2942.28 146.190.64.200http/1.1www.chonlateefood.com:443GET / HTTP/1.1 10-1965-0/0/834. 0.00106013121390.00.009.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-196547580/24/833W 8.420013183750.00.1524.71 128.199.61.251http/1.1localhost:80GET /server-status HTTP/1.0 12-1965-0/0/544. 0.00124707785360.00.007.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1965-0/0/407. 0.00496915995814690.00.004.44 162.158.170.247http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 14-1965-0/0/213. 0.00626402611590.00.003.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1965-0/0/207. 0.00626303153320.00.005.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1965-0/0/463. 0.00626706605010.00.006.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1965-0/0/197. 0.0046115773086220.00.002.13 162.158.239.34http/1.1www.chonlateetravel.com:80GET /wp-content/outcms.php?up HTTP/1.0 18-1965-0/0/140. 0.00706515341865060.00.002.38 162.158.189.248http/1.1www.thaidocuments.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A3%E0%B8%AD%E0%B8%87 19-1965-0/0/105. 0.00829102193620.00.0015.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1965-0/0/199. 0.00705413122340.00.004.02 137.184.162.65http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 21-1965-0/0/10. 0.008268086660.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1965-0/0/4. 0.008286025900.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1965-0/0/4. 0.008294017650.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1965-0/0/96. 0.0070594821570840.00.001.29 137.184.150.232http/1.1 25-1965-0/0/1. 0.008303000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1965-0/0/2. 0.008301013470.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 5subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 294 seconds, (range: 292...297)index usage: 0%, cache usage: 0%total entries stored since starting: 559total entries replaced since starting: 0total entries expired since starting: 554total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 7405 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-17 01:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d31064abeApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 13:33:42 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 9 hours 31 minutes 29 seconds Server load: 0.81 0.71 0.55 Total accesses: 50849 - Total Traffic: 932.4 MB - Total Duration: 97429617 CPU Usage: u3048.95 s5775.34 cu55152800 cs13502400 - 2.e+5% CPU load 1.48 requests/sec - 27.8 kB/second - 18.8 kB/request - 1916.06 ms/request 1 requests currently being processed, 8 idle workers ____W._.__.._..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-193277110/3/4258_ 1.070186835320.00.03118.14 172.105.37.32http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-193273220/65/4193_ 23.320180365910.00.4752.79 172.105.37.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-193276770/12/4192_ 1.640179333650.00.0655.72 46.101.103.192http/1.1localhost:443GET / HTTP/1.1 3-193273330/69/4061_ 30.840179370630.00.5570.40 46.101.103.192http/1.1 4-193276840/13/4109W 4.030078659080.00.0763.62 172.105.37.32http/1.1localhost:80GET /server-status HTTP/1.0 5-1932-0/0/3807. 0.0035069415420.00.0046.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-193276860/12/3796_ 2.390173478240.00.0558.30 74.207.237.46http/1.1localhost:443GET / HTTP/1.1 7-1932-0/0/3685. 0.003796373374820.00.0093.88 172.71.102.39http/1.1www.ptatun.or.th:80GET /assets/uploads/alfacgiapi/perl.alfa HTTP/1.0 8-193273860/56/3427_ 21.490165741630.00.3555.54 104.236.193.132http/1.1localhost:80GET / HTTP/1.0 9-193273930/58/3020_ 23.490157043280.00.3935.76 172.105.37.32http/1.1localhost:80GET /v2/_catalog HTTP/1.0 10-1932-0/0/2781. 0.001252676990.00.0043.50 172.71.222.29http/1.1www.jbbgarment.com:80POST /xmlrpc.php HTTP/1.0 11-1932-0/0/2105. 0.0018041595730.00.0030.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-193272440/89/1988_ 32.300135730880.00.6834.48 74.207.237.46http/1.1 13-1932-0/0/1743. 0.001323037768610.00.00116.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/944. 0.001256017948590.00.0010.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/563. 0.00625268683030.00.0020.48 162.158.78.106http/1.1www.chonlateecoffee.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%84%E0%B8%B1%E0%B9%88%E0% 16-1932-0/0/444. 0.0060917363220.00.003.83 172.71.150.27http/1.1www.anumotanaboon.com:443POST /xmlrpc.php HTTP/1.1 17-1932-0/0/250. 0.00388702763700.00.002.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1932-0/0/408. 0.00473507137190.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1932-0/0/168. 0.00538402780870.00.002.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/312. 0.00538505022050.00.003.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/53. 0.0053750690480.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/182. 0.00537902695280.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1932-0/0/104. 0.004577192292620.00.001.29 172.70.135.153http/1.1www.chonlateecoffee.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 24-1932-0/0/10. 0.005380029630.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1932-0/0/69. 0.00523201528140.00.001.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1932-0/0/87. 0.00485902033260.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1932-0/0/86. 0.00467401828910.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1932-0/0/2. 0.00144370140.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1932-0/0/2. 0.00144260108720.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 10subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 245 seconds, (range: 228...297)index usage: 0%, cache usage: 0%total entries stored since starting: 395total entries replaced since starting: 0total entries expired since starting: 385total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 29245 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 06:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d11706d6cApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:33 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 46 seconds Server load: 6.51 7.07 6.76 Total accesses: 585 - Total Traffic: 16.6 MB - Total Duration: 1067856 CPU Usage: u3017.73 s5666.8 cu54400400 cs13297400 - 1.47e+8% CPU load 12.7 requests/sec - 368.9 kB/second - 29.0 kB/request - 1825.39 ms/request 28 requests currently being processed, 17 idle workers R_WRRR_WW_WC_WRWWW__W___WWWW_RW_RW__W_WRW_R__..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-190214680/7/11R 1.7231042204670.00.080.09 65.154.226.170http/1.1www.tspaccount.net:443 1-190211230/21/21_ 5.8500349010.00.190.19 3.224.220.101http/1.1www.krongthongsecurity.com:443GET /reune.php?igpevst115539citems/etidm HTTP/1.1 2-190211470/13/13W 6.1300423760.00.260.26 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.0 3-190211560/23/23R 9.180418430890.00.120.12 51.81.245.138http/1.1www.tspaccount.net:443GET / HTTP/1.1 4-190211620/22/22R 8.7400391720.00.180.18 205.169.39.155http/1.1www.tafa.or.th:443 5-190211740/19/19R 7.7810416330.00.290.29 198.44.140.139http/1.1 6-190211800/30/30_ 5.1801251410.00.280.28 159.203.94.228http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-190214830/6/21W 1.5620237050.00.040.15 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-review-pricing-and-specs-mm-Qkp 8-190211880/16/16W 4.0420291610.00.540.54 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=2021-chevrolet-corvette-stingray-vs-2022-chevy-corvette 9-190211940/17/17_ 7.0904196418220.00.570.57 159.203.182.222http/1.1 10-190212000/21/21W 5.9320335660.00.160.16 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0040855488.html HTTP/1.1 11-190212131/19/19C 7.4000369430.20.270.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-190212190/17/17_ 5.9500372120.00.160.16 164.90.222.93http/1.1localhost:443GET / HTTP/1.1 13-190214920/7/10W 2.4300113410.00.080.09 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=chevrolet-corvette-stingray-2lt-coupe-2022-price-in-rus 14-190212310/20/20R 5.3100339140.00.170.17 51.81.245.138http/1.1localhost:443GET /favicon.ico HTTP/1.1 15-190214980/4/11W 4.0100265320.00.050.14 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0039641984.html HTTP/1.1 16-190212430/13/13W 5.8200473900.02.262.26 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?ajpsvcw-142311citems/etidm52nw.htm HTTP/1.1 17-190212490/25/25W 5.4820207390.00.220.22 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-bg.png HTTP/1.1 18-190212510/17/17_ 9.6102335476920.00.190.19 167.172.20.95http/1.1www.tspaccount.net:443GET / HTTP/1.1 19-190212670/24/24_ 4.8300239650.00.280.28 104.131.1.32http/1.1 20-190212730/12/12W 3.2220387610.02.822.82 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-Recovered.png HTTP/1.1 21-190212790/15/15_ 8.640534422190.00.320.32 185.191.171.9http/1.1www.mkandptfoods.com:443GET /wzy.php?m69117615844.html HTTP/1.1 22-190212850/20/20_ 6.4601303480.00.260.26 159.223.108.26http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 23-190215310/5/7_ 0.06091921710.00.040.05 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?lpasvcw-147990netidm33y.htm HTTP/1.1 24-190212920/18/18W 3.8020305110.00.580.58 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 25-190212980/17/17W 5.6830356980.00.440.44 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=open-box]-gemoro-dual-ultrasonic-jewelry-cleaner-steame 26-190213040/15/15W 3.7600340440.01.691.69 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 27-190215400/2/5W 0.0120360.00.000.02 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=gemoro-3qth-next-gen-ultrasonic-cleaner-quarts-contenti 28-190213110/21/21_ 6.8001699337210.00.570.57 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa2-1024x576.png HTTP/1.1 29-190213140/17/17R 2.9701680394220.02.332.33 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-1-1024x576.png HTTP/1.1 30-190215420/3/11W 0.0120209790.00.000.22 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 31-190213260/17/17_ 7.4604444369740.00.220.22 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gemoro-sparklespa-pro-ultrasonic-cleaner-black-or-grey- 32-190215560/1/9R 0.0102162070.00.000.14 51.81.245.138http/1.1www.tspaccount.net:443 33-190215580/0/2W 0.001070530.00.000.03 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0045204004.html HTTP/1.1 34-190213480/16/16_ 8.4700370650.00.240.24 198.199.121.22http/1.1www.tspaccount.net:80GET /_all_dbs HTTP/1.0 35-190215640/3/3_ 0.03092118460.00.020.02 23.22.35.162http/1.1www.chonlateeboi.com:443GET /21118emxgetidm87g HTTP/1.1 36-190215660/1/1W 0.001030.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg1.png HTTP/1.1 37-190215850/2/2_ 0.000010.00.000.00 138.197.88.136http/1.1www.tspaccount.net:80GET /_all_dbs HTTP/1.0 38-190215910/0/0W 0.000000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-1024x576.png HTTP/1.1 39-190215970/1/1R 0.000120.00.000.00 52.70.240.171http/1.1 40-190216030/0/0W 0.000000.00.000.00 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg2.png HTTP/1.1 41-190216090/1/1_ 0.000240.00.000.00 161.35.190.56http/1.1 42-190216150/2/2R 0.000010.00.000.00 138.197.88.136http/1.1www.tspaccount.net:80GET /login.action HTTP/1.0 43-190216190/1/1_ 0.000000.00.000.00 178.128.151.41http/1.1 44-190216270/2/2_ 0.000180.00.000.00 167.71.185.75http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 235subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 258 seconds, (range: 252...273)index usage: 8%, cache usage: 10%total entries stored since starting: 235total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 105 misstotal removes since st
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78df03e728dApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 10:07:14 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 6 hours 5 minutes 3 seconds Server load: 0.55 0.72 0.77 Total accesses: 34955 - Total Traffic: 521.9 MB - Total Duration: 47572722 CPU Usage: u2750.63 s5172.28 cu51101600 cs12502300 - 290000% CPU load 1.6 requests/sec - 24.4 kB/second - 15.3 kB/request - 1360.97 ms/request 3 requests currently being processed, 7 idle workers _.___.._.W._.W..._...W............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762315250/14/2937_ 3.411037321850.00.0853.90 207.154.240.169http/1.1localhost:80GET /about HTTP/1.0 1-1762-0/0/2740. 0.0020037355580.00.0055.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1762313980/22/2884_ 5.670038248270.00.2035.26 207.154.240.169http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-1762311670/42/2589_ 12.791134963910.00.5935.86 207.154.240.169http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 4-1762316110/6/2745_ 1.481189734372870.00.0248.64 172.70.90.29http/1.1www.smetast.com:80GET /wp-login.php HTTP/1.0 5-1762-0/0/2650. 0.0015038715130.00.0032.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1762-0/0/2496. 0.0014034383980.00.0031.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1762311950/53/2297_ 13.991130649740.01.2833.67 207.154.240.169http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-1762-0/0/2097. 0.0018028899810.00.0026.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1762311970/47/2002W 9.492027836100.00.8026.91 172.68.234.231http/1.1www.smetast.com:80POST /wp-cron.php?doing_wp_cron=1695438431.89101195335388183593 10-1762-0/0/1983. 0.0019026420560.00.0025.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1762308530/65/1713_ 48.29075025719740.03.7824.95 172.71.178.158http/1.1www.smetast.com:80POST /wp-login.php HTTP/1.0 12-1762-0/0/1238. 0.0017018324420.00.0021.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762316410/2/1132W 0.631015752780.00.0114.20 172.68.234.188http/1.1www.smetast.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 14-1762-0/0/1101. 0.00121015906820.00.0017.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762-0/0/941. 0.00122011964330.00.0012.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1762-0/0/677. 0.001608708800.00.009.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762314460/20/105_ 6.75011100140.00.152.61 207.154.240.169http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1762-0/0/228. 0.0011004514880.00.004.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/193. 0.0012302580020.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1762-0/0/119. 0.0011501371060.00.004.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762314660/19/38W 5.2300415040.00.112.21 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.0 22-1762-0/0/13. 0.00106069640.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/23. 0.00116092140.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/13. 0.00120039470.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/1. 0.002495000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 56subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 105 seconds, (range: 15...271)index usage: 1%, cache usage: 2%total entries stored since starting: 4825total entries replaced since starting: 0total entries expired since starting: 4769total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 174 hit, 11534 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 03:05 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dedcb095eApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 10:05:23 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 6 hours 3 minutes 11 seconds Server load: 1.32 1.38 1.27 Total accesses: 35354 - Total Traffic: 612.3 MB - Total Duration: 51103410 CPU Usage: u2831.72 s5153.69 cu50868800 cs12452600 - 291000% CPU load 1.62 requests/sec - 28.8 kB/second - 17.7 kB/request - 1445.48 ms/request 4 requests currently being processed, 7 idle workers W_W__RW___...._................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743185730/5/2924W 2.580042803900.00.0562.34 172.68.234.196http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 1-1743184630/32/2942_ 11.522124341564220.00.5046.48 52.70.240.171http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 2-1743181440/84/3085W 55.600044803690.02.2560.44 167.71.48.191http/1.1localhost:80GET /server-status HTTP/1.0 3-1743185160/22/2934_ 7.09156339807890.00.1857.63 172.71.94.53http/1.1www.99accountant.com:80GET /wp-includes/wp-class.php HTTP/1.0 4-1743183050/61/2710_ 47.582036634620.00.5737.00 168.138.207.217http/1.1www.leadingservice.co.th:443POST /xmlrpc.php HTTP/1.1 5-1743185300/7/2773R 5.422291338774920.00.3753.43 50.31.134.237http/1.1www.leadingservice.co.th:443 6-1743182390/72/2589W 24.166037013820.00.6843.51 172.68.234.197http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1695092716.91714596748352050781 7-1743185360/14/2565_ 7.82198935921380.00.1342.39 23.22.35.162http/1.1www.focusfilmthailand.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 8-1743185920/7/2531_ 3.53082137977130.00.0836.63 198.41.242.176http/1.1www.siamautomation.com:443GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B9%82%E0%B8%99%E0%B9%8A 9-1743185380/13/2321_ 6.311160734376600.00.1132.50 172.68.234.204http/1.1www.accgoing.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 10-1743-0/0/1948. 0.0010029429300.00.0032.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/1527. 0.00154024770720.00.0026.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/1331. 0.0066017785540.00.0028.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743-0/0/1143. 0.00286019116310.00.0018.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1743181710/71/751_ 59.701011387600.00.7011.58 167.71.48.191http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1743-0/0/451. 0.00206006158850.00.006.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/537. 0.00175008461110.00.008.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/134. 0.00247002057450.00.002.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/95. 0.00206201389890.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/39. 0.0023110626550.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/8. 0.002533079460.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/7. 0.002541026970.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/2. 0.002547031570.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/5. 0.00254603700.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/2. 0.002548030790.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 50subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 110 seconds, (range: 8...294)index usage: 1%, cache usage: 2%total entries stored since starting: 6619total entries replaced since starting: 0total entries expired since starting: 6569total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 197 hit, 9932 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-19 03:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d644315dbApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 03:05:09 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 2 hours 37 minutes 12 seconds Server load: 0.53 0.73 0.77 Total accesses: 13236 - Total Traffic: 199.5 MB - Total Duration: 18813357 CPU Usage: u2739.18 s5127.95 cu50714500 cs12419500 - 669000% CPU load 1.4 requests/sec - 21.7 kB/second - 15.4 kB/request - 1421.38 ms/request 2 requests currently being processed, 7 idle workers _W__R.___._....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733127770/68/1075_ 28.141014793660.01.5614.76 159.65.58.104http/1.1localhost:80GET /about HTTP/1.0 1-1733128640/50/1085W 25.330015324800.00.3613.82 159.65.58.104http/1.1localhost:80GET /server-status HTTP/1.0 2-1733129750/30/978_ 12.550014213920.00.2211.08 159.65.58.104http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-1733130110/29/979_ 11.45157314076920.00.1913.13 172.70.86.125http/1.1www.yuritrading.com:80GET /.git/config HTTP/1.0 4-1733131150/3/944R 2.5057101812601930.00.0512.96 172.70.135.57http/1.1www.torrong.co.th:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%9B%E0%B8%A3%E0%B8%B6%E0% 5-1733-0/0/995. 0.0036114735160.00.0018.92 18.224.40.16http/1.1www.focusfilmthailand.com:80GET /wp-content/plugins/so-widgets-bundle/icons/fontawesome/sty 6-1733127840/57/870_ 26.672014714340.00.5112.72 159.65.58.104http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 7-1733131450/14/855_ 3.89055512554140.00.0919.00 172.70.91.184http/1.1www.yuritrading.com:80GET /s/6343e27373e21323e2430313/_/;/META-INF/maven/com.atlassia 8-1733131670/8/960_ 2.660112521730.00.0613.19 159.65.58.104http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1733-0/0/787. 0.0068112311077670.00.0010.44 27.254.96.168http/1.1www.siamsolarrooftop.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94%E0% 10-1733126500/89/750_ 36.45109686410.01.238.52 159.65.58.104http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 11-1733-0/0/472. 0.0055406303030.00.006.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1733-0/0/333. 0.00166804418920.00.003.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/341. 0.00114804765710.00.0014.80 46.101.103.192http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 14-1733-0/0/258. 0.00167703763710.00.002.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/278. 0.00168103919250.00.003.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/181. 0.00167802888030.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/146. 0.00164702159430.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/49. 0.0016700464520.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/16. 0.0016550137230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/118. 0.0082001756370.00.007.42 134.122.89.242http/1.1localhost:80GET /config.json HTTP/1.0 21-1733-0/0/198. 0.008077263351660.00.002.07 162.158.106.90http/1.1www.chonlateeplus.com:443GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1 22-1733-0/0/17. 0.0016690145630.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/8. 0.001675053030.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/6. 0.001676025030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/98. 0.0082011495680.00.000.78 134.122.89.242http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 26-1733-0/0/88. 0.0016790983180.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1733-0/0/38. 0.0016670201420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/8. 0.001666135956180.00.000.02 154.16.78.225http/1.1 29-1733-0/0/3. 0.001671019290.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1733-0/0/95. 0.008078471811710.00.001.00 172.68.234.137http/1.1www.chonlateeauto.com:443POST /wp-cron.php?doing_wp_cron=1694893899.82295298576354980468 31-1733-0/0/1. 0.001683010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1733-0/0/3. 0.001672023590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1733-0/0/4. 0.001661050680.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1733-0/0/3. 0.001662018340.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1733-0/0/4. 0.001660034410.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1733-0/0/85. 0.0089901396670.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1733-0/0/3. 0.001673010240.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1733-0/0/94. 0.008156851493450.00.000.75 162.158.106.91http/1.1www.chonlateeplus.com:443GET /wp-content/themes/seotheme/db.php?u HTTP/1.1 39-1733-0/0/7. 0.001646086250.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1733-0/0/3. 0.001674040.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 82subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 93 seconds, (range: 2...287)index usage: 2%, cache usage: 3%total entries stored since starting: 1941total entries replaced since starting: 0total entries expired since starting: 1859total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5694 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 20:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78de7b4b9c5Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 05:24:36 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 1 hour 22 minutes 24 seconds Server load: 0.72 0.56 0.42 Total accesses: 4329 - Total Traffic: 55.2 MB - Total Duration: 5387705 CPU Usage: u2787.43 s5116.01 cu50514600 cs12376000 - 1270000% CPU load .876 requests/sec - 11.4 kB/second - 13.1 kB/request - 1244.56 ms/request 1 requests currently being processed, 8 idle workers __.._..___W__..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1720177290/34/361_ 10.22015536490.00.674.16 161.35.155.246http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1720177700/30/409_ 7.51115026000.00.325.41 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-1720-0/0/345. 0.0050504192030.00.004.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1720-0/0/338. 0.0048703719660.00.004.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1720173380/70/370_ 32.53015254880.00.724.11 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1720-0/0/314. 0.002066763616120.00.003.62 162.158.239.43http/1.1www.siamerp.com:443GET /tag/%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B9%82%E0%B8%9B%E0%B8%A3 6-1720-0/0/369. 0.002030424409670.00.003.60 52.167.144.238http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 7-1720173740/66/318_ 32.41013968520.00.843.76 165.232.76.155http/1.1 8-1720175000/54/280_ 26.60013834320.00.643.51 165.232.76.155http/1.1 9-1720175120/53/335_ 22.19111433856380.00.733.94 165.232.76.155http/1.1 10-1720172120/79/263W 40.41003087150.01.212.93 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.0 11-1720173610/71/205_ 33.07112320440.00.832.50 161.35.155.246http/1.1localhost:80GET /about HTTP/1.0 12-1720175180/54/140_ 24.32011243900.00.551.29 165.232.76.155http/1.1 13-1720-0/0/14. 0.00503037750.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/13. 0.003129091560.00.000.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1720-0/0/12. 0.0031260109620.00.000.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720-0/0/91. 0.0018694771562900.00.001.69 172.68.234.226http/1.1www.jbbgarment.com:80GET /gallery_home-04/ HTTP/1.0 17-1720-0/0/59. 0.0022430781850.00.004.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/93. 0.00178310961227700.00.001.43 172.70.38.246http/1.1www.99accountant.com:80GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 45subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 113 seconds, (range: 37...276)index usage: 1%, cache usage: 2%total entries stored since starting: 704total entries replaced since starting: 0total entries expired since starting: 659total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1443 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 22:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dbdacee74Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 07:17:24 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 3 hours 15 minutes 12 seconds Server load: 0.53 0.47 0.51 Total accesses: 15991 - Total Traffic: 236.6 MB - Total Duration: 19631590 CPU Usage: u2777.98 s5105.56 cu50463100 cs12365200 - 537000% CPU load 1.37 requests/sec - 20.7 kB/second - 15.1 kB/request - 1227.66 ms/request 2 requests currently being processed, 8 idle workers _RW_______........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716207380/44/1433_ 27.940118217720.00.5617.21 162.243.186.177http/1.1 1-1716211010/14/1488R 8.881017555630.00.2217.32 164.92.192.25http/1.1localhost:80GET /about HTTP/1.0 2-1716211930/5/1440W 3.580016789750.00.0217.38 164.92.192.25http/1.1localhost:80GET /server-status HTTP/1.0 3-1716211140/12/1374_ 6.810117455640.00.0823.66 162.243.186.177http/1.1 4-1716203520/92/1335_ 44.34129616938220.01.8117.57 27.254.96.168http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-cron.php?doing_wp_cron=1694564242.61124992370605468750 5-1716207540/44/1273_ 25.400114545480.00.5117.67 164.92.192.25http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1716203890/81/1159_ 38.170013838740.00.9115.25 164.92.192.25http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-1716209360/29/1245_ 16.801114742460.00.3413.47 164.92.192.25http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-1716204060/70/1110_ 40.23163614510710.00.9219.29 205.185.116.37http/1.1www.xn--12cf1cddmk0fho2ci6he1a9GET /wp-login.php HTTP/1.0 9-1716209840/26/1070_ 11.39016612447000.00.2118.48 205.185.116.37http/1.1www.xn--12cf1cddmk0fho2ci6he1a9POST /wp-login.php HTTP/1.0 10-1716-0/0/977. 0.001048012015080.00.0021.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1716-0/0/714. 0.007719103120.00.007.53 27.254.96.168http/1.1www.1smestartup.com:443GET /wp-content/themes/sydney/js/functions.min.js?ver=20210823 12-1716-0/0/423. 0.00214707188860.00.0018.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/283. 0.00212304193770.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/94. 0.0019470612810.00.002.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/10. 0.002125032890.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/198. 0.00161812462551970.00.002.37 162.158.238.61http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 17-1716-0/0/96. 0.00214901216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.0021500110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/60. 0.0018350551080.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1716-0/0/96. 0.001705424847590.00.001.07 172.71.223.193http/1.1www.yuritrading.com:80GET //wp-content/dropdown.php HTTP/1.0 21-1716-0/0/12. 0.002088067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/95. 0.0016661706852810.00.002.11 54.36.149.3http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 23-1716-0/0/4. 0.002139040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 72subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 111 seconds, (range: 10...284)index usage: 2%, cache usage: 3%total entries stored since starting: 2461total entries replaced since starting: 0total entries expired since starting: 2389total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 114 hit, 5917 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 00:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dbd4b8b9cApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 19:00:08 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 14 hours 57 minutes 53 seconds Server load: 0.55 0.84 0.92 Total accesses: 75456 - Total Traffic: 1.0 GB - Total Duration: 108424570 CPU Usage: u2732.68 s5070.01 cu50284700 cs12326000 - 116000% CPU load 1.4 requests/sec - 20.4 kB/second - 14.6 kB/request - 1436.92 ms/request 1 requests currently being processed, 8 idle workers .__.__._.___W..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702-0/0/6392. 0.00127088694980.00.0090.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1702246040/30/6387_ 9.4402088870380.00.5496.84 138.197.88.136http/1.1 2-1702242070/75/6192_ 60.090191590020.00.8795.98 138.197.88.136http/1.1 3-1702-0/0/6141. 0.007115588680370.00.0086.55 172.71.167.174http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%8B%E0%B9%88%E0%B8%AD%E0%B8%A1%E0%B8%84%E0%B8%AD 4-1702246610/20/5700_ 8.981082642430.00.3384.63 138.197.88.136http/1.1 5-1702246670/19/6065_ 5.620182998100.00.2880.30 165.22.74.203http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1702-0/0/5527. 0.00129085068990.00.0073.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-1702242590/72/5697_ 25.680184197070.00.9983.60 165.22.74.203http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-1702-0/0/5265. 0.00113074455410.00.0065.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1702244310/46/4793_ 12.000138867390300.00.8063.17 146.190.237.4http/1.1www.thaidaoherb.com:443GET / HTTP/1.1 10-1702245660/39/4263_ 14.5203559538370.00.9769.99 138.197.88.136http/1.1 11-1702245750/37/3646_ 39.690149325500.00.5663.44 217.160.178.172http/1.1www.dinocoffees.com:443POST /xmlrpc.php HTTP/1.1 12-1702245830/30/3438W 10.790051201780.00.3345.21 165.22.74.203http/1.1localhost:80GET /server-status HTTP/1.0 13-1702-0/0/1671. 0.00471109223211730.00.0021.42 45.61.184.58http/1.1www.mgrandstructure.com:443POST /wp-login.php HTTP/1.1 14-1702-0/0/1275. 0.001132017820210.00.0018.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1702-0/0/936. 0.001131012137680.00.0011.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/421. 0.0091808412010.00.006.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1702-0/0/352. 0.00108004099350.00.003.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/67. 0.00156586888460.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/101. 0.001447101655760.00.001.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/109. 0.001566001344570.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/8. 0.0015655037620.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/286. 0.001445004933380.00.002.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/100. 0.00156750733970.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/6. 0.0015664036980.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/13. 0.0015674086250.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/9. 0.0015647068780.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/2. 0.0015673010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1702-0/0/99. 0.00144445501375190.00.001.11 162.158.166.164http/1.1www.chonlateebranding.com:443GET //cong.php HTTP/1.1 29-1702-0/0/4. 0.0015657074030.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/2. 0.0015672010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/69. 0.001477601144600.00.000.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/2. 0.0015671010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/101. 0.00143987261921460.00.000.99 209.141.53.248http/1.1www.srisittiwirotthrngthai.com:GET /wp-login.php HTTP/1.1 34-1702-0/0/95. 0.001446902967570.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/97. 0.001422703934310.00.002.30 143.244.129.212http/1.1www.mkandptfoods.com:80GET / HTTP/1.0 36-1702-0/0/5. 0.0015670041190.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/8. 0.0015644095590.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1702-0/0/109. 0.00142286982571010.00.001.21 104.244.72.101http/1.1www.seasabithailand.com:443POST /wp-login.php HTTP/1.1 39-1702-0/0/1. 0.0043891000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0043877060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 57subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 89 seconds, (range: 5...212)index usage: 2%, cache usage: 2%total entries stored since starting: 13765total entries replaced since starting: 0total entries expired since starting: 13708total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 173 hit, 29484 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 11:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d33779664Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 08:51:04 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 4 hours 48 minutes 53 seconds Server load: 3.11 2.20 1.92 Total accesses: 28266 - Total Traffic: 369.2 MB - Total Duration: 37290059 CPU Usage: u2918.14 s5099.88 cu50056100 cs12277200 - 360000% CPU load 1.63 requests/sec - 21.8 kB/second - 13.4 kB/request - 1319.25 ms/request 8 requests currently being processed, 5 idle workers .W_WW_WWWW_W__.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685-0/0/2416. 0.0015033996850.00.0034.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1685218710/52/2412W 47.340030945900.00.4132.94 27.254.96.168http/1.1www.chonlateedesign.com:443POST /wp-cron.php?doing_wp_cron=1694051464.24523997306823730468 2-1685220190/29/2325_ 28.44056829724660.00.2728.12 148.72.214.194http/1.1www.focusfilmthailand.com:80POST /wp-login.php HTTP/1.0 3-1685218040/65/2189W 53.280029647090.00.7527.95 202.28.32.5http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 4-1685218800/47/2182W 36.370029001720.00.3327.74 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 5-1685218160/67/1974_ 59.270156323443070.00.7925.26 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 6-1685216890/88/2141W 62.431027133020.00.9626.07 81.88.52.160http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 7-1685218820/51/2214W 44.960029145650.00.4624.42 139.144.150.205http/1.1localhost:80GET /server-status HTTP/1.0 8-1685220260/24/1998W 22.860025319770.00.2723.73 107.189.11.148http/1.1www.pokaorganize.com:443POST /wp-login.php HTTP/1.1 9-1685221160/9/1982W 11.310026199770.00.0828.47 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 10-1685221230/11/1503_ 8.680020415700.00.2223.89 139.144.150.205http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1685220280/23/1211W 25.350015796120.00.2717.01 178.128.26.44http/1.1www.chonlateemeet.com:443POST /wp-login.php HTTP/1.1 12-1685218280/63/1036_ 49.53053115501520.00.6713.10 140.238.230.197http/1.1www.focusfilmthailand.com:80GET /wp-admin/network/utils/load.php HTTP/1.0 13-1685221290/9/841_ 8.02095012655430.00.0912.98 178.62.3.65http/1.1 14-1685-0/0/747. 0.0085010461760.00.009.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685-0/0/534. 0.005911526890930.00.006.68 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 16-1685-0/0/131. 0.0021001630220.00.001.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/118. 0.00610501201320.00.001.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/3. 0.0014845019380.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/97. 0.001415211391380.00.000.98 81.169.144.135http/1.1www.plastandtrans.com:443POST /xmlrpc.php HTTP/1.1 20-1685-0/0/3. 0.0014831015450.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/98. 0.001412110331134600.00.001.29 27.254.96.168http/1.1www.dinocoffees.com:443POST /wp-cron.php?doing_wp_cron=1694037340.74088907241821289062 22-1685-0/0/97. 0.001414131185610.00.001.23 184.75.221.59http/1.1www.1smestartup.com:443POST /xmlrpc.php HTTP/1.1 23-1685-0/0/2. 0.001483808790.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/2. 0.0014840010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/2. 0.0014837030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/1. 0.0014848010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0014835011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0014836012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001483309920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0014847010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 106subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 52 seconds, (range: 0...236)index usage: 3%, cache usage: 4%total entries stored since starting: 4312total entries replaced since starting: 0total entries expired since starting: 4206total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 98 hit, 8021 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 01:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d7ee7f851Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 01:46:48 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 10 hours 23 minutes 34 seconds Server load: 1.16 2.67 4.07 Total accesses: 143779 - Total Traffic: 1.1 GB - Total Duration: 303169786 CPU Usage: u2648.04 s4996.62 cu49730600 cs12203400 - 166000% CPU load 3.84 requests/sec - 30.8 kB/second - 8.0 kB/request - 2108.58 ms/request 4 requests currently being processed, 7 idle workers W_._RW_W_._..__................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674154920/52/9374W 22.5910172228490.00.8179.50 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 1-1674157490/18/9233_ 11.1511168404070.00.1281.13 162.243.184.251http/1.1localhost:80GET /v2/_catalog HTTP/1.0 2-1674-0/0/9329. 0.00480169645360.00.0075.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1674158310/14/9039_ 4.981932161316620.00.2579.42 159.223.108.26http/1.1 4-1674158120/18/8831R 5.1610164068450.01.7185.77 172.173.100.80http/1.1www.tkadvicesystem.com:80GET /simple.php HTTP/1.0 5-1674158440/13/8691W 6.4300161132130.00.1475.20 162.243.184.251http/1.1localhost:80GET /server-status HTTP/1.0 6-1674152100/74/8234_ 40.79056154046530.00.6270.21 159.223.108.26http/1.1 7-1674153370/71/8096W 33.7700149914310.00.6062.38 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693766808.05852007865905761718 8-1674158520/12/7841_ 4.3300148601330.00.1562.76 162.243.184.251http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1674-0/0/7962. 0.00610153131700.00.0079.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1674158650/13/7373_ 5.1001139431620.00.1272.69 159.223.108.26http/1.1 11-1674-0/0/6774. 0.00640133425660.00.0047.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1674-0/0/6303. 0.00650127563460.00.0047.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1674158530/14/4987_ 4.170547109834780.00.3731.31 172.68.234.171http/1.1www.xn--72cz8bp5a1a1b8d.com:443POST /wp-cron.php?doing_wp_cron=1693766807.33769893646240234375 14-1674158670/11/4828_ 7.1601285111469540.00.2246.54 172.70.42.245http/1.1www.xn--72cz8bp5a1a1b8d.com:443GET /robots.txt HTTP/1.1 15-1674-0/0/3889. 0.0060094600010.00.0024.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1674-0/0/2897. 0.0062078341320.00.0014.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1674-0/0/2449. 0.0058065629530.00.0011.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1674-0/0/2460. 0.00274069671840.00.0011.59 162.158.158.190http/1.1www.chonlateeit.com:443POST /xmlrpc.php HTTP/1.1 19-1674-0/0/1936. 0.00646057282660.00.007.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1674-0/0/1695. 0.00401052749470.00.005.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1674-0/0/1492. 0.00584208446323600.00.009.95 172.68.234.141http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693766221.86524391174316406250 22-1674-0/0/1445. 0.00614042596020.00.007.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1674-0/0/1141. 0.00393174536074130.00.004.55 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693766412.3577 HTTP/1.0 24-1674-0/0/885. 0.00416029813030.00.002.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/902. 0.00356165528664230.00.004.25 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693766449.4602 HTTP/1.0 26-1674-0/0/735. 0.001848023810270.00.002.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/773. 0.002813024880470.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1674-0/0/565. 0.002811018692190.00.002.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/513. 0.002729617752930.00.001.71 179.43.169.218http/1.1www.tkadvicesystem.com:443GET /config/config.php HTTP/1.1 30-1674-0/0/385. 0.0027261713935110.00.001.59 194.31.173.201http/1.1www.thairuamthaiparty.com:443GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?v 31-1674-0/0/418. 0.002739186714720090.00.002.37 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693764067.2714 HTTP/1.0 32-1674-0/0/353. 0.002893012743660.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1674-0/0/426. 0.002816015652510.00.001.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/322. 0.002801011395600.00.002.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/197. 0.00285007990170.00.001.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1674-0/0/177. 0.00267806926660.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/218. 0.00263617087825030.00.000.86 172.68.234.197http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693764169.0834 HTTP/1.0 38-1674-0/0/46. 0.001296802531470.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/99. 0.001283027385079870.00.000.28 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693753974.7091 HTTP/1.0 40-1674-0/0/73. 0.001289703865020.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/81. 0.001287604242180.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/91. 0.001282604803990.00.000.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/121. 0.001273915754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.001272219884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 252subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 36 seconds, (range: 0...234)index usage: 8%, cache usage: 11%total entries stored since starting: 20845total entries replaced since starting: 0total entries expired since starting: 20593total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 252 hit, 20555 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-03 18:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78db5a0b9f5Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 19:34:59 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 1 hour 46 minutes 59 seconds Server load: 2.37 2.87 3.59 Total accesses: 39103 - Total Traffic: 352.2 MB - Total Duration: 49589157 CPU Usage: u2658.17 s4915.36 cu48678700 cs11933600 - 944000% CPU load 6.09 requests/sec - 56.2 kB/second - 9.2 kB/request - 1268.17 ms/request 6 requests currently being processed, 6 idle workers _W.C.._W_C_WR__................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-165289450/0/2590_ 0.000031914810.00.0021.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-165286940/74/2539W 39.110031026360.01.4931.17 162.158.60.138http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /wp-login.php HTTP/1.0 2-1652-0/0/2495. 0.00739930624240.00.0023.27 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 3-165287551/44/2236C 21.550028793491.30.4018.99 178.62.73.12http/1.1localhost:443GET /about HTTP/1.1 4-1652-0/0/2437. 0.002242829921430.00.0022.26 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 5-1652-0/0/2267. 0.002774028778800.00.0018.82 172.70.39.160http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 6-165289110/6/2277_ 3.30047928679440.00.0819.18 164.90.222.93http/1.1 7-165287200/59/2410W 31.510028939600.00.7718.94 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 8-165288340/19/2242_ 10.810027575120.00.1718.10 139.144.150.45http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-165288431/16/2114C 9.091026718952.60.1118.00 178.62.73.12http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-165285920/91/2089_ 51.810026990620.00.9131.30 164.90.222.93http/1.1 11-165288490/18/1888W 9.580022829380.00.1719.55 139.144.150.45http/1.1localhost:80GET /server-status HTTP/1.0 12-165289220/6/1861R 3.76074323635600.00.0316.48 172.70.39.159http/1.1 13-165288510/19/1672_ 8.480021130280.00.1011.99 178.62.73.12http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 14-165289280/7/1845_ 3.910100422767150.00.0414.41 172.173.110.189http/1.1www.chonlateevip.com:443POST //wp-login.php HTTP/1.1 15-1652-0/0/1112. 0.00615013690840.00.009.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1652-0/0/1211. 0.0037745014958240.00.009.55 162.158.174.177http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 17-1652-0/0/971. 0.00512012020870.00.007.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1652-0/0/691. 0.003869248707690.00.005.73 172.71.166.11http/1.1www.chonlateecoffee.com:80GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.0 19-1652-0/0/157. 0.0056302113320.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1652-0/0/202. 0.0019914153529280.00.001.62 172.71.167.87http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 21-1652-0/0/162. 0.00205603201850.00.002.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1652-0/0/146. 0.0020195982865280.00.001.61 103.93.131.178http/1.1www.thaiquickservice.net:443GET /xmlrpc.php HTTP/1.1 23-1652-0/0/36. 0.0022000934510.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1652-0/0/69. 0.00209001698990.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1652-0/0/137. 0.0020255072399230.00.000.61 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 26-1652-0/0/110. 0.0019995042172870.00.000.55 172.71.167.87http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 27-1652-0/0/81. 0.00202901658530.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/47. 0.00215001000020.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/114. 0.00202011983960.00.000.70 194.169.175.26http/1.1www.dtacbusiness.com:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.0 30-1652-0/0/3. 0.003719080530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1652-0/0/11. 0.003718092740.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1652-0/0/37. 0.0036630566180.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1652-0/0/60. 0.0036450565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.0036430696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.0036390719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.0036940349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.0034964061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.0037147143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.0036700530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.0036960257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.0037020208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.0037080142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.0036730543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.0035334221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.0036840415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.0034937931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.00350510251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.0034849421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.0037130109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-08-31 12:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d9e989fdcApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:50 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 22 seconds Server load: 6.52 6.10 6.48 Total accesses: 283 - Total Traffic: 2.1 MB - Total Duration: 249715 CPU Usage: u2577.1 s4828.56 cu47808400 cs11700400 - 2.71e+8% CPU load 12.9 requests/sec - 97.0 kB/second - 7.5 kB/request - 882.385 ms/request 15 requests currently being processed, 7 idle workers WR_WRWC_WWWR_RW__RW_W_............................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209850/21/21W 5.8110122430.00.140.14 172.71.182.96http/1.1www.torrong.com:80POST /wp-login.php?action=register HTTP/1.0 1-1644209860/15/15R 8.6301173430.00.090.09 167.71.185.75http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-1644209890/20/20_ 6.0501136310.00.120.12 165.227.146.2http/1.1localhost:80GET /_all_dbs HTTP/1.0 3-1644210010/19/19W 6.5100129570.00.080.08 167.99.182.39http/1.1www.tafa.or.th:443GET /debug/default/view?panel=config HTTP/1.1 4-1644210080/19/19R 5.0100211560.00.060.06 139.144.96.150http/1.1www.tspaccount.net:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-1644210310/15/15W 7.5000168500.00.170.17 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 6-1644210371/14/14C 6.250745127347.10.120.12 167.99.182.39http/1.1www.tafa.or.th:443GET /about HTTP/1.1 7-1644210390/13/13_ 7.030768139000.00.090.09 172.68.234.134http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1693329949.72525501251220703125 8-1644211390/1/13W 0.010078400.00.000.08 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 9-1644210550/9/9W 3.970099550.00.050.05 139.144.96.150http/1.1www.tafa.or.th:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 10-1644210570/9/9W 4.0200100540.00.050.05 172.173.110.230http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST //wp-login.php HTTP/1.1 11-1644210630/15/15R 6.1200125510.00.110.11 159.223.108.26http/1.1 12-1644210730/17/17_ 5.200450122160.00.060.06 168.61.149.69http/1.1www.uniqueworkthailand.com:443POST //wp-login.php HTTP/1.1 13-1644210750/12/12R 6.100660124630.00.150.15 172.173.110.177http/1.1www.dinocoffees.com:443 14-1644211460/0/1W 0.000010.00.000.00 134.122.63.192http/1.1localhost:80GET /server-status HTTP/1.0 15-1644210870/15/15_ 6.180772124260.00.070.07 128.199.62.55http/1.1 16-1644210930/11/11_ 5.8401152118330.00.100.10 77.68.23.56http/1.1www.thaiquickservice.net:443GET / HTTP/1.1 17-1644210990/6/6R 3.970802106400.00.320.32 164.90.222.93http/1.1 18-1644211050/15/15W 4.330088200.00.100.10 74.249.252.222http/1.1www.chonlateevip.com:443POST //wp-login.php HTTP/1.1 19-1644211110/15/15_ 6.1000124780.00.080.08 161.35.155.246http/1.1www.tspaccount.net:80GET /login.action HTTP/1.0 20-1644211220/9/9W 3.870076140.00.060.06 23.99.197.177http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 27subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 287 seconds, (range: 283...297)index usage: 0%, cache usage: 1%total entries stored since starting: 27total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 108 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d170e54b4Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:36 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 33 seconds Server load: 0.60 0.84 1.22 Total accesses: 156 - Total Traffic: 3.9 MB - Total Duration: 47041 CPU Usage: u651.13 s1259.09 cu12804600 cs3078510 - 4.81e+7% CPU load 4.73 requests/sec - 119.5 kB/second - 25.3 kB/request - 301.545 ms/request 10 requests currently being processed, 0 idle workers WWRWWWRRWW........................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439060/20/20W 3.000067650.00.570.57 172.70.142.110http/1.1www.chorsiam.com:80GET /%E0%B9%80%E0%B8%81%E0%B9%89%E0%B8%B2%E0%B8%AD%E0%B8%B5%E0% 1-45439070/19/19W 3.080065760.00.660.66 157.230.243.127http/1.1www.tspaccount.net:443GET / HTTP/1.1 2-45439120/21/21R 1.333846500.00.610.61 103.130.219.13http/1.1 3-45439220/24/24W 2.280067700.00.470.47 172.105.91.149http/1.1localhost:80GET /server-status HTTP/1.0 4-45439320/20/20W 1.170023300.00.360.36 172.68.234.210http/1.1www.accprogress.com:80GET /category/type-a/ HTTP/1.0 5-45439550/21/21W 2.401063000.00.540.54 141.101.76.52http/1.1www.accprogress.com:80POST /xmlrpc.php HTTP/1.0 6-45439900/19/19R 1.88074479590.00.450.45 172.70.189.57http/1.1www.time2hand.com:80GET /?tag=%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A 7-45440090/10/10R 0.630134060.00.180.18 172.105.91.149http/1.1localhost:80GET / HTTP/1.0 8-45440190/2/2W 0.570022800.00.020.02 172.68.234.186http/1.1www.accprogress.com:80POST /wp-cron.php?doing_wp_cron=1666604795.26289892196655273437 9-45440430/0/0W 0.000000.00.000.00 172.70.142.242http/1.1www.time2hand.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 296 seconds, (range: 289...298)index usage: 0%, cache usage: 0%total entries stored since starting: 4total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 13 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 20:10
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d4610ace658cApache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 03:10:52 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 95 Parent Server MPM Generation: 94 Server uptime: 28 days 17 hours 9 minutes 31 seconds Server load: 2.06 2.06 2.06 Total accesses: 1850798 - Total Traffic: 23.8 GB - Total Duration: 2141121481 CPU Usage: u177.91 s108.2 cu32159.4 cs2232.06 - 1.4% CPU load .746 requests/sec - 10.1 kB/second - 13.5 kB/request - 1156.86 ms/request 2 requests currently being processed, 126 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031725no0yes032000 231729no0yes032000 331728no0yes131000 531726no0yes131000 Sum400 2126000 ________________________________................................ ___________________________________________________________W____ ................................___________R____________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-94317250/2/14807_ 0.4620160261020.00.02193.84 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/15296_ 0.0020139013540.00.00198.97 147.182.130.98http/1.1 0-94317250/2/14869_ 1.8820150309580.00.00192.75 139.144.150.205http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/3/15051_ 1.9210145875150.00.00186.03 162.243.161.105http/1.1localhost:443GET /.DS_Store HTTP/1.1 0-94317250/1/14951_ 0.4010147711750.00.00185.46 162.243.161.105http/1.1 0-94317250/2/15174_ 0.4610156649260.00.00188.55 138.68.133.118http/1.1 0-94317250/1/14848_ 0.4110145588920.00.00200.31 162.243.161.105http/1.1 0-94317250/0/15155_ 0.00110150182090.00.00187.60 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 0-94317250/0/15114_ 0.00100145226990.00.00229.90 162.243.161.105h2localhost:443[0/0] Software caused connection abort 0-94317250/2/15250_ 1.90100148853460.00.00194.93 139.144.150.205http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/3/14815_ 1.9090154393450.00.00200.74 139.144.150.205http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/2/14826_ 1.9090147156460.00.00195.47 164.92.84.255http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/2/14695_ 1.9090137182790.00.00185.56 139.144.150.205http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/1/14846_ 0.4780169086640.00.00186.04 147.182.130.98http/1.1localhost:443GET /about HTTP/1.1 0-94317250/2/15801_ 1.9170141615400.00.00187.82 162.243.161.105http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-94317250/2/14851_ 1.9170165341280.00.00182.52 162.243.161.105http/1.1localhost:443GET /about HTTP/1.1 0-94317250/1/14901_ 0.4770143405120.00.00206.40 159.203.94.228http/1.1localhost:443GET /.git/config HTTP/1.1 0-94317250/2/14961_ 0.4870144940060.00.00189.33 159.203.94.228http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-94317250/1/14781_ 0.4860160388390.00.00200.58 147.182.130.98http/1.1localhost:443GET /.git/config HTTP/1.1 0-94317250/1/15002_ 1.9160144639410.00.00193.85 146.190.98.165http/1.1localhost:80GET / HTTP/1.1 0-94317250/0/14992_ 0.0060181496050.00.00193.47 162.243.161.105http/1.1localhost:443GET / HTTP/1.1 0-94317250/1/15017_ 0.4857147053880.00.00204.12 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/1/15473_ 0.4350150756120.00.00188.31 161.35.155.246http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/1/14677_ 1.9250138765570.00.00190.21 146.190.98.165http/1.1localhost:80GET /.git/config HTTP/1.1 0-94317250/1/14988_ 1.9250162205960.00.02186.93 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/1/14662_ 1.9250135981680.00.00197.05 146.190.98.165http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/2/15161_ 1.9250144713600.00.00194.53 146.190.98.165http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/3/14945_ 1.9250159195760.00.00213.34 146.190.98.165http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/0/14742_ 0.0050152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-94317250/0/15189_ 0.0040135139150.00.00225.17 45.33.68.129http/1.1 0-94317250/1/14679_ 1.88217155573270.00.00199.16 139.144.150.205http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-94317250/2/14942_ 1.8840145815220.00.00185.20 164.92.84.255http/1.1localhost:80\x16\x03\x01\x01\t\x01 1-94-0/0/15731. 0.0098220138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-94-0/0/15813. 0.0098220136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15602. 0.0098220174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15318. 0.0098220150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-94-0/0/15276. 0.0098220146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-94-0/0/15655. 0.0098220134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-94-0/0/15351. 0.0098220172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-94-0/0/15185. 0.0098220165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15335. 0.0098220127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/14956. 0.0098220152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-94-0/0/15041. 0.0098220148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15506. 0.0098220159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-94-0/0/15329. 0.0098220159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/15189. 0.0098220137016410.00.00183.04 159.223.102.13http/1.1localhost:80GET /config.json HTTP/1.1 1-94-0/0/15367. 0.009822
Found on 2024-02-02 20:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d4619ae8914fApache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 17:38:09 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 7 hours 36 minutes 48 seconds Server load: 2.76 2.77 2.69 Total accesses: 924666 - Total Traffic: 12.4 GB - Total Duration: 1132183462 CPU Usage: u79.83 s10.76 cu15734.7 cs827.39 - 8.32% CPU load 4.62 requests/sec - 65.0 kB/second - 14.1 kB/request - 1224.42 ms/request 4 requests currently being processed, 60 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 128172no4yes329001 232702no1yes131000 Sum205 460001 ................................_________W___W__________R_______ ____________W___________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/7491. 0.0027563598326540.00.00107.52 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ocdxhvp-10531qitems/etidm HTTP/1.1 0-7-0/0/7997. 0.0027563376283270.00.00109.31 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/7552. 0.0027583882954630.00.00106.80 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-21596fitems/etidm3.html HTTP/1.1 0-7-0/0/7977. 0.00275079870500.00.00100.07 54.186.174.90http/1.1www.chonlateekeyman.com:80GET /vendor/.git/config HTTP/1.1 0-7-0/0/7820. 0.0027563180228580.00.0097.38 85.208.96.203http/1.1www.chonlateeboi.com:443GET /32346yytxetid.htm HTTP/1.1 0-7-0/0/7945. 0.0027538492820970.00.00103.92 66.249.73.128http/1.1www.twinbuilt.co.th:443GET /?e=claudio-valentino-watch-cheap-off-58%-10-ii-91mVN1T9 HT 0-7-0/0/7751. 0.0027572876982120.00.00116.50 85.208.96.205http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 0-7-0/0/7744. 0.0027563785766580.00.00100.00 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /uujxhvp-10537witems/eti HTTP/1.1 0-7-0/0/7941. 0.0027541879902650.00.00150.52 173.201.180.210http/1.1www.nadapool.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7828. 0.0027584482475300.00.0098.26 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zkoxhvp-14156bitems/etidm7.html HTTP/1.1 0-7-0/0/7717. 0.0027584690869310.00.00120.03 52.70.240.171http/1.1www.chonlateeboi.com:443GET /12284sabfitems/etidm2.html HTTP/1.1 0-7-0/0/7353. 0.0027563488696230.00.0094.39 3.224.220.101http/1.1www.chonlateeboi.com:443GET /3328eslwetidm1aep0 HTTP/1.1 0-7-0/0/7441. 0.00275205967886060.00.0098.26 158.220.124.129http/1.1www.chonlateeboi.com:443GET /%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%95%E0%B9%88%E0%B8%AD/ HT 0-7-0/0/7637. 0.00275637102146600.00.00103.73 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /biqxhvp-21646detidm25o HTTP/1.1 0-7-0/0/8309. 0.00275351676006020.00.00103.58 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=godfather-trilogy-i-i%EF%BC%A9-iii-%E3%82%AB%E3%83%A9%E 0-7-0/0/7485. 0.00275104297978530.00.0095.31 103.154.184.42http/1.1www.xn--72cztbd4dxek5iqd.com:44GET /wp-login.php HTTP/1.1 0-7-0/0/7646. 0.002751663779286410.00.0097.21 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=1906-new-highs-fast-acting-precision-edibles-leafly-9-i 0-7-0/0/7679. 0.0027584477601570.00.00101.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /44576eslwitems/etidm31meb.html HTTP/1.1 0-7-0/0/7728. 0.0027564096209810.00.0096.20 23.22.35.162http/1.1www.chonlateeboi.com:443GET /18447eslwitems/etidm86nw.htm HTTP/1.1 0-7-0/0/7810. 0.0027563579141840.00.00103.23 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /kczxhvp-10527mitems/etidm62xp.htm HTTP/1.1 0-7-0/0/7791. 0.00275375119150970.00.00106.94 184.168.99.253http/1.1www.plastandtrans.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7461. 0.00275202982744190.00.0099.22 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/8210. 0.0027563690213850.00.00106.76 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-25912fetidm59qxf HTTP/1.1 0-7-0/0/7600. 0.0027584875263560.00.00105.28 3.224.220.101http/1.1www.chonlateeboi.com:443GET /15240bzlnetidm71ebt.htm HTTP/1.1 0-7-0/0/7639. 0.0027534698577400.00.0096.02 66.249.71.202http/1.1www.twinbuilt.co.th:443GET /?e=bundesliga-dortmund-giovanni-reyna-injured-8-ii-y3GKO2i 0-7-0/0/7756. 0.0027563767494950.00.0097.99 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lkaxhvp-14116netidm6 HTTP/1.1 0-7-0/0/7624. 0.0027585483401880.00.00106.30 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /byqlgro-3472detidm94old HTTP/1.1 0-7-0/0/7698. 0.0027584193126660.00.00127.64 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2836bzlnetidm7 HTTP/1.1 0-7-0/0/7504. 0.0027564981009190.00.0093.37 81.70.248.169http/1.1www.nakindogtraining.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7720. 0.0027551486170310.00.00131.95 173.201.191.207http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4GET /wp-login.php HTTP/1.1 0-7-0/0/7415. 0.0027587289899570.00.00105.91 97.74.211.129http/1.1www.dinocoffees.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7754. 0.0027563380644190.00.0098.18 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wclxhvp-10227yitems/etidm.htm HTTP/1.1 1-7281720/103/7553_ 58.78134287671160.01.17125.20 159.65.58.104http/1.1 1-7281720/103/7380_ 58.810582741890.01.2192.80 164.90.222.93http/1.1localhost:80GET /server-status HTTP/1.1 1-7281720/114/7469_ 59.1220109494340.01.0897.72 164.90.222.93http/1.1localhost:80GET /about HTTP/1.1 1-7281720/105/7055_ 57.98384588107580.01.1291.42 52.70.240.171http/1.1www.chonlateeboi.com:443GET /13045bzlnitems/etidm56 HTTP/1.1 1-7281720/92/7150_ 57.471358294502570.01.12104.45 159.65.58.104h2localhost:443[0/0] Software caused connection abort 1-7281720/109/7322_ 59.211083297120.02.1297.62 164.90.222.93http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-7281720/113/7377_ 59.240839101011050.01.4594.74 23.22.35.162http/1.1www.chonlateeboi.com:443GET /45070bzlnetidm41m HTTP/1.1 1-7281720/123/7409_ 58.99163094476590.01.2999.31 54.186.174.90http/1.1www.chonlateekeyman.com:443GET /info/.git/config HTTP/1.1 1-7281720/102/7401_ 58.75287477516090.01.4693.79 142.93.158.96h2localhost:443[0/0] Software caused connection abort 1-7281721/97/7216W 59.080092437780.01.1599.22 138.197.88.136http/1.1localhost:80GET /server-status HTTP/1.1 1-7281720/109/7001_ 59.082094891230.01.2797.07 164.90.222.93http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1-7281720/88/7514_ 58.59289186381740.01.02106.32 159.65.58.104http/1.1
Found on 2024-01-07 10:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d461120a5d2cApache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 08:26:50 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 4 Parent Server MPM Generation: 3 Server uptime: 22 hours 25 minutes 29 seconds Server load: 3.10 2.92 2.88 Total accesses: 391405 - Total Traffic: 5.4 GB - Total Duration: 404177730 CPU Usage: u167.66 s11.37 cu6571 cs347.56 - 8.79% CPU load 4.85 requests/sec - 70.1 kB/second - 14.5 kB/request - 1032.63 ms/request 17 requests currently being processed, 79 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 01382no7yes725001 128982no5yes230100 33070no8yes824002 Sum3020 1779103 W____WW______W______WR___R______________W_____________W_________ ................................_____WWW________WWRW___R________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-313821/89/3544W 50.0329043163500.01.2451.54 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-313820/95/3867_ 51.830028244980.01.1850.75 159.65.58.104http/1.1localhost:80GET /config.json HTTP/1.1 0-313820/93/3541_ 51.81184541040560.01.0558.98 3.224.220.101http/1.1www.chonlateeboi.com:443GET /3615otfwitems/etidm23bw.htm HTTP/1.1 0-313820/96/3788_ 51.63083934219240.01.3648.15 167.71.185.75http/1.1localhost:80\x16\x03\x01\x01\x0e\x01 0-313820/91/3631_ 51.82086132295550.01.2745.85 185.191.171.14http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B9%81%E0%B8%A3%E0%B8%87 0-313821/80/3860W 47.36148040363230.01.1349.04 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-313821/70/3655W 51.650028629310.00.8560.93 51.210.138.64http/1.1www.xn--q3cj1a4cd8i.com:443POST /xmlrpc.php HTTP/1.1 0-313820/78/3688_ 51.710030821660.00.9247.76 159.223.108.26http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-313820/88/3752_ 51.70164233330050.01.0390.35 192.95.30.21http/1.1www.12gobiz.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-313820/103/3687_ 51.710028551890.01.5147.66 159.65.58.104http/1.1localhost:80GET /login.action HTTP/1.1 0-313820/81/3570_ 51.830034276550.01.6444.65 167.71.185.75http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-313820/93/3431_ 51.820045735680.01.2143.94 159.65.58.104http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-313820/89/3517_ 51.311105128729240.00.9647.62 138.197.88.136http/1.1 0-313821/70/3775W 51.650040593060.00.9052.05 192.95.30.21http/1.1www.12gobiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-313820/90/3846_ 51.83084934615930.01.0851.39 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /beqrfru-46476detidm6.htm HTTP/1.1 0-313820/103/3459_ 51.820051114830.01.1444.62 159.223.108.26http/1.1localhost:80GET /login.action HTTP/1.1 0-313820/126/3600_ 51.620033106770.01.3846.27 159.65.58.104http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-313820/98/3828_ 51.64084730235640.01.3750.66 45.55.193.222http/1.1 0-313820/75/3698_ 51.590110628100010.00.8448.11 185.191.171.14http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B9%81%E0%B8%A3%E0%B8%87 0-313820/97/3592_ 51.770032954070.01.2351.73 167.71.185.75http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-313821/53/3620W 35.36510032630760.00.8955.08 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-313820/81/3580R 51.771040740860.01.1650.88 167.99.184.41http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-313820/93/4020_ 51.811030804620.01.1851.75 167.99.184.41http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-313820/101/3596_ 51.650028633710.01.2346.45 45.55.193.222http/1.1localhost:443GET / HTTP/1.1 0-313820/89/3560_ 51.830028532790.01.2545.72 167.99.184.41http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-313820/89/3590R 51.77146229696570.00.9946.63 66.249.71.169http/1.1 0-313820/94/3661_ 51.77097231611310.01.1656.78 185.191.171.3http/1.1www.chonlateefood.com:443GET /items/lha24971ymbhtidm9.html HTTP/1.1 0-313820/171/3649_ 51.651035040140.01.4677.74 159.223.108.26http/1.1localhost:80GET /about HTTP/1.1 0-313820/79/3521_ 51.620242328697920.00.9744.90 173.249.41.202http/1.1www.chonlateeadmin.com:443POST /wp-login.php HTTP/1.1 0-313820/102/3840_ 50.98184034202980.01.2784.44 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?yeavrsm-224209netidm53lrn HTTP/1.1 0-313820/79/3561_ 51.670531213770.00.9753.71 45.55.193.222http/1.1 0-313820/86/3958_ 51.63084231502210.01.4749.40 45.55.193.222http/1.1 1-3289820/84/3047_ 74.57184029107760.01.0339.59 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /osdrfru-47113qitems/eti HTTP/1.1 1-3289820/129/2862_ 72.27083828949070.01.9336.86 31.184.236.34http/1.1 1-3289820/85/2841_ 73.68087247822570.01.3838.66 45.55.193.222h2localhost:443[0/0] Software caused connection abort 1-3289820/145/2862_ 74.5811125540340.01.6537.62 159.223.108.26http/1.1localhost:80GET /server-status HTTP/1.1 1-3289820/146/2876_ 73.83184141161350.01.7140.97 185.180.143.146http/1.1 1-3289820/115/2980_ 73.54184022729610.01.4438.91 185.180.143.146http/1.1 1-3289820/134/2912_ 74.6101123387610.01.5636.04 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.1 1-3289820/107/2952_ 74.59084326574050.01.2939.90 66.249.72.66http/1.1www.chonlateeadmin.com:443GET /trust.php?kzhvrsm-2467uetidm90.html HTTP/1.1 1-3289821/117/2940W 74.490024175670.01.4539.52 167.99.184.41http/1.1localhost:80GET /server-status HTTP/1.1 1-3289820/148/2863_ 74.591022522370.01.7337.01 167.71.185.75http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-3289820/127/2896_ 74.311024490460.01.5142.01 45.55.193.222h2localhost:443[0/0] Software caused connection abort 1-3289820/123/3033_ 74.32184524161140.01.6542.43 3.224.220.101http/1.1www.chonlateeboi.com:443GET /7744sdsletidm78wsl HTTP/1.1 1-3289820/61/2835_ 74.450031551450.00.7637.40 167.99.184.41http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 1
Found on 2024-01-06 01:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb311d51d4611d51d461544b8bafApache Status Apache Server Status for mail.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:12 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 31 minutes 53 seconds Server load: 2.15 2.07 1.75 Total accesses: 1082455 - Total Traffic: 11.9 GB - Total Duration: 678433545 CPU Usage: u25.82 s13.68 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.755 ms/request 10 requests currently being processed, 118 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no9yes230015 315011no3yes230002 415163no2yes428000 615166no0yes230000 Sum4014 10118017 ................................R_____________R_________________ ................................________________W______________R __W____________________W___R___R................................ RR______________________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0046062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0046259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0046130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0046057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.004689958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.004687062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0046056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0046157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.004686455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0046059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.004687056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0046055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0046315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00461662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0046161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0046107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0046062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.004686960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0046058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00461256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0046498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0046160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0046074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00461192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0046058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0046083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0046122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00461163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0046859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0046261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0046157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0046059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-13150120/0/9126R 0.00286454194400.00.00142.47 31.184.236.42http/1.1 1-13150120/4/8969_ 1.310655125040.00.03107.50 165.232.76.155http/1.1localhost:80GET /server-status HTTP/1.1 1-13150120/3/9102_ 1.192055516790.00.02131.73 139.59.230.191http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-13150120/3/9376_ 1.190057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150120/1/9354_ 0.55197656503180.00.01111.86 52.167.144.174h2www.chonlateeaa.com:443[2/2] done: stream 3, GET /?s=22-best-beach-towels-that-aren-t- 1-13150120/1/9080_ 1.192056147260.00.0099.02 139.59.230.191http/1.1www.tspaccount.net:80GET /telescope/requests HTTP/1.1 1-13150120/1/9263_ 0.77287056057710.00.01109.58 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /trust.php?zqoggdh-209754betid.htm HTTP/1.1 1-13150120/3/9351_ 1.251056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150120/1/9213_ 0.84191155728780.00.0190.53 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?82724himsitems/etidm2.html HTTP/1.1 1-13150120/2/9161_ 1.092073740340.00.01108.70 52.167.144.174h2www.chonlateeaa.com:443GET /?s=433mhz-lora-sx1278-long-range-rf-transceiver-wireless-m 1-13150120/3/9389_ 1.202055724450.00.0195.48 52.167.144.235h2www.chonlateeaa.com:443GET /?s=bogle-es
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e2fc1adc7Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 10:45:54 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 6 hours 43 minutes 42 seconds Server load: 0.32 0.34 0.33 Total accesses: 17944 - Total Traffic: 195.3 MB - Total Duration: 25147998 CPU Usage: u3382.43 s5994.73 cu56638000 cs13847000 - 291000% CPU load .741 requests/sec - 8.3 kB/second - 11.1 kB/request - 1401.47 ms/request 3 requests currently being processed, 6 idle workers ._.._W_.._R_W_.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079-0/0/1820. 0.00602023222380.00.0018.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-2079105340/46/1664_ 18.530024458790.00.4117.38 161.35.155.246http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-2079-0/0/1580. 0.0046125322971480.00.0017.83 162.158.189.123http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%94%E0%B8%B9%E0%B9%81 3-2079-0/0/1531. 0.00628021630650.00.0017.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-2079102830/59/1525_ 29.030120414220.00.6315.94 142.93.153.3http/1.1localhost:80GET / HTTP/1.0 5-207999910/78/1573W 33.482019982500.00.6617.54 138.68.133.118http/1.1www.tspaccount.net:443GET / HTTP/1.1 6-2079102890/61/1374_ 25.940021401720.00.7115.29 161.35.155.246http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-2079-0/0/1376. 0.00683019227070.00.0016.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-2079-0/0/1080. 0.00684014141390.00.0011.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-2079103930/52/1116_ 26.650016081430.00.5214.24 142.93.153.3http/1.1localhost:80GET / HTTP/1.0 10-2079103950/51/1074R 23.581016723270.00.5211.01 161.35.155.246http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 11-2079104050/57/833_ 25.990013171760.01.918.78 167.99.182.39http/1.1localhost:443GET / HTTP/1.1 12-2079104070/55/528W 26.17007360120.00.383.69 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.0 13-2079104130/55/376_ 27.83105228260.00.592.83 161.35.155.246http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 14-2079-0/0/36. 0.006850414220.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2079-0/0/112. 0.0066807841621620.00.001.00 162.158.238.20http/1.1www.siamerp.com:443GET /tag/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3 16-2079-0/0/133. 0.00672611561050.00.001.16 172.68.210.28http/1.1www.business.co.th:443POST /xmlrpc.php HTTP/1.1 17-2079-0/0/47. 0.0079400430510.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2079-0/0/96. 0.0073287051161230.00.000.75 172.71.178.161http/1.1www.chonlateecamping.com:80GET / HTTP/1.0 19-2079-0/0/3. 0.008433030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.008436010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2079-0/0/5. 0.008422070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2079-0/0/5. 0.008427080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2079-0/0/52. 0.0079270275920.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2079-0/0/4. 0.008424090.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 3subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 254 seconds, (range: 167...298)index usage: 0%, cache usage: 0%total entries stored since starting: 197total entries replaced since starting: 0total entries expired since starting: 194total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5923 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 03:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e1440921eApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 11-Dec-2023 20:07:15 +07 Restart Time: Monday, 11-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2040 Parent Server MPM Generation: 2039 Server uptime: 16 hours 5 minutes 2 seconds Server load: 0.59 0.70 0.67 Total accesses: 59118 - Total Traffic: 864.5 MB - Total Duration: 96102816 CPU Usage: u3176.26 s5919.23 cu56294400 cs13766200 - 121000% CPU load 1.02 requests/sec - 15.3 kB/second - 15.0 kB/request - 1625.61 ms/request 4 requests currently being processed, 6 idle workers W_R__.R_R........_.._............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2039255750/18/5431W 6.330087645110.014.9480.99 128.199.195.68http/1.1localhost:80GET /server-status HTTP/1.0 1-2039255830/20/5474_ 7.210087813160.00.3781.30 128.199.195.68http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 2-2039257100/8/5547R 3.360187454670.00.0365.75 128.199.195.68http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 3-2039257160/7/5393_ 3.370186524410.00.2866.42 128.199.195.68http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-2039252720/46/5186_ 12.580183487690.00.5887.34 178.62.3.65http/1.1localhost:80GET / HTTP/1.0 5-2039-0/0/5090. 0.0030080854370.00.0060.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-2039257370/2/5104R 0.7611879744120.00.0166.50 45.55.193.222http/1.1www.tspaccount.net:443 7-2039252910/41/4656_ 22.830175761750.00.3654.97 128.199.195.68http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-2039257420/3/4425R 0.57549574223810.00.0177.31 159.203.63.67http/1.1 9-2039-0/0/3942. 0.00100062435390.00.0046.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-2039-0/0/3545. 0.00104059473980.00.0054.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-2039-0/0/2064. 0.00105033691780.00.0054.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-2039-0/0/1192. 0.00107021753090.00.0020.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-2039-0/0/423. 0.002906271620.00.005.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-2039-0/0/522. 0.008309177310.00.0022.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2039-0/0/223. 0.009305303300.00.003.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2039-0/0/231. 0.009804826810.00.004.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2039256270/16/161_ 7.64013082330.00.382.22 164.92.84.255http/1.1localhost:80GET / HTTP/1.0 18-2039-0/0/108. 0.0010302780120.00.001.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2039-0/0/116. 0.009702509510.00.002.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2039256450/13/91_ 4.760121933270.00.091.00 164.92.192.25http/1.1 21-2039-0/0/24. 0.00310326220.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2039-0/0/52. 0.00410940660.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2039-0/0/114. 0.004402962270.00.001.56 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2039-0/0/4. 0.0039150051280.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 245 seconds, (range: 188...299)index usage: 0%, cache usage: 0%total entries stored since starting: 69total entries replaced since starting: 0total entries expired since starting: 65total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 26468 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 13:07 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e4ddd42b5Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:34:22 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 2 hours 10 minutes 36 seconds Server load: 0.73 0.62 0.56 Total accesses: 9741 - Total Traffic: 151.8 MB - Total Duration: 21746163 CPU Usage: u3102.75 s5823.52 cu55529800 cs13588400 - 882000% CPU load 1.24 requests/sec - 19.8 kB/second - 16.0 kB/request - 2232.44 ms/request 7 requests currently being processed, 2 idle workers WWRRW_WR_......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-196490940/61/854W 30.191019328630.00.519.48 159.223.108.26http/1.1www.tspaccount.net:443GET / HTTP/1.1 1-196491030/55/821W 27.270019550370.00.4611.38 108.162.226.207http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 2-196491110/58/821R 32.121118384480.00.6510.93 134.122.34.144http/1.1 3-196494040/37/816R 25.610284717032370.00.7413.62 172.70.143.14http/1.1www.torrong.com:80GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 4-196496720/15/749W 5.830016849850.00.089.71 159.65.138.217http/1.1localhost:80GET /server-status HTTP/1.0 5-196496790/16/758_ 5.730117296560.00.118.79 159.65.138.217http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-196497610/6/829W 1.280018661670.00.0312.21 172.68.234.222http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST /wp-cron.php?doing_wp_cron=1700163262.28172993659973144531 7-196496800/12/697R 6.970117166940.00.088.21 159.65.138.217http/1.1localhost:80GET /v2/_catalog HTTP/1.0 8-196497680/6/715_ 1.380016609900.00.048.49 159.203.182.222http/1.1localhost:80GET /about HTTP/1.0 9-1964-0/0/525. 0.001045011335570.00.006.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1964-0/0/457. 0.00105107550040.00.004.98 172.68.234.146http/1.1www.biztaste.com:80GET /category/%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0% 11-1964-0/0/494. 0.001043010825310.00.006.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1964-0/0/199. 0.00104904449670.00.005.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1964-0/0/235. 0.0056506857980.00.004.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1964-0/0/155. 0.004703405970.00.001.84 178.62.3.65http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 15-1964-0/0/166. 0.0038803538420.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1964-0/0/63. 0.00144101069970.00.001.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1964-0/0/1. 0.001822010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1964-0/0/3. 0.0018100770.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1964-0/0/98. 0.00116618792012280.00.001.40 108.162.238.97http/1.1www.smetast.com:80GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 20-1964-0/0/89. 0.0011699421872310.00.002.90 172.68.234.187http/1.1www.chonlateefarm.com:443POST /wp-cron.php?doing_wp_cron=1700162091.11823105812072753906 21-1964-0/0/1. 0.001821010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964-0/0/100. 0.0011768731850270.00.0017.49 172.68.234.179http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1700162083.61266803741455078125 23-1964-0/0/95. 0.0012037141812190.00.002.03 172.69.214.81http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 3subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 298 seconds, (range: 297...298)index usage: 0%, cache usage: 0%total entries stored since starting: 63total entries replaced since starting: 0total entries expired since starting: 60total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4608 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e2854f15cApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 08:16:25 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 4 hours 14 minutes 12 seconds Server load: 0.21 0.33 0.34 Total accesses: 24877 - Total Traffic: 354.0 MB - Total Duration: 52121595 CPU Usage: u3025.91 s5765.83 cu55147000 cs13501000 - 450000% CPU load 1.63 requests/sec - 23.8 kB/second - 14.6 kB/request - 2095.17 ms/request 4 requests currently being processed, 6 idle workers _RW___R_._..R..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932197170/79/2041_ 21.130143652320.00.9722.26 159.203.44.43http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 1-1932198070/79/1988R 24.980242381290.00.8225.28 139.144.150.23http/1.1 2-1932203550/9/2060W 1.190042903510.00.1227.91 137.184.106.30http/1.1localhost:80GET /server-status HTTP/1.0 3-1932202980/19/1993_ 4.330342635080.00.1835.39 207.154.240.169http/1.1localhost:80GET /server-status HTTP/1.0 4-1932204180/6/1998_ 1.380142632700.00.1026.18 139.144.96.150http/1.1 5-1932201670/40/1948_ 8.160139583270.00.4125.59 164.90.205.35http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-1932201200/44/1899R 12.450040931400.00.6824.71 139.144.150.23http/1.1 7-1932199300/64/1798_ 19.550037408720.00.6819.94 161.35.155.246http/1.1 8-1932-0/0/1726. 0.00281037637350.00.0022.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1932201730/37/1619_ 8.590132572730.00.4921.99 167.99.182.39http/1.1 10-1932-0/0/1308. 0.00282027621680.00.0016.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1932-0/0/1102. 0.007024564550.00.0014.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1932200060/50/1035R 9.053198220947080.00.5911.57 74.207.237.46http/1.1www.chonlateefood.com:443 13-1932-0/0/893. 0.00470019618100.00.0043.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/438. 0.00166009992030.00.004.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/171. 0.00419202356490.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/199. 0.00432103019630.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/109. 0.0043166001343770.00.000.70 162.158.106.83http/1.1www.chonlateetravel.com:80GET /x.php HTTP/1.0 18-1932-0/0/106. 0.0042955751576250.00.000.75 162.158.163.114http/1.1www.chonlateeplus.com:443GET /wxo.php HTTP/1.1 19-1932-0/0/142. 0.00419602494810.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/177. 0.00400503205100.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/26. 0.0043200445250.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/99. 0.00590510801664140.00.001.31 162.158.189.46http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%9B 23-1932-0/0/2. 0.006327028590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 6subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 241 seconds, (range: 18...299)index usage: 0%, cache usage: 0%total entries stored since starting: 130total entries replaced since starting: 0total entries expired since starting: 124total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 16476 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 01:14 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7eba0155c5Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:29 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 42 seconds Server load: 6.56 7.09 6.76 Total accesses: 478 - Total Traffic: 11.2 MB - Total Duration: 911596 CPU Usage: u2999.52 s5660.78 cu54400400 cs13297400 - 1.61e+8% CPU load 11.4 requests/sec - 273.0 kB/second - 24.0 kB/request - 1907.1 ms/request 30 requests currently being processed, 1 idle workers WRCRRWRW_WRWWWCWWWRRWWCRWWR.WW.W..W............... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-190214680/6/10W 1.6910183820.00.060.07 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?qjfsvcw-148047sitems/etidm58dw.htm HTTP/1.1 1-190211230/17/17R 5.7800332730.00.160.16 178.128.151.41http/1.1localhost:443GET / HTTP/1.1 2-190211471/10/10C 6.1105047423736.10.260.26 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=open-box]-gemoro-dual-ultrasonic-jewelry-cleaner-steame 3-190211560/17/17R 8.7202422400.00.100.10 205.169.39.155http/1.1www.tafa.or.th:443 4-190211620/17/17R 8.3400385220.00.170.17 46.101.103.192http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-190211740/17/17W 6.2300380050.00.260.26 52.167.144.229http/1.1www.cnb.co.th:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 6-190211800/24/24R 5.1200234970.00.260.26 205.169.39.155http/1.1www.tafa.or.th:443 7-190214830/5/20W 1.5300217250.00.020.14 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /trust.php?yjnsvcw-147951aitems/etidm44lw.htm HTTP/1.1 8-190211880/14/14_ 4.0203653291430.00.530.53 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 9-190211940/16/16W 5.2710336750.00.540.54 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-stingray-convertible-2lt-w-z51- 10-190212000/21/21R 5.9300335660.00.160.16 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1 11-190212130/17/17W 5.7400292870.00.260.26 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=chevrolet-corvette-stingray-2lt-coupe-2022-price-in-rus 12-190212190/14/14W 4.3130256830.00.140.14 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=gemoro-3qth-next-gen-ultrasonic-cleaner-quarts-contenti 13-190214920/6/9W 0.820037470.00.070.09 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 14-190212311/17/17C 4.9000332832.80.160.16 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/plugins/gallery-by-supsystic/app/assets/js/jque 15-190214980/1/8W 2.2320167870.00.030.11 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 16-190212430/12/12W 5.8180283080.00.090.09 34.122.147.229http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg2.png HTTP/1.1 17-190212490/20/20W 3.2703393170900.00.190.19 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0040683836.html HTTP/1.1 18-190212510/16/16R 9.1400449040.00.130.13 138.197.88.136http/1.1www.tspaccount.net:80GET / HTTP/1.0 19-190212670/20/20R 4.5002233440.00.270.27 104.131.1.32http/1.1www.tspaccount.net:443 20-190212730/10/10W 3.1900367810.02.802.80 52.70.240.171http/1.1www.chonlateeboi.com:443GET /21114emxgetid.htm HTTP/1.1 21-190212790/13/13W 6.5510345140.00.280.28 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0041598468.html HTTP/1.1 22-190212851/15/15C 6.4401284513.50.140.14 172.70.254.113http/1.1www.khlangkaew.com:443POST /xmlrpc.php HTTP/1.1 23-190215310/1/3R 0.0001360.00.000.01 205.169.39.155http/1.1www.tafa.or.th:443 24-190212920/15/15W 2.2220232780.00.580.58 52.70.240.171http/1.1www.chonlateefbc.com:80GET /?m=2022-chevrolet-corvette-review-pricing-and-specs-mm-Qkp 25-190212980/15/15W 3.7803939315090.00.420.42 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-stingray-2lt-coupe-full-specs-f 26-190213040/12/12R 3.7501163340410.01.681.68 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2019/08/Logo_Home-02.png HTTP/1.1 27-1902-0/0/3. 0.00330330.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-190213110/16/16W 6.7300299910.00.220.22 46.101.103.192http/1.1localhost:80GET /server-status HTTP/1.0 29-190213140/12/12W 2.94100127090.00.180.18 104.197.69.115http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-Recovered.png HTTP/1.1 30-1902-0/0/8. 0.00130209750.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-190213260/16/16W 5.7400283370.00.190.19 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=gemoro-sparklespa-pro-ultrasonic-cleaner-black-or-grey- 32-1902-0/0/8. 0.00160162030.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1902-0/0/2. 0.0031070530.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-190213480/14/14W 6.4300308350.00.220.22 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0045614552.html HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 203subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 262 seconds, (range: 256...277)index usage: 7%, cache usage: 9%total entries stored since starting: 203total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 57 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e2871dc7aApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 09:54:56 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 5 hours 52 minutes 45 seconds Server load: 0.29 0.47 0.64 Total accesses: 33715 - Total Traffic: 501.2 MB - Total Duration: 45633700 CPU Usage: u2733.85 s5170.75 cu51101000 cs12502200 - 301000% CPU load 1.59 requests/sec - 24.3 kB/second - 15.2 kB/request - 1353.51 ms/request 2 requests currently being processed, 7 idle workers .._W___._._.R.._.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762-0/0/2853. 0.0042036491150.00.0051.59 134.122.89.242http/1.1localhost:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-1762-0/0/2657. 0.00110035870920.00.0054.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1762304660/20/2780_ 4.16017836402960.00.2433.77 209.141.53.248http/1.1www.xn--12cf1cddmk0fho2ci6he1a9GET /wp-login.php HTTP/1.1 3-1762299640/84/2526W 29.930034269690.02.4835.14 144.126.198.24http/1.1localhost:80GET /server-status HTTP/1.0 4-1762304730/21/2661_ 1.860133282140.00.1448.03 144.126.198.24http/1.1localhost:80GET /v2/_catalog HTTP/1.0 5-1762302890/43/2562_ 14.54294136440830.00.4830.90 172.69.214.33http/1.1www.siamerp.com:443GET /category/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0% 6-1762304010/38/2423_ 5.370133565290.00.5130.53 144.126.198.24http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1762-0/0/2209. 0.00120029863400.00.0032.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1762304750/20/2009_ 1.961026654030.00.1725.56 144.126.198.24http/1.1localhost:80GET /about HTTP/1.0 9-1762-0/0/1942. 0.00111026612610.00.0025.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1762304180/30/1901_ 7.011125296810.00.3324.52 144.126.198.24http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 11-1762-0/0/1648. 0.00114024304020.00.0021.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1762304300/23/1165R 3.772116857030.00.7720.69 209.141.53.248http/1.1 13-1762-0/0/1059. 0.00414015317430.00.0012.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/1093. 0.00109015881160.00.0017.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1762300720/69/903_ 21.142110921150.01.2112.17 144.126.198.24http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 16-1762-0/0/650. 0.00173508482990.00.008.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1762-0/0/85. 0.0017550913100.00.002.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/224. 0.00175104510250.00.003.97 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/191. 0.00113612952579960.00.002.20 142.93.158.96http/1.1 20-1762-0/0/116. 0.00172001364370.00.004.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/19. 0.0017530285820.00.002.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/8. 0.001741048210.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/20. 0.001731082410.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/10. 0.001732039160.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/1. 0.001757000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 89subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 91 seconds, (range: 12...281)index usage: 3%, cache usage: 4%total entries stored since starting: 4654total entries replaced since starting: 0total entries expired since starting: 4565total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 174 hit, 10925 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 02:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7ec53702c2Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 15:47:57 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 11 hours 45 minutes 45 seconds Server load: 1.12 1.31 1.16 Total accesses: 73647 - Total Traffic: 1.5 GB - Total Duration: 112125981 CPU Usage: u3038.01 s5180.52 cu50886900 cs12456000 - 150000% CPU load 1.74 requests/sec - 37.7 kB/second - 21.7 kB/request - 1522.48 ms/request 1 requests currently being processed, 9 idle workers .W______..._.__................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1743-0/0/6036. 0.0060094288420.00.00150.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1743102530/55/5941W 52.110091541210.00.50142.09 167.172.20.95http/1.1localhost:80GET /server-status HTTP/1.0 2-1743101310/69/5982_ 36.251089914380.00.80130.48 167.172.20.95http/1.1localhost:80GET /v2/_catalog HTTP/1.0 3-1743102600/56/5810_ 16.963084477400.00.49114.59 167.172.20.95http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 4-1743102620/68/5586_ 50.734083575160.00.54111.61 167.172.20.95http/1.1localhost:80GET / HTTP/1.0 5-1743103480/44/5454_ 51.535080120780.00.46129.49 167.172.20.95http/1.1localhost:80GET / HTTP/1.0 6-1743105550/18/5183_ 9.650074117280.00.4997.72 167.172.20.95http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1743105630/11/4918_ 37.172274644810.00.08101.57 172.71.255.18http/1.1www.chorsiam.com:80GET /wp-content/plugins/wp-featherlight/js/wpFeatherlight.pkgd. 8-1743-0/0/4964. 0.0067080696400.00.0093.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1743-0/0/4451. 0.0062068903410.00.0081.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1743-0/0/4022. 0.0052061634500.00.0074.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743101440/90/3324_ 78.861055628570.01.4870.86 167.172.20.95http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 12-1743-0/0/3045. 0.00465046585100.00.0066.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1743101520/60/2377_ 58.236190940329980.01.3647.60 184.22.232.72http/1.1www.chonlateefbc.com:80POST /wp-admin/admin-ajax.php HTTP/1.0 14-1743101540/79/1703_ 69.773025443620.04.0336.74 167.172.20.95http/1.1localhost:80GET /about HTTP/1.0 15-1743-0/0/1277. 0.00230018896580.00.0025.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/1045. 0.00467014318410.00.0024.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1743-0/0/567. 0.0037907869520.00.0025.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1743-0/0/342. 0.0045303296360.00.005.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1743-0/0/112. 0.00190101810530.00.002.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1743-0/0/106. 0.0026680925920.00.002.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1743-0/0/39. 0.0027890514610.00.001.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1743-0/0/135. 0.00263202288680.00.002.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1743-0/0/57. 0.0027850741160.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1743-0/0/139. 0.001375801688780.00.001.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1743-0/0/41. 0.00137550648490.00.000.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1743-0/0/43. 0.00137560740610.00.000.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1743-0/0/12. 0.00137350286800.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1743-0/0/150. 0.001310901644400.00.002.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1743-0/0/13. 0.00137450440100.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1743-0/0/12. 0.00137440325260.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1743-0/0/197. 0.001280213975970.00.005.21 139.144.150.205http/1.1localhost:80GET /.DS_Store HTTP/1.0 32-1743-0/0/80. 0.001375201026530.00.000.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1743-0/0/98. 0.001298023392384530.00.001.28 35.164.89.242http/1.1www.ckt-trading.com:443GET / HTTP/1.1 34-1743-0/0/14. 0.00137330415030.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1743-0/0/20. 0.00137340499850.00.000.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1743-0/0/48. 0.00135550579330.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1743-0/0/14. 0.00137530314670.00.000.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1743-0/0/13. 0.00137510388600.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1743-0/0/119. 0.001372401026510.00.002.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1743-0/0/99. 0.001374301279860.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1743-0/0/2. 0.0019297078890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1743-0/0/2. 0.0019302041080.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1743-0/0/5. 0.00192730128780.00.000.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1743-0/0/27. 0.00191010756610.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1743-0/0/1. 0.0019309000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1743-0/0/6. 0.0019272080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1743-0/0/6. 0.0019285050.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1743-0/0/2. 0.0019308010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1743-0/0/8. 0.0019284025970.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status:
Found on 2023-09-19 08:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7eef50a3faApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 17-Sep-2023 02:59:57 +07 Restart Time: Sunday, 17-Sep-2023 00:27:57 +07 Parent Server Config. Generation: 1734 Parent Server MPM Generation: 1733 Server uptime: 2 hours 32 minutes Server load: 0.91 0.80 0.80 Total accesses: 12865 - Total Traffic: 196.7 MB - Total Duration: 18174044 CPU Usage: u2795.18 s5139.93 cu50714300 cs12419500 - 692000% CPU load 1.41 requests/sec - 22.1 kB/second - 15.7 kB/request - 1412.67 ms/request 2 requests currently being processed, 8 idle workers __.____W_W_....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1733127770/24/1031_ 7.110014104390.01.2714.46 159.65.58.104http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1733128640/8/1043_ 4.902114590140.00.0713.53 159.65.58.104http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 2-1733-0/0/948. 0.00126013810330.00.0010.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1733122350/90/948_ 33.651013679050.02.3312.90 159.65.58.104http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 4-1733123700/74/925_ 31.791112213360.02.5812.66 159.65.58.104http/1.1localhost:80GET /about HTTP/1.0 5-1733123770/64/968_ 34.20095313949370.00.7418.66 172.70.43.29http/1.1www.siamautomation.com:443GET /tag/%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B9%82%E0%B8%99 6-1733127840/21/834_ 7.452013806630.00.2612.47 159.65.58.104http/1.1localhost:80GET / HTTP/1.0 7-1733124050/73/818W 27.900012067370.01.0718.70 108.162.241.52http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89 8-1733124140/69/928_ 29.290111936270.00.7612.93 159.65.58.104http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-1733124580/65/757W 24.200010651890.01.8310.24 159.65.58.104http/1.1localhost:80GET /server-status HTTP/1.0 10-1733126500/46/707_ 17.2228089098770.01.008.29 172.71.223.61http/1.1www.siamautomation.com:443GET /tag/%E0%B8%A7%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B0%E0%B8%9A 11-1733-0/0/472. 0.0024206303030.00.006.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1733-0/0/333. 0.00135604418920.00.003.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1733-0/0/341. 0.0083604765710.00.0014.80 46.101.103.192http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 14-1733-0/0/258. 0.00136503763710.00.002.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1733-0/0/278. 0.00136903919250.00.003.23 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1733-0/0/181. 0.00136602888030.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1733-0/0/146. 0.00133502159430.00.002.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1733-0/0/49. 0.0013580464520.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1733-0/0/16. 0.0013430137230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1733-0/0/118. 0.0050801756370.00.007.42 134.122.89.242http/1.1localhost:80GET /config.json HTTP/1.0 21-1733-0/0/198. 0.004967263351660.00.002.07 162.158.106.90http/1.1www.chonlateeplus.com:443GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1 22-1733-0/0/17. 0.0013570145630.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1733-0/0/8. 0.001363053030.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1733-0/0/6. 0.001364025030.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1733-0/0/98. 0.0050811495680.00.000.78 134.122.89.242http/1.1localhost:80GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 26-1733-0/0/88. 0.0013670983180.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1733-0/0/38. 0.0013550201420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1733-0/0/8. 0.001354135956180.00.000.02 154.16.78.225http/1.1 29-1733-0/0/3. 0.001359019290.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1733-0/0/95. 0.004968471811710.00.001.00 172.68.234.137http/1.1www.chonlateeauto.com:443POST /wp-cron.php?doing_wp_cron=1694893899.82295298576354980468 31-1733-0/0/1. 0.001371010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1733-0/0/3. 0.001360023590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1733-0/0/4. 0.001349050680.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1733-0/0/3. 0.001350018340.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1733-0/0/4. 0.001348034410.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1733-0/0/85. 0.0058701396670.00.000.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1733-0/0/3. 0.001361010240.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1733-0/0/94. 0.005036851493450.00.000.75 162.158.106.91http/1.1www.chonlateeplus.com:443GET /wp-content/themes/seotheme/db.php?u HTTP/1.1 39-1733-0/0/7. 0.001334086250.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1733-0/0/3. 0.001362040.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 68subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 67 seconds, (range: 1...248)index usage: 2%, cache usage: 3%total entries stored since starting: 1854total entries replaced since starting: 0total entries expired since starting: 1786total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 5582 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-16 19:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e28cc2646Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 04:01:45 +07 Restart Time: Thursday, 14-Sep-2023 00:23:29 +07 Parent Server Config. Generation: 1720 Parent Server MPM Generation: 1719 Server uptime: 3 hours 38 minutes 16 seconds Server load: 0.63 0.83 0.80 Total accesses: 12472 - Total Traffic: 199.3 MB - Total Duration: 19462335 CPU Usage: u2762.99 s5113.08 cu50513100 cs12375700 - 480000% CPU load .952 requests/sec - 15.6 kB/second - 16.4 kB/request - 1560.48 ms/request 3 requests currently being processed, 7 idle workers _____.R._..W.._W.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1719140250/38/922_ 13.321114783390.00.6910.98 167.172.20.95http/1.1localhost:80GET /v2/_catalog HTTP/1.0 1-1719139380/56/969_ 24.591113595480.00.6016.08 167.172.20.95http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-1719140540/27/663_ 11.1002109904650.00.326.54 72.14.199.2http/1.1www.nadapool.com:443GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Appl 3-1719141080/5/805_ 0.050012539060.00.0117.91 65.21.233.213http/1.1www.1smestartup.com:80GET /tag/%E0%B8%A7%E0%B8%B1%E0%B8%87%E0%B8%99%E0%B9%89%E0%B8%B3 4-1719141410/8/892_ 0.131013045840.00.0218.23 74.249.232.58http/1.1www.pokaorganize.com:80GET /admin-post.php HTTP/1.0 5-1719-0/0/499. 0.002609362420.00.006.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1719137310/79/704R 24.6821312339510.015.2522.77 72.14.199.2http/1.1www.nadapool.com:443 7-1719-0/0/628. 0.00556011269580.00.0021.68 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1719137370/77/645_ 33.901210562930.01.218.19 72.14.199.2http/1.1www.nadapool.com:443GET /wp-content/uploads/siteorigin-widgets/sow-headline-default 9-1719-0/0/488. 0.0056109049000.00.005.64 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1719-0/0/412. 0.009006482050.00.004.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1719137620/78/401W 32.18007149280.01.926.06 167.172.20.95http/1.1localhost:80GET /server-status HTTP/1.0 12-1719-0/0/152. 0.0056202764490.00.007.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1719-0/0/412. 0.00206060090.00.004.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1719137760/76/463_ 33.95016401790.00.995.84 167.172.20.95http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 15-1719137780/75/291W 29.50003652530.00.763.37 74.249.232.58http/1.1www.pokaorganize.com:443GET /admin-post.php HTTP/1.1 16-1719-0/0/19. 0.0012170497770.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1719-0/0/134. 0.00103902436490.00.001.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1719-0/0/130. 0.00121401859850.00.001.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1719-0/0/198. 0.0055702962550.00.002.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1719-0/0/190. 0.0060002466900.00.001.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1719-0/0/93. 0.00122001360810.00.000.66 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1719-0/0/106. 0.00122501492970.00.001.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1719-0/0/136. 0.0076302308470.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1719-0/0/171. 0.00120702933060.00.002.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1719-0/0/13. 0.0012280486910.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1719-0/0/195. 0.00120402120420.00.001.51 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1719-0/0/131. 0.00123001787410.00.001.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1719-0/0/169. 0.0055802410900.00.004.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1719-0/0/112. 0.00122601659580.00.000.67 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1719-0/0/197. 0.00121202263180.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1719-0/0/17. 0.0012230306410.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1719-0/0/102. 0.0055901619990.00.001.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1719-0/0/75. 0.00121001429750.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1719-0/0/126. 0.00122901538000.00.000.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1719-0/0/106. 0.00122701457170.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1719-0/0/81. 0.00119701227430.00.000.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1719-0/0/28. 0.0012060541740.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1719-0/0/15. 0.0011900345590.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1719-0/0/161. 0.0075702065700.00.001.50 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1719-0/0/12. 0.0012190285900.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1719-0/0/106. 0.00122101584170.00.000.74 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1719-0/0/73. 0.0088901106830.00.000.93 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1719-0/0/12. 0.0012010349360.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1719-0/0/12. 0.0011990345010.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1719-0/0/67. 0.0011940300120.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1719-0/0/11. 0.0012220286980.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1719-0/0/102. 0.00120201232430.00.000.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1719-0/0/11. 0.0012050267910.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1719-0/0/15. 0.0012030323230.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot
Found on 2023-09-13 21:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7eb9efd4aaApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 06:43:52 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 2 hours 41 minutes 40 seconds Server load: 0.48 0.59 0.66 Total accesses: 13463 - Total Traffic: 195.6 MB - Total Duration: 16471067 CPU Usage: u2667.94 s5083.81 cu50462400 cs12365000 - 648000% CPU load 1.39 requests/sec - 20.6 kB/second - 14.9 kB/request - 1223.43 ms/request 1 requests currently being processed, 9 idle workers .W.__._..._..._._..__._........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716-0/0/1196. 0.00103015081120.00.0013.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-1716191550/27/1253W 8.720014580680.00.2313.08 104.131.1.32http/1.1localhost:80GET /server-status HTTP/1.0 2-1716-0/0/1215. 0.00102014230360.00.0013.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1716192740/9/1146_ 4.281114619080.00.0719.74 104.131.1.32http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-1716189220/56/1088_ 19.90139314021150.00.5513.76 27.254.96.168http/1.1www.pentorproperty.com:443POST /wp-cron.php?doing_wp_cron=1694562230.18719601631164550781 5-1716-0/0/1034. 0.00132011614130.00.0013.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 6-1716191700/19/947_ 1.25025511270200.00.2111.61 45.134.26.27http/1.1www.pentorproperty.com:443POST /xmlrpc.php HTTP/1.1 7-1716-0/0/1110. 0.00133012954020.00.0011.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 8-1716-0/0/934. 0.00131011458280.00.0016.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1716-0/0/944. 0.00124010783070.00.0016.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1716187250/86/901_ 29.310011183230.00.7220.56 104.131.1.32http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1716-0/0/614. 0.0013607594910.00.005.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1716-0/0/423. 0.0013507188860.00.0018.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/283. 0.0011104193770.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716191880/19/77_ 5.5511056494130.00.171.85 45.134.26.27http/1.1www.pentorproperty.com:443GET / HTTP/1.1 15-1716-0/0/10. 0.00113032890.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716192000/19/119_ 5.51111598960.00.161.21 104.131.1.32http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 17-1716-0/0/96. 0.0013701216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.001380110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716192150/17/17_ 5.580544166630.00.210.21 162.158.238.60http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 20-1716192250/19/19_ 6.150510180180.00.190.19 193.202.110.30http/1.1www.tspaccount.net:443GET /shell20211028.php HTTP/1.1 21-1716-0/0/12. 0.0076067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716192320/19/19_ 5.5721140440.00.170.17 104.131.1.32http/1.1localhost:80GET /about HTTP/1.0 23-1716-0/0/4. 0.00127040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 121subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 63 seconds, (range: 4...191)index usage: 4%, cache usage: 5%total entries stored since starting: 2082total entries replaced since starting: 0total entries expired since starting: 1961total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 114 hit, 5053 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-12 23:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7ee6e97434Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 22:40:03 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 18 hours 37 minutes 49 seconds Server load: 0.33 0.44 0.39 Total accesses: 94824 - Total Traffic: 1.4 GB - Total Duration: 135780521 CPU Usage: u2697.01 s5070.21 cu50293100 cs12327700 - 93400% CPU load 1.41 requests/sec - 21.3 kB/second - 15.0 kB/request - 1431.92 ms/request 2 requests currently being processed, 8 idle workers __W_R___..__...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-170257600/14/8099_ 3.4603048111427260.00.10112.29 66.249.71.33http/1.1www.mgrandstructure.com:443GET / HTTP/1.1 1-170256200/35/8075_ 15.1711075112510910.00.35123.17 27.254.96.168http/1.1www.mgrandstructure.com:443POST /wp-cron.php?doing_wp_cron=1694360401.20244789123535156250 2-170254710/55/7788W 16.9000113975950.00.38114.96 162.243.184.251http/1.1localhost:80GET /server-status HTTP/1.0 3-170251340/90/7677_ 35.9310107718270.01.02104.49 162.243.184.251http/1.1localhost:80GET /v2/_catalog HTTP/1.0 4-170256710/29/7175R 7.8030105178850.00.24104.15 146.56.112.228http/1.1www.ckt-trading.com:443 5-170256300/35/7571_ 9.0201103499660.00.25112.72 162.243.184.251http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 6-170251990/79/6908_ 26.6612103832970.00.6894.38 162.243.184.251http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 7-170254980/50/7168_ 15.662915103767700.01.03106.63 172.70.43.31http/1.1www.torrong.co.th:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%AA 8-1702-0/0/6431. 0.00170090938080.00.0084.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1702-0/0/5994. 0.00163084770730.00.0091.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-170256840/29/5329_ 9.112075281510.00.1884.39 162.243.184.251http/1.1localhost:80GET /about HTTP/1.0 11-170256920/28/4693_ 10.262063600870.00.2376.32 162.243.184.251http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 12-1702-0/0/4212. 0.00167063082110.00.0067.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1702-0/0/2203. 0.0025748533804170.00.0043.97 167.71.196.133http/1.1www.uniqueworkthailand.com:443GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1 14-1702-0/0/1764. 0.006218135624652010.00.0026.43 162.158.106.47http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 15-1702-0/0/1167. 0.006892014904440.00.0014.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702-0/0/525. 0.006165225810731050.00.008.04 67.207.85.29http/1.1 17-1702-0/0/370. 0.00687904247590.00.003.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/73. 0.0076600909090.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.00763301786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.00987201383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.0097810344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.00987904959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.0098840735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.009865077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.0098780103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.0098680121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.00935442131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.00986401402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.009891074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.0097470299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.00978401458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.0097280524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.00989001921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.00987702967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.00988903934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.009876057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.0093858722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.00988802571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.009874045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0057072060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 61subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 96 seconds, (range: 11...262)index usage: 2%, cache usage: 2%total entries stored since starting: 16584total entries replaced since starting: 0total entries expired since starting: 16523total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 397 hit, 38543 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 15:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e8d4e5933Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 09:36:43 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 5 hours 34 minutes 32 seconds Server load: 2.60 3.06 2.99 Total accesses: 38701 - Total Traffic: 535.4 MB - Total Duration: 56672206 CPU Usage: u2836.35 s5074.2 cu50062900 cs12278800 - 311000% CPU load 1.93 requests/sec - 27.3 kB/second - 14.2 kB/request - 1464.36 ms/request 8 requests currently being processed, 3 idle workers _W_WWWWW_W....R................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685255050/10/3147_ 5.010048164140.00.0745.56 138.68.163.10http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-1685252220/79/3159W 53.470044339860.00.7142.12 138.68.163.10http/1.1localhost:80GET /server-status HTTP/1.0 2-1685253630/41/3047_ 27.760100543022020.00.4236.85 172.70.135.66http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 3-1685253480/52/2863W 31.860042801050.00.4836.98 172.68.234.154http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST /wp-cron.php?doing_wp_cron=1694054203.31664204597473144531 4-1685255130/7/2846W 4.851039886850.00.0636.77 27.254.96.168http/1.1www.1smestartup.com:443GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 5-1685255250/6/2552W 2.800034696440.00.0533.13 171.97.46.13http/1.1www.chonlateemeet.com:443POST /wp-admin/admin-ajax.php HTTP/1.1 6-1685255380/2/2719W 1.028037519800.00.0234.32 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1694054194.84551191329956054687 7-1685251300/94/2900W 90.050042703790.00.7747.28 172.69.33.221http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotGET /wp-login.php HTTP/1.0 8-1685253990/38/2604_ 25.190036941440.00.4132.94 138.68.163.10http/1.1localhost:80GET /v2/_catalog HTTP/1.0 9-1685251680/82/2647W 54.530039664100.00.7642.34 172.70.174.116http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 10-1685-0/0/1920. 0.0089028140300.00.0032.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1685-0/0/1689. 0.0014024000070.00.0025.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1685-0/0/1588. 0.0015024360450.00.0018.60 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1685-0/0/1378. 0.0096022547610.00.0020.85 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1685252090/79/1236R 53.242119153090.00.6315.86 39.103.225.8http/1.1 15-1685-0/0/1029. 0.00279119917284120.00.0013.65 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 16-1685-0/0/263. 0.0078204239530.00.003.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1685-0/0/232. 0.0078703257690.00.002.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1685-0/0/130. 0.00170102267410.00.001.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/111. 0.00170201550090.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1685-0/0/103. 0.00149213311644320.00.001.01 157.230.253.54http/1.1www.chonlateeins.com:443POST //wp-login.php HTTP/1.1 21-1685-0/0/185. 0.00151603156980.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/194. 0.0014476583469950.00.002.36 157.230.253.54http/1.1www.chonlateekeyman.com:443POST //wp-login.php HTTP/1.1 23-1685-0/0/100. 0.00140211431318330.00.001.61 172.68.234.148http/1.1www.accprogress.com:80GET /%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A%E0% 24-1685-0/0/39. 0.0015920480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/5. 0.00170302860.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/8. 0.001689074820.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0017574011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0017575012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.001757209920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0017586010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 100subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 97 seconds, (range: 2...298)index usage: 3%, cache usage: 4%total entries stored since starting: 5306total entries replaced since starting: 0total entries expired since starting: 5206total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 99 hit, 9308 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 02:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7eb2d21fa2Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 02:21:02 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 10 hours 57 minutes 48 seconds Server load: 4.53 6.46 7.95 Total accesses: 160215 - Total Traffic: 1.1 GB - Total Duration: 362300866 CPU Usage: u2892.33 s5052.18 cu49740000 cs12205700 - 157000% CPU load 4.06 requests/sec - 30.4 kB/second - 7.5 kB/request - 2261.34 ms/request 7 requests currently being processed, 7 idle workers WWW.__WW_.....__W_..W._........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-16743600/12/10031W 7.5400194668270.00.0481.40 172.68.234.204http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693768861.3377 HTTP/1.0 1-1674311840/99/9916W 60.9610191390350.00.2883.07 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693768860.38845992088317871093 2-16743090/15/9997W 9.2400191877010.00.0777.64 147.182.168.210http/1.1localhost:80GET /server-status HTTP/1.0 3-1674-0/0/9681. 0.0000182783080.00.0081.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-16743940/10/9470_ 6.1801185864480.00.0387.72 147.182.168.210http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1674321940/50/9350_ 31.7411566183690850.00.1676.98 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768858.88857007026672363281 6-16744480/7/8873W 4.1710176415470.00.0272.20 172.68.234.139http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768860.59123206138610839843 7-1674319330/61/8679W 39.0000170540890.00.2264.07 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 8-1674314140/94/8475_ 53.4801594169884860.00.2964.67 172.68.234.139http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693768859.7092 HTTP/1.0 9-1674-0/0/8607. 0.00202174457650.00.0081.60 167.71.196.133http/1.1www.siwapower.com:80GET /wp-includes/ID3/license.txt HTTP/1.0 10-1674-0/0/7977. 0.00390160407640.00.0074.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1674-0/0/7408. 0.00960155385320.00.0049.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1674-0/0/6825. 0.00740145872990.00.0048.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1674-0/0/5632. 0.00705747131131900.00.0033.19 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693768785.0018 HTTP/1.0 14-1674315030/82/5386_ 46.8203017130528010.00.2248.06 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 15-1674316190/85/4438_ 47.1501695113581070.00.1826.02 172.68.234.173http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693768859.332 HTTP/1.0 16-1674323680/41/3408W 24.970096476790.00.1715.91 155.138.219.70http/1.1www.tafa.or.th:443GET /wp-content/plugins/essential-addons-for-elementor-lite/rea 17-1674324220/42/2987_ 18.841184714080.00.2113.86 147.182.168.210http/1.1localhost:80GET /v2/_catalog HTTP/1.0 18-1674-0/0/2898. 0.0040085816740.00.0012.78 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1674-0/0/2377. 0.003073100780.00.008.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1674316330/83/2064W 48.270066891020.00.247.12 172.68.234.5http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693768861.2544 HTTP/1.0 21-1674-0/0/1846. 0.00150060275300.00.0010.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1674316660/76/1847_ 46.321168658258130.00.258.53 172.68.234.141http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693768858.49969911575317382812 23-1674-0/0/1365. 0.00382045640140.00.004.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1674-0/0/1142. 0.00325040133410.00.003.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1674-0/0/1301. 0.00141167544164990.00.005.25 172.68.234.205http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768717.85938310623168945312 26-1674-0/0/1040. 0.00204035654010.00.003.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1674-0/0/1104. 0.00405038076940.00.004.41 198.54.120.17http/1.1www.uniqueworkthailand.com:443POST /xmlrpc.php HTTP/1.1 28-1674-0/0/760. 0.00752027264780.00.003.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1674-0/0/656. 0.00703823557150.00.002.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/579. 0.00734022425880.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/634. 0.00547205623673610.00.002.86 172.68.234.196http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693768312.39440798759460449218 32-1674-0/0/575. 0.00455021754950.00.001.46 64.227.126.135http/1.1localhost:80GET /config.json HTTP/1.0 33-1674-0/0/492. 0.001155018286840.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/409. 0.001126015185930.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/304. 0.001002012136060.00.001.28 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1674-0/0/280. 0.001052011005120.00.002.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/317. 0.001080262011664300.00.001.10 172.68.234.202http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693767778.21682310104370117187 38-1674-0/0/155. 0.0096206854850.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/167. 0.00115307727360.00.000.41 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1674-0/0/151. 0.00102216704480.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/201. 0.0089324859094560.00.000.42 172.68.234.196http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693767966.2283 HTTP/1.0 42-1674-0/0/190. 0.0088722349099890.00.000.76 172.68.234.141http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693767971.9458 HTTP/1.0 43-1674-0/0/121. 0.001479215754826430.00.000.23 27.254.96.168http/1.1www.1smestartup.com:443POST /wp-cron.php?doing_wp_cron=1693754067.19885396957397460937 44-1674-0/0/100. 0.001477619884064080.00.000.23 172.68.234.178http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693754082.65967488288879394531 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 248subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 32 seconds, (range: 0...118)index usage: 8%, cache usage: 11%total entries stored since starting: 22298total entries replaced since starting: 0total entries expired since starting: 22050tota
Found on 2023-09-03 19:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e236efd87Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 31-Aug-2023 19:46:38 +07 Restart Time: Thursday, 31-Aug-2023 17:48:00 +07 Parent Server Config. Generation: 1653 Parent Server MPM Generation: 1652 Server uptime: 1 hour 58 minutes 38 seconds Server load: 1.64 2.19 2.99 Total accesses: 42732 - Total Traffic: 398.4 MB - Total Duration: 53599485 CPU Usage: u2679.15 s4915.89 cu48680000 cs11934000 - 852000% CPU load 6 requests/sec - 57.3 kB/second - 9.5 kB/request - 1254.32 ms/request 2 requests currently being processed, 10 idle workers __.C._______.W_................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-165297990/28/2853_ 12.840034783040.00.2027.05 139.144.150.45http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-165299050/5/2763_ 2.251033689680.00.0133.62 139.144.150.45http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 2-1652-0/0/2734. 0.00148633261720.00.0026.44 172.69.64.217http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 3-165296611/67/2505C 27.14050031467887.10.7321.34 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 4-1652-0/0/2675. 0.001032731830.00.0024.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-165297230/40/2501_ 23.24042531211870.00.5721.11 172.69.64.217http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 6-165297290/40/2483_ 21.250030821070.00.4121.07 139.144.150.45http/1.1localhost:80GET /v2/_catalog HTTP/1.0 7-165295650/88/2637_ 37.50147831157700.00.6620.87 172.69.64.217http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 8-165295810/95/2472_ 34.261030178570.01.5220.79 124.120.32.193http/1.1www.chonlateekeyman.com:443GET /wp-content/plugins/so-widgets-bundle/base/css/img/bundle-i 9-165298780/7/2322_ 4.39147628873340.00.0224.44 162.158.174.57http/1.1www.jbbgarment.com:80GET //old/ HTTP/1.0 10-165298840/10/2270_ 6.60052529397220.00.1533.36 172.69.64.217http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 11-165299240/3/2018_ 1.19064624006780.00.0121.20 162.158.174.57http/1.1www.jbbgarment.com:80GET /old/ HTTP/1.0 12-1652-0/0/1960. 0.000024593870.00.0017.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-165295970/83/1771W 43.020022222000.01.1313.56 139.144.150.45http/1.1localhost:80GET /server-status HTTP/1.0 14-165299380/2/2037_ 0.49147425075640.00.0116.16 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 15-1652-0/0/1208. 0.0061014583660.00.0011.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1652-0/0/1261. 0.00272015502520.00.0010.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1652-0/0/1127. 0.00168013738230.00.009.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1652-0/0/700. 0.0045008803550.00.005.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1652-0/0/263. 0.0044303457050.00.001.90 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1652-0/0/255. 0.0034304412110.00.002.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1652-0/0/174. 0.0044103355550.00.002.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1652-0/0/149. 0.0068002888040.00.001.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1652-0/0/136. 0.0045412217730.00.001.11 162.158.90.49http/1.1www.chonlateefarm.com:443GET /wp-content/themes/chonlateedesign/js/skip-link-focus-fix.j 24-1652-0/0/72. 0.0067901718740.00.000.35 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1652-0/0/139. 0.0068802399250.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1652-0/0/110. 0.0026995042172870.00.000.55 172.71.167.87http/1.1www.bizproceed.com:80POST //xmlrpc.php HTTP/1.0 27-1652-0/0/81. 0.00272901658530.00.000.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1652-0/0/47. 0.00284901000020.00.000.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1652-0/0/114. 0.00272011983960.00.000.70 194.169.175.26http/1.1www.dtacbusiness.com:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.0 30-1652-0/0/3. 0.004418080530.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1652-0/0/11. 0.004417092740.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1652-0/0/37. 0.0043620566180.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1652-0/0/60. 0.0043440565970.00.000.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1652-0/0/51. 0.0043420696700.00.000.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1652-0/0/54. 0.0043380719910.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1652-0/0/20. 0.0043930349690.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1652-0/0/100. 0.0041964061583800.00.000.72 172.173.117.242http/1.1www.ozonepluswater.net:443POST //xmlrpc.php HTTP/1.1 38-1652-0/0/8. 0.0044137143190.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1652-0/0/39. 0.0043690530020.00.000.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1652-0/0/18. 0.0043950257230.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1652-0/0/15. 0.0044010208960.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1652-0/0/11. 0.0044070142340.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1652-0/0/35. 0.0043720543800.00.000.17 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1652-0/0/100. 0.0042334221200890.00.000.61 172.69.79.184http/1.1www.bizproceed.com:80POST /xmlrpc.php HTTP/1.0 45-1652-0/0/26. 0.0043830415890.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1652-0/0/100. 0.0041937931559450.00.000.71 69.163.199.234http/1.1www.chonlateedesign.com:443POST /wp-login.php HTTP/1.1 47-1652-0/0/100. 0.00420510251437290.00.000.75 172.70.85.197http/1.1www.chorsiam.com:80GET /xmlrpc.php HTTP/1.0 48-1652-0/0/99. 0.0041849421426060.00.001.03 172.70.175.19http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 49-1652-0/0/8. 0.0044120109930.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child Slot
Found on 2023-08-31 12:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e36a2efbbApache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:13:16 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 10 minutes 58 seconds Server load: 5.19 6.28 5.89 Total accesses: 164388 - Total Traffic: 965.5 MB - Total Duration: 213456541 CPU Usage: u2863.74 s4914.36 cu47922700 cs11730400 - 320000% CPU load 8.81 requests/sec - 53.0 kB/second - 6.0 kB/request - 1298.49 ms/request 8 requests currently being processed, 7 idle workers W__R_R_WRWR.___W.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164537790/58/9968W 32.9900129769430.00.6160.04 172.69.67.119http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 1-164536140/94/9802_ 60.610503125303820.00.7855.78 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 2-164536060/92/9545_ 55.080588124504030.01.2752.05 172.71.167.106http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 3-164538400/24/9540R 13.030656124048280.00.0851.12 40.122.174.22http/1.1www.ss-cool.com:443 4-164538190/32/9457_ 17.540425121752900.00.2350.28 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 5-164537860/64/9239R 32.081320121873460.00.3449.16 159.89.83.196http/1.1www.tspaccount.net:443 6-164536350/94/9157_ 56.870284120460700.00.4654.32 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 7-164537110/79/9285W 47.3600120415320.00.5266.83 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.0 8-164538480/21/8878R 10.780674114728460.00.0959.38 104.43.197.88http/1.1www.wealneosupply.com:443 9-164538570/12/8639W 4.5200112997290.00.0547.76 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 10-164537970/54/8579R 26.860670108342840.00.2743.01 172.71.167.105http/1.1www.dr-rpi.com:443 11-1645-0/0/8640. 0.003624113862830.00.0046.65 178.62.73.12http/1.1 12-164536530/88/8262_ 52.850745107768680.00.5444.45 172.71.166.60http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 13-164536660/86/7577_ 49.570099784980.00.4543.56 139.144.150.45http/1.1 14-164538650/16/7355_ 8.04083195688490.00.0753.65 178.62.73.12http/1.1 15-164538790/3/6759W 0.960086418950.00.0138.25 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 16-1645-0/0/6398. 0.00105084112680.00.0038.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1645-0/0/5165. 0.0020658367047860.00.0030.20 162.158.30.103http/1.1www.jbbgarment.com:80POST //wp-login.php HTTP/1.0 18-1645-0/0/3758. 0.006429449356390.00.0034.75 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 19-1645-0/0/2551. 0.006364532033900.00.0014.10 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 20-1645-0/0/2054. 0.00213027586180.00.0011.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1645-0/0/1097. 0.00119013227930.00.005.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1645-0/0/455. 0.001809916243560.00.002.62 172.68.234.226http/1.1www.smebkk.com:80GET /category/type-b/ HTTP/1.0 23-1645-0/0/385. 0.001549144735560.00.002.34 172.69.65.48http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 24-1645-0/0/256. 0.0033203451990.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/248. 0.0033003167430.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/128. 0.00197101633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0020070296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00201101155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0018915411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00187902410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00184821789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0016182000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00160234221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00160254021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00160303661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00160243821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0016176011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0016172018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0016180030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00161580118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0016163054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0016160072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00160293841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00160284171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 94subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 65 seconds, (range: 0...290)index usage: 3%, cache usage: 4%total entries stored since starting: 6324total entries replaced since starting: 0total entries expired since starting: 6230total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 28607 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e39517c94Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:49 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 21 seconds Server load: 6.39 6.07 6.47 Total accesses: 262 - Total Traffic: 2.0 MB - Total Duration: 237584 CPU Usage: u2572.36 s4827.26 cu47808400 cs11700400 - 2.83e+8% CPU load 12.5 requests/sec - 97.8 kB/second - 7.8 kB/request - 906.809 ms/request 18 requests currently being processed, 2 idle workers WWWRWWCWRR__RW.WWRRRR............................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209850/21/21W 5.8110122430.00.140.14 172.71.182.96http/1.1www.torrong.com:80POST /wp-login.php?action=register HTTP/1.0 1-1644209860/13/13W 8.2400165440.00.090.09 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 2-1644209890/15/15W 6.0400136230.00.120.12 165.227.146.2http/1.1localhost:80GET /server-status HTTP/1.0 3-1644210010/18/18R 6.5010129570.00.080.08 178.249.214.10http/1.1www.tafa.or.th:443 4-1644210080/16/16W 4.5600201480.00.060.06 207.180.233.2http/1.1www.thai-pack.com:80POST /xmlrpc.php HTTP/1.0 5-1644210310/14/14W 6.0610139430.00.160.16 27.254.96.168http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /wp-cron.php?doing_wp_cron=1693329948.43268895149230957031 6-1644210371/14/14C 6.250745127347.10.120.12 167.99.182.39http/1.1www.tafa.or.th:443GET /about HTTP/1.1 7-1644210390/12/12W 6.2200123630.00.090.09 172.68.234.134http/1.1www.torrong.com:80POST /wp-cron.php?doing_wp_cron=1693329949.72525501251220703125 8-1644211390/0/12R 0.000078380.00.000.07 128.199.62.55http/1.1 9-1644210550/9/9R 3.97140599550.00.050.05 178.249.214.10http/1.1www.tafa.or.th:443 10-1644210570/9/9_ 4.0202567100540.00.050.05 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 11-1644210630/14/14_ 6.1100125500.00.110.11 134.122.63.192http/1.1localhost:80GET /v2/_catalog HTTP/1.0 12-1644210730/16/16R 4.7300113150.00.040.04 168.61.149.69http/1.1 13-1644210750/11/11W 5.4000111420.00.150.15 139.144.96.150http/1.1www.tafa.or.th:443GET /.git/config HTTP/1.1 14-1644-0/0/1. 0.0015010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1644210870/14/14W 5.4200108810.00.050.05 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 16-1644210930/10/10W 4.940097340.00.080.08 77.68.23.56http/1.1www.thaiquickservice.net:443GET / HTTP/1.1 17-1644210990/6/6R 3.970802106400.00.320.32 167.99.182.39http/1.1www.tafa.or.th:443GET /.vscode/sftp.json HTTP/1.1 18-1644211050/15/15R 4.330088200.00.100.10 74.249.252.222http/1.1www.chonlateevip.com:443 19-1644211110/13/13R 6.020464124750.00.080.08 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 20-1644211220/9/9R 3.870076140.00.060.06 23.99.197.177http/1.1www.nptpropertythailand.com:443 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 27subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 288 seconds, (range: 284...298)index usage: 0%, cache usage: 1%total entries stored since starting: 27total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 100 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb315bb4af7e5bb4af7e439c2f68Apache Status Apache Server Status for mail.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:37 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 34 seconds Server load: 0.60 0.84 1.22 Total accesses: 230 - Total Traffic: 3.9 MB - Total Duration: 53922 CPU Usage: u653.03 s1259.54 cu12804600 cs3078510 - 4.67e+7% CPU load 6.76 requests/sec - 118.6 kB/second - 17.5 kB/request - 234.443 ms/request 12 requests currently being processed, 0 idle workers WWWRWWRRWRRR...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439060/20/20W 3.001067650.00.570.57 172.70.142.110http/1.1www.chorsiam.com:80GET /%E0%B9%80%E0%B8%81%E0%B9%89%E0%B8%B2%E0%B8%AD%E0%B8%B5%E0% 1-45439070/32/32W 3.420071740.00.670.67 172.68.234.188http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1666604796.41800594329833984375 2-45439120/21/21W 1.330046500.00.610.61 103.130.219.13http/1.1www.siamsolarrooftop.com:443POST /wp-login.php HTTP/1.1 3-45439220/31/31R 2.300067800.00.480.48 178.62.220.177http/1.1www.tspaccount.net:80GET /debug/default/view?panel=config HTTP/1.0 4-45439320/24/24W 1.750038770.00.370.37 172.68.189.136http/1.1www.accprogress.com:80GET /category/type-b/ HTTP/1.0 5-45439550/46/46W 2.980093430.00.560.56 74.207.251.118http/1.1localhost:80GET /server-status HTTP/1.0 6-45439900/25/25R 1.900179670.00.460.46 134.209.227.71http/1.1localhost:80GET /.DS_Store HTTP/1.0 7-45440090/18/18R 0.660034150.00.190.19 134.209.227.71http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.0 8-45440190/2/2W 0.571022800.00.020.02 172.68.234.186http/1.1www.accprogress.com:80POST /wp-cron.php?doing_wp_cron=1666604795.26289892196655273437 9-45440430/3/3R 0.710016500.00.010.01 178.62.220.177http/1.1www.tspaccount.net:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 10-45440540/4/4R 0.060080.00.000.00 178.62.220.177http/1.1www.tspaccount.net:80GET /info.php HTTP/1.0 11-45440560/4/4R 0.000080.00.000.00 178.128.227.119http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 296 seconds, (range: 288...298)index usage: 0%, cache usage: 0%total entries stored since starting: 8total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 28 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2022-10-24 09:45
Last seen 2024-02-02 20:10
Open for 466 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b2838a2319Apache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 03-Feb-2024 03:10:48 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 95 Parent Server MPM Generation: 94 Server uptime: 28 days 17 hours 9 minutes 27 seconds Server load: 2.07 2.07 2.06 Total accesses: 1850782 - Total Traffic: 23.8 GB - Total Duration: 2141121460 CPU Usage: u177.8 s108.19 cu32159.4 cs2232.06 - 1.4% CPU load .746 requests/sec - 10.1 kB/second - 13.5 kB/request - 1156.87 ms/request 2 requests currently being processed, 126 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 031725no0yes032000 231729no0yes230000 331728no0yes032000 531726no0yes032000 Sum400 2126000 ________________________________................................ __________RW____________________________________________________ ................................________________________________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-94317250/2/14807_ 0.46110160261020.00.02193.84 161.35.155.246http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/0/15296_ 0.00110139013540.00.00198.97 147.182.130.98http/1.1 0-94317250/2/14869_ 1.88100150309580.00.00192.75 139.144.150.205http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/2/15050_ 1.8990145875150.00.00186.03 139.144.150.205http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-94317250/1/14951_ 0.4080147711750.00.00185.46 162.243.161.105http/1.1 0-94317250/2/15174_ 0.4690156649260.00.00188.55 161.35.155.246http/1.1localhost:80GET /.git/config HTTP/1.1 0-94317250/1/14848_ 0.4170145588920.00.00200.31 162.243.161.105http/1.1 0-94317250/0/15155_ 0.0070150182090.00.00187.60 74.207.237.114http/1.1localhost:443GET /about HTTP/1.1 0-94317250/0/15114_ 0.0050145226990.00.00229.90 162.243.161.105h2localhost:443[0/0] Software caused connection abort 0-94317250/2/15250_ 1.9050148853460.00.00194.93 139.144.150.205http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/3/14815_ 1.9040154393450.00.00200.74 139.144.150.205http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/2/14826_ 1.9050147156460.00.00195.47 164.92.84.255http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/2/14695_ 1.9050137182790.00.00185.56 139.144.150.205http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/1/14846_ 0.4740169086640.00.00186.04 147.182.130.98http/1.1localhost:443GET /about HTTP/1.1 0-94317250/2/15801_ 1.9130141615400.00.00187.82 162.243.161.105http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 0-94317250/2/14851_ 1.9130165341280.00.00182.52 162.243.161.105http/1.1localhost:443GET /about HTTP/1.1 0-94317250/1/14901_ 0.4730143405120.00.00206.40 159.203.94.228http/1.1localhost:443GET /.git/config HTTP/1.1 0-94317250/2/14961_ 0.4820144940060.00.00189.33 159.203.94.228http/1.1localhost:443GET /telescope/requests HTTP/1.1 0-94317250/1/14781_ 0.4810160388390.00.00200.58 147.182.130.98http/1.1localhost:443GET /.git/config HTTP/1.1 0-94317250/1/15002_ 1.9110144639410.00.00193.85 146.190.98.165http/1.1localhost:80GET / HTTP/1.1 0-94317250/0/14992_ 0.0020181496050.00.00193.47 162.243.161.105http/1.1localhost:443GET / HTTP/1.1 0-94317250/1/15017_ 0.4817147053880.00.00204.12 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/1/15473_ 0.4310150756120.00.00188.31 161.35.155.246http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.1 0-94317250/1/14677_ 1.9210138765570.00.00190.21 146.190.98.165http/1.1localhost:80GET /.git/config HTTP/1.1 0-94317250/1/14988_ 1.9210162205960.00.02186.93 146.190.98.165http/1.1localhost:80GET /server-status HTTP/1.1 0-94317250/1/14662_ 1.9210135981680.00.00197.05 146.190.98.165http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-94317250/2/15161_ 1.9210144713600.00.00194.53 146.190.98.165http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-94317250/3/14945_ 1.9200159195760.00.00213.34 146.190.98.165http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-94317250/0/14742_ 0.0000152174680.00.00175.94 162.142.125.11h2clocalhost:80[0/0] init 0-94317250/0/15189_ 0.0000135139150.00.00225.17 45.33.68.129http/1.1 0-94317250/1/14679_ 1.881117155573270.00.00199.16 139.144.150.205http/1.1localhost:80\x16\x03\x01\x01\t\x01 0-94317250/2/14942_ 1.8800145815220.00.00185.20 164.92.84.255http/1.1localhost:80\x16\x03\x01\x01\t\x01 1-94-0/0/15731. 0.0098180138364770.00.00219.29 137.184.162.65http/1.1localhost:80GET /.git/config HTTP/1.1 1-94-0/0/15813. 0.0098180136849580.00.00198.68 139.144.150.23http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15602. 0.0098180174090190.00.00199.96 159.203.44.43h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15318. 0.0098180150896030.00.00189.46 164.92.84.255http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-94-0/0/15276. 0.0098180146566320.00.00197.93 159.203.44.43http/1.1localhost:443GET /.git/config HTTP/1.1 1-94-0/0/15655. 0.0098180134151790.00.00198.79 139.144.150.23http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-94-0/0/15351. 0.0098180172789920.00.00188.15 159.223.102.13http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-94-0/0/15185. 0.0098180165483380.00.00189.07 64.227.126.135h2localhost:443[0/0] Software caused connection abort 1-94-0/0/15335. 0.0098180127395500.00.00211.76 134.122.34.144http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/14956. 0.0098180152319130.00.00188.74 159.203.44.43http/1.1localhost:443GET / HTTP/1.1 1-94-0/0/15041. 0.0098180148013860.00.00204.86 164.92.84.255http/1.1localhost:443GET /login.action HTTP/1.1 1-94-0/0/15506. 0.0098180159268070.00.00208.73 139.144.96.150http/1.1localhost:443GET /config.json HTTP/1.1 1-94-0/0/15329. 0.0098180159504030.00.00200.56 45.55.193.222http/1.1localhost:443GET /telescope/requests HTTP/1.1 1-94-0/0/15189. 0.0098180137016410.00.00183.04 159.223.102.13http/1.1localhost:80GET /config.json HTTP/1.1 1-94-</
Found on 2024-02-02 20:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b272bee83aApache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Sunday, 07-Jan-2024 17:38:17 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 8 Parent Server MPM Generation: 7 Server uptime: 2 days 7 hours 36 minutes 56 seconds Server load: 2.78 2.77 2.69 Total accesses: 924768 - Total Traffic: 12.4 GB - Total Duration: 1132199825 CPU Usage: u80.64 s10.8 cu15734.7 cs827.39 - 8.32% CPU load 4.62 requests/sec - 65.0 kB/second - 14.1 kB/request - 1224.31 ms/request 5 requests currently being processed, 59 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 128172no4yes230001 232702no1yes329000 Sum205 559001 ................................________R____________________R__ __W____W_______W________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-7-0/0/7491. 0.0028363598326540.00.00107.52 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ocdxhvp-10531qitems/etidm HTTP/1.1 0-7-0/0/7997. 0.0028363376283270.00.00109.31 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/7552. 0.0028383882954630.00.00106.80 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-21596fitems/etidm3.html HTTP/1.1 0-7-0/0/7977. 0.00283079870500.00.00100.07 54.186.174.90http/1.1www.chonlateekeyman.com:80GET /vendor/.git/config HTTP/1.1 0-7-0/0/7820. 0.0028363180228580.00.0097.38 85.208.96.203http/1.1www.chonlateeboi.com:443GET /32346yytxetid.htm HTTP/1.1 0-7-0/0/7945. 0.0028338492820970.00.00103.92 66.249.73.128http/1.1www.twinbuilt.co.th:443GET /?e=claudio-valentino-watch-cheap-off-58%-10-ii-91mVN1T9 HT 0-7-0/0/7751. 0.0028372876982120.00.00116.50 85.208.96.205http/1.1www.focusfilmthailand.com:443GET /tag/%E0%B8%9A%E0%B8%A3%E0%B8%B4%E0%B8%81%E0%B8%B2%E0%B8%A3 0-7-0/0/7744. 0.0028363785766580.00.00100.00 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /uujxhvp-10537witems/eti HTTP/1.1 0-7-0/0/7941. 0.0028341879902650.00.00150.52 173.201.180.210http/1.1www.nadapool.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7828. 0.0028384482475300.00.0098.26 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /zkoxhvp-14156bitems/etidm7.html HTTP/1.1 0-7-0/0/7717. 0.0028384690869310.00.00120.03 52.70.240.171http/1.1www.chonlateeboi.com:443GET /12284sabfitems/etidm2.html HTTP/1.1 0-7-0/0/7353. 0.0028363488696230.00.0094.39 3.224.220.101http/1.1www.chonlateeboi.com:443GET /3328eslwetidm1aep0 HTTP/1.1 0-7-0/0/7441. 0.00283205967886060.00.0098.26 158.220.124.129http/1.1www.chonlateeboi.com:443GET /%E0%B8%95%E0%B8%B4%E0%B8%94%E0%B8%95%E0%B9%88%E0%B8%AD/ HT 0-7-0/0/7637. 0.00283637102146600.00.00103.73 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /biqxhvp-21646detidm25o HTTP/1.1 0-7-0/0/8309. 0.00283351676006020.00.00103.58 66.249.73.132http/1.1www.twinbuilt.co.th:443GET /?e=godfather-trilogy-i-i%EF%BC%A9-iii-%E3%82%AB%E3%83%A9%E 0-7-0/0/7485. 0.00283104297978530.00.0095.31 103.154.184.42http/1.1www.xn--72cztbd4dxek5iqd.com:44GET /wp-login.php HTTP/1.1 0-7-0/0/7646. 0.002831663779286410.00.0097.21 66.249.71.201http/1.1www.twinbuilt.co.th:443GET /?e=1906-new-highs-fast-acting-precision-edibles-leafly-9-i 0-7-0/0/7679. 0.0028384477601570.00.00101.51 52.70.240.171http/1.1www.chonlateeboi.com:443GET /44576eslwitems/etidm31meb.html HTTP/1.1 0-7-0/0/7728. 0.0028364096209810.00.0096.20 23.22.35.162http/1.1www.chonlateeboi.com:443GET /18447eslwitems/etidm86nw.htm HTTP/1.1 0-7-0/0/7810. 0.0028363579141840.00.00103.23 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /kczxhvp-10527mitems/etidm62xp.htm HTTP/1.1 0-7-0/0/7791. 0.00283375119150970.00.00106.94 184.168.99.253http/1.1www.plastandtrans.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7461. 0.00283202982744190.00.0099.22 158.220.124.129http/1.1www.chonlateefood.com:443GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%82%E0% 0-7-0/0/8210. 0.0028363690213850.00.00106.76 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /dksxhvp-25912fetidm59qxf HTTP/1.1 0-7-0/0/7600. 0.0028384875263560.00.00105.28 3.224.220.101http/1.1www.chonlateeboi.com:443GET /15240bzlnetidm71ebt.htm HTTP/1.1 0-7-0/0/7639. 0.0028334698577400.00.0096.02 66.249.71.202http/1.1www.twinbuilt.co.th:443GET /?e=bundesliga-dortmund-giovanni-reyna-injured-8-ii-y3GKO2i 0-7-0/0/7756. 0.0028363767494950.00.0097.99 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /lkaxhvp-14116netidm6 HTTP/1.1 0-7-0/0/7624. 0.0028385483401880.00.00106.30 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /byqlgro-3472detidm94old HTTP/1.1 0-7-0/0/7698. 0.0028384193126660.00.00127.64 3.224.220.101http/1.1www.chonlateeboi.com:443GET /2836bzlnetidm7 HTTP/1.1 0-7-0/0/7504. 0.0028364981009190.00.0093.37 81.70.248.169http/1.1www.nakindogtraining.com:443POST /wp-login.php HTTP/1.1 0-7-0/0/7720. 0.0028351486170310.00.00131.95 173.201.191.207http/1.1www.xn--12cbt1cxdh6e8ac5x.com:4GET /wp-login.php HTTP/1.1 0-7-0/0/7415. 0.0028387289899570.00.00105.91 97.74.211.129http/1.1www.dinocoffees.com:443GET /wp-login.php HTTP/1.1 0-7-0/0/7754. 0.0028363380644190.00.0098.18 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /wclxhvp-10227yitems/etidm.htm HTTP/1.1 1-7281720/104/7554_ 59.330087671170.01.17125.20 159.65.58.104http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 1-7281720/106/7383_ 59.581082748250.01.2292.81 138.68.133.118http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-7281720/116/7471_ 59.5410109498040.01.1097.73 138.68.133.118http/1.1localhost:80GET /.git/config HTTP/1.1 1-7281720/107/7057_ 59.572088107590.01.1291.42 138.68.133.118http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7281720/95/7153_ 59.581094502580.01.13104.45 161.35.155.246http/1.1localhost:443GET /v2/_catalog HTTP/1.1 1-7281720/111/7324_ 59.431083297130.02.1297.63 159.203.94.228http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-7281720/115/7379_ 59.5800101011060.01.4594.74 159.203.94.228http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-7281720/125/7411_ 59.501094483040.01.3099.33 142.93.158.96http/1.1localhost:443GET /about HTTP/1.1 1-7281720/105/7404R 59.572077522440.01.4893.81 208.109.201.124http/1.1www.mkandptfoods.com:443 1-7281720/99/7218_ 59.572092437840.01.1699.24 159.203.94.228http/1.1localhost:80GET /.env HTTP/1.1 1-7281720/110/7002_ 59.45066694897890.01.2897.07 198.12.216.169http/1.1www.nptpropertythailand.com:443POST /wp-login.php HTTP/1.1 1-7281720/91/7517_ 59.581086396750.01.04106.34 159.203.94.228http/1.1localhost:80GET /.git/config H
Found on 2024-01-07 10:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b21301371cApache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Saturday, 06-Jan-2024 08:26:56 ICT Restart Time: Friday, 05-Jan-2024 10:01:20 ICT Parent Server Config. Generation: 4 Parent Server MPM Generation: 3 Server uptime: 22 hours 25 minutes 35 seconds Server load: 3.09 2.92 2.89 Total accesses: 391474 - Total Traffic: 5.4 GB - Total Duration: 404202540 CPU Usage: u168.27 s11.41 cu6571 cs347.56 - 8.79% CPU load 4.85 requests/sec - 70.1 kB/second - 14.5 kB/request - 1032.51 ms/request 14 requests currently being processed, 82 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 01382no7yes626001 128982no5yes329100 33070no8yes527002 Sum3020 1482103 W____W_____R___R__R_W__________________________W________W____W__ ................................_______W________RWWW____________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-313821/89/3544W 50.0334043163500.01.2451.54 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-313820/95/3867_ 51.831028244980.01.1850.75 159.65.58.104http/1.1localhost:80GET /config.json HTTP/1.1 0-313820/94/3542_ 51.980041040560.01.0558.98 167.71.185.75http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-313820/97/3789_ 52.08084034227640.01.3748.16 66.249.71.170http/1.1www.chonlateeadmin.com:443GET /trust.php?zdwqgmy-155492jetidm70m.htm HTTP/1.1 0-313820/91/3631_ 51.82186132295550.01.2745.85 138.197.88.136h2localhost:443[0/0] Software caused connection abort 0-313821/80/3860W 47.36154040363230.01.1349.04 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-313820/72/3657_ 52.01139728639450.00.8760.95 66.249.77.73http/1.1www.chonlateeaa.com:443GET /?w=kg-175f-specs-y-vmMbDzU1 HTTP/1.1 0-313820/78/3688_ 51.711030821660.00.9247.76 159.223.108.26http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-313820/90/3754_ 52.070033330050.01.0690.38 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /learfru-24984netidm71yrn.htm HTTP/1.1 0-313820/103/3687_ 51.711028551890.01.5147.66 159.65.58.104http/1.1localhost:80GET /login.action HTTP/1.1 0-313820/83/3572_ 52.021034276560.01.6644.67 192.95.30.21http/1.1www.12gobiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-313820/93/3431R 51.822045735680.01.2143.94 159.65.58.104http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-313820/90/3518_ 52.02184228737670.00.9847.63 52.70.240.171http/1.1www.chonlateeadmin.com:443GET /ysnrfru-6225aitems/eti.htm HTTP/1.1 0-313820/71/3776_ 51.980040604490.00.9052.06 167.99.184.41http/1.1localhost:80GET /s/338313e2239313e2037313e2330323/_/;/META-INF/maven/com.at 0-313820/91/3847_ 51.97084434624380.01.0951.40 52.70.240.171http/1.1www.chonlateeboi.com:443GET /43514tquxitems/etid.html HTTP/1.1 0-313820/104/3460R 51.852051114830.01.1644.64 50.116.102.211http/1.1www.nadapool.com:443 0-313820/126/3600_ 51.621033106770.01.3846.27 45.55.193.222h2localhost:443[0/0] Software caused connection abort 0-313820/99/3829_ 52.040030235650.01.3750.66 167.99.184.41http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-313820/75/3698R 51.592110628100010.00.8448.11 66.249.72.66http/1.1www.chonlateeadmin.com:443 0-313820/98/3593_ 52.00185432962610.01.2451.75 66.249.72.65http/1.1www.chonlateeadmin.com:443GET /trust.php?ouoaonh-37883betidm25bhb.htm HTTP/1.1 0-313821/53/3620W 35.36515032630760.00.8955.08 94.228.169.107http/1.1www.thesungolden.com:443POST /wp-content/uploads/wpr-addons/forms/061f69806f7d.php HTTP 0-313820/81/3580_ 51.77186840749540.01.1650.88 192.95.30.21http/1.1www.12gobiz.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 0-313820/95/4022_ 51.990030804630.01.1851.75 159.223.108.26http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-313820/102/3597_ 52.00084328642150.01.2546.46 66.249.71.170http/1.1www.chonlateeadmin.com:443GET /trust.php?pmmhlzs-125322zetidm9 HTTP/1.1 0-313820/89/3560_ 51.830225528555340.01.2545.72 23.22.35.162http/1.1www.chonlateeadmin.com:443GET /learfru-24984netidm71yrn.htm HTTP/1.1 0-313820/91/3592_ 52.001029704960.01.0046.65 167.71.185.75http/1.1localhost:80GET /config.json HTTP/1.1 0-313820/95/3662_ 52.040031611320.01.1656.78 167.71.185.75http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-313820/173/3651_ 51.990035040140.01.4777.74 74.207.237.46http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 0-313820/81/3523_ 52.011028697930.00.9744.90 167.71.185.75http/1.1localhost:80GET /telescope/requests HTTP/1.1 0-313820/103/3841_ 51.851034202990.01.2784.44 74.207.237.46http/1.1localhost:443GET / HTTP/1.1 0-313820/80/3562_ 52.001031213780.00.9853.71 167.99.184.41http/1.1localhost:80GET /config.json HTTP/1.1 0-313820/87/3959_ 52.011031502210.01.4749.40 167.99.184.41http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-3289820/86/3049_ 74.860029107760.01.0339.59 45.55.193.222http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-3289820/130/2863_ 74.762028949070.01.9336.86 159.223.108.26http/1.1localhost:80GET /telescope/requests HTTP/1.1 1-3289820/85/2841_ 73.68387247822570.01.3838.66 45.55.193.222h2localhost:443[0/0] Software caused connection abort 1-3289820/146/2863_ 74.72338625544200.01.6637.63 45.61.185.69http/1.1www.happy-carrent.com:443GET /wp-login.php?redirect_to=https%3A%2F%2Fhappy-carrent.com%2 1-3289820/146/2876_ 73.83084141161350.01.7140.97 185.180.143.146http/1.1 1-3289820/116/2981_ 74.860022729610.01.4438.91 138.197.88.136http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-3289820/134/2912_ 74.6121123387610.01.5636.04 167.71.185.75http/1.1localhost:80GET /server-status HTTP/1.1 1-3289820/108/2953_ 74.77184526582510.01.3039.92 85.208.96.207http/1.1www.chonlateeadmin.com:443GET /skhmxkt-12641ueti.html HTTP/1.1 1-3289820/118/2941_ 74.6221024175770.01.4739.54 167.99.184.41http/1.1localhost:80GET /server-status HTTP/1.1 1-3289820/148/2863_ 74.593022522370.01.7337.01 167.71.185.75http/1.1localhost:80GET /v2/_catalog HTTP/1.1 1-3289820/128/2897_ 74.671024490470.01.5242.01 167.71.185.75http/1.1localhost:80GET /_all_dbs HTTP/1.1 1-3289820/124/3034_ 74.70384324169570.01.6642.44 52.70.240.171http/1.1www.chonlateeboi.com:443GET /43504tquxetidm28gtv HTTP/1.1
Found on 2024-01-06 01:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310943c7b20943c7b2a9b4acc9Apache Status Apache Server Status for smtp.tspaccount.net (via 203.170.192.183) Server Version: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Oct 15 2023 18:16:43 Current Time: Friday, 29-Dec-2023 00:26:20 ICT Restart Time: Monday, 25-Dec-2023 15:54:19 ICT Parent Server Config. Generation: 14 Parent Server MPM Generation: 13 Server uptime: 3 days 8 hours 32 minutes 1 second Server load: 2.28 2.10 1.76 Total accesses: 1082661 - Total Traffic: 11.9 GB - Total Duration: 678458658 CPU Usage: u26.85 s13.77 cu17223.2 cs980.06 - 6.29% CPU load 3.73 requests/sec - 43.0 kB/second - 11.5 kB/request - 626.658 ms/request 5 requests currently being processed, 123 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 115012no6yes230004 315011no9yes230205 415163no8yes131004 615166no0yes032000 Sum4023 51232013 ................................W___W___________________________ ................................_________________W____________W_ ________W_______________________................................ ________________________________................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-12-0/0/9761. 0.0054062526190.00.00104.46 54.36.148.103h2www.siamsolarrooftop.com:443[0/0] init 0-12-0/0/9541. 0.0054259664091660.00.0093.84 45.61.185.69http/1.1www.tspaccount.net:443GET /wp-login.php HTTP/1.1 0-12-0/0/9814. 0.0054130263196900.00.0097.66 205.169.39.158h2www.chonlateefood.com:443[68/68] done: stream 129, GET /wp-content/themes/sydney/js/scri 0-12-0/0/9686. 0.0054057517730.00.0091.36 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9717. 0.005489958067290.00.00110.28 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?jqyggdh-194606litems/etidm39w.html HTTP/1.1 0-12-0/0/9524. 0.005487062230420.00.00106.15 54.36.148.103h2www.siamsolarrooftop.com:443[1/1] done: stream 1, GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B 0-12-0/0/9680. 0.0054056651730.00.00142.46 23.22.35.162http/1.1www.krongthongsecurity.com:443GET /taayynk88666nitems/etid.html HTTP/1.1 0-12-0/0/9315. 0.0054157267930.00.0093.85 103.108.231.76http/1.1 0-12-0/0/10037. 0.005486455703320.00.00121.72 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?dqsggdh-222602fitems/etid.html HTTP/1.1 0-12-0/0/9603. 0.0054059345480.00.00101.44 205.169.39.158h2www.chonlateefood.com:443[48/48] done: stream 95, GET /wp-content/plugins/addon-elements 0-12-0/0/9625. 0.005487056213820.00.0093.83 205.169.39.158h2www.chonlateefood.com:443[77/77] done: stream 153, GET /wp-content/plugins/elementor/ass 0-12-0/0/9706. 0.0054055944730.00.0099.90 146.70.193.100http/1.1localhost:443GET / HTTP/1.1 0-12-0/0/9810. 0.0054315262384530.00.00114.96 185.248.85.57h2localhost:443[0/0] Software caused connection abort 0-12-0/0/9797. 0.00541662104680.00.00101.09 103.108.231.76http/1.1 0-12-0/0/9608. 0.0054161663607480.00.00103.21 139.144.150.205http/1.1www.chonlateefood.com:443GET /.DS_Store HTTP/1.1 0-12-0/0/9574. 0.0054107458117370.00.00178.83 52.70.240.171http/1.1www.chonlateeboi.com:443GET /trust.php?283911qpjoitems/etidm72ro.htm HTTP/1.1 0-12-0/0/9912. 0.0054062266280.00.00101.96 52.70.240.171http/1.1www.krongthongsecurity.com:443GET /zlgyynk91584tetidm62myt HTTP/1.1 0-12-0/0/9502. 0.005486960595820.00.0093.86 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1644nraretidm5.htm HTTP/1.1 0-12-0/0/9617. 0.0054058503200.00.0098.55 205.169.39.158h2www.chonlateefood.com:443[81/81] done: stream 159, GET /wp-content/plugins/royal-element 0-12-0/0/9842. 0.00541256533780.00.00105.42 205.169.39.158h2www.chonlateefood.com:443[49/49] done: stream 97, GET /wp-content/plugins/elementor/asse 0-12-0/0/9756. 0.0054498362816190.00.00101.94 3.224.220.101http/1.1www.chonlateeboi.com:443GET /trust.php?1639nraritems/etidm24br HTTP/1.1 0-12-0/0/9661. 0.0054160059017560.00.00100.04 205.169.39.158h2www.chonlateefood.com:443[41/41] done: stream 81, GET /wp-includes/js/imagesloaded.min.j 0-12-0/0/9829. 0.0054074686010.00.00147.48 205.169.39.158h2www.chonlateefood.com:443[40/40] done: stream 79, GET /wp-content/plugins/elementor/asse 0-12-0/0/9453. 0.00541192525610.00.00104.94 40.77.167.126h2www.chonlateepr.com:443GET /cornit/serme0024381084.html HTTP/2.0 0-12-0/0/9760. 0.0054058650780.00.00137.10 54.36.148.103http/1.1www.siamsolarrooftop.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%95%E0%B8%B4%E0%B8%94 0-12-0/0/9456. 0.0054083851870.00.0093.59 23.178.112.105http/1.1www.tspaccount.net:80GET /.well-known/acme-challenge/tQ6FZJdGUY09CMSZwgO56oj-RamyzRJ 0-12-0/0/9519. 0.0054122657235100.00.0094.22 95.108.213.173http/1.1www.chonlateenextbiz.com:443GET /uftriw/yuzu-check-firmware-version.html HTTP/1.1 0-12-0/0/9671. 0.00541163147490.00.00101.50 205.169.39.158h2www.chonlateefood.com:443[61/61] done: stream 109, GET /wp-content/plugins/royal-element 0-12-0/0/9624. 0.0054859741050.00.00138.09 205.169.39.158h2www.chonlateefood.com:443[76/76] done: stream 141, GET /wp-content/plugins/happy-element 0-12-0/0/9658. 0.0054261492460.00.00109.28 205.169.39.158http/1.1www.chonlateefood.com:443GET /wp-content/uploads/2023/08/pan-eggs-sprinkled-with-chinese 0-12-0/0/9560. 0.0054157562028900.00.00103.77 40.77.167.126h2www.chonlateepr.com:443[0/0] init 0-12-0/0/9597. 0.0054059888500.00.00115.42 205.169.39.158h2www.chonlateefood.com:443[69/69] done: stream 137, GET /wp-content/plugins/elementskit-l 1-131501212/13/9139W 1.672425541986696.30.10142.56 65.154.226.170h2www.tspaccount.net:443[27/26] write: stream 53, GET /wp-content/themes/chonlateedesig 1-13150120/6/8971_ 1.581055125050.00.03107.50 207.154.240.169http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-13150120/4/9103_ 1.591055516790.00.03131.74 139.144.150.205http/1.1localhost:443GET /.DS_Store HTTP/1.1 1-13150120/3/9376_ 1.191057441840.00.02143.10 164.90.222.93http/1.1localhost:80GET / HTTP/1.1 1-13150121/3/9356W 1.540056503180.00.02111.87 205.169.39.94http/1.1www.tspaccount.net:443GET / HTTP/1.1 1-13150120/2/9081_ 1.501056147270.00.0099.02 139.144.150.205http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-13150120/1/9263_ 0.77187056057710.00.01109.58 154.28.229.245http/1.1 1-13150120/3/9351_ 1.250056485080.00.0293.20 165.232.76.155http/1.1localhost:80GET /about HTTP/1.1 1-13150120/1/9213_ 0.8401055728890.00.0190.53 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 1-13150120/3/9162_ 1.450073740350.00.01108.70 143.110.218.229http/1.1localhost:443GET / HTTP/1.1 1-13150120/5/9391_ 1.571055727320.00.0295.49 139.144.150.205http/1.1localhost:443GET /_all_dbs HTTP/1.1 1-13150120/6/9135_ 1.5600
Found on 2023-12-28 17:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d663f7237Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 24-Dec-2023 15:29:28 +07 Restart Time: Sunday, 24-Dec-2023 04:02:12 +07 Parent Server Config. Generation: 2080 Parent Server MPM Generation: 2079 Server uptime: 11 hours 27 minutes 16 seconds Server load: 0.60 0.45 0.39 Total accesses: 33675 - Total Traffic: 453.8 MB - Total Duration: 45148730 CPU Usage: u3283.42 s5966.7 cu56643600 cs13848400 - 171000% CPU load .817 requests/sec - 11.3 kB/second - 13.8 kB/request - 1340.72 ms/request 3 requests currently being processed, 6 idle workers ___W_W_C_......................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2079280390/51/3236_ 14.67050440589530.00.4037.36 172.71.222.153http/1.1www.bizproceed.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%97%E0%B8%B3%E0%B8%9A 1-2079282800/11/3248_ 1.811045873910.00.1678.00 165.232.76.155http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-2079280990/35/3048_ 14.45162041552350.00.2333.03 172.70.38.153http/1.1www.bizproceed.com:80GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%88%E0%B8%94%E0%B8%97 3-2079279460/56/3012W 9.570038808640.00.7847.34 172.70.38.196http/1.1www.bizproceed.com:80GET /tag/%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AB 4-2079282320/14/2896_ 4.121038148670.00.1829.29 165.232.76.155http/1.1localhost:443GET /v2/_catalog HTTP/1.1 5-2079282430/10/2919W 4.330037178210.00.1635.78 165.232.76.155http/1.1localhost:443GET /server-status HTTP/1.1 6-2079277050/70/2746_ 21.821038265650.00.5530.23 165.232.76.155http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-2079281621/23/2413C 38.150032613261.40.2841.37 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-2079283290/1/2218_ 0.000129406470.00.0039.85 165.232.76.155http/1.1localhost:443GET /about HTTP/1.1 9-2079-0/0/2144. 0.0063388929151780.00.0025.51 172.70.214.252http/1.1www.chonlateeit.com:443GET /wp-login.php HTTP/1.1 10-2079-0/0/1838. 0.001228028090060.00.0018.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-2079-0/0/1529. 0.001230021339290.00.0015.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-2079-0/0/986. 0.001226012627110.00.007.92 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-2079-0/0/723. 0.00122909213490.00.005.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-2079-0/0/142. 0.0012611171701690.00.001.49 172.68.234.146http/1.1www.accsmile.com:80POST /wp-cron.php?doing_wp_cron=1703406439.44782590866088867187 15-2079-0/0/222. 0.00108523389950.00.002.34 172.71.122.234http/1.1www.chonlateecoffee.com:80GET /category/%E0%B8%A0%E0%B8%B2%E0%B8%84%E0%B8%95%E0%B8%B0%E0% 16-2079-0/0/140. 0.001159001669140.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2079-0/0/49. 0.00116060430560.00.003.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2079-0/0/96. 0.00243427051161230.00.000.75 172.71.178.161http/1.1www.chonlateecamping.com:80GET / HTTP/1.0 19-2079-0/0/3. 0.0025447030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-2079-0/0/1. 0.0025450010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2079-0/0/5. 0.0025436070.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2079-0/0/5. 0.0025441080.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2079-0/0/52. 0.00249410275920.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2079-0/0/4. 0.0025438090.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 7subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 162 seconds, (range: 84...294)index usage: 0%, cache usage: 0%total entries stored since starting: 259total entries replaced since starting: 0total entries expired since starting: 252total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 12422 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-24 08:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dc122d8b6Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 12-Dec-2023 03:59:06 +07 Restart Time: Tuesday, 12-Dec-2023 00:24:50 +07 Parent Server Config. Generation: 2042 Parent Server MPM Generation: 2041 Server uptime: 3 hours 34 minutes 16 seconds Server load: 0.48 0.41 0.63 Total accesses: 13143 - Total Traffic: 126.1 MB - Total Duration: 21838613 CPU Usage: u3296.92 s5949.64 cu56305200 cs13769000 - 545000% CPU load 1.02 requests/sec - 10.0 kB/second - 9.8 kB/request - 1661.62 ms/request 5 requests currently being processed, 5 idle workers _WWW.W__.C__...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-2041249100/27/1267_ 10.29091920990910.00.1813.64 172.71.202.126http/1.1www.chorsiam.com:80GET /wordpress HTTP/1.0 1-2041252360/0/1134W 0.000019419850.00.0010.72 108.162.245.92http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST / HTTP/1.1 2-2041249180/24/1181W 17.370020481720.00.2211.97 162.158.227.159http/1.1www.chorsiam.com:80GET /wordpress HTTP/1.0 3-2041243780/65/1135W 36.020018537620.00.5110.12 172.70.230.72http/1.1www.chorsiam.com:80POST /wp-login.php HTTP/1.0 4-2041-0/0/1138. 0.0088218871430.00.0012.24 108.162.245.242http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /xmlrpc.php?rsd HTTP/1.1 5-2041249240/24/972W 13.110016120620.00.189.10 167.71.185.75http/1.1localhost:443GET /server-status HTTP/1.1 6-2041241690/96/883_ 59.811014869790.00.867.89 167.71.185.75http/1.1localhost:443GET /about HTTP/1.1 7-2041243060/77/924_ 45.311115356270.00.648.95 167.71.185.75http/1.1localhost:443GET /v2/_catalog HTTP/1.1 8-2041-0/0/1044. 0.00307017405840.00.009.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-2041249331/27/831C 11.950014738671.40.217.86 167.71.185.75http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-2041249390/23/621_ 8.52219982970.00.125.74 167.71.185.75http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 11-2041249430/24/540_ 13.9519219020840.00.175.14 108.162.245.25http/1.1www.xn--42cl6b3aa6azd4ce4q.com:GET /tel:0629385555 HTTP/1.1 12-2041-0/0/285. 0.0030403762660.00.002.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-2041-0/0/307. 0.0023338255170010.00.002.78 172.70.115.101http/1.1www.bizproceed.com:80GET /.vscode/sftp.json HTTP/1.0 14-2041-0/0/152. 0.00304601970220.00.001.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-2041-0/0/139. 0.00323502209180.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-2041-0/0/20. 0.004560054740.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-2041-0/0/14. 0.004573047850.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-2041-0/0/12. 0.004571040310.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-2041-0/0/98. 0.00394801631250.00.000.86 138.197.88.136http/1.1 20-2041-0/0/178. 0.00403503353390.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-2041-0/0/157. 0.00420702513850.00.001.33 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-2041-0/0/104. 0.00455201813100.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-2041-0/0/2. 0.004577050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-2041-0/0/5. 0.004557022870.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 2subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 290 seconds, (range: 287...293)index usage: 0%, cache usage: 0%total entries stored since starting: 143total entries replaced since starting: 0total entries expired since starting: 141total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4475 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-12-11 20:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78da1da1f4eApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 17-Nov-2023 02:34:31 +07 Restart Time: Friday, 17-Nov-2023 00:23:45 +07 Parent Server Config. Generation: 1965 Parent Server MPM Generation: 1964 Server uptime: 2 hours 10 minutes 45 seconds Server load: 0.67 0.61 0.55 Total accesses: 9816 - Total Traffic: 152.1 MB - Total Duration: 21765939 CPU Usage: u3106.27 s5824.29 cu55529800 cs13588400 - 881000% CPU load 1.25 requests/sec - 19.9 kB/second - 15.9 kB/request - 2217.39 ms/request 8 requests currently being processed, 5 idle workers CWCC_C___C_WR..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-196490941/68/861C 30.831019370871.30.589.55 104.236.193.132http/1.1localhost:443GET /about HTTP/1.1 1-196491030/62/828W 28.120019580500.00.4811.40 172.71.123.167http/1.1www.chonlateeauto.com:443GET /robots.txt HTTP/1.1 2-196491111/66/829C 32.171018384592.70.6610.94 134.122.34.144http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 3-196494041/43/822C 25.710017074731.40.7713.66 143.198.72.96http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 4-196496720/26/760_ 6.83097316874560.00.159.79 159.223.108.26http/1.1www.tspaccount.net:443GET / HTTP/1.1 5-196496791/23/765C 6.510017341751.30.138.81 104.236.193.132http/1.1localhost:443GET /v2/_catalog HTTP/1.1 6-196497610/13/836_ 1.930018674320.00.0312.22 104.236.193.132http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 7-196496800/17/702_ 7.010017167040.00.098.22 143.198.72.96http/1.1localhost:443GET /about HTTP/1.1 8-196497680/18/727_ 1.440016610050.00.058.50 134.122.34.144http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 9-196498181/4/529C 0.101011335651.30.006.62 134.122.34.144http/1.1localhost:443GET /about HTTP/1.1 10-196498280/1/458_ 0.00017550060.00.004.98 104.236.193.132http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 11-196498370/0/494W 0.000010825310.00.006.85 143.198.72.96http/1.1localhost:443GET /server-status HTTP/1.1 12-196498430/0/199R 0.00004449670.00.005.02 159.223.108.26http/1.1www.tspaccount.net:443 13-1964-0/0/235. 0.0057406857980.00.004.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1964-0/0/155. 0.005603405970.00.001.84 178.62.3.65http/1.1localhost:80GET /.vscode/sftp.json HTTP/1.0 15-1964-0/0/166. 0.0039703538420.00.002.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1964-0/0/63. 0.00145001069970.00.001.96 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1964-0/0/1. 0.001831010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1964-0/0/3. 0.0018190770.00.001.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1964-0/0/98. 0.00117618792012280.00.001.40 108.162.238.97http/1.1www.smetast.com:80GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 20-1964-0/0/89. 0.0011799421872310.00.002.90 172.68.234.187http/1.1www.chonlateefarm.com:443POST /wp-cron.php?doing_wp_cron=1700162091.11823105812072753906 21-1964-0/0/1. 0.001830010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1964-0/0/100. 0.0011868731850270.00.0017.49 172.68.234.179http/1.1www.chorsiam.com:80POST /wp-cron.php?doing_wp_cron=1700162083.61266803741455078125 23-1964-0/0/95. 0.0012127141812190.00.002.03 172.69.214.81http/1.1www.business.co.th:443POST /wp-login.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 292 seconds, (range: 288...297)index usage: 0%, cache usage: 0%total entries stored since starting: 68total entries replaced since starting: 0total entries expired since starting: 60total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 4653 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-16 19:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dd0a14f16Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 06-Nov-2023 08:16:29 +07 Restart Time: Monday, 06-Nov-2023 04:02:12 +07 Parent Server Config. Generation: 1933 Parent Server MPM Generation: 1932 Server uptime: 4 hours 14 minutes 16 seconds Server load: 0.28 0.34 0.34 Total accesses: 24924 - Total Traffic: 354.2 MB - Total Duration: 52128049 CPU Usage: u3027.65 s5766.2 cu55147000 cs13501000 - 450000% CPU load 1.63 requests/sec - 23.8 kB/second - 14.6 kB/request - 2091.48 ms/request 9 requests currently being processed, 2 idle workers R_CCCRCWC_..W..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1932197170/80/2042R 21.140143652340.00.9822.27 139.144.96.150http/1.1www.tspaccount.net:443 1-1932198070/84/1993_ 25.620142395440.00.8925.35 159.203.44.43http/1.1localhost:80GET /.env HTTP/1.0 2-1932203551/16/2067C 1.85048642913405.50.1327.92 139.144.96.150http/1.1www.tspaccount.net:443GET /about HTTP/1.1 3-1932202981/25/1999C 4.360142635191.30.1935.40 161.35.155.246http/1.1localhost:443GET /about HTTP/1.1 4-1932204181/9/2001C 1.420142632752.60.1026.19 161.35.155.246http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 5-1932201670/46/1954R 8.200139583420.00.4225.60 207.154.240.169http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.0 6-1932201201/48/1903C 12.971465409407910.40.6924.73 139.144.96.150http/1.1www.tspaccount.net:443GET /.vscode/sftp.json HTTP/1.1 7-1932199300/66/1800W 19.560037408750.00.6819.95 172.70.218.132http/1.1www.jrajar.com:80GET /wp-aa.php HTTP/1.0 8-1932204731/1/1727C 0.020237637391.40.0022.47 139.144.150.23http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 9-1932201730/47/1629_ 8.650032573490.00.5222.01 172.71.218.154http/1.1www.yuritrading.com:80POST /xmlrpc.php HTTP/1.0 10-1932-0/0/1308. 0.00285027621680.00.0016.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1932-0/0/1102. 0.0010024564550.00.0014.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1932200060/52/1037W 9.130020977020.00.6011.59 139.144.150.23http/1.1localhost:443GET /server-status HTTP/1.1 13-1932-0/0/893. 0.00474019618100.00.0043.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1932-0/0/438. 0.00166409992030.00.004.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1932-0/0/171. 0.00419502356490.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1932-0/0/199. 0.00432503019630.00.001.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1932-0/0/109. 0.0043206001343770.00.000.70 162.158.106.83http/1.1www.chonlateetravel.com:80GET /x.php HTTP/1.0 18-1932-0/0/106. 0.0042995751576250.00.000.75 162.158.163.114http/1.1www.chonlateeplus.com:443GET /wxo.php HTTP/1.1 19-1932-0/0/142. 0.00419902494810.00.002.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1932-0/0/177. 0.00400803205100.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1932-0/0/26. 0.0043240445250.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1932-0/0/99. 0.00590810801664140.00.001.31 162.158.189.46http/1.1www.dr-rpi.com:443GET /tag/%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%9B 23-1932-0/0/2. 0.006331028590.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 254 seconds, (range: 14...297)index usage: 0%, cache usage: 0%total entries stored since starting: 132total entries replaced since starting: 0total entries expired since starting: 124total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 16493 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-11-06 01:14 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dbea9184cApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 29-Oct-2023 00:32:41 +07 Restart Time: Sunday, 29-Oct-2023 00:31:46 +07 Parent Server Config. Generation: 1903 Parent Server MPM Generation: 1902 Server uptime: 54 seconds Server load: 6.23 7.00 6.74 Total accesses: 743 - Total Traffic: 21.6 MB - Total Duration: 1289691 CPU Usage: u3040.75 s5674 cu54400400 cs13297400 - 1.25e+8% CPU load 13.8 requests/sec - 409.7 kB/second - 29.8 kB/request - 1735.79 ms/request 32 requests currently being processed, 8 idle workers .RWRRR_RW_C.WCCCCWWRWWWRRC_CWC__W_W__.CWC..WW..... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1902-0/0/13. 0.0030212370.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 1-190211230/24/24R 6.290231359830.00.230.23 23.22.35.162http/1.1www.krongthongsecurity.com:443 2-190211470/17/17W 6.2120440740.00.290.29 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=used-2022-chevrolet-corvette-stingray-coupe-2lt-z51-for 3-190211560/28/28R 9.6200439400.00.150.15 38.240.225.43http/1.1 4-190211620/26/26R 8.821834412060.00.220.22 217.113.194.205http/1.1 5-190211740/21/21R 8.241461430030.00.380.38 52.70.240.171http/1.1 6-190211800/32/32_ 6.7105508361600.00.300.30 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2021-chevrolet-corvette-stingray-vs-2022-chevy-corvette 7-190214830/8/23R 3.972788333810.00.050.17 162.158.87.150http/1.1www.khlangkaew.com:443GET /category/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0% 8-190211880/21/21W 5.6300370350.00.550.55 23.22.35.162http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0045773572.html HTTP/1.1 9-190211940/23/23_ 7.4701429670.00.640.64 159.203.182.222http/1.1localhost:443GET /v2/_catalog HTTP/1.1 10-190212001/25/25C 8.1401422501.30.190.19 164.90.222.93http/1.1localhost:443GET /telescope/requests HTTP/1.1 11-1902-0/0/19. 0.0070369430.00.000.27 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-190212190/20/20W 7.5110442950.00.170.17 3.224.220.101http/1.1www.chonlateefbc.com:80GET /?m=painite-value-price-and-jewelry-information-gem-society 13-190214921/10/13C 4.1410196251.40.100.12 164.90.222.93http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 14-190212311/25/25C 6.0410369051.30.200.20 164.90.222.93http/1.1localhost:443GET /.git/config HTTP/1.1 15-190214981/8/15C 6.2103334474.90.090.17 178.128.151.41http/1.1localhost:443GET /server-status HTTP/1.1 16-190212431/19/19C 5.9801532571.42.312.31 161.35.190.56http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-190212490/25/25W 5.48100207390.00.220.22 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa-trip-bg.png HTTP/1.1 18-190212510/22/22W 9.6300476990.00.200.20 3.224.220.101http/1.1www.chonlateeboi.com:443GET /21199emxgitems/etidm20jg HTTP/1.1 19-190212670/27/27R 4.9020262430.00.300.30 205.169.39.86http/1.1localhost:80GET / HTTP/1.0 20-190212730/12/12W 3.22010460492220.02.822.82 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/tafa1-Recovered.png HTTP/1.1 21-190212790/17/17W 8.6640422220.00.320.32 3.224.220.101http/1.1www.chonlateefbc.com:443GET /?m=a-a-jewelry-supply-gemoro-sparklette-ultrasonic-mm-NQln 22-190212850/23/23W 6.5520303900.00.270.27 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-prices-reviews-and-photos-motor 23-190215310/6/8R 1.8904105101280.00.060.07 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-review-pricing-and-specs-mm-Qkp 24-190212920/21/21R 5.452697406210.00.660.66 5.255.125.196http/1.1www.chonlateevip.com:443 25-190212981/21/21C 8.1416944504714.50.490.49 85.208.96.210http/1.1www.mkandptfoods.com:443GET /m7869001564.html HTTP/1.1 26-190213040/18/18_ 5.2901432660.01.701.70 159.203.182.222http/1.1localhost:443GET /about HTTP/1.1 27-190215401/9/12C 1.960184141.30.040.05 164.90.222.93http/1.1localhost:443GET /config.json HTTP/1.1 28-190213110/25/25W 8.1800384850.00.610.61 167.172.20.95http/1.1www.tspaccount.net:443GET /.vscode/sftp.json HTTP/1.1 29-190213141/23/23C 3.0010398951.42.392.39 178.128.151.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 30-190215420/8/16_ 1.7801286060.00.020.24 164.90.222.93http/1.1localhost:443GET /.env HTTP/1.1 31-190213260/19/19_ 9.4703229431800.00.240.24 52.70.240.171http/1.1www.xn--2566-4do9ab5h1bfcjg7hg1GET /content/0047110408.html HTTP/1.1 32-190215560/5/13W 0.0800162360.00.020.15 3.224.220.101http/1.1www.chonlateeadmin.com:443GET /trust.php?ojdsvcw-170639qetidm89bw.html HTTP/1.1 33-190215580/9/11_ 2.590340144620.00.040.06 104.131.1.32http/1.1www.tspaccount.net:443GET /debug/default/view?panel=config HTTP/1.1 34-190213480/20/20W 10.0810442760.00.260.26 52.70.240.171http/1.1www.chonlateefbc.com:443GET /?m=2022-chevrolet-corvette-classic-cars-for-sale-michigan- 35-190215640/8/8_ 0.090295577600.00.030.03 40.77.167.63http/1.1www.mkandptfoods.com:443GET /wzy.php?biological-GINGER.xml HTTP/1.1 36-190215660/4/4_ 0.0400125400.01.401.40 85.208.96.211http/1.1www.seasabithailand.com:443GET /8aj1/2017-ford-focus-display-screen-not-working.html HTTP/ 37-1902-0/0/4. 0.005030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-190215911/8/8C 0.76065671886.70.340.34 104.197.69.115http/1.1www.tafa.or.th:443GET / HTTP/1.1 39-190215970/5/5W 2.540078690.00.090.09 161.35.190.56http/1.1localhost:443GET /server-status HTTP/1.1 40-190216031/1/1C 0.0108969177102263.12.212.21 205.169.39.155http/1.1www.tafa.or.th:443GET /wp-content/uploads/2023/10/bg2.png HTTP/1.1 41-1902-0/0/2. 0.006050.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1902-0/0/4. 0.004020.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-190216190/6/6W 0.020060.00.000.00 23.22.35.162http/1.1www.chonlateefbc.com:443GET /?m=used-2022-chevrolet-corvette-stingray-2lt-c8-convertibl 44-190216270/4/4W 0.854017450.00.020.02 23.22.35.162http/1.1www.chonlateefbc.com:80GET /?m=gemoro-sparkle-spa-jewelry-and-watch-ultrasonic-cleaner SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 267subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 250 seconds, (range: 244...265)index usage: 9%, cache usage: 12%total entries stored since starting: 267total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves si
Found on 2023-10-28 17:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d96460d23Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 23-Sep-2023 12:42:38 +07 Restart Time: Saturday, 23-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1763 Parent Server MPM Generation: 1762 Server uptime: 8 hours 40 minutes 27 seconds Server load: 0.72 0.95 1.09 Total accesses: 52945 - Total Traffic: 931.1 MB - Total Duration: 72799094 CPU Usage: u2836.89 s5191.04 cu51108600 cs12503600 - 204000% CPU load 1.7 requests/sec - 30.5 kB/second - 18.0 kB/request - 1374.99 ms/request 4 requests currently being processed, 7 idle workers _CC____W_C_....................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1762109340/25/4295_ 9.242055440400.00.4181.28 167.99.184.41http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-1762110351/12/4169C 6.000057756301.30.1083.54 137.184.162.65http/1.1localhost:443GET /login.action HTTP/1.1 2-1762105041/90/4291C 38.571158129161.40.9560.98 137.184.162.65http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-1762105130/84/3969_ 65.861150494650.00.6857.84 167.99.184.41http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-1762110430/13/4007_ 3.431750878200.00.1374.23 172.70.126.179http/1.1www.accsmile.com:80GET / HTTP/1.0 5-1762107460/62/3877_ 24.781158505280.00.6254.86 167.99.184.41http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 6-1762106410/77/3699_ 35.240152104690.00.8775.60 137.184.162.65http/1.1localhost:443GET /server-status HTTP/1.1 7-1762110700/8/3389W 0.790048747970.00.0550.59 167.99.184.41http/1.1localhost:443GET /server-status HTTP/1.1 8-1762107900/54/3357_ 25.641189144702750.00.5257.32 66.249.79.170http/1.1www.nptpropertythailand.com:443GET /product/the-palm-wongamat/ HTTP/1.1 9-1762110781/7/3001C 1.710043643901.40.0439.91 167.99.184.41http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-1762111070/1/2841_ 0.001138309900.00.0041.90 167.99.184.41http/1.1localhost:443GET /about HTTP/1.1 11-1762-0/0/2751. 0.00630039625250.00.0060.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1762-0/0/2106. 0.00449027406240.00.0044.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1762-0/0/1810. 0.00493026797160.00.0027.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1762-0/0/1587. 0.0029109223699180.00.0031.45 162.158.78.62http/1.1www.dr-rpi.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%AA%E0%B8%A1%E0%B8%B1 15-1762-0/0/1437. 0.00974119315250.00.0027.93 172.70.134.111http/1.1www.acumaticathailand.com:80POST /xmlrpc.php HTTP/1.0 16-1762-0/0/1022. 0.0090868113201100.00.0016.90 47.97.195.29http/1.1 17-1762-0/0/292. 0.00309203451920.00.006.57 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1762-0/0/295. 0.00352505840570.00.006.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1762-0/0/313. 0.00308704309780.00.005.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1762-0/0/127. 0.00352701405340.00.006.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1762-0/0/105. 0.00352401143890.00.005.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1762-0/0/61. 0.00323402400850.00.009.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1762-0/0/32. 0.0035230136140.00.001.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1762-0/0/21. 0.003520083010.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1762-0/0/26. 0.003510041630.00.000.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1762-0/0/2. 0.00352205290.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1762-0/0/1. 0.003537010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1762-0/0/2. 0.0035260100.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1762-0/0/43. 0.0033560333210.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1762-0/0/2. 0.003519015010.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1762-0/0/1. 0.003536000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1762-0/0/1. 0.003535000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1762-0/0/1. 0.003534010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1762-0/0/1. 0.003533000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1762-0/0/7. 0.003508058010.00.000.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1762-0/0/2. 0.00351808560.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1762-0/0/1. 0.003532010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1762-0/0/1. 0.003531000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 125subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 49 seconds, (range: 0...182)index usage: 4%, cache usage: 5%total entries stored since starting: 8428total entries replaced since starting: 0total entries expired since starting: 8303total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 364 hit, 17423 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-23 05:41 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78df9a50427Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Tuesday, 19-Sep-2023 06:52:40 +07 Restart Time: Tuesday, 19-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1744 Parent Server MPM Generation: 1743 Server uptime: 2 hours 50 minutes 28 seconds Server load: 0.36 0.43 0.59 Total accesses: 11068 - Total Traffic: 167.2 MB - Total Duration: 15426774 CPU Usage: u2741.17 s5144.46 cu50857600 cs12450600 - 619000% CPU load 1.08 requests/sec - 16.7 kB/second - 15.5 kB/request - 1393.82 ms/request 2 requests currently being processed, 8 idle workers __W_C_.___..._.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-174345100/24/982_ 7.443013388460.00.1110.72 164.92.192.25http/1.1localhost:443GET /about HTTP/1.1 1-174345190/24/1020_ 10.833114441330.00.1414.14 164.92.192.25http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 2-174342080/55/1060W 17.330014651300.00.7925.26 164.92.192.25http/1.1localhost:443GET /server-status HTTP/1.1 3-174345210/22/990_ 10.627112972190.00.1927.90 164.92.192.25http/1.1localhost:443GET / HTTP/1.1 4-174345461/21/915C 10.471012985641.40.1811.19 164.92.192.25http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-174341980/58/930_ 19.278012784290.01.1612.75 139.59.182.142http/1.1localhost:443GET /telescope/requests HTTP/1.1 6-1743-0/0/780. 0.0090010342770.00.0011.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 7-174342160/60/883_ 18.32780311940450.00.9210.09 54.69.217.246http/1.1www.shinsoko.co.th:443GET / HTTP/1.1 8-174342420/53/884_ 19.172013658080.01.1410.47 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-174347530/9/704_ 2.20419082740.00.078.13 164.92.192.25http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1743-0/0/593. 0.0062208236560.00.008.26 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-1743-0/0/372. 0.0061805925810.00.004.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1743-0/0/483. 0.002415906367000.00.005.64 138.68.133.118http/1.1 13-174342510/46/354_ 17.606345925490.00.865.59 54.69.217.246http/1.1www.shinsoko.co.th:443GET /wp-content/plugins/coming-soon-wp/assets/img/logo.png HTTP 14-1743-0/0/13. 0.0010750161960.00.000.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1743-0/0/5. 0.001082036090.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1743-0/0/100. 0.00108101367490.00.001.07 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 43subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 155 seconds, (range: 12...291)index usage: 1%, cache usage: 1%total entries stored since starting: 1605total entries replaced since starting: 0total entries expired since starting: 1562total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 74 hit, 4020 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-18 23:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d678b040cApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Saturday, 16-Sep-2023 22:52:03 +07 Restart Time: Saturday, 16-Sep-2023 04:02:13 +07 Parent Server Config. Generation: 1732 Parent Server MPM Generation: 1731 Server uptime: 18 hours 49 minutes 49 seconds Server load: 0.46 0.84 0.94 Total accesses: 124696 - Total Traffic: 1.8 GB - Total Duration: 230176394 CPU Usage: u2806.35 s5144.3 cu50706700 cs12417700 - 93100% CPU load 1.84 requests/sec - 28.5 kB/second - 15.5 kB/request - 1845.9 ms/request 8 requests currently being processed, 5 idle workers W_WWRC__C__WC..................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1731228870/41/9945W 17.4100179708670.00.34170.64 172.68.234.228http/1.1www.thaidocuments.com:80GET /tag/%E0%B9%81%E0%B8%9B%E0%B8%A5%E0%B8%97%E0%B8%B0%E0%B9%80 1-1731229270/33/10068_ 15.3400174141210.00.42162.94 68.183.64.176http/1.1localhost:443GET /about HTTP/1.1 2-1731231630/10/9356W 0.7800194608380.00.05126.35 172.68.234.160http/1.1www.thaidocuments.com:80POST /wp-cron.php?doing_wp_cron=1694879522.09665203094482421875 3-1731231820/6/9312W 2.3100168645150.00.03116.97 68.183.64.176http/1.1localhost:443GET /server-status HTTP/1.1 4-1731226840/87/8809R 38.2510189228040.00.72146.49 139.59.182.142http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1731226931/90/9248C 43.7112161727201.30.78139.01 139.59.182.142http/1.1localhost:443GET /login.action HTTP/1.1 6-1731232210/2/8866_ 0.0010148362280.00.00121.17 139.59.182.142http/1.1localhost:443GET /_all_dbs HTTP/1.1 7-1731228240/59/8653_ 23.6701149982030.00.44125.35 139.59.182.142http/1.1localhost:443GET /server-status HTTP/1.1 8-1731227311/83/8099C 45.41015121394153522.40.75139.38 192.95.30.177http/1.1www.1smestartup.com:443GET /tag/%E0%B8%AD%E0%B8%B3%E0%B9%80%E0%B8%A0%E0%B8%AD%E0%B8%9A 9-1731228310/57/7099_ 24.6410117359040.00.4298.58 68.183.64.176http/1.1localhost:443GET /v2/_catalog HTTP/1.1 10-1731228330/57/6696_ 25.1200113658550.00.58114.30 139.59.182.142http/1.1localhost:443GET /.DS_Store HTTP/1.1 11-1731232280/0/6306W 0.0010140942990.00.0098.96 172.70.250.146http/1.1www.thaidocuments.com:80GET /3index.php HTTP/1.0 12-1731232341/1/5465C 0.0001102824631.40.0067.33 68.183.64.176http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 13-1731-0/0/4023. 0.003400076643750.00.0092.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1731-0/0/3000. 0.002663060318540.00.0042.68 104.197.209.149http/1.1www.chonlateeadmin.com:443POST /xmlrpc.php HTTP/1.1 15-1731-0/0/2249. 0.003383043213970.00.0026.31 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1731-0/0/1413. 0.002668032973810.00.0018.10 104.199.1.238http/1.1www.ozonepluswater.net:443POST /xmlrpc.php HTTP/1.1 17-1731-0/0/873. 0.004618014076680.00.0011.80 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1731-0/0/906. 0.003778102414633540.00.0012.38 117.18.13.234http/1.1www.chonlateebusiness.com:443GET /?author=43 HTTP/1.1 19-1731-0/0/651. 0.00365192310930420.00.008.58 31.14.123.176http/1.1www.tkadvicesystem.com:443GET /?author=16 HTTP/1.1 20-1731-0/0/429. 0.00458605748350.00.005.47 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1731-0/0/529. 0.00375022818268060.00.006.22 81.70.157.183http/1.1www.tkadvicesystem.com:443GET /?author=16 HTTP/1.1 22-1731-0/0/205. 0.00462103994600.00.003.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1731-0/0/503. 0.00452009870970.00.005.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1731-0/0/230. 0.00461204121130.00.003.24 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1731-0/0/215. 0.00385903830620.00.002.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1731-0/0/46. 0.00460101498040.00.000.37 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1731-0/0/127. 0.00459302650280.00.001.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1731-0/0/27. 0.0046260598370.00.000.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1731-0/0/67. 0.00461701499110.00.000.48 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1731-0/0/237. 0.00379404038520.00.002.89 67.215.2.86http/1.1www.chonlateebusiness.com:80GET /?author=21 HTTP/1.0 31-1731-0/0/57. 0.00436601107810.00.000.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1731-0/0/18. 0.0046250177310.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1731-0/0/48. 0.0046030539560.00.000.49 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1731-0/0/126. 0.00461003187600.00.001.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1731-0/0/155. 0.00460902624890.00.001.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1731-0/0/33. 0.0046140666060.00.000.40 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1731-0/0/136. 0.00460403697660.00.001.58 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1731-0/0/51. 0.0045920653380.00.000.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1731-0/0/24. 0.0046240459740.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1731-0/0/120. 0.00377411051982980.00.001.48 117.18.13.234http/1.1www.chonlateebusiness.com:443GET /?author=46 HTTP/1.1 41-1731-0/0/12. 0.00531130248910.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1731-0/0/105. 0.00525743942319840.00.001.87 23.97.205.210http/1.1www.ss-cool.com:443POST /wp-login.php HTTP/1.1 43-1731-0/0/10. 0.0053141362040.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1731-0/0/15. 0.00531120357110.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1731-0/0/99. 0.005248216283147040.00.001.20 103.145.163.219http/1.1www.chonlateefbc.com:80POST /wp-login.php HTTP/1.0 46-1731-0/0/9. 0.00530930303520.00.000.15 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1731-0/0/8. 0.00531170271660.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1731-0/0/7. 0.00531140237160.00.000.06 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 49-1731-0/0/11. 0.00531057207120.00.000.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests Conn
Found on 2023-09-16 15:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d4c998278Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 14-Sep-2023 09:14:04 +07 Restart Time: Thursday, 14-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1721 Parent Server MPM Generation: 1720 Server uptime: 5 hours 11 minutes 52 seconds Server load: 0.40 0.37 0.50 Total accesses: 24553 - Total Traffic: 391.4 MB - Total Duration: 27840660 CPU Usage: u2636.9 s5083.57 cu50521400 cs12377600 - 336000% CPU load 1.31 requests/sec - 21.4 kB/second - 16.3 kB/request - 1133.9 ms/request 3 requests currently being processed, 6 idle workers _.CW.__R__._...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-17204220/43/2093_ 12.3011425461620.00.4233.71 72.14.199.2http/1.1www.nadapool.com:443GET /wp-content/uploads/siteorigin-widgets/sow-headline-default 1-1720-0/0/2100. 0.0022023680880.00.0030.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-17203841/60/1950C 6.700021112181.40.6528.21 134.122.34.144http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 3-17203900/58/1924W 6.670022205540.00.3926.41 134.122.34.144http/1.1localhost:443GET /server-status HTTP/1.1 4-1720-0/0/2112. 0.005623367080.00.0044.06 134.122.34.144http/1.1 5-17205830/20/1705_ 3.060119879230.00.1226.18 137.184.150.232http/1.1localhost:443GET / HTTP/1.1 6-17203720/63/1698_ 13.211019944600.00.5821.88 134.122.34.144http/1.1localhost:443GET /about HTTP/1.1 7-17206180/12/1686R 0.811017943680.00.0526.46 52.167.144.162http/1.1 8-17206370/9/1559_ 0.811918297090.00.0630.74 137.184.150.232http/1.1 9-17206430/7/1625_ 0.111019540480.00.0423.60 134.122.34.144http/1.1localhost:443GET /v2/_catalog HTTP/1.1 10-1720-0/0/1325. 0.0017014283370.00.0019.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 11-17206500/6/1153_ 0.84027413017160.00.0716.61 52.167.144.162http/1.1www.thaidaoherb.com:443GET /wp-content/plugins/royal-elementor-addons/assets/css/front 12-1720-0/0/844. 0.0014158713970.00.0013.76 52.167.144.192http/1.1www.thaidaoherb.com:443GET /wp-content/plugins/essential-addons-for-elementor-lite/ass 13-1720-0/0/526. 0.001606695610.00.0018.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1720-0/0/500. 0.00206506954190.00.007.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1720-0/0/274. 0.00276602949200.00.003.25 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1720-0/0/331. 0.00276904264520.00.003.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1720-0/0/269. 0.00541602175030.00.005.82 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1720-0/0/108. 0.00541501329770.00.001.65 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1720-0/0/43. 0.0054090450530.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1720-0/0/133. 0.0054190881410.00.001.43 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1720-0/0/43. 0.0054000433750.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1720-0/0/5. 0.005401031690.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1720-0/0/99. 0.0054200586780.00.001.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1720-0/0/4. 0.005410025950.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1720-0/0/86. 0.004705960937090.00.001.42 172.71.161.143http/1.1www.chorsiam.com:80GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.0 26-1720-0/0/2. 0.005414018900.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1720-0/0/2. 0.005412025180.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1720-0/0/89. 0.0047150750470.00.002.47 139.144.150.45http/1.1localhost:80GET /.DS_Store HTTP/1.0 29-1720-0/0/2. 0.005408026770.00.000.01 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1720-0/0/86. 0.00472910547560.00.000.88 223.205.223.205http/1.1www.hotlineservicethailand.com:GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1 31-1720-0/0/7. 0.005284097730.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1720-0/0/82. 0.004732347788700.00.000.52 172.173.68.5http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 33-1720-0/0/2. 0.005425030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1720-0/0/80. 0.0047302988590.00.000.68 223.205.223.205http/1.1www.hotlineservicethailand.com:GET /wp-content/uploads/siteorigin-widgets/sow-button-atom-fc29 35-1720-0/0/1. 0.005427000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1720-0/0/1. 0.005424000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1720-0/0/1. 0.005426010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1720-0/0/1. 0.005423000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1720-0/0/2. 0.005403060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 46subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 147 seconds, (range: 7...267)index usage: 1%, cache usage: 2%total entries stored since starting: 3709total entries replaced since starting: 0total entries expired since starting: 3663total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 33 hit, 8985 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-14 02:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d3b46ffe3Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 13-Sep-2023 07:33:41 +07 Restart Time: Wednesday, 13-Sep-2023 04:02:12 +07 Parent Server Config. Generation: 1717 Parent Server MPM Generation: 1716 Server uptime: 3 hours 31 minutes 29 seconds Server load: 0.96 0.60 0.55 Total accesses: 17177 - Total Traffic: 265.2 MB - Total Duration: 21081541 CPU Usage: u2704.81 s5091.74 cu50463600 cs12365300 - 495000% CPU load 1.35 requests/sec - 21.4 kB/second - 15.8 kB/request - 1227.31 ms/request 6 requests currently being processed, 6 idle workers __C_CW__WCC_...................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1716215310/82/1535_ 35.981019626630.01.2218.58 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 1-1716219590/35/1604_ 11.450018908380.01.0019.26 128.199.248.104http/1.1www.thefixup333.com:80GET /wsoyanz.php HTTP/1.0 2-1716219671/43/1573C 10.680018152671.30.4919.23 143.110.156.182http/1.1localhost:443GET /.git/config HTTP/1.1 3-1716220880/32/1490_ 11.461018857600.00.2624.80 159.223.108.26http/1.1localhost:443GET /v2/_catalog HTTP/1.1 4-1716222251/12/1437C 3.320018294011.40.5019.01 143.110.156.182http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 5-1716218950/48/1370W 16.330015719180.01.1919.50 159.223.108.26http/1.1localhost:443GET /server-status HTTP/1.1 6-1716222610/2/1267_ 0.77080615123000.00.0916.77 185.104.186.210http/1.1www.xn--12ca0fonkbd7d0a2scgl7f.GET / HTTP/1.0 7-1716219330/47/1360_ 16.83171416142130.00.4514.95 128.199.248.104http/1.1www.thefixup333.com:443GET /wp-content/repeater.php HTTP/1.1 8-1716221220/28/1165W 7.330015145250.011.9631.52 128.199.248.104http/1.1www.thefixup333.com:443GET /wsoyanz.php HTTP/1.1 9-1716219831/35/1175C 15.121014062471.30.4919.98 143.110.156.182http/1.1localhost:443GET /.env HTTP/1.1 10-1716222781/1/1074C 0.000112798411.40.0023.64 159.223.108.26http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 11-1716221280/19/741_ 7.07109623730.00.137.72 143.110.156.182http/1.1localhost:443GET /login.action HTTP/1.1 12-1716-0/0/436. 0.0013407394430.00.0018.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1716-0/0/283. 0.00310004193770.00.002.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1716-0/0/94. 0.0029250612810.00.002.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1716-0/0/10. 0.003102032890.00.000.09 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1716-0/0/198. 0.00259512462551970.00.002.37 162.158.238.61http/1.1www.siamerp.com:443GET /%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0% 17-1716-0/0/96. 0.00312601216900.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1716-0/0/2. 0.0031270110.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1716-0/0/60. 0.0028120551080.00.000.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1716-0/0/96. 0.002682424847590.00.001.07 172.71.223.193http/1.1www.yuritrading.com:80GET //wp-content/dropdown.php HTTP/1.0 21-1716-0/0/12. 0.003065067040.00.000.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1716-0/0/95. 0.0026431706852810.00.002.11 54.36.149.3http/1.1www.chonlateenextbiz.com:443GET /tag/%E0%B8%88%E0%B8%94%E0%B8%97%E0%B8%B0%E0%B9%80%E0%B8%9A 23-1716-0/0/4. 0.003116040400.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 72subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 117 seconds, (range: 5...291)index usage: 2%, cache usage: 3%total entries stored since starting: 2710total entries replaced since starting: 0total entries expired since starting: 2638total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 114 hit, 6408 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-13 00:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dd9b214b5Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Sunday, 10-Sep-2023 20:52:52 +07 Restart Time: Sunday, 10-Sep-2023 04:02:14 +07 Parent Server Config. Generation: 1703 Parent Server MPM Generation: 1702 Server uptime: 16 hours 50 minutes 38 seconds Server load: 0.45 0.89 1.18 Total accesses: 87525 - Total Traffic: 1.3 GB - Total Duration: 126649602 CPU Usage: u2744.33 s5083.1 cu50290400 cs12327100 - 103000% CPU load 1.44 requests/sec - 21.7 kB/second - 15.1 kB/request - 1447.01 ms/request 4 requests currently being processed, 6 idle workers CR__.___....W._.C................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1702320271/18/7412C 7.4710103923921.30.24105.17 164.92.192.25http/1.1localhost:443GET /about HTTP/1.1 1-1702316030/89/7396R 43.9216103705050.00.98113.54 162.158.175.87http/1.1www.chonlateeit.com:443 2-1702319940/23/7135_ 6.3000105536770.00.13107.68 164.92.192.25http/1.1localhost:443GET /v2/_catalog HTTP/1.1 3-1702317740/49/7025_ 23.5300100124310.00.3796.78 164.92.192.25http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 4-1702-0/0/6495. 0.00106095779520.00.0095.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 5-1702319120/28/6914_ 9.420195393970.00.3990.81 164.92.192.25http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 6-1702320350/20/6326_ 4.101096558790.00.2286.75 167.172.20.95http/1.1localhost:443GET /v2/_catalog HTTP/1.1 7-1702320410/15/6516_ 5.521096102500.00.1397.07 167.172.20.95http/1.1localhost:443GET /about HTTP/1.1 8-1702-0/0/5928. 0.00325144484559480.00.0078.11 162.158.175.88http/1.1www.chonlateeit.com:443GET /tag/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%94%E0%B8%B9%E0%B9%81 9-1702-0/0/5503. 0.00363079179950.00.0085.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 10-1702-0/0/4934. 0.0015570470206160.00.0079.36 27.254.96.168http/1.1www.chonlateedesign.com:443POST /wp-cron.php?doing_wp_cron=1694353815.94160199165344238281 11-1702-0/0/4282. 0.00466059052770.00.0071.32 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 12-1702316700/80/4093W 41.960061000360.01.0866.11 167.172.20.95http/1.1localhost:443GET /server-status HTTP/1.1 13-1702-0/0/2108. 0.00461032645190.00.0043.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 14-1702316820/72/1741_ 31.221107724222660.00.8425.90 172.71.178.223http/1.1www.singkansard.com:443GET / HTTP/1.1 15-1702-0/0/1167. 0.00462014904440.00.0014.44 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1702316941/74/505C 37.23009471471.40.747.83 167.172.20.95http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 17-1702-0/0/370. 0.0044904247590.00.003.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 18-1702-0/0/73. 0.0012290909090.00.000.86 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1702-0/0/111. 0.00120201786210.00.001.76 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1702-0/0/112. 0.00344101383190.00.001.36 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1702-0/0/36. 0.0033500344980.00.000.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1702-0/0/289. 0.00344804959200.00.002.53 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1702-0/0/103. 0.0034530735340.00.000.72 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1702-0/0/9. 0.003434077140.00.000.12 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1702-0/0/15. 0.0034470103070.00.000.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1702-0/0/12. 0.0034370121420.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1702-0/0/100. 0.00292342131030.00.000.84 118.27.125.16http/1.1www.12gobiz.com:80POST /xmlrpc.php HTTP/1.0 28-1702-0/0/102. 0.00343301402510.00.001.14 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1702-0/0/5. 0.003460074040.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1702-0/0/41. 0.0033160299010.00.000.61 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1702-0/0/92. 0.00335301458020.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1702-0/0/49. 0.0032970524490.00.000.42 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1702-0/0/102. 0.00345901921470.00.000.99 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1702-0/0/97. 0.00344602967600.00.000.70 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1702-0/0/98. 0.00345803934310.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 36-1702-0/0/7. 0.003445057980.00.000.04 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1702-0/0/107. 0.0029548722074610.00.001.33 67.205.164.239http/1.1www.dreamhightravel.com:443GET /wp-head.php HTTP/1.1 38-1702-0/0/110. 0.00345702571020.00.001.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1702-0/0/3. 0.003443045120.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1702-0/0/2. 0.0050641060.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 41subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 101 seconds, (range: 8...270)index usage: 1%, cache usage: 1%total entries stored since starting: 15338total entries replaced since starting: 0total entries expired since starting: 15297total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 397 hit, 34992 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-10 13:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d91800858Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Thursday, 07-Sep-2023 13:44:09 +07 Restart Time: Thursday, 07-Sep-2023 04:02:11 +07 Parent Server Config. Generation: 1686 Parent Server MPM Generation: 1685 Server uptime: 9 hours 41 minutes 57 seconds Server load: 1.01 1.26 1.51 Total accesses: 81259 - Total Traffic: 1.2 GB - Total Duration: 128632775 CPU Usage: u2807.2 s5058.35 cu50086100 cs12283400 - 179000% CPU load 2.33 requests/sec - 37.1 kB/second - 15.9 kB/request - 1583 ms/request 5 requests currently being processed, 7 idle workers W..._W_C__W_.W.__................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1685103900/63/6529W 40.6500101474080.00.6392.84 146.190.160.11http/1.1localhost:443GET /server-status HTTP/1.1 1-1685-0/0/6389. 0.006099475610.00.0094.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-1685-0/0/6193. 0.004098349070.00.0082.19 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 3-1685-0/0/5991. 0.005096806490.00.0082.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 4-1685102640/89/5877_ 38.111091896980.01.2780.01 146.190.160.11http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 5-1685102780/78/5535W 68.751085978210.01.1782.95 172.64.238.82http/1.1www.smetast.com:80GET /wp-login.php HTTP/1.0 6-1685104080/57/5551_ 56.823084615050.00.3380.56 146.190.160.11http/1.1localhost:443GET / HTTP/1.1 7-1685106441/16/5721C 6.610090509041.40.1796.31 146.190.160.11http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-1685103310/76/5445_ 52.651091790830.00.7681.71 146.190.160.11http/1.1localhost:443GET /v2/_catalog HTTP/1.1 9-1685106960/2/5427_ 1.600165482437920.00.0087.06 171.97.46.13http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST /wp-admin/admin-ajax.php HTTP/1.1 10-1685107020/2/4371W 1.890069501070.00.0078.90 172.68.234.141http/1.1www.smetast.com:80POST /wp-cron.php?doing_wp_cron=1694069048.99496293067932128906 11-1685107080/2/4030_ 2.491063806920.00.0874.50 146.190.160.11http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 12-1685-0/0/3644. 0.007056595200.00.0049.95 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 13-1685104550/59/3311W 31.420051970940.00.5092.05 209.59.168.211http/1.1www.dinocoffees.com:443POST /wp-login.php HTTP/1.1 14-1685-0/0/2304. 0.003038956290.00.0031.55 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 15-1685107280/1/2074_ 0.83183736428240.00.0131.24 209.59.168.211http/1.1www.dinocoffees.com:443GET /wp-login.php HTTP/1.1 16-1685107340/1/1049_ 0.000118361190.00.0014.50 146.190.160.11http/1.1localhost:443GET /about HTTP/1.1 17-1685-0/0/607. 0.002463908073960.00.0012.47 45.32.139.223http/1.1www.pennungmarket.com:80POST /wp-login.php HTTP/1.0 18-1685-0/0/239. 0.0072504459680.00.002.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1685-0/0/162. 0.00244801969450.00.001.81 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 20-1685-0/0/137. 0.00227501953360.00.001.63 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1685-0/0/186. 0.00244703156990.00.002.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1685-0/0/198. 0.00242703504330.00.002.38 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 23-1685-0/0/143. 0.00219601843480.00.002.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 24-1685-0/0/40. 0.0024460480120.00.003.46 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1685-0/0/6. 0.00244502870.00.000.21 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1685-0/0/93. 0.00197401895550.00.002.30 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1685-0/0/2. 0.0032420011920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1685-0/0/2. 0.0032421012830.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1685-0/0/2. 0.003241809920.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1685-0/0/1. 0.0032432010.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 94subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 82 seconds, (range: 1...239)index usage: 3%, cache usage: 4%total entries stored since starting: 11516total entries replaced since starting: 0total entries expired since starting: 11422total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 186 hit, 18767 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-09-07 06:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d6a4dd99aApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 04-Sep-2023 03:50:36 +07 Restart Time: Sunday, 03-Sep-2023 15:23:14 +07 Parent Server Config. Generation: 1675 Parent Server MPM Generation: 1674 Server uptime: 12 hours 27 minutes 22 seconds Server load: 6.24 8.02 12.45 Total accesses: 205063 - Total Traffic: 1.3 GB - Total Duration: 548219968 CPU Usage: u3193.79 s5129.43 cu49767600 cs12212100 - 138000% CPU load 4.57 requests/sec - 29.9 kB/second - 6.5 kB/request - 2673.42 ms/request 13 requests currently being processed, 15 idle workers WWWW_WW_.__W_CR__WC___W_____W..................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1674149470/83/11686W 59.0400257250520.00.2086.55 172.68.234.203http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774234.991 HTTP/1.0 1-1674162120/27/11506W 19.5300252873890.00.0789.22 172.68.234.138http/1.1www.accgoing.com:80POST /wp-cron.php?doing_wp_cron=1693774234.78754806518554687500 2-1674158100/45/11590W 31.8710252450950.00.1183.28 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774233.96147990226745605468 3-1674159060/42/11345W 28.0600245085970.00.0885.65 172.68.234.202http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774235.6212 HTTP/1.0 4-1674155010/58/11075_ 41.1201675247208490.00.1592.24 172.68.234.138http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693774233.6315 HTTP/1.0 5-1674155310/57/11002W 39.9900245775820.00.1383.24 172.68.234.178http/1.1www.accgoing.com:80POST /?wordfence_syncAttackData=1693774235.8457 HTTP/1.0 6-1674156060/54/10441W 38.6500236170200.00.1577.43 172.68.234.172http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774235.8646 HTTP/1.0 7-1674156500/50/10237_ 36.1703530230784570.00.1370.60 23.101.118.54http/1.1www.1smestartup.com:443POST //wp-login.php HTTP/1.1 8-1674-0/0/10002. 0.0000229351210.00.0069.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 9-1674150380/77/10109_ 55.2402705232272170.00.1987.98 172.71.151.9http/1.1www.time2hand.com:80GET /%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%8B%E0%B8%B7%E0%B9%89%E0% 10-1674151930/74/9556_ 52.7300220881100.00.1579.12 128.199.62.55http/1.1localhost:443GET /login.action HTTP/1.1 11-1674149860/84/8884W 59.7200213999100.00.1652.93 207.154.240.169http/1.1localhost:443GET /server-status HTTP/1.1 12-1674147310/93/8283_ 65.7100201738800.00.2553.31 128.199.62.55http/1.1localhost:443GET /.DS_Store HTTP/1.1 13-1674164791/17/7126C 10.5400188333691.40.0437.09 207.154.240.169http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 14-1674168510/2/6744R 0.0010183159220.00.0052.92 23.101.118.54http/1.1www.1smestartup.com:443 15-1674165430/14/5843_ 9.6911685169514100.00.0429.17 172.68.234.5http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774233.44042491912841796875 16-1674165880/13/4718_ 7.5411696148770580.00.0420.38 172.68.234.5http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774233.2781 HTTP/1.0 17-1674148870/84/4197W 57.7900135107560.00.2217.30 172.68.234.173http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774235.0102 HTTP/1.0 18-1674166211/13/4246C 8.3800138307140.20.0216.29 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1674148510/88/3529_ 64.1001723119958860.00.2312.30 172.68.234.173http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774233.5938 HTTP/1.0 20-1674168640/1/3210_ 0.7911793113924800.00.009.96 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774232.97610807418823242187 21-1674149060/88/2846_ 63.3901667103032110.00.2113.44 172.68.234.203http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774233.5776 HTTP/1.0 22-1674162540/26/2948W 19.4900102209320.00.0612.16 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774235.15401196479797363281 23-1674152150/69/2478_ 49.370191819280.00.168.17 128.199.62.55http/1.1localhost:443GET /_all_dbs HTTP/1.1 24-1674168700/1/2048_ 0.000380453170.00.006.16 128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1 25-1674168870/1/2052_ 0.780178378244350.00.007.25 172.68.234.203http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693774233.9726 HTTP/1.0 26-1674168930/1/1833_ 0.760177170861410.00.005.08 172.68.234.203http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774234.23483896255493164062 27-1674168990/1/1716_ 0.61163268290440.00.006.02 172.68.234.213http/1.1www.time2hand.com:80POST /wp-cron.php?doing_wp_cron=1693774234.08232498168945312500 28-1674169050/0/1447W 0.001060492100.00.004.92 172.68.234.4http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693774234.33005309104919433593 29-1674-0/0/1265. 0.00514052832140.00.003.54 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 30-1674-0/0/1208. 0.00489053014350.00.003.88 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1674-0/0/1117. 0.00465048114840.00.004.10 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 32-1674-0/0/1094. 0.00519047651570.00.002.84 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1674-0/0/941. 0.00503040901710.00.003.08 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 34-1674-0/0/886. 0.00511038831900.00.004.05 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 35-1674-0/0/780. 0.00237189735353430.00.002.48 172.68.234.140http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693773995.51320695877075195312 36-1674-0/0/649. 0.00512029487650.00.002.91 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 37-1674-0/0/843. 0.00239177535779050.00.002.65 172.68.234.140http/1.1www.solucare.co.th:80POST /?wordfence_syncAttackData=1693773994.2935 HTTP/1.0 38-1674-0/0/596. 0.00506029120010.00.002.22 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1674-0/0/492. 0.00887193424783380.00.001.17 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693773346.26406002044677734375 40-1674-0/0/460. 0.001085022928210.00.001.83 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1674-0/0/414. 0.001078020566640.00.001.89 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1674-0/0/393. 0.001125019698960.00.001.18 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1674-0/0/298. 0.001414014051340.00.000.79 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 44-1674-0/0/337. 0.001211016692070.00.000.73 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 45-1674-0/0/84. 0.00133105130180.00.001.39 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 46-1674-0/0/75. 0.00140204158940.00.000.16 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 47-1674-0/0/153. 0.00128209047310.00.000.62 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 48-1674-0/0/207. 0.001345321911969840.00.000.52 172.68.234.172http/1.1www.solucare.co.th:80POST /wp-cron.php?doing_wp_cron=1693772887.34567189216613769531 49-1674
Found on 2023-09-03 20:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78dcdd997a2Apache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Friday, 01-Sep-2023 00:43:01 +07 Restart Time: Friday, 01-Sep-2023 00:22:12 +07 Parent Server Config. Generation: 1655 Parent Server MPM Generation: 1654 Server uptime: 20 minutes 49 seconds Server load: 2.33 2.24 3.07 Total accesses: 4524 - Total Traffic: 33.3 MB - Total Duration: 5143437 CPU Usage: u2727.47 s4937.07 cu48744200 cs11950400 - 4860000% CPU load 3.62 requests/sec - 27.3 kB/second - 7.5 kB/request - 1136.92 ms/request 9 requests currently being processed, 5 idle workers W_CWW__C_CCC_R.................................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-165479210/41/337W 21.08003664050.00.272.40 162.158.174.180http/1.1www.xn--42cl6b3aa6azd4ce4q.com:POST //xmlrpc.php HTTP/1.1 1-165480010/4/335_ 1.75103848750.00.022.37 164.90.222.93http/1.1localhost:443GET /.env HTTP/1.1 2-165479671/20/330C 10.67103695171.30.122.48 164.90.222.93http/1.1localhost:443GET /config.json HTTP/1.1 3-165480230/1/330W 0.49003699430.00.012.56 161.35.155.246http/1.1localhost:443GET /server-status HTTP/1.1 4-165480290/0/321W 0.00003464760.00.002.49 162.158.174.248http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 5-165479000/56/361_ 33.0107484008260.00.342.47 162.158.174.248http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 6-165479920/10/364_ 5.4908164189650.00.062.50 52.167.144.223http/1.1www.krongthongsecurity.com:443GET /sitemap.xml.gz HTTP/1.1 7-165477631/97/255C 56.96043829114813.20.692.22 172.173.110.210http/1.1www.leadingservice.co.th:443POST //wp-login.php HTTP/1.1 8-165478060/77/316_ 47.8806373646600.00.632.36 23.101.127.100http/1.1www.thaiquickservice.net:443POST //wp-login.php HTTP/1.1 9-165479091/48/313C 28.33003638431.30.342.32 164.90.222.93http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-165478291/77/272C 42.45103119401.40.501.84 164.90.222.93http/1.1localhost:443GET /s/836313e26393e2435323e27323/_/;/META-INF/maven/com.atlass 11-165479271/42/284C 23.89103238271.40.352.07 161.35.155.246http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 12-165480070/4/197_ 1.44002328310.00.031.45 164.90.222.93http/1.1localhost:443GET /.git/config HTTP/1.1 13-165480130/5/184R 2.4318862588090.00.031.40 23.101.127.100http/1.1 14-1654-0/0/100. 0.002914331147170.00.000.74 172.173.110.210http/1.1www.leadingservice.co.th:443POST //wp-login.php HTTP/1.1 15-1654-0/0/25. 0.0011580323420.00.000.20 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 16-1654-0/0/1. 0.001242000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1654-0/0/99. 0.009262924910.00.000.81 172.173.100.79http/1.1www.dtacbusiness.com:80GET /wp-admin/css/ HTTP/1.0 18-1654-0/0/1. 0.001241000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 19-1654-0/0/99. 0.00929595998110.00.000.68 162.158.174.249http/1.1www.siamautomation.com:443POST //xmlrpc.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 86subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 122 seconds, (range: 3...278)index usage: 3%, cache usage: 3%total entries stored since starting: 402total entries replaced since starting: 0total entries expired since starting: 316total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 1530 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-31 17:41 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78ddceb5d9aApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 09:13:25 +07 Restart Time: Wednesday, 30-Aug-2023 04:02:17 +07 Parent Server Config. Generation: 1646 Parent Server MPM Generation: 1645 Server uptime: 5 hours 11 minutes 7 seconds Server load: 5.23 6.25 5.89 Total accesses: 164471 - Total Traffic: 965.9 MB - Total Duration: 213530055 CPU Usage: u2847.02 s4909.99 cu47922800 cs11730400 - 320000% CPU load 8.81 requests/sec - 53.0 kB/second - 6.0 kB/request - 1298.28 ms/request 9 requests currently being processed, 5 idle workers CW___W.WW_W._WWW.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-164537791/65/9975C 35.5110129818791.40.6460.07 178.62.73.12http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-164536140/99/9807W 63.4300125360890.00.8055.80 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 2-164536060/97/9550_ 58.000726124562500.01.2952.07 172.71.166.61http/1.1www.chonlateeauto.com:443POST //xmlrpc.php HTTP/1.1 3-164538400/29/9545_ 15.130281124090330.00.1051.14 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 4-164538190/39/9464_ 20.710303121818040.00.2950.33 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 5-164537860/69/9244W 34.2600121917890.00.3749.20 172.71.167.106http/1.1www.dr-rpi.com:443POST //xmlrpc.php HTTP/1.1 6-1645-0/0/9160. 0.0050120474840.00.0054.32 167.71.185.75http/1.1localhost:80GET /config.json HTTP/1.0 7-164537110/87/9293W 48.7400120442990.00.5466.86 172.69.67.119http/1.1www.chonlateefarm.com:443POST //xmlrpc.php HTTP/1.1 8-164538480/26/8883W 13.4900114782280.00.1259.41 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 9-164538570/18/8645_ 7.560577113058500.00.0747.79 172.69.65.47http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 10-164537970/59/8584W 29.2100108389950.00.3043.03 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 11-1645-0/0/8640. 0.0012624113862830.00.0046.65 178.62.73.12http/1.1 12-164536530/94/8268_ 54.890612107809760.00.5644.47 172.69.65.202http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 13-164536660/92/7583W 52.890099852960.00.4743.58 178.62.73.12http/1.1localhost:443GET /server-status HTTP/1.1 14-164538650/20/7359W 10.060095729200.00.0853.66 104.43.197.88http/1.1www.wealneosupply.com:443POST //xmlrpc.php HTTP/1.1 15-164538790/9/6765W 4.170086483820.00.0438.28 40.122.174.22http/1.1www.ss-cool.com:443POST //xmlrpc.php HTTP/1.1 16-1645-0/0/6398. 0.00114084112680.00.0038.11 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 17-1645-0/0/5165. 0.0021558367047860.00.0030.20 162.158.30.103http/1.1www.jbbgarment.com:80POST //wp-login.php HTTP/1.0 18-1645-0/0/3758. 0.007329449356390.00.0034.75 23.101.119.191http/1.1www.thaicarsale.com:80POST //wp-login.php HTTP/1.0 19-1645-0/0/2551. 0.007264532033900.00.0014.10 172.69.65.201http/1.1www.farmoflove.com:80POST //xmlrpc.php HTTP/1.0 20-1645-0/0/2054. 0.00222027586180.00.0011.87 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 21-1645-0/0/1097. 0.00128013227930.00.005.75 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 22-1645-0/0/455. 0.001899916243560.00.002.62 172.68.234.226http/1.1www.smebkk.com:80GET /category/type-b/ HTTP/1.0 23-1645-0/0/385. 0.001639144735560.00.002.34 172.69.65.48http/1.1www.xn--12coh1b1a7cd2fe6ap1dyotPOST //wp-login.php HTTP/1.0 24-1645-0/0/256. 0.0034103451990.00.002.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 25-1645-0/0/248. 0.0033903167430.00.001.45 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 26-1645-0/0/128. 0.00198001633230.00.000.52 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 27-1645-0/0/23. 0.0020160296470.00.000.13 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 28-1645-0/0/110. 0.00202001155680.00.000.34 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 29-1645-0/0/179. 0.0019005411920370.00.000.92 168.61.158.165http/1.1www.pokaorganize.com:443POST //wp-login.php HTTP/1.1 30-1645-0/0/174. 0.00188802410190.00.000.98 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 31-1645-0/0/102. 0.00185721789620.00.001.05 124.120.29.216http/1.1www.chonlateemeet.com:80GET /wp-content/plugins/header-footer-elementor/admin/assets/js 32-1645-0/0/1. 0.0016191000.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 33-1645-0/0/98. 0.00160324221100430.00.000.35 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 34-1645-0/0/98. 0.00160344021083710.00.000.30 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 35-1645-0/0/98. 0.00160393661020930.00.000.32 168.61.158.147http/1.1www.ss-cool.com:443POST //wp-login.php HTTP/1.1 36-1645-0/0/98. 0.00160333821163690.00.000.36 168.61.158.147http/1.1www.focusfilmthailand.com:80POST /xmlrpc.php HTTP/1.0 37-1645-0/0/3. 0.0016185011840.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 38-1645-0/0/4. 0.0016181018890.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 39-1645-0/0/2. 0.0016189030.00.000.00 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 40-1645-0/0/9. 0.00161670118170.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 41-1645-0/0/7. 0.0016172054510.00.000.03 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 42-1645-0/0/9. 0.0016169072460.00.000.02 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 43-1645-0/0/98. 0.00160383841004080.00.000.35 162.158.174.185http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 44-1645-0/0/98. 0.00160374171026970.00.000.32 172.71.166.29http/1.1www.smebkk.com:80POST //xmlrpc.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 89subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 64 seconds, (range: 1...281)index usage: 3%, cache usage: 4%total entries stored since starting: 6325total entries replaced since starting: 0total entries expired since starting: 6236total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 80 hit, 28627 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-30 02:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78df7bae12bApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Wednesday, 30-Aug-2023 00:25:56 +07 Restart Time: Wednesday, 30-Aug-2023 00:25:28 +07 Parent Server Config. Generation: 1645 Parent Server MPM Generation: 1644 Server uptime: 27 seconds Server load: 6.63 6.13 6.48 Total accesses: 407 - Total Traffic: 2.6 MB - Total Duration: 321877 CPU Usage: u2598.88 s4835.18 cu47808400 cs11700400 - 2.2e+8% CPU load 15.1 requests/sec - 99.5 kB/second - 6.6 kB/request - 790.853 ms/request 20 requests currently being processed, 3 idle workers WC_W_RCCWCWWWRCC_CRCWCC........................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-1644209850/26/26W 9.1200208310.00.160.16 168.61.149.69http/1.1www.uniqueworkthailand.com:443POST //wp-login.php HTTP/1.1 1-1644209861/22/22C 8.990337180241.20.100.10 64.227.126.135http/1.1www.tspaccount.net:443GET /debug/default/view?panel=config HTTP/1.1 2-1644209890/24/24_ 7.420374163210.00.150.15 178.249.214.10http/1.1 3-1644210010/25/25W 9.2200185170.00.100.10 172.173.110.177http/1.1www.dinocoffees.com:443POST //wp-login.php HTTP/1.1 4-1644210080/23/23_ 5.700641224430.00.070.07 167.99.182.39http/1.1www.tafa.or.th:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 5-1644210310/19/19R 9.2200202720.00.180.18 167.99.182.39http/1.1www.tafa.or.th:443 6-1644210371/19/19C 7.6500154991.40.150.15 144.126.202.105http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 7-1644210391/23/23C 8.2707161653215.30.110.11 23.99.197.177http/1.1www.nptpropertythailand.com:443POST //wp-login.php HTTP/1.1 8-1644211390/9/21W 2.9400137600.00.020.09 128.199.62.55http/1.1localhost:443GET /server-status HTTP/1.1 9-1644210551/18/18C 4.9700118682.60.060.06 159.223.108.26http/1.1localhost:443GET /.vscode/sftp.json HTTP/1.1 10-1644210570/12/12W 5.2600125030.00.070.07 74.249.252.222http/1.1www.chonlateevip.com:443POST //wp-login.php HTTP/1.1 11-1644210630/18/18W 7.0700170370.00.120.12 168.61.158.165http/1.1www.pndintertrade.com:80POST /xmlrpc.php HTTP/1.0 12-1644210730/28/28W 6.4210146280.00.080.08 35.188.86.252http/1.1www.xn--12cn0bmbkgc3ent5c1ewa4bPOST //xmlrpc.php HTTP/1.1 13-1644210750/18/18R 8.010802163160.00.180.18 162.158.110.218http/1.1www.ptatun.or.th:80GET /LetsEncrypt/Index?fileName=/etc/passwd HTTP/1.0 14-1644211461/5/6C 2.30032645785.50.040.04 164.90.222.93http/1.1www.tspaccount.net:443GET /about HTTP/1.1 15-1644210871/18/18C 8.020583163087.10.110.11 167.99.182.39http/1.1www.tafa.or.th:443GET /server-status HTTP/1.1 16-1644210930/19/19_ 7.320734147610.00.120.12 172.70.242.76http/1.1www.ptatun.or.th:80GET /wp-login.php?login-error=<script>alert(document.domain)</s 17-1644210991/12/12C 4.4311115331.40.330.33 165.232.76.155http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 18-1644211810/0/17R 0.0000105990.00.000.11 178.249.214.10http/1.1 19-1644211111/20/20C 6.8713511433010.40.160.16 164.90.222.93http/1.1www.tspaccount.net:443GET /.vscode/sftp.json HTTP/1.1 20-1644211220/13/13W 5.6600111400.00.090.09 172.173.110.230http/1.1www.xn--12cx2bef7bl0boq4ch6gugwPOST //wp-login.php HTTP/1.1 21-1644211481/4/4C 2.050140641.30.030.03 159.223.108.26http/1.1localhost:443GET /about HTTP/1.1 22-1644211691/2/2C 0.010031.40.000.00 128.199.62.55http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 36subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 284 seconds, (range: 277...295)index usage: 1%, cache usage: 1%total entries stored since starting: 36total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 150 misstotal removes since starting: 0 hit, 0 miss
Found on 2023-08-29 17:24 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314346d78d4346d78d632db1deApache Status Apache Server Status for smtp.tspaccount.net (via 27.254.96.168) Server Version: Apache/2.4.46 (Unix) OpenSSL/1.0.2u PHP/7.2.33 Server MPM: prefork Server Built: May 6 2022 15:05:21 Current Time: Monday, 24-Oct-2022 16:46:41 +07 Restart Time: Monday, 24-Oct-2022 16:46:02 +07 Parent Server Config. Generation: 455 Parent Server MPM Generation: 454 Server uptime: 38 seconds Server load: 0.72 0.86 1.23 Total accesses: 312 - Total Traffic: 4.3 MB - Total Duration: 90634 CPU Usage: u660.73 s1262.12 cu12804600 cs3078510 - 4.18e+7% CPU load 8.21 requests/sec - 114.8 kB/second - 14.0 kB/request - 290.494 ms/request 15 requests currently being processed, 0 idle workers C.RRCWWCCCRRRRLR.................................. Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-45439061/26/26C 4.3301109822.70.590.59 172.105.91.149http/1.1localhost:443GET /debug/default/view?panel=config HTTP/1.1 1-454-0/0/40. 0.001096720.00.000.69 127.0.0.1http/1.1server1.chonlatee.com:80OPTIONS * HTTP/1.0 2-45439120/25/25R 3.2901684102520.00.630.63 172.105.91.149http/1.1 3-45439220/33/33R 3.56080091990.00.490.49 162.158.238.229http/1.1www.xn--12c4bk6bg0a4d2f.com:443GET /wp-login.php?wp_lang=en_US HTTP/1.1 4-45439321/30/30C 3.150071512.70.390.39 172.105.91.149http/1.1localhost:443PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 5-45439550/57/57W 3.4100101370.00.570.57 172.105.91.149http/1.1localhost:443GET /server-status HTTP/1.1 6-45439900/28/28W 2.640093910.00.470.47 93.188.2.5http/1.1www.kncintergroup.com:443GET /wp-content/themes/seotheme/mar.php HTTP/1.1 7-45440091/25/25C 1.520149152.70.200.20 172.105.91.149http/1.1localhost:443GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 8-45440191/6/6C 1.520175232.60.030.03 172.105.91.149http/1.1localhost:443GET /info.php HTTP/1.1 9-45440431/6/6C 1.560032422.60.030.03 172.105.91.149http/1.1localhost:443GET /telescope/requests HTTP/1.1 10-45440540/7/7R 0.8401115280.00.010.01 157.230.99.82http/1.1 11-45440560/6/6W 0.950023740.00.070.07 172.105.91.149http/1.1localhost:443GET /.DS_Store HTTP/1.1 12-45440660/16/16R 0.40057880.00.030.03 178.128.227.119http/1.1 13-45440680/1/1R 0.4604699370.00.010.01 144.126.213.222http/1.1 14-45440761/3/3C 0.880116422.60.010.01 172.105.91.149http/1.1localhost:443GET /.env HTTP/1.1 15-45440840/3/3R 0.4504318940.00.040.04 172.105.91.149http/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 11subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 294 seconds, (range: 284...298)index usage: 0%, cache usage: 0%total entries stored since starting: 11total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 93 misstotal removes since starting: 0 hit, 0 miss
Found on 2022-10-24 09:45
-
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-28 04:30
HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 04:30:59 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 16 minutes ago by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-09-26 20:15
HTTP/1.1 301 Moved Permanently Date: Thu, 26 Sep 2024 20:15:33 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found one day ago by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-26 07:40
HTTP/1.1 200 OK Date: Thu, 26 Sep 2024 07:40:46 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2 days ago by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-25 04:55
HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 04:55:12 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 3 days ago by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-09-25 02:53
HTTP/1.1 301 Moved Permanently Date: Wed, 25 Sep 2024 02:54:00 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-25 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-14 21:30
HTTP/1.1 200 OK Date: Sat, 14 Sep 2024 21:30:21 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-14 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-09-14 11:20
HTTP/1.1 301 Moved Permanently Date: Sat, 14 Sep 2024 11:20:55 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-14 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-13 00:08
HTTP/1.1 200 OK Date: Fri, 13 Sep 2024 00:08:37 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-13 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-09-12 15:30
HTTP/1.1 301 Moved Permanently Date: Thu, 12 Sep 2024 15:30:11 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-12 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-11 03:00
HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 03:00:28 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-11 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-09-10 17:41
HTTP/1.1 301 Moved Permanently Date: Tue, 10 Sep 2024 17:41:17 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-10 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-08 23:18
HTTP/1.1 200 OK Date: Sun, 08 Sep 2024 23:18:22 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-08 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-09-08 20:39
HTTP/1.1 301 Moved Permanently Date: Sun, 08 Sep 2024 20:39:59 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-08 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-09-06 21:48
HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 21:48:35 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-09-06 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-09-06 11:23
HTTP/1.1 301 Moved Permanently Date: Fri, 06 Sep 2024 11:23:58 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-09-06 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · tspaccount.net
2024-08-18 06:25
HTTP/1.1 301 Moved Permanently Date: Sun, 18 Aug 2024 06:25:58 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php X-Redirect-By: WordPress Location: https://www.tspaccount.net/ Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Found 2024-08-18 by HttpPluginCreate report
-
Open service 27.254.96.168:443 · www.tspaccount.net
2024-08-16 21:14
HTTP/1.1 200 OK Date: Fri, 16 Aug 2024 21:14:55 GMT Server: Apache/2 X-Powered-By: PHP/7.2.33 X-Pingback: https://www.tspaccount.net/xmlrpc.php Link: <https://www.tspaccount.net/wp-json/>; rel="https://api.w.org/" Link: <https://www.tspaccount.net/>; rel=shortlink Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2024-08-16 by HttpPluginCreate report
ftp.tspaccount.netmail.tspaccount.netpop.tspaccount.netsmtp.tspaccount.nettspaccount.netwww.tspaccount.net
CN:
tspaccount.net
Not before:
2023-10-28 16:29
Not after:
2024-01-26 16:29