LeakIX - Host 104.21.76.62

Host 104.21.76.62

United States

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: fuso3d.org
Port: 443
URL: https://fuso3d.org

First seen 2024-04-24 23:13
Last seen 2024-12-22 07:24
Open for 241 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b70033d2390bfcb64fa83bd52b177c53d3

Found 128 files trough .DS_Store spidering:

/assets
/assets/css
/assets/font
/assets/font-awesome-4.6.3
/assets/fonts
/assets/img
/assets/img/24d-dragontiger.jpg
/assets/img/aa
/assets/img/aaa
/assets/img/aab
/assets/img/aac
/assets/img/aad
/assets/img/aae
/assets/img/aaf
/assets/img/aag
/assets/img/aah
/assets/img/aai
/assets/img/aaj
/assets/img/aak
/assets/img/aal
/assets/img/aam
/assets/img/aan
/assets/img/aao
/assets/img/aap
/assets/img/aaq
/assets/img/aar
/assets/img/aas
/assets/img/aat
/assets/img/aau
/assets/img/aav
/assets/img/aaw
/assets/img/aax
/assets/img/aay
/assets/img/aaz
/assets/img/ab
/assets/img/aba
/assets/img/abb
/assets/img/abc
/assets/img/abd
/assets/img/abe
/assets/img/abf
/assets/img/abg
/assets/img/abh
/assets/img/abi
/assets/img/abj
/assets/img/abk
/assets/img/abl
/assets/img/abm
/assets/img/abn
/assets/img/abo
/assets/img/abp
/assets/img/abq
/assets/img/abr
/assets/img/abs
/assets/img/abt
/assets/img/abu
/assets/img/abv
/assets/img/abw
/assets/img/abx
/assets/img/aby
/assets/img/abz
/assets/img/ac
/assets/img/aca
/assets/img/acb
/assets/img/acc
/assets/img/accept-a.png
/assets/img/accept-b.png
/assets/img/accept-c.png
/assets/img/acd
/assets/img/ace
/assets/img/acf
/assets/img/acg
/assets/img/ach
/assets/img/aci
/assets/img/acj
/assets/img/ack
/assets/img/acl
/assets/img/acm
/assets/img/acn
/assets/img/aco
/assets/img/acp
/assets/img/acq
/assets/img/acr
/assets/img/acs
/assets/img/act
/assets/img/acu
/assets/img/acv
/assets/img/acw
/assets/img/acx
/assets/img/acy
/assets/img/acz
/assets/img/ad
/assets/img/ad.png
/assets/img/ada
/assets/img/adb
/assets/img/adc
/assets/img/add
/assets/img/ade
/assets/img/adf
/assets/img/adg
/assets/img/adi
/assets/img/adj
/assets/img/adk
/assets/img/adl
/assets/img/adm
/assets/img/adn
/assets/img/ado
/assets/img/adq
/assets/img/adr
/assets/img/ads
/assets/img/adt
/assets/img/adu
/assets/img/adv
/assets/img/adw
/assets/img/adx
/assets/img/ady
/assets/img/adz
/assets/img/ae
/assets/img/aea
/assets/img/aeb
/assets/img/aec
/assets/img/aed
/assets/img/aee
/assets/img/aef
/assets/img/aeg
/assets/img/aeh
/assets/img/aei
/assets/img/aej

Found on 2024-12-22 07:24

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dcca2f42b6c43b445bf714ef19c55c3c3

Found 27 files trough .DS_Store spidering:

/assets
/assets/css
/assets/font
/assets/font-awesome-4.6.3
/assets/fonts
/assets/img
/assets/jquery.js
/assets/js
/assets/lang
/assets/re-template
/assets/sample.png
/assets/shio.swf
/assets/suwit.jpg
/assets/totobaru
/css
/favicon.ico
/images
/img
/index.php
/js
/mix-manifest.json
/mobile
/robots.txt
/svg
/sw.js
/web.config
/web.config-

Found on 2024-04-29 01:22

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: spectronicsin.com
Port: 80
URL: http://spectronicsin.com

First seen 2023-07-09 05:57
Last seen 2024-12-21 17:47
Open for 531 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2024-12-21 17:47
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: spectronicsin.com
Port: 443
URL: https://spectronicsin.com

First seen 2023-07-09 05:57
Last seen 2024-12-21 17:47
Open for 531 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2024-12-21 17:47
Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 172.67.190.86
Domain: cf.kkdukkduha.workers.dev
Port: 80
URL: http://cf.kkdukkduha.workers.dev

First seen 2024-10-06 08:26
Last seen 2024-12-21 00:39
Open for 75 days

Fingerprint: b18befd9dd6536aa30550de50313a6d8b3a6b275d49ca986ca3159067f471558

{
    "clientTcpRtt": 1,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-12-21 00:39

Fingerprint: b18befd9dd6536aa30550de59eef8b69428d89cb1f801878e70c84e01603f70f

{
    "clientTcpRtt": 13,
    "longitude": "77.58550",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "IN",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Bengaluru",
    "timezone": "Asia/Kolkata",
    "colo": "BOM",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "560100",
    "region": "Karnataka",
    "latitude": "12.96340",
    "requestPriority": "",
    "regionCode": "KA",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-12-19 00:57

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e34454804b0c8c7660

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-12-16 07:43

Fingerprint: b18befd9dd6536aa30550de50613ab81b2cdc4b803e9aae55617a7054cade470

{
    "clientTcpRtt": 2,
    "longitude": "-0.11960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 63949,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "London",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "EC1N",
    "region": "England",
    "latitude": "51.50740",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Akamai Connected Cloud",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-12-14 09:21

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263ac84124fada8fce40

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-12 14:08

Fingerprint: b18befd9dd6536aa30550de50313a6d8d2d8cb37ba3c333c2b9d33e473119ba2

{
    "clientTcpRtt": 1,
    "longitude": "-121.96200",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Santa Clara",
    "timezone": "America/Los_Angeles",
    "colo": "SJC",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "95054",
    "region": "California",
    "latitude": "37.39310",
    "requestPriority": "",
    "regionCode": "CA",
    "asOrganization": "Digital Ocean",
    "metroCode": "807",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-12-06 13:07

Fingerprint: b18befd9dd6536aa30550de50313a6d83eeff30667f41b8fbd7f0b77a5ab26ee

{
    "clientTcpRtt": 1,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-12-04 14:15

Fingerprint: b18befd9dd6536aa30550de50113a3e2377b3193924a37b0cfa69e2810c79883

{
    "clientTcpRtt": 7,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "ZRH",
    "country": "DE"
}

Found on 2024-12-04 08:44

Fingerprint: b18befd9dd6536aa30550de50313a6d87e0482157636cae60ed80f2662f78fab

{
    "clientTcpRtt": 1,
    "longitude": "-0.11960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 63949,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "London",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "EC1N",
    "region": "England",
    "latitude": "51.50740",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Akamai Connected Cloud",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-12-02 14:28

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8fd563a508bcc978d

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-30 06:07

Fingerprint: b18befd9dd6536aa30550de50513aa3676a95b785c092b25cdcd16c55dbe82bc

{
    "clientTcpRtt": 3,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-22 22:04

Fingerprint: b18befd9dd6536aa30550de5fb139a70ac8260d93827626276a46ed2144cdf05

{
    "clientTcpRtt": 9,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-18 17:32

Fingerprint: b18befd9dd6536aa30550de50613ab81244e800a45dee4ab91dfa163ef4d7df1

{
    "clientTcpRtt": 2,
    "longitude": "-121.96200",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Santa Clara",
    "timezone": "America/Los_Angeles",
    "colo": "SJC",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "95054",
    "region": "California",
    "latitude": "37.39310",
    "requestPriority": "",
    "regionCode": "CA",
    "asOrganization": "Digital Ocean",
    "metroCode": "807",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-16 18:45

Fingerprint: b18befd9dd6536aa30550de5a4ef949bfb33d674e4184fd98f1b711967469bc0

{
    "clientTcpRtt": 19,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-14 22:06

Fingerprint: b18befd9dd6536aa30550de50613ab81aa8fde659788b6963598523695c1063b

{
    "clientTcpRtt": 2,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-10 18:41

Fingerprint: b18befd9dd6536aa30550de5a3ef9308723f645037fd412da9e3873d9e587d3c

{
    "clientTcpRtt": 18,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-06 23:15

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8ddd5e4311cdfc2e01ed

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-02 21:19

Fingerprint: b18befd9dd6536aa30550de59def899ef6e68f2a5af3c88b337cb6032c3fea37

{
    "clientTcpRtt": 12,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "MUC",
    "country": "DE"
}

Found on 2024-11-01 19:16

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e855124340c3b8ebd4e38c7b

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-10-31 01:05

Fingerprint: b18befd9dd6536aa30550de5aa0bc04eec2d011a5c8a62dbe771fbb3e649c917

{
    "clientTcpRtt": 160,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "SEA",
    "country": "DE"
}

Found on 2024-10-26 18:55

Fingerprint: b18befd9dd6536aa30550de50613ab8177f5704d9c7dd26e08110c3eaecba6db

{
    "clientTcpRtt": 2,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-10-18 19:37

Fingerprint: b18befd9dd6536aa30550de50613ab81415ef672dfa72fa37658cd8bfb392393

{
    "clientTcpRtt": 2,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-10-12 15:04

Fingerprint: b18befd9dd6536aa30550de599ef834a7f944d1c4d0fcc5129fdc5e1db1e1eca

{
    "clientTcpRtt": 16,
    "longitude": "77.58550",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "IN",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Bengaluru",
    "timezone": "Asia/Kolkata",
    "colo": "BOM",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "560100",
    "region": "Karnataka",
    "latitude": "12.96340",
    "requestPriority": "",
    "regionCode": "KA",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-10-10 13:38

Fingerprint: b18befd9dd6536aa30550de52df7280bad1789d907c0b562efa6b1d245557181

{
    "clientTcpRtt": 20,
    "longitude": "77.58550",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "IN",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Bengaluru",
    "timezone": "Asia/Kolkata",
    "colo": "BOM",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "560100",
    "region": "Karnataka",
    "latitude": "12.96340",
    "requestPriority": "",
    "regionCode": "KA",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-10-06 08:26

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: cf.kkdukkduha.workers.dev
Port: 8443
URL: https://cf.kkdukkduha.workers.dev:8443

First seen 2024-10-06 08:26
Last seen 2024-12-20 20:30
Open for 75 days

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30ac59446e

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "75c982223bacd90de4425545728f70ed025b2e4075afa52369a02d866cc8fd32",
        "clientHandshake": "65a9ae17ec506c806d62d4481a2f838d3e8224e79865720df857dc12805dd498",
        "serverHandshake": "5e95523b3f8ba8f91125cc18af5500f776e0d6ba1c624edd95e2f7a7db61a878",
        "serverFinished": "d1ae0cd325ae6fe73b46edaa03e509a7c102420a7c4e3e3801f9321ee516d7df"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "tv5gLQcvCRnjXNBIpAMV0RBO/Hlbu4hsHhtkU6Ob0x0=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-20 20:30

Fingerprint: b18befd9dd6536aa30550de50513aa3676a95b785c092b25b4696057c5010ffa

{
    "clientTcpRtt": 3,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "9b8db26c7a509a1d45fb995c5d481166b15837b78baf23e53c4141623a47e38d",
        "clientHandshake": "fbb21168252d87591e5dff0e5170234697ac1ef16957e0aaf4304b170a68502e",
        "serverHandshake": "fd1ebcb5c73e3d4ef11a1416d95106284d0b2486b22074540adbac302a29346d",
        "serverFinished": "1999a62d09840b554a5fa45ba8dc1171a4ee4156d3b20d35265d543b1c69d21b"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "dSywKP5Kk2pJpukyBoMYSMzZCGn0VB+CMxU+d8P9qRw="
}

Found on 2024-12-18 18:11

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30cb7af234

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "f6456af3de9d68613f72d78254d752a248b3cd1b1f816c922f6488eb642adb0b",
        "clientHandshake": "5af402431b36507cdf0e9a6c821836f6104e0c24740b8b6292715bfd5d3a0d3b",
        "serverHandshake": "c05fb6f87023853a7a5d3fff4ba37f54cea3c54fc9531a363d91d217f4bf6a11",
        "serverFinished": "ed10c3932065b37546373b0cfc338917afa2d610fbfae312b6169d895576b558"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "E35LqzSCYhdsZQqNZeTmqX1pygpGz7lzeUo3mlssTyY=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-16 11:57

Fingerprint: b18befd9dd6536aa30550de50613ab81dca17a421b035f53e2622e0132e79222

{
    "clientTcpRtt": 2,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "e66e803ca71b95337071d84293e1926f7dd7915a1fddcca709428961f9bac267",
        "clientHandshake": "d705c46b61b837156bfe2a0bf4bc9fbf78f56855699427262d3dab92824cd4ba",
        "serverHandshake": "a1bf520fef953da44ff21c24cc9b8ded5dcf8aca0e9c18881df9299edf352271",
        "serverFinished": "6b120dd3b4369d9bfed6c548e242bc180cca09dfe688be364bbc2c0f5b7c573b"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "Vk+lNxKdK5eLii7wuVWpR+D9iUYhNp1FFoC5+OWVgfg=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-14 09:27

Fingerprint: b18befd9dd6536aa30550de50313a6d83eeff30667f41b8f599a007d9434bc36

{
    "clientTcpRtt": 1,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "ef4fe50d5036f9112ed8372e9b0fcdbbde8201594fb3dc96d9fb00eb15eaa393",
        "clientHandshake": "c3aef3a830fae6373e9910757ca9a43e18fcc99903700a2c7627b55eeabccc62",
        "serverHandshake": "72e5aa3d685b28996ae1f057dd625267d5bb997b700c9d48edcc473392c0ac2b",
        "serverFinished": "98543fca6b01a52ca9e7fb8b11bcb39a6ea1bbb1c0c5ac440a9c8c34c01a3f4d"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "qhNqe5a18a831JAZixgK/RX74V6cFPTSUbuddsW51VA="
}

Found on 2024-12-12 19:36

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e8551243bea0095168f0885f

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d1e963ff77de0cfb06f250c8224267db1452bdd0c15fb0949b759e46cdd26407",
        "clientHandshake": "4b1ba9b4929a37f307578d56cd9a351a6b9f416f6432dbdd0b563024cf8b4ef1",
        "serverHandshake": "d2f5d982ae632db95bfabb8667e1e3421e8378df28603cae0708947d5c732202",
        "serverFinished": "1016d956925fc88da57e9bf8c699e66a4803c406a57adc70316aa1dc65bf0c0d"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "yTY6Y13IRV8vYrZQGkYV9lk4Z86ydGK6S+rdLk66odM="
}

Found on 2024-12-10 15:44

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906ca969711f5

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "bcbcb218f17014f9cde4417532c693e7afc9fc84c1fbb44e92b23d9659d63b7f",
        "clientHandshake": "27585afccfff1d6eac9934329b2dfa5076d054333a1103bc4da80f8e997d04bb",
        "serverHandshake": "e2cd35df8b98f5baa68f3d011004bdff138167b9c64d208b3d6c0cb316e20d78",
        "serverFinished": "b0459bf28d0c905858ada952ebd5ee447e9f23bca2328b8d92b833a176c2a171"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "lZKoQyH5BeSSqJ2LRmeP9C2YV7EaK/3EH4/nHc/yPlM="
}

Found on 2024-12-08 17:55

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f1d2d2fc93

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "67a9c9a3e14f2804edff8adfa1c27b30581424f102930b4494091ac3881f6540",
        "clientHandshake": "e7038e8180e595b994f74e141dc0ec1ab7afcd13f1a9e75247fb5fc28a49c853",
        "serverHandshake": "eacd3b2c54bcc5fab68310a55f101a3d90276bf12fa055076139076e2eab788a",
        "serverFinished": "4cf9439142e0cb069362d015b01c2279baacdfd1e9392c31d85b59b70343a7a3"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "LSoVlH4TopOrXFvOQVdyE2sgxxLFHbdiycbdXOA8TJY=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-12-06 17:22

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30414cc849

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "7a3641ee9446cb6b895ccbe4d04b8e5015de029e28217aa14cab17e770d2c93a",
        "clientHandshake": "22d0aad68c35bbbf11dee5d273970b7a81f257d987de4a8733dc06617f288f3e",
        "serverHandshake": "dd95bdbfbdcb8812184662289c2da8ad681c60ee7c63339bd91d3cb2ea6bfcf7",
        "serverFinished": "a62dd79c8bb6c53ebd86b9585e3755f4e3aa24e9a8dc8a4edd017a39fa8a833a"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "qFGXK13fln09UzywWnj2OMBzUDlZLrn4rv8mIIV5Hao=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-04 12:05

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30eef7f83e

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "8ba103b73781c246a47754d52dc20b0a88c77b7c3bd1ae7649b4bd3bf1ed2156",
        "clientHandshake": "408a4c6743e5bc8523875d39b7736fe5fbc5983f21cdf5f8bcff44a4aa1d02a0",
        "serverHandshake": "7dcc6077b8053ba6aad9cece2051046fdd3f71a2836748ce8633fd393594bee8",
        "serverFinished": "b6438f1ee246e69776bffd6da74793ada65a3cf6b50ee835c6ba458495c490d6"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "YkxZMLWRyEZOrs4IpKBU+y/C1KfDDBSjyQDEApHg7C4=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-04 08:44

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30bce36821

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "b3b48383d21be2b72882b3d11df5f83418a91c1abb4d45b6d5e369887e27af09",
        "clientHandshake": "10a05f0d35e1a2c65c9dc9ac4a4bc466bc05ea165132fb03cd687a038242c31e",
        "serverHandshake": "1ea54db5a95062b0f1c352c031102f52cd52f3d85cb83245dcf3364c4c4562ab",
        "serverFinished": "a58a81874f48d9dd023ab7b4ec01a9f6983ae677fb6f86e14b34d694049c28b6"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "KoqjNWjb3hYBZ5SBL/cTkNjo3yJgb2JHrIjo2C9KdFQ=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-04 08:44

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906ca1f8f5c14

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "ac76107d179888ee59a2cd911ccdfdaab0a2bfafe72c72d62543bf6acb65ef26",
        "clientHandshake": "7da8eba5354dc9b2b068bb02037ed2eb6bd44c2321c60feea294025c832ee1fe",
        "serverHandshake": "33ecd8bf8e9a6f63b81f1c5e6a5629c267d9ee83c9cc8f4477699339dad9dcdb",
        "serverFinished": "5e0b15faedac374cd49251dd62df6c619f54b33336ecce39c1d20c73dcfee481"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "96NUy7OLGcA7Eq0K5fQ4Ou6lAxyPtTyyos+hpNU6OOs="
}

Found on 2024-12-02 23:35

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30a8319c34

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "94812119fc38adac4f12b2549c3f0ad390024da8a98b7179e78a1d952354ae05",
        "clientHandshake": "9d833c1f87623a036c1d96fde1477ec0425fe7b66f261245d3c917edaa0de424",
        "serverHandshake": "dec6704cc9d31732e4c514e00a4939646e20cfbbae0fba89cfbf95f46939d5df",
        "serverFinished": "77f2ee0f943e4d1470bf162a32cdf6f0cf9c657ea6dd1259accc93f8126c4b7e"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "vZaMGRFjMbF36zSZ1cvllil03zgs4FNPz3kgL0QYUJA=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-30 13:39

Fingerprint: b18befd9dd6536aa30550de5fb139a70ac8260d938276262e7350148b4776717

{
    "clientTcpRtt": 9,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "66aa36531c1bd458bd747713b6ac3e83ec74bc983eaf61fea1588fed5297aa6b",
        "clientHandshake": "da53ddfe350a2f427e2333cb138186068efd84b58c2c8089da94e3fe6ce2047b",
        "serverHandshake": "11779fd2f4852080f230689577a401013323f49d8cab9c74da33aaa7a4060668",
        "serverFinished": "78f35aceecbd06132431cdf617f8b53a86c16cb5a7eea173723d99f9fa4324fb"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "WMt+4Cu38/lYLNTOeg6NrTz3QWReaxcEPtFgZRM4Zpk=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "HAM",
    "country": "DE"
}

Found on 2024-11-28 13:14

Fingerprint: b18befd9dd6536aa30550de50313a6d8a399d2e8555a99b5126a8987823c38cb

{
    "clientTcpRtt": 1,
    "longitude": "103.68180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "SG",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "verifiedBotCategory": "",
    "tlsExportedAuthenticator": {
        "clientFinished": "1b4e3e8bac8f6cd812791056fd10c3a483bb4a2eee990a552b56c3c4a36dbffa",
        "clientHandshake": "e0149c083610637b32063ad892be60c584be26c3f554e015114ad0ea73bd116b",
        "serverHandshake": "d41cebc6675f9043031048ca1c9ff5b38a6466e1a46094f16b68bc492a5f7790",
        "serverFinished": "23ea6902fe5c998546de643ef5c17327bb4ca162145b83f77aee85d385cebd7f"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Singapore",
    "timezone": "Asia/Singapore",
    "colo": "SIN",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "62",
    "latitude": "1.30780",
    "requestPriority": "",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "jJg1l9oa7WKp6TUiLB5YFD5rFNGB8gJLs4k+jmGkwKk="
}

Found on 2024-11-26 13:28

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a303784f560

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "773b631b5cf02e4e59e2a8a41e67b21f3a66ab0e29654ec5860c228ca75ba06d",
        "clientHandshake": "4485667a9270c8be7a9574a176ff2fe31aa90c65e70eff1f84208cc368b3ab38",
        "serverHandshake": "23f2ace4a7676bd14fd84e9525848478f6a26033bb92055feddf8865def38925",
        "serverFinished": "043dbf15c8292ccbcacd1bf8363ba3994438c0b21cddc67ac21051689d4b47da"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "9AbD3z05xA46e6AtuM/N7mL3psw3RRGN7QY0jdHV63k=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-24 18:40

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f167a72bc0

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "b354f5581e897013a2aa358647ee67621c353180646577ec37e36a867c30c9c9",
        "clientHandshake": "b9eebd1a1d4fb1172741a1086436cd3f43b7fa47efbc981743c8376f3b16fc98",
        "serverHandshake": "2c0606a716cd8619537641917ba98a50864df3fcff20572468c74f502a521cf6",
        "serverFinished": "a8b810ea67ead1c32d9b6294c1d5ac20fbae2824dc2315d7780116c663cc90aa"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "MGY6VqnyN4CJF+kO0pbBQooWwQ+a6jZLrviGP3jxAVQ=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-22 20:01

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30cb39c228

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d7a5b38a5466e4f38245dbde7aa6a61e184fefd1d690d741ee01c7ad31580d91",
        "clientHandshake": "adf491fcef2d555e87a2a8f7ff4bd19f0b3d77a6bb08fe5e2e02098d7389d18f",
        "serverHandshake": "af9daedf0ad3f449b8b1cd7713f541b0def91965ce9e92735d8e27ea3cd4cce7",
        "serverFinished": "ad5b43c7103259b3b4fca0033f4f645a66f88e5155e5ceabcc1e931739665914"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "DgPxL4Gt0UZwvfSFZdZWQBpxPO7l91lxn93DnikUZ7Q=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-20 22:41

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30dfa733f7

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "020530740a683c932a661ee999bea66e3d963f2068762b034434d34a8e83b97a",
        "clientHandshake": "371917df3cde987e8dadfd0b320a9f94f1249950aae755fb38c48ee6d0df5dee",
        "serverHandshake": "f02208a112322132359aa06cccffbcb459c1f562257a9e3d2c91434a7fe5abcb",
        "serverFinished": "ecbb87a576c382b2a060c98e0e4dd32dbfa17b07e8448fea0678d85a24025cf0"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "A1NyM89+wfzPI3Hop7LB1yiNhgmGruUe/yCWWShUqeQ=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-18 10:52

Fingerprint: b18befd9dd6536aa30550de50313a6d83eeff30667f41b8f599a007d7559ef88

{
    "clientTcpRtt": 1,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "cc22de92b07070a5aa6001c322c2f90d6a599d0d2d496bf5e3d7ce0e0df60032",
        "clientHandshake": "fb3b27b89471417744d4163a96dc0ea58e35c5cded2a71dfbeb45da1b180f9f2",
        "serverHandshake": "a25640e02387ede1fb6c835463bcc0dcc455ea63ac747c6edeec00d7f3f5dc56",
        "serverFinished": "f152e61b528c6eb62976a9a02d17c6d1a88891b72f7dee4160e0ac3b43cb5131"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "yMSvHi/6KgSrLJ7pemlw3wmjiftE0BO/NIhrEIWmRpQ="
}

Found on 2024-11-16 15:18

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a302d313d7c

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "c43d2d5f8f859b61c9d8ff357324b7af64b2faa900b68625beff918d29c141b9",
        "clientHandshake": "9470340bec62d10ce5deb0680aeb18ca85babd314845b8e68da1a50e039aa587",
        "serverHandshake": "d10a6a1a05dc8bfb87e1f8735bc56b2795fa03b61c07d8f2091de1e3e814d87e",
        "serverFinished": "0a2e80f95ee1770ec176b1f7717250b72cf3e06062297940ca62d770e3e79139"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "nEjRBdaz3R1KT55IwXmDr2efb5l6g/7CWW4NS+ufQfY=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-14 17:19

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30b47c148e

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "fb5d12b11fac22bd1cc0c9689a5c0b5e579517814288e08c64efdf608408ff1a",
        "clientHandshake": "051f11879732526d49fa82bc8445e7b6f7a7102cc81d39ea24d8a985f996beb0",
        "serverHandshake": "5d1d3eb7a625dbd5ce2a3c5c390f54034326df935a8329cc597babb1445b048c",
        "serverFinished": "9ed64fed59ed96a50bededf4b3354fcaae968e727b9c755a73a86b715732204d"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "IS/Sz/3vZGkwjMtDEcjryLhhDQMJ07N5TF8A8uwfPuY=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-12 12:38

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f126f039a2

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "49f62d68db08f3790b7f48d798d4b1c1e42bf005dd01b2a9236cd3e08ee51cd6",
        "clientHandshake": "b6337c455f4375ed66de469aabe92dad6054018b0950e336f8f3c2f20e5777d8",
        "serverHandshake": "285782654df0373bb193d71db110a841d637636148d43d39f10e0187e1191da0",
        "serverFinished": "55c4f665dfd25d046579d5358bb98f91ec0776e8de3dc348d863a04a5d1cc7a9"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "lk4TQStUTFgMF/fxGSrG32cA8iWuKihwJWb+V4mRW0s=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-10 12:52

Fingerprint: b18befd9dd6536aa30550de50313a6d8d5f49e1f6ed5a8d4b83d7596b029e0ed

{
    "clientTcpRtt": 1,
    "longitude": "-84.38710",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 63949,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "f37c01b9c784042964b136f239abd106c3a6d9fed152e748ed8880c57b656de2",
        "clientHandshake": "38fb937ddb731a76a41d9fd025b5d37d1e09c04a5ec0b0969338c530436506f8",
        "serverHandshake": "ddbafa0b6d7de219ea27040de75a28d4b82f2ff0cfead494d97d365831e82a08",
        "serverFinished": "c8e6320cc0b21228399e9173652c66411c6cca70d5869ddc29eadd85c395ac91"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Atlanta",
    "timezone": "America/New_York",
    "colo": "ATL",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "30301",
    "region": "Georgia",
    "latitude": "33.74850",
    "requestPriority": "",
    "regionCode": "GA",
    "asOrganization": "Akamai Connected Cloud",
    "metroCode": "524",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "u88LW+uRNWI8KfneTZCyrLm5S50zOrxWVIHSqHpqznY="
}

Found on 2024-11-08 07:16

Fingerprint: b18befd9dd6536aa30550de50613ab81b022067560b6858676b73bec8cb64509

{
    "clientTcpRtt": 2,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "6a62e309d6c249d0ce52f75c16d9e8a9cf963abc3267327480d364107b6e010f",
        "clientHandshake": "b452a5a937559506cb1087db863fa4def013f4bb9a2570f3f2574cd0cfdd559f",
        "serverHandshake": "fba8eda31c75a94558f3b089bfa1df1481820f3006731c4379f1c6e98056377b",
        "serverFinished": "9259ec084230a5f01eaf56713e90f7e4b4b03696005b9c85b4b68ad076e49650"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "MksiZRsVSUiIyki9ChZ7XVmTlLuVzu8Yoe0vnO0yxGY="
}

Found on 2024-11-06 05:46

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f156ab6658

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "22537388240516563491baf12c1a22c9d27df10e3415fb471a71ddcb2cf7fbdc",
        "clientHandshake": "8475ef21bb990fde58316c7f92b50f1764c6c46c2bdf380ecb4057d258a46d9c",
        "serverHandshake": "e005418432ca202d1885dfc8553c4ac68a719f888769abfe13e49b7f98067758",
        "serverFinished": "2a824616e06e23564eeceb335517096c19f464c715269e959e53f910e93c7713"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "8/JtymVT5ql1PWd7eXllZe7q/Hb2RuqboVrpIg7ZVpo=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-04 05:23

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f17b4147ca

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "5e7a50c6c520cf9d7a40f117d48163a48f28d8c1ef2d202071dd285906f27bf8",
        "clientHandshake": "7d2db988c28cfc7e6b4a71005ec9baa807d15ba5a7eb3a3a2ca77c0dc62d7788",
        "serverHandshake": "0dea61200d604fc4b4679e69e65c7d45f9b73d2971f8bbf6e1309b1cc598fbf4",
        "serverFinished": "9d3110e131d55c10c53de5cbeb7f9c9323a0c86123259484c2b14dea986d3249"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "Y/oMHRNbXKlrnl2G8PLflVSKh+oDnXQt610PDCNgEVM=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-02 06:01

Fingerprint: b18befd9dd6536aa30550de50613ab81aa8fde659788b69606b969dc806b1d75

{
    "clientTcpRtt": 2,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "2b24256c7e742c25ebd568f59c392850ecffad7d7c0ebf547b74361b087710bd",
        "clientHandshake": "9e959d4652d14d119afc32962d185160ca0d7892879c962aaa02bcdb310ba7d6",
        "serverHandshake": "988bea6dee1563097b4de2bebf86fcf0d66351f501110aa30a74fcd9842a467b",
        "serverFinished": "36ef41ad6ec045466da7755634042ce5e1852105c02576bea79cca83ea4f0461"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "3Y4c+bxsPig40CIzByoToAWbcjgeWHBZO1UQQzQJ4i8="
}

Found on 2024-11-01 03:27

Fingerprint: b18befd9dd6536aa30550de59bef86a0be732ac8623c5f55e26323a7e73ed5da

{
    "clientTcpRtt": 10,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "ba51ee26905ef0c04057551f448699929027ab57e73423bdb5939734f4f3da09",
        "clientHandshake": "547c74bd3b75810c7cf479ff97ba64ea138c35494f4bcd3c8de32e72e22ea72e",
        "serverHandshake": "6c5b7f9a8aa62c828a1917075d581f3a402597a74a4be368c97c706cac47d857",
        "serverFinished": "6f74763eb7745a00b83b294a8cd5ea786a06478c98ace654ed5add0d2c326a4a"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "ulxFNDgtszJwtL2vumstYcmTk7W/T2UCGIr39r8oM1o=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-10-30 06:21

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf7616f7f9

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "28e127bdf45372b460fa17da319d8eba0ff7e89c07978059bbf86f026b594180",
        "clientHandshake": "1f0b72c2b8d7a08228db2b454b1e8619a10f41792a4961edb4cb24ab293d49b7",
        "serverHandshake": "6cc833dd8b4b62c178231f25191dcb67387d48fdf596e1517e3ed54a27f5ef7c",
        "serverFinished": "4668cb8a02b49dc583a3875e1b9b893ee596631dc3bef583c2b0cf89e05b3f7a"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "PQwCfPB3VEnhGT9DwaxuYGHzzpSAJeFZq1IJAkw4eR0=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-26 20:37

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906caa12a3645

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "a03705bcc7730213f8fd21e02b9f2939d81579565027f2cb6757c90858b24ecd",
        "clientHandshake": "a607a00c241d739343a728811d8ec9a2060abd0394a4d22fec87179c075208df",
        "serverHandshake": "73afa1c3e53f738aa9ba0aef23afe1c7fa04b1cf9fc35842c6b55eab919065c7",
        "serverFinished": "2f414a0f8d4aaf8bab518f7d092b7d6f6c7e19a9e74bc92401546b5e5b92cdc8"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "UYvKOBMsObHJmk9rlFGv99MP1GgV/2Y+EHgdEv90uoI="
}

Found on 2024-10-24 13:09

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bfe7851c2d

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "58dfc36dadede17536efd1122c0324f30d0a033d174df98ad7ba7c635ebcc0b5",
        "clientHandshake": "37dfd1969e4095cc437c5d6db7c348ae2950c38deba40da5336bde9bc773651b",
        "serverHandshake": "3a787cfa4d4f223578d5f253156f7f1fb7063ed5857239b1aa3d2b88f7aa7ed8",
        "serverFinished": "4260342ddb70f530acacc908c695adec0787dcd0574be09112ee564fb83e7ea9"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "XgyzAzosWABncina7AXoMYwd3rP3m+EFaXYyYZT9fxw=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-22 17:59

Fingerprint: b18befd9dd6536aa30550de53c1361d1dcc1804371e63780881e9e526664156c

{
    "clientTcpRtt": 110,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "f05c89c8bc91195dcc01956da5c787affae09ba3b727e342d124604c5d7783b5",
        "clientHandshake": "e690b7f4f78e10caf7832ac650198542b4ef127886582f27c10d8f249deca33c",
        "serverHandshake": "e2eda30cbc4a24854218180e6b9dfaf1a46b105ad6cd25ca8d89e79bd9fd4d80",
        "serverFinished": "bd8f02b4e9de4ee3533f8f3f467c43ea04309765a027d0e34e10d447d3a3b2a6"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "vHySk6LXt7ErX/KZIS4SD5lR28wOpFj5jzpW/ZoOdyc=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "ATL",
    "country": "DE"
}

Found on 2024-10-20 19:03

Fingerprint: b18befd9dd6536aa30550de50513aa3676a95b785c092b25b4696057465da223

{
    "clientTcpRtt": 3,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "35eb911f29cb28ecb28505ac942e124e374c539e9ccdf62777f966c4c9d7d412",
        "clientHandshake": "1800bf82799dfc28eeb4edeed80f8413e7fcb803560cef4917abca1107d7cf2c",
        "serverHandshake": "b1ed7cba007e23a2244b43e1ab2ced3faf4ce5ca1c3ead3880f805fd1f40b795",
        "serverFinished": "eed4728f2c5ba4c700ce0f6ce75eca8690a3416f396479a41f86a78506706333"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "shnvD2trRh0FTR2T92ZEH+6YenW0Fk/3kgnsTsPtd40="
}

Found on 2024-10-18 19:42

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf1903452f

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "3b35682834a0625b0a565bcdbf83a8a2a239cfcdb959526b6fae77cb2af54edc",
        "clientHandshake": "fbb4a0aa383d0c79ad040e2cc554b221de1fc9e27d3085987d0ef04bbab4bc6c",
        "serverHandshake": "a80097aebc1fba119351c07d1ade3dca4ad1430dc0b407e791a1163fa1653200",
        "serverFinished": "0d7804dbbc881acd12a57371130638d38b8ba1f2a418bca0d53d21203c498f8b"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "5uWvBtip8h5fJBtHZsSp8u2Io1dO5VJBUo9BgKorcdM=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-16 21:06

Fingerprint: b18befd9dd6536aa30550de50513aa364b8758e8907bbbb5bfe2bb87b09023b9

{
    "clientTcpRtt": 3,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "640e467f48124fd93a67a949083fd1ac0f47c89091f892e745a9dda9c443a2f9",
        "clientHandshake": "6c0022d702f0fb0087bf67f5113b185c82cb9b53fe64a0865cd6d7623d4e3149",
        "serverHandshake": "fa64b46eeedef0bb56c3cb5e81c2870f60807afa985e744598b204077ecb906d",
        "serverFinished": "f791517a8a98474b04a35aa1522fe28491fedf154ca0e2ed3cf16abf9b598d89"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "yJ7BT4G1KGHAup+f01oDUgHqvYajVUpQ5+M85pe3lCI=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-10-14 18:40

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf91ecc3fa

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d1ea02f0a8f796064d0a9aba12e055731c64465e3761834e34517a5650d24ef6",
        "clientHandshake": "fa8e4401268393cecf27d3dd15c92429a5fdb629180557c35bd281d49dab905d",
        "serverHandshake": "140736dfb57e7d5a35f2274fd637e684aeb99e956aac8d1902b435f693c4dd40",
        "serverFinished": "2ea8116dd75085b278d58cebdf95723685ce19898154572cd95df93da7ca9da1"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "vkSiCAtI+hG/Vuoacps6tx9oBNooVkywOW+9VVF/1FY=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-12 21:11

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf20ea2a55

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "92b9dce2eb520b8b262e7d077a614d36e784b967e0c1dfc51a3f98f2d6a1c561",
        "clientHandshake": "fce64f2d3b8f3c5dbd0b2ff6f983439367af89a706fbbd4bd657c841329a224d",
        "serverHandshake": "7410289165a293a13cc389838141fa2d2d36aa1dcaa2d4d1337a204afb5afd04",
        "serverFinished": "ec7121b4f670b5aa9048e44295e3c20c8b2b2d983a95307e1d664a5b14277947"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "LPS8EtqechHQvs4vkg7rrzQTBRqBgzv+lG1JxK0komU=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-10 20:19

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf97f1fd19

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "61b02721b312f64938cc5f277bab1aa1895d76cab021fd991b152621eb7305e4",
        "clientHandshake": "9cd63754976064357570481cc7baaed84ee99740b7168c9d6ad56a07e521c736",
        "serverHandshake": "5885a914431d5f3bf29616ddb941b45fb0903faa50f219d79e09ba94f7968170",
        "serverFinished": "5244b1baa1be7f14edb27a40b3c119070334b833a1cbebe59cf4656fa115a721"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "gCl6MVadVdTbdM5Cz7nthStmHtVMi3Cy7dlgH6Sj3M8=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-08 16:06

Fingerprint: b18befd9dd6536aa30550de50313a6d844c953c06ecf43bd06a1091f0b8dcc0c

{
    "clientTcpRtt": 1,
    "longitude": "-122.42450",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "0a101280f25ca5266c456e88a23c1630e386d6a32fa383acdc30b4771c46c8c2",
        "clientHandshake": "ffb41e7cb159ebd68ececf1bcc8b5b43c6b5d8cd90315c1a04b1d4a529187dfc",
        "serverHandshake": "925795eaa55930f6ac91a360d07a55d05d7392b24ac9c02dba2d625f55b91985",
        "serverFinished": "5db0519eb66683868a19d6c83d5206b38f9ea34155c9a8f884286e2a975d018c"
    },
    "tlsVersion": "TLSv1.3",
    "city": "San Francisco",
    "timezone": "America/Los_Angeles",
    "colo": "SJC",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "94142",
    "region": "California",
    "latitude": "37.78090",
    "requestPriority": "",
    "regionCode": "CA",
    "asOrganization": "Digital Ocean",
    "metroCode": "807",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "5YI93697E81FN2nRGup9hi16zvkMu3el4xkGuD3/j24="
}

Found on 2024-10-06 08:26

Fingerprint: b18befd9dd6536aa30550de52df7280bad1789d907c0b5624cedec488b841b86

{
    "clientTcpRtt": 20,
    "longitude": "77.58550",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "IN",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "e0e7cde179bfa79e5fd499afcf3261aac79976986df2a2b52aebd74da8c2c0ae",
        "clientHandshake": "2665b10db30f6828cd7c55134fea69c67dafedab097c3e10605e3445246d6aab",
        "serverHandshake": "472ad33869580a872ecbb47ca5ae9a46f03ebc54cc5a0dbf79aa5c011a22e96c",
        "serverFinished": "a725475518f38b1c3b54a9abb31b4aeffd85e19e145fee71af508e49f578a922"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Bengaluru",
    "timezone": "Asia/Kolkata",
    "colo": "BOM",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "560100",
    "region": "Karnataka",
    "latitude": "12.96340",
    "requestPriority": "",
    "regionCode": "KA",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "svrPBwDb5oiBcla918qRaD18oYIimV686VevOi5o5zc="
}

Found on 2024-10-06 08:26

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: totoid88top.online
Port: 443
URL: https://totoid88top.online

First seen 2024-08-17 08:59
Last seen 2024-12-20 19:54
Open for 125 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b70033d2390bfcb64fa83bd52b177c53d3

Found 128 files trough .DS_Store spidering:

/assets
/assets/css
/assets/font
/assets/font-awesome-4.6.3
/assets/fonts
/assets/img
/assets/img/24d-dragontiger.jpg
/assets/img/aa
/assets/img/aaa
/assets/img/aab
/assets/img/aac
/assets/img/aad
/assets/img/aae
/assets/img/aaf
/assets/img/aag
/assets/img/aah
/assets/img/aai
/assets/img/aaj
/assets/img/aak
/assets/img/aal
/assets/img/aam
/assets/img/aan
/assets/img/aao
/assets/img/aap
/assets/img/aaq
/assets/img/aar
/assets/img/aas
/assets/img/aat
/assets/img/aau
/assets/img/aav
/assets/img/aaw
/assets/img/aax
/assets/img/aay
/assets/img/aaz
/assets/img/ab
/assets/img/aba
/assets/img/abb
/assets/img/abc
/assets/img/abd
/assets/img/abe
/assets/img/abf
/assets/img/abg
/assets/img/abh
/assets/img/abi
/assets/img/abj
/assets/img/abk
/assets/img/abl
/assets/img/abm
/assets/img/abn
/assets/img/abo
/assets/img/abp
/assets/img/abq
/assets/img/abr
/assets/img/abs
/assets/img/abt
/assets/img/abu
/assets/img/abv
/assets/img/abw
/assets/img/abx
/assets/img/aby
/assets/img/abz
/assets/img/ac
/assets/img/aca
/assets/img/acb
/assets/img/acc
/assets/img/accept-a.png
/assets/img/accept-b.png
/assets/img/accept-c.png
/assets/img/acd
/assets/img/ace
/assets/img/acf
/assets/img/acg
/assets/img/ach
/assets/img/aci
/assets/img/acj
/assets/img/ack
/assets/img/acl
/assets/img/acm
/assets/img/acn
/assets/img/aco
/assets/img/acp
/assets/img/acq
/assets/img/acr
/assets/img/acs
/assets/img/act
/assets/img/acu
/assets/img/acv
/assets/img/acw
/assets/img/acx
/assets/img/acy
/assets/img/acz
/assets/img/ad
/assets/img/ad.png
/assets/img/ada
/assets/img/adb
/assets/img/adc
/assets/img/add
/assets/img/ade
/assets/img/adf
/assets/img/adg
/assets/img/adi
/assets/img/adj
/assets/img/adk
/assets/img/adl
/assets/img/adm
/assets/img/adn
/assets/img/ado
/assets/img/adq
/assets/img/adr
/assets/img/ads
/assets/img/adt
/assets/img/adu
/assets/img/adv
/assets/img/adw
/assets/img/adx
/assets/img/ady
/assets/img/adz
/assets/img/ae
/assets/img/aea
/assets/img/aeb
/assets/img/aec
/assets/img/aed
/assets/img/aee
/assets/img/aef
/assets/img/aeg
/assets/img/aeh
/assets/img/aei
/assets/img/aej

Found on 2024-12-20 19:54

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: cf.kkdukkduha.workers.dev
Port: 443
URL: https://cf.kkdukkduha.workers.dev

First seen 2024-10-06 08:26
Last seen 2024-12-20 04:17
Open for 74 days

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30d3eeb9dd

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "ea6d420594158dc314a92d45d6fcf338ca058de5b58955e66e7559d9a6470750",
        "clientHandshake": "a9c67902826fd6cd73430a8da41ef29554841b843057f933e28c8eb20708fb27",
        "serverHandshake": "ffea325664993f51450be120de620e93d540d4dcf4c2e420d3ff4133666d377c",
        "serverFinished": "309b3721c0ec3fe892e32243bb9cacc38bf8ce48b473d55f433851056268dcad"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "Hmc7QWmOCDXYw1Bu0PKJ9NU6f5/53BjZQ5+6TpxsmRM=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-20 04:17

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a302138d0d0

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "80564880b0e59193dd63c5f32e6852ef4bdd05cd4d2f4abcdbb4a4aa1e3aa652",
        "clientHandshake": "821120d8437edcb536fb7940169866a447feff2edb2302c02edce5fa41da21be",
        "serverHandshake": "2b397844290e8f019481f35667ebbfc87ae880e46fc34dcc495e617cdace90ec",
        "serverFinished": "d700bd00b4bdacd09f386e5c06328cfe2b83536f869c6a6389b812aeecd5b29f"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "wYbFsPSq9yIQVnfygsL4QHD7AvTU2FoK2tPK9Uecgw4=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-19 01:25

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a306bc62278

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "646058183ca8db257a0887f170f1811cac2c9e2ca8c5d4a3c966b4d918078a32",
        "clientHandshake": "778611f796969b076a4856a9c7d9e41b5d12ffb1fe5fdf676288187768de008f",
        "serverHandshake": "69b85799c3d3a21a0682fe61273393bd41d8968023ef51d7a4f445e89df308ba",
        "serverFinished": "9ef486d7af9c761bae3b50729c687248d840893e288c6880d8636d39a1598645"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "5QyU5w1Xqn7cCF1w2u4VWXMUsScSFzlpO4VSQ71pTmk=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-16 09:03

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a309a3a7bb0

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "7d858d9095f44bbf4c73bb31126901b71d970dea2ff8d2ac721d7cb376ce13ac",
        "clientHandshake": "c3505c6ab52996ecefc84e9b7a2df66606e1af8ebacba6e34b982fcc2eb6a8d3",
        "serverHandshake": "236b133ec6dd2c146006bb598b079befcf5ab8dfa0a523239d9522dcb4673e06",
        "serverFinished": "163c824897995ed3372a28e7d8488b4543958641c2f7296e2650369c7e8e4441"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "U84OfLbeE10CS3txTCPEvB45weFPUJTu4ki9MifJJrU=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-14 12:03

Fingerprint: b18befd9dd6536aa30550de50313a6d8d5f49e1f6ed5a8d4b83d759666781094

{
    "clientTcpRtt": 1,
    "longitude": "-84.38710",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 63949,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "00984b5e74ff0ba2ac7066c9489b96f8c8273c36b020143d12eff9a9ffeb32ec",
        "clientHandshake": "a18a1c41e685d09a5590d8938a636e19da3481508780c15d635cad493c1ae0f6",
        "serverHandshake": "f381a9d9be9f2e6b51b38076ab1504e7599c64fd3553a385c1ad1f35bc51269d",
        "serverFinished": "f8f2e02da0687337d75a03b2a6b4680777f9322601c9771f404072ebabf0c168"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Atlanta",
    "timezone": "America/New_York",
    "colo": "ATL",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "30301",
    "region": "Georgia",
    "latitude": "33.74850",
    "requestPriority": "",
    "regionCode": "GA",
    "asOrganization": "Akamai Connected Cloud",
    "metroCode": "524",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "DOc5MhMU8g6OlrvrPmsQl5Icx6kZ54g1I2yb+7Gwh9o="
}

Found on 2024-12-12 15:13

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30e2c0b288

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "0c2028e218e75e8d99c99419eff7263ded1b10885d3936d95e06f8781223c397",
        "clientHandshake": "316adfe1097c5be68b282813fa953a39fe31d9e1291c6da34daa718db5af1747",
        "serverHandshake": "285a532de7cf8a1c1e13a787456a0f77f9e5b2a432028b8e31b3331ab94e988e",
        "serverFinished": "2584351e77bbe3e4a3d4e133849fd7661e8e8bed1322b3f1c7cd8997ad34c81f"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "vCXXTxsT+Sfnu5L61bBbStSEpmKCutob/pdU3p6nAGI=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-10 04:29

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a3000130607

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "890b10983c31b87977b9e8b8880fda69f1f10c9f68d8907ecf86d2f47d40c420",
        "clientHandshake": "1f337155255f30d258639db2641411ddf268f49187dbd50736550eac33bc66eb",
        "serverHandshake": "1dbb4554469aa39e0fe53ffc38e91f9872f58ab6a380944808282173ee732013",
        "serverFinished": "e232a98c9e85ccc91151ffb45e7e5a33c867b9e8c00f9cc148c0773b008a40d7"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "CBC90RM92+YGoVD6MRr4l3LtSSVNN0EPPwBT8c2K5a4=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-08 13:03

Fingerprint: b18befd9dd6536aa30550de50613ab81aa8fde659788b69606b969dc2b720e4e

{
    "clientTcpRtt": 2,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "23c1a259b4bc223ab2578e4e109de7ea74ab7adc9af1d2eb3900f62bca4760f1",
        "clientHandshake": "ef4a2e519cfb75551f03259790d0804f627defc5cd202b4b3f93eef666047309",
        "serverHandshake": "46719727bcb0c4a36dd65700272f7fd2893fcd927a9b147cf58b4c139927d8a5",
        "serverFinished": "e79de6ac20bd2f89a741d07fde7c3ae60a9d273a87647ad3473d6a9b0deef1e2"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "b1ZO79QQ4z2+0aukAF3wc3DaghQ+IX1uiUNzjLJTT0c="
}

Found on 2024-12-06 12:17

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f12140acbe

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d74097996068ac8c6b9ca7a8611f1287cf00da2b2962e4084c64d87485fea66b",
        "clientHandshake": "c0c21655934a863093489dd8a1e85b237af00a04bb086beb7d974f1468e2ad1a",
        "serverHandshake": "4e9085274b69a151e9eb83fbe2080a2a1f4e050a25f3ee6afdd4a5e1276ae2de",
        "serverFinished": "dac20971252b35464b2a93e63638510d052abbe392b03267ef0b5c5ed55c4191"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "csU9Ee9gc6rs38r3pEn08Zcn3Q3dnP+ND+SGnb+cmCA=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-12-04 15:15

Fingerprint: b18befd9dd6536aa30550de5331115174d453e18d9ae46859ad79137fb225bbd

{
    "clientTcpRtt": 105,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "a01bbf49260ee9e7075f6be6be6e54079322e6cf43c1e42ce8aa52d8f1b0e9a6",
        "clientHandshake": "7b09c1da70cf723dcc33b1984ce3db915861e96260346bbed49c09cf08e767f0",
        "serverHandshake": "ccd4cf3341baf92169289045be6c0cea7a98fb0ae28e769334e18109492252a4",
        "serverFinished": "d44d64619062dcd98046f0a590ff32c5323f9fa30843709052deb00be784e347"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "BjqY4nI0J/Uxl8ET6EcdDcHaNzetz9f0NWadjnMNrPw=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "ORD",
    "country": "DE"
}

Found on 2024-12-04 08:44

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30ee725226

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "11bdb11b3a7e6bf4b475e890a42468f0b4606d02ba025c2c84504ea9dd09166c",
        "clientHandshake": "1f981c20b0b4aec5a2350a48248d2bc44fb929242e8525e9b38e5f70e26867e1",
        "serverHandshake": "88289ee9c6b79798722bced491eb14a8d73fc277ee8cc04643c6406acbdd2bf5",
        "serverFinished": "e5c114f43597c0d52f18170b04192758e1509f896cec83d01f5e532c2983a2af"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "OyhWlFXiqxSwvIq0qkFzQepVPnAkwAZtw5HdBF2BIoA=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-04 08:44

Fingerprint: b18befd9dd6536aa30550de50613ab81dca17a421b035f53e2622e01b6e9c2da

{
    "clientTcpRtt": 2,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "bd94090e94e5f9a268cd053974a63665512764e5797dabdea4e8d3d1e900921e",
        "clientHandshake": "a2f7dd12db61f48a39781c60d2e7fead7f2e40c39e5cdf80cb7c2b738bd6f47f",
        "serverHandshake": "76b5596659cf1943a094c6c037be1efadb34aafa34b4524a88b4724b2ee24a41",
        "serverFinished": "6b7475c6d5e10a038928642d804570c0502a016fd0220260bf64318cb27f32ca"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "iqF151OJ6msWR0V17mUOmAnVKsSpZTV4jgW66dgr7aw=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-12-02 21:24

Fingerprint: b18befd9dd6536aa30550de50313a6d8b3a6b275d49ca986418a7fecb0157b33

{
    "clientTcpRtt": 1,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "495ac785d8df34740be672e6b205d20dea91144dd21778feb853572e181ee055",
        "clientHandshake": "6eb7e1374bf0feb2fb6c58e2213c40e6210431616d68d67fa001832f0370ac68",
        "serverHandshake": "4e2d4d1801b84a9c9c86a22bfe35fd50f642d3836599de26ac8ecd2cc9ffa915",
        "serverFinished": "2f0ff64c3873a76a8d9fe4572d3c01a60176bdc0ae622f2aca76bd323deb2474"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "yxMwSitJnweRzOrViTGyRng5xW3VIKWkymHMh5aKz7E="
}

Found on 2024-11-30 15:56

Fingerprint: b18befd9dd6536aa30550de5fb139a70ac8260d938276262e7350148bac52f4f

{
    "clientTcpRtt": 9,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "44afeea95aea1b24b837c1e5222a140c51a9da6cb154e5da32fe9b352cf2cd03",
        "clientHandshake": "3b9e4840e75a364e279ac1aa1bf306facceb845177c5e8f9fded13bde8a7a00f",
        "serverHandshake": "675088c2b2df2664a5b18a786de68860d364522fc85c3d7ef99c3b810f6cec3d",
        "serverFinished": "d9ffc759f456d4ad3457351ed13cb23209f469a582e32e19e7b89fde1f29f231"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "OPMz0w8j4aXQwnkdWnM2S078xnQ5p1eG1BzNWoCg1AQ=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "HAM",
    "country": "DE"
}

Found on 2024-11-28 18:43

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f1d8856a57

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "e708456def98bedff34297793de41c317e1578a63a63f3527d02b9a1d68a9a31",
        "clientHandshake": "33accee430480e2fcaaf367de74625f499d817d9c2d333f44717dfb0a2c1dec5",
        "serverHandshake": "f49d63ad4c1a47ea1449d1a59dc43ae44496ef0ebd717fcab574d1cd73525e63",
        "serverFinished": "91739f60bb62ce9863e45c40d8c037c41acf8d7724fa98b93dac272b0e6e5a22"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "tGNb8JuaZGuiUreaCsJsJzwdJorMpz9IXMzxELiNN3Q=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-26 22:57

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a307231e620

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "267a6663ee0504c8388ddc9cb8ad257b734f5f84b815da54c09810048009b07c",
        "clientHandshake": "341dd3249d9b301fcc88f61ee989ab11f5ec7a1cb8d62d88aa3c9ed42750efab",
        "serverHandshake": "d66ee1ab73ac6d7fb080675466e822ec400156f4f226d7d84150c38d85e2d3e5",
        "serverFinished": "83a59d877d129549d28225f2874e71da4e5c1b800e0d85e7b3f19ba8bd36781e"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "AeXAJQkn78Ln0eor3oFbp4TA7kOunee1RsdA/hIaFak=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-24 22:55

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e8551243bea00951fa6482ac

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "f3803e4c45c9bafebd4129c1988067976d402cfd9204347b548820dee6ca067c",
        "clientHandshake": "a7d9764cf8c8ba41aa93b526f3de2815b1d11b4777770706babef0e2d9166d8b",
        "serverHandshake": "c0e319b6c9d0df577e011331c65051ee8e4fa80c177f151b6808c58812532012",
        "serverFinished": "0fc0cb5aec05ca0c6931f7045ed7469bfd464316098b9f3282ed609bf2b10b7b"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "mi6/w23rmUJ9qT24OzZZPKhf0zkrRwxFIPjMYurz4Rs="
}

Found on 2024-11-22 17:11

Fingerprint: b18befd9dd6536aa30550de59bef86a070810d0919d5bdf2ca621af82f4af7f4

{
    "clientTcpRtt": 10,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "6120e551c0734b7a8a49e8cb8c9ecb59ef22bf0bbdcaa90874eb5eba32f71ca6",
        "clientHandshake": "42c3f4959f7f69e0102e55f90eb471b2c35ac4d697b420b8e4d4e1f8480c1102",
        "serverHandshake": "82da8b90927bf7984d1d9ba2618031893227ccfac771bfbda0a48426ef25154d",
        "serverFinished": "2c19d11da0632d2299fbc877afd732c0939291f7685d176cca3148eacafe62d0"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "SLR00STdIfYhwtTjUyEX3VQWtPpHzqamyNoxgZCoJXE=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-20 19:21

Fingerprint: b18befd9dd6536aa30550de59bef86a070810d0919d5bdf2ca621af846b8e4e0

{
    "clientTcpRtt": 10,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "99aa71708ef2f7ea5f58e5fd5d6da428545db5e9690bb60fc1a24d2b73f27c41",
        "clientHandshake": "11bc13b10c76a0fac379502e91a0a5ab5179d80f6b11065ace2f0df0e80ed573",
        "serverHandshake": "999ab3b55cbaa64dda228a1733029a568829f900950cbb258855deaa4aa44b97",
        "serverFinished": "858c07c150a4cffa94c38c25bfe1e9df9098a8cc86ed7c65da45b03fae2b6e9b"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "1GI6+RDX8EYJ5wwWWK2CWc7ObPTJGWbsi5l98NHNuZs=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-18 17:32

Fingerprint: b18befd9dd6536aa30550de52cf726b8c6079c21ea81765abca2695048a6ed28

{
    "clientTcpRtt": 21,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "3c61de9ac0df6c150643f6d3a3ca98e6f477af31272e6ad63ce49f437ec2ecdd",
        "clientHandshake": "32c31c86cf750388568b26655748ffef16d68b618a327d8641e34a6b1631816c",
        "serverHandshake": "434a2d2dc3b3562d6c42a0a30e39411ed020bb339a0a25eee22dda3d847ba89b",
        "serverFinished": "2657eb638f1e909e63077caa908512d798c6908a48cb4fc1bdc027098cff95da"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "+L2xrGGcZPc3VhtsZ2YMlel/2OUA9HmD8Mv5n0DgQ14=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-16 12:35

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e8551243bea009514150dca3

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "207cd3ecedaf9d6932f6c8d51cc09bcd4c4ab114222ce53a3722b808dd278736",
        "clientHandshake": "1652e251a662b879c1271d54731a906d3ce2ea40c095aa688efd1ddbae909132",
        "serverHandshake": "189e3f3dbfd0a3bdf9e89a30a954b183d96d1551416203832f8ea83b5f0256e5",
        "serverFinished": "3373725f534bff5143d88f6904e1c66daf20338f180b1fde6cf5020d2e90ab12"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "EdAqFQeM40M2XO+F1HllyHqPD1ZarRu5pGP4lnoFarA="
}

Found on 2024-11-14 11:28

Fingerprint: b18befd9dd6536aa30550de59eef8b697cbf3faa77c5660b0d7e12e9ad45689f

{
    "clientTcpRtt": 13,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "cc35b3e490677949a42e2627ab8861d8a41fc9c1ec1ced20acdb57f2e57f09e5",
        "clientHandshake": "4b5abfaae1bf3ab631c08c8aa345912e03816c9d12f0af0092b627b261bf9c5e",
        "serverHandshake": "eff841a43164dbbacbf35f8639873ab779554599747845eb39060d748afc17dc",
        "serverFinished": "4120729ede3a4af654520b94fbe45d88059a0658e626902a6eefe95a99ce2451"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "4TxExb3Od4t0j4YP5OOqgK76jIaMHhVyEuZ3zhb8WVg=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "DUS",
    "country": "DE"
}

Found on 2024-11-12 15:37

Fingerprint: b18befd9dd6536aa30550de50313a6d8a399d2e8555a99b5126a8987c5416131

{
    "clientTcpRtt": 1,
    "longitude": "103.68180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "SG",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "verifiedBotCategory": "",
    "tlsExportedAuthenticator": {
        "clientFinished": "26c1f6ee90309cb1393a8a9dd7819952eb837bf1e1c86a6c0fb89747f7915744",
        "clientHandshake": "a43d7777e2b5aa53562f18d1c36e11a87741d8b6c21e282182f752e83745b23b",
        "serverHandshake": "3e161ac367d69cf77cd7c5164f84f6b6f53d23acae25fb48899fbc004e2f9850",
        "serverFinished": "cfadff8817b365395593d7f689202a96d9050d422e01568f2cf54d1e0283a0bc"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Singapore",
    "timezone": "Asia/Singapore",
    "colo": "SIN",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "62",
    "latitude": "1.30780",
    "requestPriority": "",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "5sqTqPihSbxYlq8rXUU6J2w0bEWM15Ajr+P9AvFVpow="
}

Found on 2024-11-10 16:34

Fingerprint: b18befd9dd6536aa30550de5fc139bc3a5f4fb67ad1b0d8c6042123e798f5041

{
    "clientTcpRtt": 8,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "835a32aaf43a251011cf41e69c5430f989928a71c258cc73f75e827ecb4c193a",
        "clientHandshake": "5db49ea426aa86b38de69caa55e96912db43517d95992e6d41732a4277299c02",
        "serverHandshake": "defd208942c38e9a720c34b228d725c15c145402ad11aed1acc068ebe8edd81e",
        "serverFinished": "e75df4369ff4423132fb0faf515dcaf73c5eabc4f985167813ddab3307828cf3"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "IAD",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "z0PWIbd81wqBZBxn12GhiJuAgGipohwnIw2Ecj77cCc="
}

Found on 2024-11-08 19:00

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf5368846d

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "b52ff0bd9b9214134ffb22c7fee908213d58a02c5813012ba26433aff44f7486",
        "clientHandshake": "45ce6eddb2ffc715131c50fac6986a48d14a598a2d8323f859be51f516acecaa",
        "serverHandshake": "67f62cb1f9118f08a2e7d69852c8290d5fb7fd4f2814cec43aa42b60d1196855",
        "serverFinished": "1fe684c77c8f2b26d2b090e9f6ddc3d7d431f9c14b39c89e0587611617d1243e"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "ziC0AzviyFYzv3+AnZDyY87Zfg1viAoBizahe4USbCY=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-06 20:44

Fingerprint: b18befd9dd6536aa30550de50613ab81aa8fde659788b69606b969dcd2fefe69

{
    "clientTcpRtt": 2,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "317dd6ee3aefcc33dd16d3f447c3501f2f13ca069ca0a36006882c0d67276c44",
        "clientHandshake": "717e5ba80c03a6a682d316916eb231b9d7db747d7d524612f2410a1a36c950a5",
        "serverHandshake": "15d28f95d68a5e61be05e219f0186189f9ce6a457d9d1370388a5b1163346f74",
        "serverFinished": "6d6f936f99808ec74088891a606db94744604f34f164a196f6a69eefe0fbe782"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "oMKTS28FBfBoDadpc141mywZu8rtWK+rSGkrlemFzHU="
}

Found on 2024-11-05 02:56

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906cad7bf02c9

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "9c7fc934b93aa10e78fd98391e459aeb0aede5edd271171d6f17cd428ff14c12",
        "clientHandshake": "323a8d8fedf6a420684a625240f0af96ed162d137dffc893cae07b55bad4604c",
        "serverHandshake": "4149186ea0f20cd38b7f2a60c209cb24583f1ff0731c54a8f76122e3d530abdd",
        "serverFinished": "67f092a270cc382f3d6a3a10218c3bee06cf63f00323aba2949f98f363ecada8"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "MwRqu939jrapAs4yNdsoHLWaOfSFDmbrHwk0kr/2fZI="
}

Found on 2024-11-03 02:33

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf9bd629f8

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "40dc26e4aba0e477a47be16ea4fe2f950a7597ec9818fbb00cb8fc0a4a0c2de4",
        "clientHandshake": "6d13f2b85d73cce8cc4ccbb712df6a6eafa100cbbd22739e188d888f0f6d50d9",
        "serverHandshake": "70c3d2527116b7c9e0224ef447b4963da5c14fb88daaf521238786e27cbe7295",
        "serverFinished": "e71ed2c516e9b397d782f9d636aef567444972923c390dda683ddf86280d5a79"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "RF6/BCqTY9TqE3teoPY/TvD3e5w1Ar4lHgroWJGk5PA=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-01 19:47

Fingerprint: b18befd9dd6536aa30550de50513aa3676a95b785c092b25b4696057b8a27a01

{
    "clientTcpRtt": 3,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "fd795fc9704478b190d5f6bd5d38ab14afeee5adacfb0549d891b77a965473b6",
        "clientHandshake": "eda98022ac07ce8cc218cf96b5363707b5e35723d2a2d6593c180c809229d54d",
        "serverHandshake": "5c74e19e3fbfae27377f279318a0d2b8ea053d695a5fa519ce248ae21fe96746",
        "serverFinished": "8299915456780553bec951b4eaa1b30016badc30af648e51b2d02e92583364f4"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "HC8hP6xOYvOQpRYJfbSxy+eUUPwwGybjEuEi0jPWM60="
}

Found on 2024-10-30 21:28

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e8551243bea00951919c8801

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "1d2052a4daf172544b82b0b32b69a6ed189a33183877aa21bdc9b342494ecf01",
        "clientHandshake": "4fb1100bbe99981abf9185781b82af6ee9b37ceddbc7de7cff3ea4265f65b0c0",
        "serverHandshake": "0a575388d72ccc231a845fb407742fa2a7e108290f2643138136c367c57dae76",
        "serverFinished": "53908547750e306630a61d38391e72001c1ea750c5578ab5f96aeec880fa6403"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "ZYyOqGJZX6UgJuSBUCUKS/QKSubs7snG9Vc2jwqzONc="
}

Found on 2024-10-26 19:00

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bfe6c5fd00

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "bc5bf111772771fa69ea2b44a2b754e55b9b709fffbcdd0d6af793fcd3563ac3",
        "clientHandshake": "5cc3c676ecccdf17b7e81b765ae21a63a83bdec373076f247bb0bf0b79750488",
        "serverHandshake": "d274b027ab3abb175fb144551080dce26e3e3bba88fb6233e771e870c647bb58",
        "serverFinished": "83166cf3cf14ecaa4b1c71968132b54f4c3ca4db4feee7615fe263863765d44a"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "NqY/5PK5y+Xhhi95tTOeMQxAfb40oU2yMe0hvZVqhBk=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-24 17:38

Fingerprint: b18befd9dd6536aa30550de59cef8833ddfea2b1b560964ac825b060214271f2

{
    "clientTcpRtt": 11,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "ebf3c95ecbd963ea9e0f9e2aa0b67964313c93ae55c9d2e7e477b1f2228d4cae",
        "clientHandshake": "fb1f970a434c1660bb5a39b4e6e552bcd7bceb4b663f8fc2381d89f512c7cd62",
        "serverHandshake": "dc2b49ae9ca088af162957c1e1d8f02a368902e4ca9d0978993f83f85adc5306",
        "serverFinished": "90136e7ce74922a312cd38f7f05b6983614094b68e1015de16ac233f5a327d97"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "6+spRf87ia3ZHQXfAv0XhxAasaIwAKmrPpehVZ4CWOI=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-10-22 01:18

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf3f2d2a4a

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "238a321361c6992f999b677ed8d49a35eed1423bdaca9a1f1aa497b893d70801",
        "clientHandshake": "08c0249bd7cd9cb45d4f1c5ab3058d64ec4023a9569c322998f25865787e307c",
        "serverHandshake": "830bd1e0c52e14e9ec135fdb31f15fe98c0d66c2439449b78b3b66cdbf845fcd",
        "serverFinished": "90eab6486dd98a5a7615520baa621f2794a87c7fce2e98566b2a7b1fc565f551"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "/GsbZtOd96zhfUvz3GpR2q1sqn2YTsw2U/3+q0fgNYc=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-20 01:48

Fingerprint: b18befd9dd6536aa30550de50313a6d8b3a6b275d49ca986418a7fec674d36c2

{
    "clientTcpRtt": 1,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "ac019639981dd6fff60483e047a1cbc7794d1d5cda489f99d86cafe9a4524947",
        "clientHandshake": "c440aab825078c8de48040aa4b91c473f9958ed5f8b3d196014cb3b816bb7042",
        "serverHandshake": "7ab9f573e6594d4266640399c9f83ad437265014623fbb5b47f5199792da5b98",
        "serverFinished": "a8ecb434297294dda86e2baaa6aebbca314e15fe804f9a9c780fba9011aa373f"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "2oGFgax6ge+Rc//lyPdGJ03JHn1UY4KNbKThUYkPdzo="
}

Found on 2024-10-18 19:58

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f1d64bb2d7

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "5623666c888784e64580275d1a7071dc06c8fea10601222d9c08e30cc7499f33",
        "clientHandshake": "1c4591e10cad6797330c92750e697cc9c4f5bb2e21b7b1bc4906ff4767221b28",
        "serverHandshake": "ef566e142bf9ff0ac21df48cd4f1b8bbb27e95acad9ec770a4d4b61881a1cc06",
        "serverFinished": "6f72deaaffb8a443673ce92777f6ed6a51cd68fef9100efaff880ac3c9c6f377"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "DzdbIY8dWd4EsLKL1cEEfFaJV1qQABGHrdejmd9BFVc=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-10-17 02:15

Fingerprint: b18befd9dd6536aa30550de50613ab8103e83673b8015ad048cc6782a92947b3

{
    "clientTcpRtt": 2,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "3b67f9ab0ea0e910321c756cabbc209f790d3649011b0126c4d2b646cabc06ce",
        "clientHandshake": "c19378159be5d28d96a285139f8945557f6e007210e2ddadacbc05a7d173524f",
        "serverHandshake": "371de8b91887251a880f6c7940595aa40e7ba7ff791f21c8896df38eeb095df0",
        "serverFinished": "ac9859ca3f245915231f31705ee7343f1f7be0dad0da804db3ed8aa42fa623d1"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "A79r9stOsnjxymjYq/N1GrmguIP5An8bVkT0MxV69hc=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-14 22:20

Fingerprint: b18befd9dd6536aa30550de50613ab81415ef672dfa72fa382ed85b11ea67991

{
    "clientTcpRtt": 2,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "11fe752373a891212641fe39f4705a4ce7be6835414bce0b7ea1f5b5e457032a",
        "clientHandshake": "815457098b25985f8c08a1dca747b36de0add921b8e49c6dacb876f9d3449904",
        "serverHandshake": "e5e49867af0a8ab57a783cfcb3f4dc63fa94695c15400842f111395e8d374b99",
        "serverFinished": "ca56057aaf008d3966bcf24708972e8dfeb420186bad3233e4f22ee25eefcf51"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "J9IFGvPeBFTf8u4/7eH2Qo254xCOmOIp19DvfCtSUTw="
}

Found on 2024-10-12 18:19

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf36904a94

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "42facad3c7361194e1940aa0ad8dc7653030cfcee43feeee87ae61aa97c7fecc",
        "clientHandshake": "3370cf778c372a8910645ed38c14b35068e5b88426c4bcbbc587f85d394195e0",
        "serverHandshake": "5e38a77f4a8dcd91854898f5488e3cb85977cc54d826cc5d8014c22bfd72bab4",
        "serverFinished": "fccaf7cb38ba5171db370aed49f5d7718abd84bbd2d51901c6e6e63247fd5878"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "ZSh1GKq4tQCD6amdf0spc5eHwz+UH/rna9mQyqYldJU=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-10 17:27

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf250e5091

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "3453c6a675d6fbd8b4696aa094d217bac31fd1eea2fe197dddccf9683c852c49",
        "clientHandshake": "5fd5ca12e0ac207ae121c962d9eb94abce141c39fa867d0d18cae3ca2282e7d8",
        "serverHandshake": "3070da7a0436ecbb2fdfaae4c9ee152f81fe50c7da64397a92544b33d63d6e72",
        "serverFinished": "e7f6a02b24adadb2d0093696d956bb6ec52f0b0948339811185a4c8cb166d1ef"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "497",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "qXmBYsgDn4W3vuEE/1P1aOJmJLnfxfWV1azKkcYlmBo=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-08 16:06

Fingerprint: b18befd9dd6536aa30550de50313a6d8d2d8cb37ba3c333cbacc658ef4cb3dd0

{
    "clientTcpRtt": 1,
    "longitude": "-121.96200",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "fe9316fddc2064f577a408174600b00e1c0cc77c174c81d180580f6dc1fc0407",
        "clientHandshake": "e4a4c4b7555654dc9c753018894d075c93ede7158a01be49aea60e6652572212",
        "serverHandshake": "172c421eba1588e5a6e37b1252f97211f4f764a9944a3f9c0b10c320336fd1b7",
        "serverFinished": "d5b989a1f5f889f74126787d03d12ed8dd08f9cae568a3d15b80a39cc6cf2871"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Santa Clara",
    "timezone": "America/Los_Angeles",
    "colo": "SJC",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "95054",
    "region": "California",
    "latitude": "37.39310",
    "requestPriority": "",
    "regionCode": "CA",
    "asOrganization": "Digital Ocean",
    "metroCode": "807",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "n3C6mSDG6awDuc5yeV1tY4HYCDgT6JmCUyc1uGKtAYE="
}

Found on 2024-10-06 08:26

Fingerprint: b18befd9dd6536aa30550de599ef834a7f944d1c4d0fcc519eb079b3da785feb

{
    "clientTcpRtt": 16,
    "longitude": "77.58550",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "IN",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "7d1965ff964f0a881ed96bf16391324aa7ba162b4612fb213c35f1e44c8d578a",
        "clientHandshake": "bb04f42fc3756ebaacd4078efa7e8ccd71a0ae1d9729ef6a23974529810ef999",
        "serverHandshake": "360dcea5c5230abe1b3a4675b8ace2036aaf96c86c4c3a8c07e06f6e8296d5ef",
        "serverFinished": "928b8f6bb8b3f3a8c6b4ceaa734dfe92d5b2ce5fa64f4ba602a5dc138dd363fa"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Bengaluru",
    "timezone": "Asia/Kolkata",
    "colo": "BOM",
    "tlsClientHelloLength": "497",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "560100",
    "region": "Karnataka",
    "latitude": "12.96340",
    "requestPriority": "",
    "regionCode": "KA",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "czGKfNNaqUA9uZfzTHWOJOWRS8FoAP0he0ozed/eAts="
}

Found on 2024-10-06 08:26

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: idnmania.com
Port: 443
URL: https://idnmania.com

First seen 2023-03-29 03:40
Last seen 2024-12-19 03:48
Open for 631 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8ee05d8b8ee05d8b6d0b3c2b5ae4df5b8f99131bdfdaadbd

Found 124 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/desktop/assets
/template/alpha/desktop/assets/7winbet
/template/alpha/desktop/assets/7winbet/css
/template/alpha/desktop/assets/7winbet/img
/template/alpha/desktop/assets/7winbet/img/download
/template/alpha/desktop/assets/7winbet/img/esport
/template/alpha/desktop/assets/7winbet/img/home
/template/alpha/desktop/assets/7winbet/img/idnlive
/template/alpha/desktop/assets/7winbet/img/livecasino
/template/alpha/desktop/assets/7winbet/img/logo
/template/alpha/desktop/assets/7winbet/img/Maintenance
/template/alpha/desktop/assets/7winbet/img/poker
/template/alpha/desktop/assets/7winbet/img/referral
/template/alpha/desktop/assets/7winbet/img/register
/template/alpha/desktop/assets/7winbet/img/Slots
/template/alpha/desktop/assets/7winbet/img/Sportbook
/template/alpha/desktop/assets/7winbet/img/tangkas
/template/alpha/desktop/assets/7winbet/img/tembak
/template/alpha/desktop/assets/7winbet/img/togel
/template/alpha/desktop/assets/ajaibslots
/template/alpha/desktop/assets/alphaslot88
/template/alpha/desktop/assets/anekaslots
/template/alpha/desktop/assets/areaslots
/template/alpha/desktop/assets/asianwin88
/template/alpha/desktop/assets/betcoin
/template/alpha/desktop/assets/bethoki77
/template/alpha/desktop/assets/betslots88
/template/alpha/desktop/assets/bolagg
/template/alpha/desktop/assets/capital303
/template/alpha/desktop/assets/caspo777
/template/alpha/desktop/assets/cemeslot
/template/alpha/desktop/assets/coin303
/template/alpha/desktop/assets/dash86
/template/alpha/desktop/assets/dewata
/template/alpha/desktop/assets/duniabet
/template/alpha/desktop/assets/enterslots
/template/alpha/desktop/assets/exabet88
/template/alpha/desktop/assets/gaskeunbet
/template/alpha/desktop/assets/gladiator88
/template/alpha/desktop/assets/gobetasia
/template/alpha/desktop/assets/holyslots
/template/alpha/desktop/assets/ibetwin
/template/alpha/desktop/assets/idncash
/template/alpha/desktop/assets/idngg
/template/alpha/desktop/assets/ihokibet
/template/alpha/desktop/assets/ilucky88
/template/alpha/desktop/assets/indogame888
/template/alpha/desktop/assets/indoslots
/template/alpha/desktop/assets/jagoslots
/template/alpha/desktop/assets/javaplay88
/template/alpha/desktop/assets/kemonbet
/template/alpha/desktop/assets/kerabatslot
/template/alpha/desktop/assets/klik99
/template/alpha/desktop/assets/klikslots
/template/alpha/desktop/assets/klubslot
/template/alpha/desktop/assets/koinid
/template/alpha/desktop/assets/koinslots
/template/alpha/desktop/assets/koinvegas
/template/alpha/desktop/assets/landslot
/template/alpha/desktop/assets/ligaplay88
/template/alpha/desktop/assets/maniaslot
/template/alpha/desktop/assets/megahoki88
/template/alpha/desktop/assets/nagagg
/template/alpha/desktop/assets/niagabet
/template/alpha/desktop/assets/nyalabet
/template/alpha/desktop/assets/permatabet
/template/alpha/desktop/assets/playslots88
/template/alpha/desktop/assets/powernet
/template/alpha/desktop/assets/qq88bet
/template/alpha/desktop/assets/shienslot
/template/alpha/desktop/assets/shiobet
/template/alpha/desktop/assets/simplebet8
/template/alpha/desktop/assets/slotasiabet
/template/alpha/desktop/assets/slotid88
/template/alpha/desktop/assets/slotsgg
/template/alpha/desktop/assets/stasiunplay
/template/alpha/desktop/assets/tester
/template/alpha/desktop/assets/tester2
/template/alpha/desktop/assets/tradisibet
/template/alpha/desktop/assets/ubocash
/template/alpha/desktop/assets/vegasgg
/template/alpha/desktop/assets/vegashoki88
/template/alpha/desktop/assets/vipbet88
/template/alpha/desktop/assets/visabet88
/template/alpha/desktop/assets/winslots8
/template/alpha/desktop/master
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-12-19 03:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df2728235f

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/desktop/assets
/template/alpha/desktop/assets/7winbet
/template/alpha/desktop/assets/7winbet/css
/template/alpha/desktop/assets/7winbet/img
/template/alpha/desktop/assets/7winbet/img/download
/template/alpha/desktop/assets/7winbet/img/esport
/template/alpha/desktop/assets/7winbet/img/esport/Auto Chess.webp
/template/alpha/desktop/assets/7winbet/img/esport/CSGO.webp
/template/alpha/desktop/assets/7winbet/img/esport/Dota 2.webp
/template/alpha/desktop/assets/7winbet/img/esport/esport-banner.webp
/template/alpha/desktop/assets/7winbet/img/esport/FIFA.webp
/template/alpha/desktop/assets/7winbet/img/esport/KOG.webp
/template/alpha/desktop/assets/7winbet/img/esport/LOL.webp
/template/alpha/desktop/assets/7winbet/img/esport/ML.webp
/template/alpha/desktop/assets/7winbet/img/esport/Overwatch.webp
/template/alpha/desktop/assets/7winbet/img/esport/PUBG.webp
/template/alpha/desktop/assets/7winbet/img/esport/Rainbow 6.webp
/template/alpha/desktop/assets/7winbet/img/esport/Star Craft.webp
/template/alpha/desktop/assets/7winbet/img/esport/Valorant.webp
/template/alpha/desktop/assets/7winbet/img/home
/template/alpha/desktop/assets/7winbet/img/home/Banner-min.webp
/template/alpha/desktop/assets/7winbet/img/home/Device.webp
/template/alpha/desktop/assets/7winbet/img/home/Easy-Steps.gif
/template/alpha/desktop/assets/7winbet/img/home/Live-Chat.webp
/template/alpha/desktop/assets/7winbet/img/home/Our Game
/template/alpha/desktop/assets/7winbet/img/home/Our Game/Idnlive
/template/alpha/desktop/assets/7winbet/img/home/Our Game/LiveCasino
/template/alpha/desktop/assets/7winbet/img/home/Provider
/template/alpha/desktop/assets/7winbet/img/idnlive
/template/alpha/desktop/assets/7winbet/img/livecasino
/template/alpha/desktop/assets/7winbet/img/logo
/template/alpha/desktop/assets/7winbet/img/Maintenance
/template/alpha/desktop/assets/7winbet/img/poker
/template/alpha/desktop/assets/7winbet/img/referral
/template/alpha/desktop/assets/7winbet/img/register
/template/alpha/desktop/assets/7winbet/img/Slots
/template/alpha/desktop/assets/7winbet/img/Sportbook
/template/alpha/desktop/assets/7winbet/img/tangkas
/template/alpha/desktop/assets/7winbet/img/tembak
/template/alpha/desktop/assets/7winbet/img/togel
/template/alpha/desktop/assets/ajaibslots
/template/alpha/desktop/assets/alphaslot88
/template/alpha/desktop/assets/anekaslots
/template/alpha/desktop/assets/areaslots
/template/alpha/desktop/assets/asianwin88
/template/alpha/desktop/assets/betcoin
/template/alpha/desktop/assets/bethoki77
/template/alpha/desktop/assets/betslots88
/template/alpha/desktop/assets/bolagg
/template/alpha/desktop/assets/capital303
/template/alpha/desktop/assets/caspo777
/template/alpha/desktop/assets/cemeslot
/template/alpha/desktop/assets/coin303
/template/alpha/desktop/assets/dash86
/template/alpha/desktop/assets/dewata
/template/alpha/desktop/assets/duniabet
/template/alpha/desktop/assets/enterslots
/template/alpha/desktop/assets/exabet88
/template/alpha/desktop/assets/gaskeunbet
/template/alpha/desktop/assets/gladiator88
/template/alpha/desktop/assets/gobetasia
/template/alpha/desktop/assets/holyslots
/template/alpha/desktop/assets/ibetwin
/template/alpha/desktop/assets/idncash
/template/alpha/desktop/assets/idngg
/template/alpha/desktop/assets/ihokibet
/template/alpha/desktop/assets/ilucky88
/template/alpha/desktop/assets/indogame888
/template/alpha/desktop/assets/indoslots
/template/alpha/desktop/assets/jagoslots
/template/alpha/desktop/assets/javaplay88
/template/alpha/desktop/assets/kemonbet
/template/alpha/desktop/assets/kerabatslot
/template/alpha/desktop/assets/klik99
/template/alpha/desktop/assets/klikslots
/template/alpha/desktop/assets/klubslot
/template/alpha/desktop/assets/koinid
/template/alpha/desktop/assets/koinslots
/template/alpha/desktop/assets/koinvegas
/template/alpha/desktop/assets/landslot
/template/alpha/desktop/assets/ligaplay88
/template/alpha/desktop/assets/maniaslot
/template/alpha/desktop/assets/megahoki88
/template/alpha/desktop/assets/nagagg
/template/alpha/desktop/assets/niagabet
/template/alpha/desktop/assets/nyalabet
/template/alpha/desktop/assets/permatabet
/template/alpha/desktop/assets/playslots88
/template/alpha/desktop/assets/powernet
/template/alpha/desktop/assets/qq88bet
/template/alpha/desktop/assets/shienslot
/template/alpha/desktop/assets/shiobet
/template/alpha/desktop/assets/simplebet8
/template/alpha/desktop/assets/slotasiabet
/template/alpha/desktop/assets/slotid88
/template/alpha/desktop/assets/slotsgg
/template/alpha/desktop/assets/stasiunplay
/template/alpha/desktop/assets/tester
/template/alpha/desktop/assets/tester2
/template/alpha/desktop/assets/tradisibet
/template/alpha/desktop/assets/ubocash
/template/alpha/desktop/assets/vegasgg

Found on 2024-12-17 10:41

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce193dd5522a3d95d73832101a8d379d81292

Found 36 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-12-14 09:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c88c2190688c219061d32035ec632256a9804734eadc3f10c

Found 107 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/desktop/assets
/template/alpha/desktop/assets/7winbet
/template/alpha/desktop/assets/ajaibslots
/template/alpha/desktop/assets/alphaslot88
/template/alpha/desktop/assets/anekaslots
/template/alpha/desktop/assets/areaslots
/template/alpha/desktop/assets/asianwin88
/template/alpha/desktop/assets/betcoin
/template/alpha/desktop/assets/bethoki77
/template/alpha/desktop/assets/betslots88
/template/alpha/desktop/assets/bolagg
/template/alpha/desktop/assets/capital303
/template/alpha/desktop/assets/caspo777
/template/alpha/desktop/assets/cemeslot
/template/alpha/desktop/assets/coin303
/template/alpha/desktop/assets/dash86
/template/alpha/desktop/assets/dewata
/template/alpha/desktop/assets/duniabet
/template/alpha/desktop/assets/enterslots
/template/alpha/desktop/assets/exabet88
/template/alpha/desktop/assets/gaskeunbet
/template/alpha/desktop/assets/gladiator88
/template/alpha/desktop/assets/gobetasia
/template/alpha/desktop/assets/holyslots
/template/alpha/desktop/assets/ibetwin
/template/alpha/desktop/assets/idncash
/template/alpha/desktop/assets/idngg
/template/alpha/desktop/assets/ihokibet
/template/alpha/desktop/assets/ilucky88
/template/alpha/desktop/assets/indogame888
/template/alpha/desktop/assets/indoslots
/template/alpha/desktop/assets/jagoslots
/template/alpha/desktop/assets/javaplay88
/template/alpha/desktop/assets/kemonbet
/template/alpha/desktop/assets/kerabatslot
/template/alpha/desktop/assets/klik99
/template/alpha/desktop/assets/klikslots
/template/alpha/desktop/assets/klubslot
/template/alpha/desktop/assets/koinid
/template/alpha/desktop/assets/koinslots
/template/alpha/desktop/assets/koinvegas
/template/alpha/desktop/assets/landslot
/template/alpha/desktop/assets/ligaplay88
/template/alpha/desktop/assets/maniaslot
/template/alpha/desktop/assets/megahoki88
/template/alpha/desktop/assets/nagagg
/template/alpha/desktop/assets/niagabet
/template/alpha/desktop/assets/nyalabet
/template/alpha/desktop/assets/permatabet
/template/alpha/desktop/assets/playslots88
/template/alpha/desktop/assets/powernet
/template/alpha/desktop/assets/qq88bet
/template/alpha/desktop/assets/shienslot
/template/alpha/desktop/assets/shiobet
/template/alpha/desktop/assets/simplebet8
/template/alpha/desktop/assets/slotasiabet
/template/alpha/desktop/assets/slotid88
/template/alpha/desktop/assets/slotsgg
/template/alpha/desktop/assets/stasiunplay
/template/alpha/desktop/assets/tester
/template/alpha/desktop/assets/tester2
/template/alpha/desktop/assets/tradisibet
/template/alpha/desktop/assets/ubocash
/template/alpha/desktop/assets/vegasgg
/template/alpha/desktop/assets/vegashoki88
/template/alpha/desktop/assets/vipbet88
/template/alpha/desktop/assets/visabet88
/template/alpha/desktop/assets/winslots8
/template/alpha/desktop/master
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-12-12 18:45

Severity: medium
Fingerprint: 5f32cf5d6962f09c2d9d96002d9d960017d08b18e5887b208f2546c491751e6e

Found 109 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/desktop/assets
/template/alpha/desktop/assets/7winbet
/template/alpha/desktop/assets/7winbet/css
/template/alpha/desktop/assets/7winbet/img
/template/alpha/desktop/assets/ajaibslots
/template/alpha/desktop/assets/alphaslot88
/template/alpha/desktop/assets/anekaslots
/template/alpha/desktop/assets/areaslots
/template/alpha/desktop/assets/asianwin88
/template/alpha/desktop/assets/betcoin
/template/alpha/desktop/assets/bethoki77
/template/alpha/desktop/assets/betslots88
/template/alpha/desktop/assets/bolagg
/template/alpha/desktop/assets/capital303
/template/alpha/desktop/assets/caspo777
/template/alpha/desktop/assets/cemeslot
/template/alpha/desktop/assets/coin303
/template/alpha/desktop/assets/dash86
/template/alpha/desktop/assets/dewata
/template/alpha/desktop/assets/duniabet
/template/alpha/desktop/assets/enterslots
/template/alpha/desktop/assets/exabet88
/template/alpha/desktop/assets/gaskeunbet
/template/alpha/desktop/assets/gladiator88
/template/alpha/desktop/assets/gobetasia
/template/alpha/desktop/assets/holyslots
/template/alpha/desktop/assets/ibetwin
/template/alpha/desktop/assets/idncash
/template/alpha/desktop/assets/idngg
/template/alpha/desktop/assets/ihokibet
/template/alpha/desktop/assets/ilucky88
/template/alpha/desktop/assets/indogame888
/template/alpha/desktop/assets/indoslots
/template/alpha/desktop/assets/jagoslots
/template/alpha/desktop/assets/javaplay88
/template/alpha/desktop/assets/kemonbet
/template/alpha/desktop/assets/kerabatslot
/template/alpha/desktop/assets/klik99
/template/alpha/desktop/assets/klikslots
/template/alpha/desktop/assets/klubslot
/template/alpha/desktop/assets/koinid
/template/alpha/desktop/assets/koinslots
/template/alpha/desktop/assets/koinvegas
/template/alpha/desktop/assets/landslot
/template/alpha/desktop/assets/ligaplay88
/template/alpha/desktop/assets/maniaslot
/template/alpha/desktop/assets/megahoki88
/template/alpha/desktop/assets/nagagg
/template/alpha/desktop/assets/niagabet
/template/alpha/desktop/assets/nyalabet
/template/alpha/desktop/assets/permatabet
/template/alpha/desktop/assets/playslots88
/template/alpha/desktop/assets/powernet
/template/alpha/desktop/assets/qq88bet
/template/alpha/desktop/assets/shienslot
/template/alpha/desktop/assets/shiobet
/template/alpha/desktop/assets/simplebet8
/template/alpha/desktop/assets/slotasiabet
/template/alpha/desktop/assets/slotid88
/template/alpha/desktop/assets/slotsgg
/template/alpha/desktop/assets/stasiunplay
/template/alpha/desktop/assets/tester
/template/alpha/desktop/assets/tester2
/template/alpha/desktop/assets/tradisibet
/template/alpha/desktop/assets/ubocash
/template/alpha/desktop/assets/vegasgg
/template/alpha/desktop/assets/vegashoki88
/template/alpha/desktop/assets/vipbet88
/template/alpha/desktop/assets/visabet88
/template/alpha/desktop/assets/winslots8
/template/alpha/desktop/master
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-12-08 16:25

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df139a1678

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/desktop/assets
/template/alpha/desktop/assets/7winbet
/template/alpha/desktop/assets/7winbet/css
/template/alpha/desktop/assets/7winbet/img
/template/alpha/desktop/assets/7winbet/img/download
/template/alpha/desktop/assets/7winbet/img/esport
/template/alpha/desktop/assets/7winbet/img/esport/Auto Chess.webp
/template/alpha/desktop/assets/7winbet/img/esport/CSGO.webp
/template/alpha/desktop/assets/7winbet/img/esport/Dota 2.webp
/template/alpha/desktop/assets/7winbet/img/esport/esport-banner.webp
/template/alpha/desktop/assets/7winbet/img/esport/FIFA.webp
/template/alpha/desktop/assets/7winbet/img/esport/KOG.webp
/template/alpha/desktop/assets/7winbet/img/esport/LOL.webp
/template/alpha/desktop/assets/7winbet/img/esport/ML.webp
/template/alpha/desktop/assets/7winbet/img/esport/Overwatch.webp
/template/alpha/desktop/assets/7winbet/img/esport/PUBG.webp
/template/alpha/desktop/assets/7winbet/img/esport/Rainbow 6.webp
/template/alpha/desktop/assets/7winbet/img/esport/Star Craft.webp
/template/alpha/desktop/assets/7winbet/img/esport/Valorant.webp
/template/alpha/desktop/assets/7winbet/img/home
/template/alpha/desktop/assets/7winbet/img/home/Banner-min.webp
/template/alpha/desktop/assets/7winbet/img/home/Device.webp
/template/alpha/desktop/assets/7winbet/img/home/Easy-Steps.gif
/template/alpha/desktop/assets/7winbet/img/home/Live-Chat.webp
/template/alpha/desktop/assets/7winbet/img/home/Our Game
/template/alpha/desktop/assets/7winbet/img/home/Our Game/Idnlive
/template/alpha/desktop/assets/7winbet/img/home/Our Game/LiveCasino
/template/alpha/desktop/assets/7winbet/img/home/Provider
/template/alpha/desktop/assets/7winbet/img/idnlive
/template/alpha/desktop/assets/7winbet/img/livecasino
/template/alpha/desktop/assets/7winbet/img/logo
/template/alpha/desktop/assets/7winbet/img/logo/arrow-down.webp
/template/alpha/desktop/assets/7winbet/img/logo/arrow-up.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank
/template/alpha/desktop/assets/7winbet/img/logo/bank/bca.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/bni.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/bri.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/btpn.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/cimb.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/dana.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/danamon.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/gopay.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/jenius.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/kospin.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/linkaja.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/mandiri.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/maybank.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/mega.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/ovo.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/panin.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/permata.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank/white
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/bca.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/bni.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/bri.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/cimb.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/dana.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/gopay.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/jenius.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/linkaja.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/mandiri.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/maybank.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/mega.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/ovo.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/panin.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/permata.webp
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/qr
/template/alpha/desktop/assets/7winbet/img/logo/bank-depo/va
/template/alpha/desktop/assets/7winbet/img/logo/bank-footer
/template/alpha/desktop/assets/7winbet/img/logo/bannervoucher-reseller.webp
/template/alpha/desktop/assets/7winbet/img/logo/BMM-Testlabs.webp
/template/alpha/desktop/assets/7winbet/img/logo/Caution.webp
/template/alpha/desktop/assets/7winbet/img/logo/cautious.webp
/template/alpha/desktop/assets/7winbet/img/logo/check.webp
/template/alpha/desktop/assets/7winbet/img/logo/cross.webp
/template/alpha/desktop/assets/7winbet/img/logo/favicon.webp
/template/alpha/desktop/assets/7winbet/img/logo/flag
/template/alpha/desktop/assets/7winbet/img/logo/history-game.webp
/template/alpha/desktop/assets/7winbet/img/logo/ico-flag-id.webp
/template/alpha/desktop/assets/7winbet/img/logo/ico-flag-uk.webp
/template/alpha/desktop/assets/7winbet/img/logo/ico-flag-vn.webp
/template/alpha/desktop/assets/7winbet/img/logo/ico-flag.webp
/template/alpha/desktop/assets/7winbet/img/logo/ico-id.webp
/template/alpha/desktop/assets/7winbet/img/logo/idnlive
/template/alpha/desktop/assets/7winbet/img/logo/logo.webp
/template/alpha/desktop/assets/7winbet/img/logo/new-bonus-dwb.gif
/template/alpha/desktop/assets/7winbet/img/logo/no-enter.webp
/template/alpha/desktop/assets/7winbet/img/logo/Pagcor.webp
/template/alpha/desktop/assets/7winbet/img/logo/ring-bell.webp
/template/alpha/desktop/assets/7winbet/img/logo/slots
/template/alpha/desktop/assets/7winbet/img/logo/tembak
/template/alpha/desktop/assets/7winbet/img/logo/template-background.webp
/template/alpha/desktop/assets/7winbet/img/logo/voucher88.webp
/template/alpha/desktop/assets/7winbet/img/Maintenance
/template/alpha/desktop/assets/7winbet/img/Maintenance/gameMT
/template/alpha/desktop/assets/7winbet/img/Maintenance/games
/template/alpha/desktop/assets/7winbet/img/poker
/template/alpha/desktop/assets/7winbet/img/referral
/template/alpha/desktop/assets/7winbet/img/register
/template/alpha/desktop/assets/7winbet/img/Slots
/template/alpha/desktop/assets/7winbet/img/Sportbook

Found on 2024-12-04 17:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c778888b4778888b4254f9024ff9259f4f01f0310b01a7f46

Found 40 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/desktop/assets
/template/alpha/desktop/master
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-11-30 06:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd53ac2c85bb142a19dd6321012ce2ec5c

Found 38 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-11-27 00:56

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d4047824166c30944d691044893c6860b1ce9d8d

Found 35 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-11-12 03:27

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45e7880e7d12ff5e81f47e5999206d7535

Found 30 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-10-16 18:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3dfc70f6c7c

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/assets/css
/template/alpha/assets/favico
/template/alpha/assets/font
/template/alpha/assets/img
/template/alpha/assets/img/depositvirtual
/template/alpha/assets/img/depositvirtual/qr
/template/alpha/assets/img/download
/template/alpha/assets/img/games
/template/alpha/assets/img/icon
/template/alpha/assets/img/maintenance
/template/alpha/assets/img/maintenance/desktop
/template/alpha/assets/img/maintenance/mobile
/template/alpha/assets/js
/template/alpha/desktop
/template/alpha/desktop/assets
/template/alpha/desktop/assets/7winbet
/template/alpha/desktop/assets/7winbet/css
/template/alpha/desktop/assets/7winbet/img
/template/alpha/desktop/assets/7winbet/img/download
/template/alpha/desktop/assets/7winbet/img/esport
/template/alpha/desktop/assets/7winbet/img/esport/Auto Chess.webp
/template/alpha/desktop/assets/7winbet/img/esport/CSGO.webp
/template/alpha/desktop/assets/7winbet/img/esport/Dota 2.webp
/template/alpha/desktop/assets/7winbet/img/esport/esport-banner.webp
/template/alpha/desktop/assets/7winbet/img/esport/FIFA.webp
/template/alpha/desktop/assets/7winbet/img/esport/KOG.webp
/template/alpha/desktop/assets/7winbet/img/esport/LOL.webp
/template/alpha/desktop/assets/7winbet/img/esport/ML.webp
/template/alpha/desktop/assets/7winbet/img/esport/Overwatch.webp
/template/alpha/desktop/assets/7winbet/img/esport/PUBG.webp
/template/alpha/desktop/assets/7winbet/img/esport/Rainbow 6.webp
/template/alpha/desktop/assets/7winbet/img/esport/Star Craft.webp
/template/alpha/desktop/assets/7winbet/img/esport/Valorant.webp
/template/alpha/desktop/assets/7winbet/img/home
/template/alpha/desktop/assets/7winbet/img/home/Banner-min.webp
/template/alpha/desktop/assets/7winbet/img/home/Device.webp
/template/alpha/desktop/assets/7winbet/img/home/Easy-Steps.gif
/template/alpha/desktop/assets/7winbet/img/home/Live-Chat.webp
/template/alpha/desktop/assets/7winbet/img/home/Our Game
/template/alpha/desktop/assets/7winbet/img/home/Provider
/template/alpha/desktop/assets/7winbet/img/idnlive
/template/alpha/desktop/assets/7winbet/img/livecasino
/template/alpha/desktop/assets/7winbet/img/logo
/template/alpha/desktop/assets/7winbet/img/Maintenance
/template/alpha/desktop/assets/7winbet/img/poker
/template/alpha/desktop/assets/7winbet/img/referral
/template/alpha/desktop/assets/7winbet/img/register
/template/alpha/desktop/assets/7winbet/img/Slots
/template/alpha/desktop/assets/7winbet/img/Sportbook
/template/alpha/desktop/assets/7winbet/img/tangkas
/template/alpha/desktop/assets/7winbet/img/tembak
/template/alpha/desktop/assets/7winbet/img/togel
/template/alpha/desktop/assets/ajaibslots
/template/alpha/desktop/assets/alphaslot88
/template/alpha/desktop/assets/anekaslots
/template/alpha/desktop/assets/areaslots
/template/alpha/desktop/assets/asianwin88
/template/alpha/desktop/assets/betcoin
/template/alpha/desktop/assets/bethoki77
/template/alpha/desktop/assets/betslots88
/template/alpha/desktop/assets/bolagg
/template/alpha/desktop/assets/capital303
/template/alpha/desktop/assets/caspo777
/template/alpha/desktop/assets/cemeslot
/template/alpha/desktop/assets/coin303
/template/alpha/desktop/assets/dash86
/template/alpha/desktop/assets/dewata
/template/alpha/desktop/assets/duniabet
/template/alpha/desktop/assets/enterslots
/template/alpha/desktop/assets/exabet88
/template/alpha/desktop/assets/gaskeunbet
/template/alpha/desktop/assets/gladiator88
/template/alpha/desktop/assets/gobetasia
/template/alpha/desktop/assets/holyslots
/template/alpha/desktop/assets/ibetwin
/template/alpha/desktop/assets/idncash
/template/alpha/desktop/assets/idngg
/template/alpha/desktop/assets/ihokibet
/template/alpha/desktop/assets/ilucky88
/template/alpha/desktop/assets/indogame888
/template/alpha/desktop/assets/indoslots
/template/alpha/desktop/assets/jagoslots
/template/alpha/desktop/assets/javaplay88
/template/alpha/desktop/assets/kemonbet
/template/alpha/desktop/assets/kerabatslot
/template/alpha/desktop/assets/klik99
/template/alpha/desktop/assets/klikslots
/template/alpha/desktop/assets/klubslot
/template/alpha/desktop/assets/koinid
/template/alpha/desktop/assets/koinslots
/template/alpha/desktop/assets/koinvegas
/template/alpha/desktop/assets/landslot
/template/alpha/desktop/assets/ligaplay88
/template/alpha/desktop/assets/maniaslot
/template/alpha/desktop/assets/megahoki88
/template/alpha/desktop/assets/nagagg
/template/alpha/desktop/assets/niagabet
/template/alpha/desktop/assets/nyalabet
/template/alpha/desktop/assets/permatabet
/template/alpha/desktop/assets/playslots88
/template/alpha/desktop/assets/powernet
/template/alpha/desktop/assets/qq88bet
/template/alpha/desktop/assets/shienslot
/template/alpha/desktop/assets/shiobet
/template/alpha/desktop/assets/simplebet8
/template/alpha/desktop/assets/slotasiabet
/template/alpha/desktop/assets/slotid88
/template/alpha/desktop/assets/slotsgg
/template/alpha/desktop/assets/stasiunplay
/template/alpha/desktop/assets/tester
/template/alpha/desktop/assets/tester2
/template/alpha/desktop/assets/tradisibet
/template/alpha/desktop/assets/ubocash
/template/alpha/desktop/assets/vegasgg
/template/alpha/desktop/assets/vegashoki88
/template/alpha/desktop/assets/vipbet88

Found on 2024-08-28 12:55

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf7c01fcc72b83f3ef11e604a7c48dd5b2

Found 25 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/placeholder
/index.php
/js
/mix-manifest.json
/plugins
/sw.js
/template
/template/alpha
/template/alpha/assets
/template/alpha/desktop
/template/alpha/mobile
/template/bolatangkas
/template/casino
/template/dewa21crypto
/template/dewagames
/template/dewatangkas
/template/idncash
/template/kdslots
/template/luckysafe
/template/tangkas
/template/template1
/web.config

Found on 2024-07-16 18:59

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: jolly-violet-f1d8.kkdukkduha.workers.dev
Port: 8443
URL: https://jolly-violet-f1d8.kkdukkduha.workers.dev:8443

First seen 2024-10-20 02:14
Last seen 2024-11-26 16:49
Open for 37 days

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906caf8765fd1

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "c7298152b66e6c092bcb5e50400919743e9f6959ae003a430f61c92dd57ae7ef",
        "clientHandshake": "abb79be927e98c172d656b5f5d5ea63bc556c63fec9812209d4a7b64477c3f32",
        "serverHandshake": "7734764838081e44b9f4303258d2ae06c591ec797aedb3e7de060e6ba3788178",
        "serverFinished": "d226bc4d846fbdfd03eae19b9bd1795ee6709c9be4440d62ffc0f717aa1ff011"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "qp2Z//XutLw/IQk7Pf3DQrh0/6d7lu0kPca6OeM5QWE="
}

Found on 2024-11-26 16:49

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a300cb68b24

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "6cdbc5cfb27857da04f11a15b8f4a079d61e41d20649c5f4f3182fe7bc9a04d7",
        "clientHandshake": "96fc7dd34f90d8158436f7cc47f8463954276a47c8646b74629b237a04fa2f30",
        "serverHandshake": "4aefc51e4267fe83c12a76c4b339cd114d9c5459aaee5ae01f70e847d71e2479",
        "serverFinished": "5360dfea993b1430f2ea34e7a08a0bdff37c440b88d1557191af7b412a3f0778"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "LCNGcq5pfnmSV0URYLoh4f7zfRe8k0LED5KDYy5bNlQ=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-24 12:41

Fingerprint: b18befd9dd6536aa30550de5fc139bc3d32daa31e16f60caebec4ee0da16f337

{
    "clientTcpRtt": 8,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "2f4e0e8523982f24131aa8333ad6a1ccde5b92e0fcf065c4cf301e30224a1991",
        "clientHandshake": "9f42c2f26ee73e86d59ed26d959309f6357012161e78a1d1375fff1af7dd9a0f",
        "serverHandshake": "e0240af40a0391b163361c150524b29d9fb85fdca12b4129e9771a23b673371a",
        "serverFinished": "86f11ab04ca41ff0af1ebe4795c039f34f438f43c7c455aef52d17655dbc38b4"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "MAN",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "SJ3pekYEBAhMQHWjPHBUQtCQ6RjgIQEuq+8xrUyhRkw="
}

Found on 2024-11-22 13:35

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30e51746ae

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "2e3cf752bd510148585e78a12cdd3a312f5f6e360e0bcd0027d36a903e926954",
        "clientHandshake": "2ed8d77eae5cd5e7740537d7c5b117ae171c0be00a79bff5ae4325c963f5f3ab",
        "serverHandshake": "8e00a4a76df47da6facceceeb15ce8f8540e1019eb01bb8fa6b8e1c2d95ee66c",
        "serverFinished": "0ba4183b2e0b650514d3bb8ebb9f00cde412d75ef9208109527dca8ac71f6a10"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "T840UY5ms0vKWuH+SYt1JT/e1Un9VsPJ64SAUt7yA8w=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-20 16:22

Fingerprint: b18befd9dd6536aa30550de59bef86a070810d0919d5bdf2ca621af8757e0cbb

{
    "clientTcpRtt": 10,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "dd05ccb94be243af0119df2ffa5554b6b37da225f55c921859fe91b9af98d36f",
        "clientHandshake": "b0276a562050e5100134436e738cd894393dc086641e3f349c43327fa832fc26",
        "serverHandshake": "7c7ac2e383e289acad8afa0dc4b0280b5589982ece1e304d83f6083d0e5bfbcd",
        "serverFinished": "39a42193bc6d80c419a71c5ca9cc1f47cff0db4c76d1df2fd711c46641352bd5"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "SEESj7W93yb4qGAR9pdc4+6r5GwJOdzcyrwDa5HuRHM=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-18 09:32

Fingerprint: b18befd9dd6536aa30550de50313a6d83eeff30667f41b8f599a007d75c3a752

{
    "clientTcpRtt": 1,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "c7289071bfa40e8657321251bebb82c83d081e6a0e3c47c02dfa3d30e3468100",
        "clientHandshake": "4d3cc40bea0eae70058ed6ce573a9aa0fe8bb434d54c1e8c550464252c394a75",
        "serverHandshake": "1fafbde4ef75eb95cc0d0cf39eb06a43d640fc62faa6b98e75f439c888b1d205",
        "serverFinished": "c644136e51a4b861fc323e3da753e6b0a92d79c9c0a27462201618ce3e9c28af"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "zraaO2Yuzt/Ty78832EeCPBi/Wsasc4icVLVBhXvVoc="
}

Found on 2024-11-16 11:01

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a30b83e171f

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "6baaecf7f1976c2f3539bdeb8ebe8210c355598f036b0f991c34814b75026b23",
        "clientHandshake": "4149770c2b97c0d625927217affdbbf9eb2f6567ce968b0a4379a4742bfafe39",
        "serverHandshake": "b6ab2be29c58e3c3bc54d874a804a388ba8baf4a22bbd01e8c24f027f2a10b52",
        "serverFinished": "0c972632d37d84ff8760a865a003d5b028864f9833781195a53d2d0e921133e1"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "s5busu9iBCq1JZtsQ6QhWroMx2zjnegmZ5w5J0NVgJ8=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-14 11:23

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a3069879b28

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "1e4b8ebc730c6159a1f4b85f5b6d9c420c875417ed5a840300dc941a359b276b",
        "clientHandshake": "aa6f1fde91ff280b5d7119d63a03003ce0a3b72a09a25a2f08219ebf874b90b5",
        "serverHandshake": "b0400af0e67b0bc243295da58f9d25999c590f9b3751759d2e5bb232ef484332",
        "serverFinished": "03f7135fe6730bc4da6cafede6febb8a088045bc7086b4380bdaee015036f604"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "5Q9Arelmg+3clUJhBt9JamIUIgIm100fz30iW+7/G90=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-12 07:48

Fingerprint: b18befd9dd6536aa30550de50613ab8177f5704d9c7dd26e3d7f1624673ae6aa

{
    "clientTcpRtt": 2,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "9831fff91547826a33fb1ae933fa0294bf790fc96d54907d9eaf0ba0b626894b",
        "clientHandshake": "388c7c44b1d234abd04702896688f25d61befdabc197aba4139a0a09de2b10e3",
        "serverHandshake": "e8d0b3ae614917ef7d6e8e1542dd0108e7b657de1f43d3e094b55e0b049ddaa2",
        "serverFinished": "7b52aeeac9e32110a4345aa091a348f08d6005a8f0e49bb48b44a0838eb74230"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "jGNJjOIxhE8aYUOLiQZ0QzJHVwGd5HqrRqG3+AfKxd0=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-10 07:42

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf4396b6ed

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "c82b1abeecfcf03abadd57f31dbf9c6b548be9729acc61b2ec0fec26c710bdfd",
        "clientHandshake": "ec34dc5f1b1f7778f327affe6a59542eb85b1e74ec0303cc6c01ca2e11d45796",
        "serverHandshake": "5028b214d7aa76625893ba08fe768053fd75efdaf39a25fda13637324aff0ab7",
        "serverFinished": "4aad207aafbcda79c06dbc1340b107ad0a1230a12a07fc6af890ba6ad9b19b66"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "FH7aSe1KrHuh8Bv5TPxCsV1oyZe1GgzLtOBjwkErjEY=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-08 07:52

Fingerprint: b18befd9dd6536aa30550de50313a6d8b3a6b275d49ca986418a7fec0d694d0e

{
    "clientTcpRtt": 1,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "52470a179640f3f2ab1e91820636cec7b2d89d4fa19f79cbe61c87a5bbc6c39c",
        "clientHandshake": "db47e6672f3fa5fb1f67d53cc4e1474fc0a0207135c896449a6d95840e5653f4",
        "serverHandshake": "08c1ac9e60baa48e262dd6820d53ca379536aa0761e3f413d74a99244886b4bb",
        "serverFinished": "8940efd818708db1afccee94003c7671b0a5c32d1f4767186062cda8d68dd705"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "+XpdXbq1OAtya+7qlISvGGdl0G4LrLaShjlb5v6+2bg="
}

Found on 2024-11-06 10:53

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bff550eb25

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "dd514537dd8631d4392843573df4c075dec56f9fd0dc3399bfc81d2ac9b73a2e",
        "clientHandshake": "984ac35136bd933459d6000618468df7439be23338495b9b0218f8fcab5d7033",
        "serverHandshake": "58f1ab38d189a4839ca34e8be9f00c82b54044baaf0dca32f2f4585b7f5e29c3",
        "serverFinished": "42940bfc43f590033292cf421a636ff39a6cdfba2bacdd2c0e7312ab6c113018"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "4wfh83YF6RVBK4mOH5n0nc9iv/XbtPL6KAPnWAy93D8=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-04 13:57

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906ca5ed94a94

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "2e030f72392df1a35f9e601209f1677156fcd49ad3d8cc5faf382967ce995088",
        "clientHandshake": "1d7a67b4bef423e86e982d0c03d3e3efd4a0e3e23d43efdbbd763a930cf131c7",
        "serverHandshake": "16a90c879cb04e78405be4923d8d786d45a6d6fff8a3899ba9204e991b479bb4",
        "serverFinished": "de6fd564c40c753a946c17431228601cbb89187ac2afa5e2e2d603e6665c9e66"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "bPPpqOZhLO5urzhByhYIQ90WDql26u/m1p//sRlWCdI="
}

Found on 2024-11-02 10:48

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf7a04b2bc

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "353e41ff7567050d4330a8418a68e21b3e35efd947700ad6110917c7e418a32c",
        "clientHandshake": "cfb9baa1d03b7ff3c6a8ea21ecfaf383ca9bcdba25dde1e00a0dfe29a89a411e",
        "serverHandshake": "809deb62a4fe11aeb8bd7f523359110c60420afea31d05422d965fa924bd166d",
        "serverFinished": "ce826c36356e46311d26dcc213077fc4e699ac402e4698d3986b11cc5284b677"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "vO0TLCNF6DzPQjgfhd2fyExL16t1YJ4/fEZmGPnDVP0=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-01 08:50

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bff40d6ca1

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "bf90e032c300820584bd3ed6420a760145788bc79490093b07cec66a8a017517",
        "clientHandshake": "94672c21383fed0ed30a5304c5b4354671b124ac5ae718a073156ebd2de5fb36",
        "serverHandshake": "df51c86bd3b9a66aa198069be787cdbe6b4ea808f9ad29901adca42933d0e7b9",
        "serverFinished": "41df5b33fc54b8cbd34460ceba55b141fab492d68be9dd9fc32a94ce5e790178"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "n9lYSvppYmY/DNgQuRutlHzVkpoZVwV0Lx1jy2aQSCg=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-30 11:14

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bf5c5dc876

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "7f86b7eebd8290d501f9f8e4add48920ee0b0c896394e16ce6b46df8e62eea38",
        "clientHandshake": "b1fa89a69bf2fc5efb95eb2cdbcd3097b234439e7af23b12abf07d799f73a195",
        "serverHandshake": "ef5ee07880a5adadc3e094ebbfd095f4414f563ac93d7dee013a6570b20c245f",
        "serverFinished": "f0bc468d63c7b76f8fdee8a1f0fde0942ebe019a3f156c84bbfb856957cc1b59"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "0jH/iF9vU64q6kSU9mXsHs2ioLNWy9Wvsvv6Z1Q5v+c=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-28 08:46

Fingerprint: b18befd9dd6536aa30550de50313a6d83eeff30667f41b8f599a007d3509e9de

{
    "clientTcpRtt": 1,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d101f58394aaac885da10a419749f5d4ffa5bf09b10b584246c5f2ee4cd5a77a",
        "clientHandshake": "e8f650bc2c2221d675cf942f1a2777e5485ababc58d5fae2ac3aa68793733b3f",
        "serverHandshake": "e3bb1c5fa4eea74fcbc99be7377b64cc3ac1cc8b436d1f18e1712b69b6240f41",
        "serverFinished": "903ec8edcaf6405d02356a37aac88d7bd436688b39488c6ce492d227446cb026"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "r+4k3pTfONbziDqTHvvuQ6q/ysPn4Obc/VZZtbwzi3I="
}

Found on 2024-10-26 15:47

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bfc7804593

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "b9d355bbaa86dd5f38d26c1a7586e6ffb61067f5525dab576009ea5430f54eb6",
        "clientHandshake": "19499bec950d7614a84ac7f27eafb2e50ea2c7b7d96f7a27c6fd62eac123cc0f",
        "serverHandshake": "3f6be257e03c04b4426698a323744011cf4728faf00ecafc7d0e18a1244af04e",
        "serverFinished": "2c13a1606f9f0108d4bffed02b62e03896f293c12ad58c2439125c8eb587ae6d"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "qOndRnTzwViF8sVXj48tNUdA7lz8VBauWfedWfZnR88=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-24 23:35

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e8551243bea0095136b8706d

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "4921b3c03be52514003f8678dd6d11d8c86f3e2c3179813a2fd83c8e9238ca72",
        "clientHandshake": "41ecda644753962e0e4a7b6f3921c0c5c3d846a405df0b9fafcc5db4161739a3",
        "serverHandshake": "1466289749015db93b2c7cf9e58c7f61e4ba28b1fa805bcb049e72f45c480052",
        "serverFinished": "2f7018f8accfe69fa20ae762e98fd6d48be713ac11db906d0010b3db7ca0dcba"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "7jQOgeNAA43RKcHlQ8TGCq8bGU0DU6S+lhP0GXRI9iE="
}

Found on 2024-10-22 03:56

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e8551243bea009512ab41f7d

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "17154a81b2b7c0b69d487a781784d58d966eb3fcf3b1340f3652fd64e32b94aa",
        "clientHandshake": "ef6f3a65cfe747f9e115655314a04e4676f2e66464ed2126040d4505221f2f2e",
        "serverHandshake": "512a0b58fb45caed81becab49cad9a65acaa2cb482d3f5c31e3e163455791c6d",
        "serverFinished": "eaee71cb2fafdd169e013ade609b15ecb7844dd887af0197401bdb9532a698eb"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "7Z/4lBXkiKcZoUIZwtWYTySeayfvPVT9sViCRsbJw0w="
}

Found on 2024-10-20 02:14

Fingerprint: b18befd9dd6536aa30550de5a30976eaff3b191e51f89917e17554d59d102f90

{
    "clientTcpRtt": 151,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "92d71ff04119b5545d054eb2eed9a0d04410e37c8a9bccbf9e850fbc3dbff4ec",
        "clientHandshake": "2bbb26efee5fe55c8740137e72e61554a4ed0797bf7dda326b6a84271f6e2e43",
        "serverHandshake": "b763a5bbee8c9ec3bb3b9de40fbff55480ddf7d4a934b75d97349339c76a259c",
        "serverFinished": "f50743e71e9c3c50de37471c44ff78eeeef8d2153701720db186fab7e07de1af"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "DWs3wefBo5T2iFM+MxHos3PoNxaozTJyL8yzLRvpotg=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "SJC",
    "country": "DE"
}

Found on 2024-10-20 02:14

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: jolly-violet-f1d8.kkdukkduha.workers.dev
Port: 443
URL: https://jolly-violet-f1d8.kkdukkduha.workers.dev

First seen 2024-10-20 02:14
Last seen 2024-11-26 12:01
Open for 37 days

Fingerprint: b18befd9dd6536aa30550de50013a217d85f0c6df9b8924e3d2c0b84e0680262

{
    "clientTcpRtt": 4,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "cbbbd477034b673cbaba08e379b8e78e4e2081866eb1bf8cd22296d7c9347c08",
        "clientHandshake": "890fbd29888f4317ea0bbe911910e8afa8fa251e952126163c1db2078f92885e",
        "serverHandshake": "cbd8b9b45d68d14d53d81e153b9fe0fcf53632f97f12a9ae69a82a96753e7bd9",
        "serverFinished": "2100c3d00327168feff29c248ce02af7f528cabe4d6b8222673392041b86f94d"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "1nYP7DcdfmzjugX4Vu8Y0PSdhf/lDMRoy7QpBmxB3hQ="
}

Found on 2024-11-26 12:01

Fingerprint: b18befd9dd6536aa30550de50313a6d815da8ac1f37c263a865f2a3082a498d8

{
    "clientTcpRtt": 1,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "e16d384206cc9d17b80d81ad669e0a01d95bb097769efdc1a2176e9ac4730a2f",
        "clientHandshake": "b0b925211260038e98ca8d2a9e710c74502a5412586a293e5598dd03fefdff3b",
        "serverHandshake": "077e65c30736a5567e4c661b4f288871b7b3e8e8910452f25cf009eeb6112669",
        "serverFinished": "4d065ca9ab09c39c2994df1b3284863e29370b24656602ba11d5614da9587107"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "Mk/pUb3nh4zQx8Th1msqrwcQDhh/SgyV9O5MCzhXFto=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-24 11:36

Fingerprint: b18befd9dd6536aa30550de50313a6d8a399d2e8555a99b5126a898734b6aeed

{
    "clientTcpRtt": 1,
    "longitude": "103.68180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "SG",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "verifiedBotCategory": "",
    "tlsExportedAuthenticator": {
        "clientFinished": "b40be1f61a577ccf872d78e9aa33a02d442a226b80ae3be683cdf28b4407a703",
        "clientHandshake": "32975323f7a67cdc1b9623d3322e1c8310e2961c4467c2fdb9da5686cf3fa7b3",
        "serverHandshake": "507096050f694ce774239b7c922f12a300a3fd14103eb158c0cef797ace569c3",
        "serverFinished": "482a894fddf10e5e892f5810ddc81108d8e88f771d33ff34fd4673b272cfd8b0"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Singapore",
    "timezone": "Asia/Singapore",
    "colo": "SIN",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "62",
    "latitude": "1.30780",
    "requestPriority": "",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "gSxZX3gsarOP3NlvTt7XZMNMfL0aoQuZO7XJK3QNIG4="
}

Found on 2024-11-22 09:20

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f120eb7be8

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "7be49ebbf275922b24835690790744e1db7849a77afdfb511b6df5a010ca5dc4",
        "clientHandshake": "87a4062ce78a649036be1a627eb63af2f973dec8fa26333ec87281c83afdcb78",
        "serverHandshake": "659dcddb27c6ace7cdff1916d3c3b98c4927a4b246565c294f340247ebbe61c5",
        "serverFinished": "ffff8226a81739f074ab195c36eb9a121ecfd356df29593eeb44d579192e9f1a"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "bwD4EhGSheWqpywN5OroJQkQ6ElHG3BjkJL93J9ekSY=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-20 10:32

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f13292819b

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d71b5f61eb3e991886896ba901f412115fc8ab2d5bc852362c92f832156d8228",
        "clientHandshake": "eed42a7311311af12c6e34ce2b2c0e4527f3eedcf1a093b012ee52ff4376f093",
        "serverHandshake": "e7701ad6cde88da7df29d8a22b7b949d88f1ae528ffd387a41a2a5e9a2865bf3",
        "serverFinished": "b6165bab19655d66a2437808e02761f4647455fed38eef1008f0312b0b366e75"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "ea2W45KLdAPwuR3ASrzR4A3zhO7p/He4bYAEGCvuYao=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-18 08:37

Fingerprint: b18befd9dd6536aa30550de50313a6d8a399d2e8555a99b5126a89878d9cdfa4

{
    "clientTcpRtt": 1,
    "longitude": "103.68180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "SG",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "verifiedBotCategory": "",
    "tlsExportedAuthenticator": {
        "clientFinished": "5a61599439785196ad5da6d1f37be093ec6010e998df7a94c38f691969ee180f",
        "clientHandshake": "0b4b4044635276552bab36469e8aced2ece2b1196f4ea28e8db8b18bdc092fe7",
        "serverHandshake": "bc8674754de2ecc9f2b504fd562f30376dc1ae1fdf7d2e78594af20bf88cb2a9",
        "serverFinished": "89e7a22152f8a20ae8b8cdb7f6931933a8cbba8956ce9a34a75ecb1bb9663eec"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Singapore",
    "timezone": "Asia/Singapore",
    "colo": "SIN",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "62",
    "latitude": "1.30780",
    "requestPriority": "",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "Ob3AMG8Ilxl4sNqi1zlpwVJUOvTdG+TbNkEDrTbDdms="
}

Found on 2024-11-16 07:04

Fingerprint: b18befd9dd6536aa30550de59bef86a070810d0919d5bdf2ca621af8a14cd6eb

{
    "clientTcpRtt": 10,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "ef54b5d6887212a8ff3f523063edc17aab11eff7ec0b033f1c9585519c0527be",
        "clientHandshake": "7746ac095c247618965215d628fc0daef0388aa5dfae6b0fa78f55b14e723da4",
        "serverHandshake": "cd1c2ae8e78694f6c753c184de7615bf3923f919a4269ad3d7e1176606c91d5b",
        "serverFinished": "9cb3e19ec1e387c9e9e4b296e1b02824f9acc3f0ca4488468296b10de6e1ff76"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "/l71uvgvxtSiVdputKHAbXEzMMfvU9HC8P6jwuorRYs=",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-14 05:42

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e8551243bea00951a06562a9

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "bf2bd9e28de083b5a1340a85136ee94fdec71b9b8b23a2c583afc53bb30fcb7a",
        "clientHandshake": "1f0b23de2e4e8a28890b107fb7cd4a0b472110742f278c3b4d2d830fbd11732a",
        "serverHandshake": "7ac256ea3bdebc506da9d01c9bb387be3e77c99f1b25225c0b81bcf6c473e4d3",
        "serverFinished": "acdc8e4f8f08db768a18c7440da6053483ad0bf39022df83504580ec1ccd748c"
    },
    "tlsVersion": "TLSv1.3",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "h+VOkOGbgAaCZjDycDSu4Y/wgv+bAj7bm9gsfj5CMXE="
}

Found on 2024-11-12 06:51

Fingerprint: b18befd9dd6536aa30550de50513aa3676a95b785c092b25b46960575020caa2

{
    "clientTcpRtt": 3,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "89ed468212d0391bcd86abde414eeb01875102f39a746c6c8bbf25995ce00f74",
        "clientHandshake": "ab3eafe9b5f17ef1bed9f3cda4f542bc59fe1685e0382eadf8f87a7bcc208294",
        "serverHandshake": "6cc6c30b6195e033126683657daa97f729ea873a6aca476ef33470e2222860e1",
        "serverFinished": "4a8b24f49ff7ad69c51a7c87eb4ae51af0c5376fe8c080b17be9f0e6088bb58b"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "uLzm5ACplj/ThxAWalcJuNLYtChEEBTK9zrwluKObJM="
}

Found on 2024-11-10 19:26

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8dddc32776bfe5a017b5

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "f381a6f60ec722a8d7c33049d0569ae38d378f8a58bb5cacab3474fd2259530f",
        "clientHandshake": "d7efe2d66c7478740d88008b4a138c5b9d47244e2631660a16b74614cc4d161f",
        "serverHandshake": "1af95f5ed8f260470f7a4970b785cd7c2acef8bbaf4847e05515b1c9bc7fd8a2",
        "serverFinished": "4823af64b29eab00f391806312ecb8cff27b766a8ece42abae317b64dece2bf0"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "yGKuUT7WDcjxkfMdWSTDkmcxkbObMIV9wXDq0HC68t4=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-11-08 20:17

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906cac0826bf3

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "35dd6709286b8232af8bc7284e120d2659f817b34ab464e368b4117ec8dac2e0",
        "clientHandshake": "40265034d1d02b3f6bc8d8fd9f56bd604d0d1e063bb1fae14fb80dd4f212e9e4",
        "serverHandshake": "e2293de2118fad9566bdfe10310111ad7e857e535802bbd8be234a0e5c440df5",
        "serverFinished": "4cc1420c515957d55556536357b2c4ffd2b95c9db72c999fa8f1bdb4b422fc0d"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "+1luMtpxt+XkOotMWu+72Ps2ujFd3JeuJH5RMJHZ0YY="
}

Found on 2024-11-06 19:26

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906ca7930715d

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "2edcec4dce409cba2a6f65ba3fbc3f10471a5667bfec0909ca3fad1e1b1b9950",
        "clientHandshake": "fe3cd3e5207529b923b43f1bb761bcc2826dc7d92e89ba515e199e592ccf1b4e",
        "serverHandshake": "f7bba648c2fcc2f1befea538b76ec6ad6906526001dd2bce822fdaac1338fa9b",
        "serverFinished": "767f90781a9a938e676754d4febfd1a90a222df758b37efd1eb3b84e8ec75d54"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "LjindDNq7sR7UQLgoz5CQsV2UNP6TCfC5CWOz0lMM64="
}

Found on 2024-11-04 21:48

Fingerprint: b18befd9dd6536aa30550de5a3ef9308723f645037fd412d8e7b7aefcf467f67

{
    "clientTcpRtt": 18,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "401799e11d6b3425e64e42c5f76321cc362c44652411148294c60e92e677700e",
        "clientHandshake": "d23f3694e11bfb3b0fa9d08df4a1b5e03d2bca70063e4317e3781e4ed6d168c0",
        "serverHandshake": "1911c6de5478e757bd7aa8a355bdcd68ede02435b904cea8728afe17ce1623ba",
        "serverFinished": "f801102684fa22b7808dc2ff906b2143b00c2395e66bf7f8da2e442e19462c30"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "SJkwB6A71b2SpyIGpEjvGvPzK26e7fuyqmOEw+/6qwA=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-02 19:51

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e38775b5f1a3c90642

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "365812be603d0e2c6c3c2f5f2c9f2b7a1469c1f5419dbf1b5baae68e3493fcdd",
        "clientHandshake": "312d06996fc362e224534d7450ed093a299deff66cbbc0e7c0d2fddfd294111a",
        "serverHandshake": "bd76bb932deac3e4bcee08d7b3b161b1400f4ffbd56793c7c41da21430b1ba0d",
        "serverFinished": "f1fa80b1d9287985802560282451b85f08f768410139c7029e114058c220911c"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "Jn/iXMOT9UtgXNzNaVv4HxCtAYXfkEnVpjuhotZNADw=",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-01 12:18

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906caf5c31097

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d4bb97f7c9c36e0b5fbb3160fcfa20a1d1cbe119fe9f1445d8302ddc27bc3007",
        "clientHandshake": "cbebc3efbbd9474a893b0470d3a08ab6f0348e365f5bcdac2f9941541e6cdb60",
        "serverHandshake": "eda31d332280b98162d011eacd18b330420df61c447446edf67c73b24cbc2ca6",
        "serverFinished": "166c8a158eb0727897788561a4c883685a02aa4e78b14c236ec8dd9bb1879398"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "jyiiJwJ+mOCTSKlv7TMv/3EyyG1C0GmqF65slPVBXIw="
}

Found on 2024-10-30 13:22

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906cad9575b68

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "5c7cef475120e9c2b4068e29a2b00f153169d60580e7113a7937019d92f4c7a1",
        "clientHandshake": "a634a8ff4a416f8f2984c9f11b88da1b09d9ad91517813e4022a45a8706dc3e5",
        "serverHandshake": "a984c6c8a063d5665524a4ff184d23f19a20878436da0882a8e327f20d9baf36",
        "serverFinished": "56eea1a62a418fb13d30a2f4b1c2fc8d1bf751ff26a02207310ef18d6b4a2cd3"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "gDVvGLixCQcirrmxOVgtWXIaxCituXBXY6XZwFy8oew="
}

Found on 2024-10-26 10:50

Fingerprint: b18befd9dd6536aa30550de50313a6d83eeff30667f41b8f599a007dcb658133

{
    "clientTcpRtt": 1,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "605f5640d65ddaea43ecab513bfb739679b08a2ba7511fb5a7190ed483ab6a58",
        "clientHandshake": "6e11d0da2e999aa8d5d06377f354bdb147aa7eadb6cf4452c6a7e3b2adf4b03f",
        "serverHandshake": "7f0d9b48dae338b3f0417549aef6569f16399415d3f1f199206ce45ecfb58f79",
        "serverFinished": "714dcb9bdd7ad9a69d9d66edcf49e15885164532131af5facfcedc64b6d0d25e"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "KBbCXJp8DZfEZ/4ihtcdnTNNP51Jilc0N/1LQ9RSW4g="
}

Found on 2024-10-24 11:59

Fingerprint: b18befd9dd6536aa30550de50613ab81e9d909fb35a76bc8401906ca81266445

{
    "clientTcpRtt": 2,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "fe4a7011b787425d1e88de4ac99d5dd67d8f1641658a8fdf29f253f11716c740",
        "clientHandshake": "76635fe1a7a5d236a34065ea1fb44d5a2e565dad8a63fb33fd1e366cd5511c94",
        "serverHandshake": "9c81c7648cbbbfcec2790b9f224b0395b3518cc65caa0d36508d9c56f2abbf42",
        "serverFinished": "4e2995969d8cb53885e0b29610e78bc081fff731ca410fe042f089dfd5bec5fb"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "wc5nR/L5iHinHmVGqjccU1vhYqqoZt1rf7mZX3jOC+0="
}

Found on 2024-10-22 01:01

Fingerprint: b18befd9dd6536aa30550de50313a6d8b3a6b275d49ca986418a7fec93cbf4da

{
    "clientTcpRtt": 1,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "9944dd46ebbccc27d3909721631827dde5788104bada1de0b85238c99e3830ed",
        "clientHandshake": "a9dc404992ab15b4cad8ede216cfafe0fcb4f11c030bd919a7ea26f75ef74395",
        "serverHandshake": "5894a76d02bdd3f7dadbd5ac3743fca03e81ea359b676b14e9d39c313ff4e64f",
        "serverFinished": "605aee23032cf442817b92ed1d84e2ad2d560e67c6e70014d3cf274428f3ee99"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "512",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "tlsClientRandom": "Gj/59yHOtp3zhvsWRRLmkrbe5bJTFUtn2H337v7I8Zk="
}

Found on 2024-10-20 02:14

Fingerprint: b18befd9dd6536aa30550de5a6097b5319121751b8ea582a7fd66bc0ba399b9f

{
    "clientTcpRtt": 156,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "5JPg1Kamo7V8DPpM3zw6xxvw1jU=",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsExportedAuthenticator": {
        "clientFinished": "d48cc52729ec05c8b434cb3c1317508af3a7de56a3da4202d94e2840a27fd51c",
        "clientHandshake": "23d421c8cb39f383818f40a105e7955343b000564c2a9384d344c662a96bb34c",
        "serverHandshake": "2aed3a61f5f740e764e571f5dd83bb1cf309b10138094f6c63364448e939ac6d",
        "serverFinished": "a3f19bd0f025d259ecfd23f0de94a1a4e927c9a3f7f46bf869fd80674fe313cb"
    },
    "tlsVersion": "TLSv1.3",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "512",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "mPr4EWXvmUDLZasQL7TjmhGyzeNNMUzkcCpP2/CwAek=",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "SJC",
    "country": "DE"
}

Found on 2024-10-20 02:14

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: jolly-violet-f1d8.kkdukkduha.workers.dev
Port: 80
URL: http://jolly-violet-f1d8.kkdukkduha.workers.dev

First seen 2024-10-20 02:14
Last seen 2024-11-26 10:39
Open for 37 days

Fingerprint: b18befd9dd6536aa30550de50313a6d8a399d2e8555a99b59464b875ecc03bb6

{
    "clientTcpRtt": 1,
    "longitude": "103.68180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "SG",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "verifiedBotCategory": "",
    "tlsVersion": "",
    "city": "Singapore",
    "timezone": "Asia/Singapore",
    "colo": "SIN",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "62",
    "latitude": "1.30780",
    "requestPriority": "",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-26 10:39

Fingerprint: b18befd9dd6536aa30550de50613ab81b022067560b68586f52bf50696be6b96

{
    "clientTcpRtt": 2,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-24 06:47

Fingerprint: b18befd9dd6536aa30550de5a4dc0cd3d1d7e4cc9d68ffe167fc8311d4434468

{
    "clientTcpRtt": 99,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "YYZ",
    "country": "DE"
}

Found on 2024-11-22 08:30

Fingerprint: b18befd9dd6536aa30550de50213a54d64bdcbef97b60f44ecf79bbc608c00b1

{
    "clientTcpRtt": 6,
    "longitude": "-0.67180",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "GB",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Slough",
    "timezone": "Europe/London",
    "colo": "LHR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "SL1",
    "region": "England",
    "latitude": "51.53680",
    "requestPriority": "",
    "regionCode": "ENG",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-20 06:42

Fingerprint: b18befd9dd6536aa30550de50313a6d80aa47432f101f2e34454804b0c8c7660

{
    "clientTcpRtt": 1,
    "longitude": "4.93920",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Amsterdam",
    "timezone": "Europe/Amsterdam",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "North Holland",
    "latitude": "52.35200",
    "postalCode": "1098",
    "regionCode": "NH",
    "asOrganization": "Digital Ocean",
    "colo": "AMS",
    "country": "NL"
}

Found on 2024-11-18 04:57

Fingerprint: b18befd9dd6536aa30550de59bef86a070810d0919d5bdf2106059421d98c135

{
    "clientTcpRtt": 10,
    "longitude": "8.68420",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11870",
    "postalCode": "60313",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-16 07:00

Fingerprint: b18befd9dd6536aa30550de529f4e36848e62b7e7e0677374299c6af97271848

{
    "clientTcpRtt": 36,
    "longitude": "77.58550",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "AS",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "IN",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Bengaluru",
    "timezone": "Asia/Kolkata",
    "colo": "BOM",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "560100",
    "region": "Karnataka",
    "latitude": "12.96340",
    "requestPriority": "",
    "regionCode": "KA",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-14 23:09

Fingerprint: b18befd9dd6536aa30550de59bef86a0be732ac8623c5f55e76e2755f22a4dc4

{
    "clientTcpRtt": 10,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "CDG",
    "country": "DE"
}

Found on 2024-11-04 23:40

Fingerprint: b18befd9dd6536aa30550de50613ab81aa8fde659788b6963598523695c1063b

{
    "clientTcpRtt": 2,
    "longitude": "-79.36230",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "CA",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Toronto",
    "timezone": "America/Toronto",
    "colo": "YYZ",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "M5A",
    "region": "Ontario",
    "latitude": "43.65470",
    "requestPriority": "",
    "regionCode": "ON",
    "asOrganization": "Digital Ocean",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-02 22:08

Fingerprint: b18befd9dd6536aa30550de50313a6d8889491d2e855124340c3b8ebd4e38c7b

{
    "clientTcpRtt": 1,
    "longitude": "-74.00960",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "North Bergen",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07047",
    "region": "New Jersey",
    "latitude": "40.79240",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-11-01 19:43

Fingerprint: b18befd9dd6536aa30550de50613ab81415ef672dfa72fa37658cd8bfb392393

{
    "clientTcpRtt": 2,
    "longitude": "-74.14030",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "NA",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "country": "US",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Clifton",
    "timezone": "America/New_York",
    "colo": "EWR",
    "tlsClientHelloLength": "",
    "edgeRequestKeepAliveStatus": 1,
    "postalCode": "07014",
    "region": "New Jersey",
    "latitude": "40.83640",
    "requestPriority": "",
    "regionCode": "NJ",
    "asOrganization": "Digital Ocean",
    "metroCode": "501",
    "tlsClientExtensionsSha1": "",
    "tlsClientRandom": ""
}

Found on 2024-10-26 06:00

Fingerprint: b18befd9dd6536aa30550de50313a6d83023b620e06d8ddd5e4311cdfc2e01ed

{
    "clientTcpRtt": 1,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "FRA",
    "country": "DE"
}

Found on 2024-10-24 06:06

Fingerprint: b18befd9dd6536aa30550de52424857a4ce6202e01bdf507575fd45ff74977dc

{
    "clientTcpRtt": 186,
    "longitude": "8.68270",
    "httpProtocol": "HTTP/1.1",
    "tlsCipher": "",
    "continent": "EU",
    "asn": 14061,
    "clientAcceptEncoding": "gzip",
    "tlsClientExtensionsSha1": "",
    "isEUCountry": "1",
    "verifiedBotCategory": "",
    "tlsClientAuth": {
        "certIssuerDNLegacy": "",
        "certIssuerSKI": "",
        "certSubjectDNRFC2253": "",
        "certSubjectDNLegacy": "",
        "certFingerprintSHA256": "",
        "certNotBefore": "",
        "certSKI": "",
        "certSerial": "",
        "certIssuerDN": "",
        "certVerified": "NONE",
        "certNotAfter": "",
        "certSubjectDN": "",
        "certPresented": "0",
        "certRevoked": "0",
        "certIssuerSerial": "",
        "certIssuerDNRFC2253": "",
        "certFingerprintSHA1": ""
    },
    "tlsVersion": "",
    "city": "Frankfurt am Main",
    "timezone": "Europe/Berlin",
    "tlsClientHelloLength": "",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "tlsClientRandom": "",
    "region": "Hesse",
    "latitude": "50.11840",
    "postalCode": "60341",
    "regionCode": "HE",
    "asOrganization": "Digital Ocean",
    "colo": "SIN",
    "country": "DE"
}

Found on 2024-10-22 04:34

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: x88av006.com
Port: 443
URL: https://x88av006.com

First seen 2024-09-25 12:07
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e975a091b78cff885f73211f98f7c4483c
```
Found 5 files trough .DS_Store spidering:

/assets
/css
/images
/images/icons
/js
```
  Found on 2024-09-25 12:07
Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 172.67.190.86
Domain: hanadama.biz
Port: 443
URL: https://hanadama.biz

First seen 2023-01-09 23:27
Last seen 2024-09-01 10:37
Open for 600 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342147cdc78d

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 01-Sep-2024 10:37:50 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  801 days 3 hours 50 minutes 59 seconds
Server load: 0.01 0.06 0.08
Total accesses: 2229305269 - Total Traffic: 19493.3 GB - Total Duration: 84884259626
CPU Usage: u1218.06 s58917.3 cu7109100 cs1676990 - 12.8% CPU load
32.2 requests/sec - 295.3 kB/second - 9.2 kB/request - 38.0765 ms/request
1 requests currently being processed, 6 idle workers
______W.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6322332940/21/281919752_
0.080247710511520.00.162442138.25
172.70.111.52http/1.1xing-wu.com:80GET /control-of-congress-really-matters-to-republicans-less-to-

1-6322332950/20/273388869_
0.050046655543570.00.052351259.00
162.158.155.175http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

2-6322332960/20/266812772_
0.060145707892150.00.072281930.75
172.70.114.188http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

3-6322332970/19/251978069_
0.070144021396580.00.122155672.25
162.158.62.115http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-6322332980/19/242101592_
0.070342619326240.00.122064591.25
162.158.63.159http/1.1jewsformorality.org:80GET / HTTP/1.1

5-6322332990/19/234923283_
0.060141531965780.00.082001081.13
162.158.158.232http/1.1xing-wu.com:80GET /news-desk-illinois/ HTTP/1.1

6-6322333000/18/223049647W
0.050040036526370.00.091906651.13
172.70.115.198http/1.1hanadama.biz:80GET /server-status HTTP/1.1

7-63-0/0/143889719.
0.00244031406669010.00.001317247.00
172.70.114.174http/1.1stopncafe.com:80GET /go/admin/pipelines/create?group=defaultGroup HTTP/1.1

8-63-0/0/75327208.
0.00244622866150320.00.00760230.56
162.158.158.103http/1.1po-pon.org:80GET /perspective/ HTTP/1.1

9-63-0/0/52008903.
0.00235018861922010.00.00538702.56
162.158.62.218http/1.1witheridge-devon.com:80GET /community-organizations-in-witheridge-village/ HTTP/1.1

10-63-0/0/33358637.
0.002034115559905880.00.00363158.94
162.158.155.62http/1.1universoviviente.com:80GET /the-dynamic-mass-of-the-coma-cluster-resulting-from-deep-l

11-63-0/0/20705745.
0.002033013032062260.00.00239566.88
162.158.155.154http/1.1whitewizzard.net:80GET /wp-includes/fonts/about.php HTTP/1.1

12-63-0/0/17795699.
0.0046493012107686110.00.00205816.67
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16542493.
0.0046443011557724120.00.00191199.14
162.158.62.149http/1.1amitysource.com:80GET /feedback.php?submit=and+1%3D%28SELECT+1+FROM%28SELECT+COUN

14-63-0/0/13135517.
0.0087828010557927340.00.00152178.58
162.158.154.100http/1.1mitredesign.co.uk:80GET /updates.php HTTP/1.1

15-63-0/0/7124770.
0.008782808870722080.00.0083789.69
172.70.230.241http/1.1mitredesign.co.uk:80GET /wp-admin/cloud.php HTTP/1.1

16-63-0/0/4601213.
0.0025138007884129870.00.0054556.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695947.
0.0025140007369396910.00.0043898.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066218.
0.0025141207006202850.00.0036501.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654562.
0.0025142406719609140.00.0031511.88
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437136.
0.0025141406542504310.00.0029027.08
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214474.
0.0025140506354866840.00.0026415.45
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033408.
0.0025140106187410910.00.0024226.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1930783.
0.0025142306059964560.00.0023021.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854044.
0.0025139505962280620.00.0022105.66
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803836.
0.0025137925874793850.00.0021495.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1755965.
0.0025138605803816390.00.0020932.67
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1725680.
0.0025139605731390310.00.0020555.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1676008.
0.0025142205661021310.00.0019996.25
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1649180.
0.0025139405610209000.00.0019659.62
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512720.
0.0025140405489719410.00.0018029.29
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247788.
0.0025138925272896100.00.0014902.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104790.
0.0025140705122610520.00.0013208.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018565.
0.0025138104997101430.00.0012187.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946824.
0.0025141904880416710.00.0011306.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892548.
0.0025122804805225520.00.0010666.66
172.70.114.68http/1.1chachasfamousfoods.com:80POST /wp-comments-post.php HTTP/1.1

36-63-0/0/853086.
0.0025122724727242930.00.0010241.50
162.158.154.189http/1.1willtoexist.com:80GET /wp-content/themes/publisher/includes/libs/better-framework

37-63-0/0/823004.
0.0025122224640515730.00.009855.35
162.158.158.169http/1.1willtoexist.com:80GET /wp-content/themes/publisher/js/theme.min.js HTTP/1.1

38-63-0/0/772733.
0.00251221114548012170.00.009254.50
172.70.111.73http/1.1chrispaydayloans.com:80GET /how-do-i-obtain-a-car-loan-using-negative-credit-bureau-en

39-63-0/0/748623.
0.0025141104490093730.00.009008.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

40-63-0/0/722303.
0.0025139004427094120.00.008672.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/710045.
0.0025137804370573550.00.008509.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688285.
0.0025139304321067930.00.008243.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670956.
0.0025138804268071480.00.008024.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653531.
0.0025139204208587990.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640491.
0.0025139704163324260.00.007669.84
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631276.
0.0025141004118791080.00.007535.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618996.
0.0025140304062606070.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614814.
0.0025121304047458780.00.007361.37
162.158.158.144http/1.1chrispaydayloans.com:80GET /home-insurance-for-people-with-bad-credit/ HTTP/1.1

49-63-0/0/607310.
0.0025141804007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599509.
0.0025121343982185680.00.007189.49
162.158.62.98http/1.1quickenaccountingsolution.com:8GET /david-raines-community-health-centers-selecte

Found on 2024-09-01 10:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34211c547fcc

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 30-Aug-2024 08:51:56 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  799 days 2 hours 5 minutes 5 seconds
Server load: 0.08 0.06 0.01
Total accesses: 2228581864 - Total Traffic: 19490.0 GB - Total Duration: 84880742404
CPU Usage: u1215.92 s58886.3 cu7106910 cs1676470 - 12.8% CPU load
32.3 requests/sec - 296.0 kB/second - 9.2 kB/request - 38.0873 ms/request
1 requests currently being processed, 6 idle workers
____W__.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6321562290/80/281811753_
0.300247705244460.00.442441631.75
172.70.114.65http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

1-6321562300/67/273281977_
0.220146650324180.00.262350757.25
162.158.63.115http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

2-6321562310/66/266707858_
0.240245702801260.00.312281441.50
172.70.110.143http/1.1hanadama.biz:80GET /about HTTP/1.1

3-6321562320/62/251875896_
0.210044016439870.00.322155199.50
162.158.62.230http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-6321562330/61/242004101W
0.200042614609420.00.262064138.00
162.158.158.106http/1.1hanadama.biz:80GET /server-status HTTP/1.1

5-6321562340/62/234832493_
0.210141527630760.00.362000658.75
162.158.155.28http/1.1murkyslough.com:80GET /wp-content/plugins/acf-recent-posts-widget/css/?C=D%3BO%3D

6-6321562350/61/222981722_
0.220040033260030.00.301906331.75
172.70.111.79http/1.1hanadama.biz:80GET /.vscode/sftp.json HTTP/1.1

7-63-0/0/143862168.
0.00161031405281700.00.001317116.13
172.70.230.112http/1.1bergmannlumber.com:80GET /about.php HTTP/1.1

8-63-0/0/75315600.
0.002253022865554890.00.00760175.44
162.158.158.196http/1.1siestarvpark.com:80GET //wp-json/oembed/1.0/embed?url=https://siestarvpark.com/ HT

9-63-0/0/52004079.
0.0013313018861653640.00.00538678.63
172.70.115.129http/1.1shiplink.info:80GET /wp-content/uploads/2023/10/commercial-airlines-300x300.jpg

10-63-0/0/33358122.
0.0013313115559875810.00.00363156.63
162.158.155.199http/1.1shiplink.info:80GET /wp-content/uploads/2023/10/cruises-300x300.jpg HTTP/1.1

11-63-0/0/20705430.
0.0035100013032045230.00.00239565.63
172.70.230.78http/1.1jinseirpg.com:80GET /cong.php HTTP/1.1

12-63-0/0/17795691.
0.0035100412107684610.00.00205816.64
162.158.159.32http/1.1unitycemetery.org:80GET /zimbabwe-cemetery-under-threat-as-residents-push-borders/ 

13-63-0/0/16542293.
0.00457051311557714610.00.00191198.55
172.70.231.76http/1.1yanistoneart.com:80GET /do-it-yourself-homeowner-transforms-his-bathroom-for-250-b

14-63-0/0/13135417.
0.00459491210557922650.00.00152178.27
162.158.62.174http/1.1thebiblepost.com:80GET /first-time-home-buyers-these-8-loan-programs-can-save-you-

15-63-0/0/7124670.
0.007211708870716000.00.0083789.29
172.70.111.67http/1.1yoimise.info:80POST //xmlrpc.php HTTP/1.1

16-63-0/0/4601213.
0.007222607884129870.00.0054556.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695947.
0.007224607369396910.00.0043898.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066218.
0.007225807006202850.00.0036501.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654562.
0.007227006719609140.00.0031511.88
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437136.
0.007226006542504310.00.0029027.08
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214474.
0.007225106354866840.00.0026415.45
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033408.
0.007224706187410910.00.0024226.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1930783.
0.007226906059964560.00.0023021.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854044.
0.007224105962280620.00.0022105.66
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803836.
0.007222525874793850.00.0021495.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1755965.
0.007223205803816390.00.0020932.67
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1725680.
0.007224205731390310.00.0020555.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1676008.
0.007226805661021310.00.0019996.25
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1649180.
0.007224005610209000.00.0019659.62
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512720.
0.007225005489719410.00.0018029.29
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247788.
0.007223525272896100.00.0014902.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104790.
0.007225305122610520.00.0013208.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018565.
0.007222704997101430.00.0012187.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946824.
0.007226504880416710.00.0011306.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892548.
0.007207404805225520.00.0010666.66
172.70.114.68http/1.1chachasfamousfoods.com:80POST /wp-comments-post.php HTTP/1.1

36-63-0/0/853086.
0.007207324727242930.00.0010241.50
162.158.154.189http/1.1willtoexist.com:80GET /wp-content/themes/publisher/includes/libs/better-framework

37-63-0/0/823004.
0.007206824640515730.00.009855.35
162.158.158.169http/1.1willtoexist.com:80GET /wp-content/themes/publisher/js/theme.min.js HTTP/1.1

38-63-0/0/772733.
0.0072067114548012170.00.009254.50
172.70.111.73http/1.1chrispaydayloans.com:80GET /how-do-i-obtain-a-car-loan-using-negative-credit-bureau-en

39-63-0/0/748623.
0.007225704490093730.00.009008.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

40-63-0/0/722303.
0.007223604427094120.00.008672.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/710045.
0.007222404370573550.00.008509.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688285.
0.007223904321067930.00.008243.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670956.
0.007223404268071480.00.008024.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653531.
0.007223804208587990.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640491.
0.007224304163324260.00.007669.84
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631276.
0.007225604118791080.00.007535.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618996.
0.007224904062606070.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614814.
0.007205904047458780.00.007361.37
162.158.158.144http/1.1chrispaydayloans.com:80GET /home-insurance-for-people-with-bad-credit/ HTTP/1.1

49-63-0/0/607310.
0.007226404007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599509.
0.007205943982185680.00.007189.49
162.158.62.98http/1.1quickenaccountingsolution.com:8GET /david-raines

Found on 2024-08-30 08:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34219423f9d2

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 28-Aug-2024 04:52:10 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  796 days 22 hours 5 minutes 19 seconds
Server load: 0.08 0.08 0.03
Total accesses: 2227806251 - Total Traffic: 19485.8 GB - Total Duration: 84876002413
CPU Usage: u1211.98 s58852.7 cu7104450 cs1675900 - 12.8% CPU load
32.4 requests/sec - 296.7 kB/second - 9.2 kB/request - 38.0985 ms/request
1 requests currently being processed, 6 idle workers
____W__.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6320693170/53/281695343_
0.150047698320340.00.102440976.25
162.158.154.181http/1.1hanadama.biz:80GET /about HTTP/1.1

1-6320693180/45/273166771_
0.150146643463640.00.152350108.00
172.70.230.111http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

2-6320693190/45/266594152_
0.170245696025160.00.202280804.50
172.70.111.148http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

3-6320693200/42/251766015_
0.120044009870620.00.112154578.50
162.158.158.149http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-6320693210/41/241898490W
0.110042608266370.00.102063545.13
162.158.63.115http/1.1hanadama.biz:80GET /server-status HTTP/1.1

5-6320693220/41/234734040_
0.150041521776200.00.262000105.00
162.158.155.86http/1.1hanadama.biz:80GET /.vscode/sftp.json HTTP/1.1

6-6320693230/41/222911495_
0.120040029076430.00.071905944.63
162.158.154.249http/1.1hanadama.biz:80GET /server HTTP/1.1

7-63-0/0/143835822.
0.0059131403677040.00.001316971.63
172.70.115.160http/1.1earthcare203.com:80GET /wp-admin/js/widgets/cloud.php HTTP/1.1

8-63-0/0/75304969.
0.00732022864834170.00.00760116.75
172.70.110.250http/1.1murkyslough.com:80GET /wp-content/?C=D;O=D HTTP/1.1

9-63-0/0/51999252.
0.00731118861275520.00.00538651.13
162.158.154.145http/1.1gfchamber.com:80GET /.well-known/wp-load.php HTTP/1.1

10-63-0/0/33357269.
0.00211841115559730500.00.00363150.44
162.158.155.50http/1.1mhyc-lakeerie.com:80GET /big-attendance-for-car-club-unsealed-surface-event-at-athe

11-63-0/0/20704873.
0.0021184013031923220.00.00239561.14
172.70.230.69http/1.1buzzez.co.uk:80GET /files/ HTTP/1.1

12-63-0/0/17795271.
0.0021497012107601090.00.00205813.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16542036.
0.0021184011557642590.00.00191196.88
172.70.111.95http/1.1mitredesign.co.uk:80GET /payment-plans/ HTTP/1.1

14-63-0/0/13135211.
0.00204930010557869110.00.00152177.09
172.70.230.98http/1.1shiplink.info:80GET /cgi-bin/xmrlpc.php?p= HTTP/1.1

15-63-0/0/7124496.
0.0020512708870664940.00.0083787.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601097.
0.0036791607884077970.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695840.
0.0036762817369357140.00.0043898.18
162.158.159.167http/1.1milpkbk.co.uk:80GET /wp-content/themes/travelscape/json.php HTTP/1.1

18-63-0/0/3066109.
0.0036762927006158600.00.0036500.72
162.158.159.167http/1.1milpkbk.co.uk:80GET /admin.php HTTP/1.1

19-63-0/0/2654460.
0.00208805206719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00308781206542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00308779806354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00308761206187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00308779506059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00308780005962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00308751345874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00308757825803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00308779905731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00308757585661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00308780505610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00308780205489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00453565905272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00453563505122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00453563204997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00453564004880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00453542904805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00453542774727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00453563914640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00453542644548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00453542804490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00453542614427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00453566804370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00453560804321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00453565704268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00453561704208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00453562604163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00453561804118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00453564804062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00453561604047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00453562504007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00453566703982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.
0.004535647

Found on 2024-08-28 04:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34210fdfe3ed

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Monday, 26-Aug-2024 04:05:16 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  794 days 21 hours 18 minutes 26 seconds
Server load: 0.03 0.07 0.04
Total accesses: 2226999305 - Total Traffic: 19482.2 GB - Total Duration: 84872117273
CPU Usage: u1208.83 s58819.3 cu7102030 cs1675330 - 12.9% CPU load
32.4 requests/sec - 297.5 kB/second - 9.2 kB/request - 38.1105 ms/request
1 requests currently being processed, 4 idle workers
__.W__..........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6319919330/21/281578515_
0.060047692753920.00.022440444.00
162.158.154.75http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-6319918720/91/273050812_
0.310046637867340.00.222349567.75
162.158.62.193http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

2-63-0/0/266480711.
0.007045690562090.00.002280284.00
172.70.110.150http/1.1dellpryorgalleries.com:80GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1

3-6319919300/47/251654858W
0.180044004437950.00.192154057.75
172.70.231.65http/1.1hanadama.biz:80GET /server-status HTTP/1.1

4-6319919340/12/241792913_
0.030042603138810.00.012063056.63
162.158.158.152http/1.1hanadama.biz:80GET /about HTTP/1.1

5-6319918760/75/234634046_
0.230141516912250.00.151999647.50
172.70.230.153http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

6-63-0/0/222829198.
0.001052040025201580.00.001905581.63
172.70.230.234http/1.1cohoestates.com:80GET /wp-admin/license.php HTTP/1.1

7-63-0/0/143796704.
0.005054631401837690.00.001316797.13
162.158.158.232http/1.1unitycemetery.org:80GET /freezing-temperatures-dont-stop-volunteers-from-removing-w

8-63-0/0/75290768.
0.009756022864162300.00.00760052.63
172.70.230.80http/1.1blackseatrans.com:80GET /de/GPS-Karten---Volle-Funktion.php HTTP/1.1

9-63-0/0/51992250.
0.0010129018860943150.00.00538622.00
172.70.114.161http/1.1sallyruttergroup.com:80GET /wp-admin/themes.php HTTP/1.1

10-63-0/0/33356384.
0.0025428015559683050.00.00363146.69
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

11-63-0/0/20704588.
0.0029509013031900290.00.00239559.06
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17795169.
0.0029511012107593600.00.00205812.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16541936.
0.0029513011557637470.00.00191196.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13135211.
0.0029317010557869110.00.00152177.09
172.70.230.98http/1.1shiplink.info:80GET /cgi-bin/xmrlpc.php?p= HTTP/1.1

15-63-0/0/7124496.
0.002951408870664940.00.0083787.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601097.
0.0019230307884077970.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695840.
0.0019201417369357140.00.0043898.18
162.158.159.167http/1.1milpkbk.co.uk:80GET /wp-content/themes/travelscape/json.php HTTP/1.1

18-63-0/0/3066109.
0.0019201527006158600.00.0036500.72
162.158.159.167http/1.1milpkbk.co.uk:80GET /admin.php HTTP/1.1

19-63-0/0/2654460.
0.00191243906719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00291219806542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00291218406354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00291199806187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00291218106059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00291218605962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00291190045874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00291196425803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00291218505731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00291196185661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00291219105610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00291218805489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00436004505272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00436002105122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00436001804997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00436002604880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00435981604805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00435981474727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00436002514640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00435981344548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00435981504490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00435981314427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00436005404370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00435999404321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00436004304268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00436000304208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00436001204163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00436000404118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00436003404062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00436000204047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00436001104007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00436005303982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.
0.0043600330394059784

Found on 2024-08-26 04:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34213b102839

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Saturday, 24-Aug-2024 06:16:55 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  792 days 23 hours 30 minutes 4 seconds
Server load: 0.06 0.06 0.01
Total accesses: 2226347574 - Total Traffic: 19478.9 GB - Total Duration: 84868616914
CPU Usage: u1206.96 s58791.8 cu7100060 cs1674870 - 12.9% CPU load
32.5 requests/sec - 298.1 kB/second - 9.2 kB/request - 38.1201 ms/request
1 requests currently being processed, 6 idle workers
______W.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6319210620/83/281480113_
0.320047687467830.00.592439938.75
172.70.230.153http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-6319210630/82/272953644_
0.260246632631270.00.352349067.00
172.70.230.117http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

2-6319210640/79/266384428_
0.330045685386430.00.682279788.50
172.70.111.26http/1.1hanadama.biz:80GET /server HTTP/1.1

3-6319210650/79/251561103_
0.350143999370890.00.652153569.00
162.158.158.152http/1.1hanadama.biz:80GET /.vscode/sftp.json HTTP/1.1

4-6319210660/79/241702926_
0.310042598284960.00.472062593.13
162.158.159.232http/1.1hanadama.biz:80GET /about HTTP/1.1

5-6319210670/78/234549995_
0.340141512377120.00.621999216.50
172.70.230.120http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

6-6319210680/79/222772934W
0.300040022243470.00.461905300.00
172.70.231.51http/1.1hanadama.biz:80GET /server-status HTTP/1.1

7-63-0/0/143774501.
0.00128031400673980.00.001316689.63
172.70.114.135http/1.1macmarines.com:80GET /wp-admin/network/cloud.php HTTP/1.1

8-63-0/0/75281796.
0.00129022863677690.00.00760006.75
172.70.230.27http/1.1macmarines.com:80GET /.well-known/acme-challenge/cloud.php HTTP/1.1

9-63-0/0/51988181.
0.00128018860727360.00.00538601.31
162.158.62.221http/1.1macmarines.com:80GET /cloud.php HTTP/1.1

10-63-0/0/33355997.
0.0027395015559663770.00.00363145.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

11-63-0/0/20704504.
0.0027115213031897260.00.00239558.84
162.158.159.168http/1.1milpkbk.co.uk:80GET /uploads/Alex-Cross.php HTTP/1.1

12-63-0/0/17795166.
0.0027113012107593470.00.00205812.91
162.158.159.227http/1.1yanistoneart.com:80GET /wp-content/bs-booster-cache/9ba3f25548bf7a4c04afce6a21e891

13-63-0/0/16541934.
0.0027403011557637380.00.00191196.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13135111.
0.0027116010557864120.00.00152176.73
162.158.159.167http/1.1milpkbk.co.uk:80GET /wp-content/themes/appetizo/400.php HTTP/1.1

15-63-0/0/7124495.
0.002739608870664930.00.0083787.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601097.
0.002740107884077970.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695840.
0.002711317369357140.00.0043898.18
162.158.159.167http/1.1milpkbk.co.uk:80GET /wp-content/themes/travelscape/json.php HTTP/1.1

18-63-0/0/3066109.
0.002711427006158600.00.0036500.72
162.158.159.167http/1.1milpkbk.co.uk:80GET /admin.php HTTP/1.1

19-63-0/0/2654460.
0.00174753706719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00274729706542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00274728306354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00274709706187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00274728006059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00274728505962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00274699845874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00274706225803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00274728405731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00274705985661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00274729005610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00274728705489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00419514405272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00419511905122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00419511604997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00419512404880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00419491404805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00419491274727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00419512314640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00419491144548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00419491304490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00419491114427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00419515304370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00419509204321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00419514204268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00419510104208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00419511004163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00419510204118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00419513204062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00419510004047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00419510904007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00419515203982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.
0.0041951310<

Found on 2024-08-24 06:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34218aecce09

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 22-Aug-2024 03:42:28 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  790 days 20 hours 55 minutes 37 seconds
Server load: 0.02 0.02 0.03
Total accesses: 2225637662 - Total Traffic: 19474.8 GB - Total Duration: 84864183917
CPU Usage: u1202.34 s58760.5 cu7097790 cs1674320 - 12.9% CPU load
32.6 requests/sec - 298.8 kB/second - 9.2 kB/request - 38.1303 ms/request
1 requests currently being processed, 6 idle workers
W______.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6318382890/23/281373780W
0.090047680820540.00.142439309.25
172.70.110.192http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6318382900/23/272848120_
0.090046626045710.00.132348437.00
162.158.159.209http/1.1blackseatrans.com:80GET /live_env HTTP/1.1

2-6318382870/24/266280638_
0.100045678875380.00.172279173.50
172.70.230.26http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

3-6318382880/24/251460996_
0.100043993082320.00.162152970.00
162.158.159.61http/1.1blackseatrans.com:80GET /it/carta-da-parati-dal-scenario.php HTTP/1.1

4-6318382910/23/241605976_
0.090042592188500.00.122062019.38
172.70.114.45http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

5-6318382920/23/234459979_
0.090041506776290.00.111998688.50
162.158.154.74http/1.1hanadama.biz:80GET /about HTTP/1.1

6-6318382840/25/222709111_
0.100040018340110.00.151904923.88
172.70.114.45http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-63-0/0/143748222.
0.0049531399050880.00.001316533.38
172.70.111.57http/1.1grb-design.com:80GET / HTTP/1.1

8-63-0/0/75270720.
0.00532022862992220.00.00759941.44
172.70.115.143http/1.1cakemaker.org.uk:80GET /.tmb/cloud.php HTTP/1.1

9-63-0/0/51983196.
0.007438018860410380.00.00538569.19
172.70.230.107http/1.1martinlukac.com:80GET /wp-admin/css/colors/index.php HTTP/1.1

10-63-0/0/33355683.
0.0018580015559646530.00.00363143.53
172.70.114.98http/1.1mma-fighter.com:80GET /forum/threads/19562-Fighter-Watch-Brendon-O%C2%92Dell-Inte

11-63-0/0/20704403.
0.0018582013031889340.00.00239558.14
162.158.158.228http/1.1mma-fighter.com:80GET /forum/forums/7-MMA-Fighter-com HTTP/1.1

12-63-0/0/17794966.
0.00197668212107580370.00.00205811.72
172.70.231.18http/1.1monclerpaschereenligne.com:80GET /wp-content/themes/publisher/js/theme.min.js HTTP/1.1

13-63-0/0/16541832.
0.00253194011557630970.00.00191195.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13135011.
0.00253053010557855840.00.00152175.77
172.70.114.79http/1.1sweetbuttonsdesserts.com:80GET /the-girl-scout-cookie-dessert-challenge-is-back/ HTTP/1.1

15-63-0/0/7124487.
0.0025316608870664650.00.0083787.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601093.
0.0025319107884077940.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.00156546537369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.00156525907006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.00156547006719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00256523006542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00256521606354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00256503006187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00256521306059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00256521805962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00256493245874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00256499625803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00256521705731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00256499385661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00256522305610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00256522005489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00401307705272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00401305305122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00401305004997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00401305804880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00401284704805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00401284574727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00401305714640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00401284444548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00401284604490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00401284414427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00401308604370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00401302604321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00401307504268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00401303504208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00401304404163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00401303604118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00401306604062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00401303404047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00401304304007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00401308503982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-

Found on 2024-08-22 03:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421cb987a4c

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 22-Aug-2024 02:40:05 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  790 days 19 hours 53 minutes 15 seconds
Server load: 0.02 0.05 0.07
Total accesses: 2225623515 - Total Traffic: 19474.7 GB - Total Duration: 84864076369
CPU Usage: u1202.49 s58759.9 cu7097740 cs1674310 - 12.9% CPU load
32.6 requests/sec - 298.9 kB/second - 9.2 kB/request - 38.1305 ms/request
1 requests currently being processed, 5 idle workers
_W_.___.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6318368380/88/281371645_
0.350047680665500.00.562439295.25
162.158.154.215http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-6318369040/21/272846019W
0.090046625892040.00.132348423.00
172.70.110.125http/1.1hanadama.biz:80GET /server-status HTTP/1.1

2-6318369010/27/266278541_
0.110045678696750.00.162279158.50
172.70.115.146http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-63-0/0/251458872.
0.0022043992921310.00.002152955.75
172.70.114.34http/1.1mma-fighter.com:80GET /robots.txt HTTP/1.1

4-6318368950/36/241603989_
0.160042592040580.00.242062005.88
162.158.155.183http/1.1glacierlodgeeqi.com:80GET /uploads/Alex-Cross.php HTTP/1.1

5-6318368980/34/234457990_
0.140041506634610.00.251998676.13
172.70.230.4http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

6-6318369060/11/222708097_
0.030040018252750.00.031904916.25
172.70.230.133http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-63-0/0/143747722.
0.003191331399014390.00.001316530.38
172.70.110.70http/1.1pangu.us:80GET /wp-content/themes/darknews/assets/script.js HTTP/1.1

8-63-0/0/75270520.
0.003697022862978560.00.00759940.13
162.158.62.39http/1.1martinlukac.com:80GET /alfanew2.php7 HTTP/1.1

9-63-0/0/51983196.
0.003696018860410380.00.00538569.19
172.70.230.107http/1.1martinlukac.com:80GET /wp-admin/css/colors/index.php HTTP/1.1

10-63-0/0/33355683.
0.0014838015559646530.00.00363143.53
172.70.114.98http/1.1mma-fighter.com:80GET /forum/threads/19562-Fighter-Watch-Brendon-O%C2%92Dell-Inte

11-63-0/0/20704403.
0.0014840013031889340.00.00239558.14
162.158.158.228http/1.1mma-fighter.com:80GET /forum/forums/7-MMA-Fighter-com HTTP/1.1

12-63-0/0/17794966.
0.00193926212107580370.00.00205811.72
172.70.231.18http/1.1monclerpaschereenligne.com:80GET /wp-content/themes/publisher/js/theme.min.js HTTP/1.1

13-63-0/0/16541832.
0.00249452011557630970.00.00191195.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13135011.
0.00249311010557855840.00.00152175.77
172.70.114.79http/1.1sweetbuttonsdesserts.com:80GET /the-girl-scout-cookie-dessert-challenge-is-back/ HTTP/1.1

15-63-0/0/7124487.
0.0024942408870664650.00.0083787.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601093.
0.0024944907884077940.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.00156172337369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.00156151707006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.00156172806719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00256148806542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00256147306354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00256128706187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00256147006059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00256147505962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00256118945874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00256125325803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00256147405731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00256125085661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00256148005610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00256147705489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00400933405272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00400931005122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00400930704997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00400931504880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00400910504805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00400910374727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00400931414640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00400910244548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00400910404490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00400910214427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00400934304370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00400928304321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00400933204268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00400929204208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00400930104163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00400929304118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00400932304062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00400929104047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00400930004007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00400934203982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

Found on 2024-08-22 02:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342157b6e054

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 22-Aug-2024 02:40:05 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  790 days 19 hours 53 minutes 15 seconds
Server load: 0.02 0.05 0.07
Total accesses: 2225623517 - Total Traffic: 19474.7 GB - Total Duration: 84864076382
CPU Usage: u1202.5 s58759.9 cu7097740 cs1674310 - 12.9% CPU load
32.6 requests/sec - 298.9 kB/second - 9.2 kB/request - 38.1305 ms/request
1 requests currently being processed, 5 idle workers
___.__W.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6318368380/88/281371645_
0.350047680665500.00.562439295.25
162.158.154.215http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-6318369040/22/272846020_
0.090646625892160.00.142348423.00
172.70.110.125http/1.1hanadama.biz:80GET /server-status HTTP/1.1

2-6318369010/27/266278541_
0.110045678696750.00.162279158.50
172.70.115.146http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-63-0/0/251458872.
0.0022043992921310.00.002152955.75
172.70.114.34http/1.1mma-fighter.com:80GET /robots.txt HTTP/1.1

4-6318368950/36/241603989_
0.160042592040580.00.242062005.88
162.158.155.183http/1.1glacierlodgeeqi.com:80GET /uploads/Alex-Cross.php HTTP/1.1

5-6318368980/35/234457991_
0.150041506634610.00.251998676.13
172.70.111.20http/1.1chachasfamousfoods.com:80GET /review-a-tasting-tour-of-north-countys-vegan-pop-up HTTP/1

6-6318369060/11/222708097W
0.030040018252750.00.031904916.25
172.70.111.132http/1.1hanadama.biz:80GET /server-status HTTP/1.1

7-63-0/0/143747722.
0.003191331399014390.00.001316530.38
172.70.110.70http/1.1pangu.us:80GET /wp-content/themes/darknews/assets/script.js HTTP/1.1

8-63-0/0/75270520.
0.003697022862978560.00.00759940.13
162.158.62.39http/1.1martinlukac.com:80GET /alfanew2.php7 HTTP/1.1

9-63-0/0/51983196.
0.003696018860410380.00.00538569.19
172.70.230.107http/1.1martinlukac.com:80GET /wp-admin/css/colors/index.php HTTP/1.1

10-63-0/0/33355683.
0.0014838015559646530.00.00363143.53
172.70.114.98http/1.1mma-fighter.com:80GET /forum/threads/19562-Fighter-Watch-Brendon-O%C2%92Dell-Inte

11-63-0/0/20704403.
0.0014840013031889340.00.00239558.14
162.158.158.228http/1.1mma-fighter.com:80GET /forum/forums/7-MMA-Fighter-com HTTP/1.1

12-63-0/0/17794966.
0.00193926212107580370.00.00205811.72
172.70.231.18http/1.1monclerpaschereenligne.com:80GET /wp-content/themes/publisher/js/theme.min.js HTTP/1.1

13-63-0/0/16541832.
0.00249452011557630970.00.00191195.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13135011.
0.00249311010557855840.00.00152175.77
172.70.114.79http/1.1sweetbuttonsdesserts.com:80GET /the-girl-scout-cookie-dessert-challenge-is-back/ HTTP/1.1

15-63-0/0/7124487.
0.0024942408870664650.00.0083787.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601093.
0.0024944907884077940.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.00156172337369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.00156151707006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.00156172806719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00256148806542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00256147406354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00256128706187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00256147106059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00256147605962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00256118945874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00256125325803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00256147505731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00256125085661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00256148105610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00256147805489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00400933405272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00400931005122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00400930704997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00400931504880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00400910504805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00400910374727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00400931414640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00400910244548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00400910404490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00400910214427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00400934304370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00400928304321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00400933204268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00400929204208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00400930104163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00400929304118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00400932304062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00400929104047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00400930004007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00400934203982180660.00.007189.07
::1http/1.112

Found on 2024-08-22 02:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342193f087ae

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Tuesday, 20-Aug-2024 03:13:47 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  788 days 20 hours 26 minutes 56 seconds
Server load: 0.17 0.11 0.04
Total accesses: 2224980374 - Total Traffic: 19471.0 GB - Total Duration: 84859810106
CPU Usage: u1200.12 s58731.5 cu7095610 cs1673820 - 13% CPU load
32.6 requests/sec - 299.6 kB/second - 9.2 kB/request - 38.1396 ms/request
1 requests currently being processed, 7 idle workers
_______W........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6317615580/61/281275598_
0.220747674299040.00.322438719.25
162.158.154.135http/1.1icgsdeepwater.com:80GET /round-rock-isd-is-looking-for-volunteers-for-the-back-to-s

1-6317615590/54/272750651_
0.170046619539890.00.242347852.25
162.158.155.163http/1.1fiberartsconnsocal.org:80GET /at-msu-madison-anderson-went-from-art-student-to-artistic-

2-6317615600/54/266185293_
0.190345672462480.00.302278597.00
172.70.114.151http/1.1plusooo.com:80HEAD / HTTP/1.1

3-6317615570/65/251367771_
0.240043986880480.00.372152414.00
162.158.62.148http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

4-6317615610/52/241516079_
0.210242586163300.00.672061469.00
162.158.155.102http/1.1gdevresources.com:80GET /algorithm/ HTTP/1.1

5-6317615620/52/234375090_
0.180041501138800.00.261998181.75
162.158.62.193http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

6-6317615630/52/222649878_
0.170040014476320.00.241904579.88
162.158.63.116http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-6317615640/51/143724673W
0.190031397509430.00.281316396.25
162.158.154.214http/1.1hanadama.biz:80GET /server-status HTTP/1.1

8-63-0/0/75260320.
0.00203022862294110.00.00759876.13
162.158.159.21http/1.1willisbboyer.org:80GET /wp-admin/css/colors/cloud.php HTTP/1.1

9-63-0/0/51978397.
0.001000018860099270.00.00538542.31
172.70.230.107http/1.1insurancehealthquote.org:80GET /cgi-bin/cloud.php HTTP/1.1

10-63-0/0/33355483.
0.0016634015559633220.00.00363141.91
162.158.158.7http/1.1demosgreenhouse.co.uk:80GET /wp-content/uploads/2023/10/wp-content/uploads/ HTTP/1.1

11-63-0/0/20704303.
0.0023144013031883740.00.00239557.31
172.70.115.197http/1.1lostnomad.org:80HEAD /new/xmlrpc.php HTTP/1.1

12-63-0/0/17794966.
0.0023148212107580370.00.00205811.72
172.70.231.18http/1.1monclerpaschereenligne.com:80GET /wp-content/themes/publisher/js/theme.min.js HTTP/1.1

13-63-0/0/16541832.
0.0078674011557630970.00.00191195.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13135011.
0.0078533010557855840.00.00152175.77
172.70.114.79http/1.1sweetbuttonsdesserts.com:80GET /the-girl-scout-cookie-dessert-challenge-is-back/ HTTP/1.1

15-63-0/0/7124487.
0.007864608870664650.00.0083787.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601093.
0.007867107884077940.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.00139094537369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.00139073907006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.00139095006719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00239070906542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00239069506354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00239050906187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00239069206059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00239069705962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00239041145874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00239047525803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00239069605731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00239047285661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00239070205610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00239069905489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00383855605272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00383853205122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00383852904997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00383853704880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00383832704805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00383832574727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00383853614640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00383832444548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00383832604490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00383832414427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00383856504370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00383850504321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00383855404268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00383851404208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00383852304163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00383851504118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00383854504062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00383851304047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00383852204007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00383856403982180660.00.007189.07
::1http/1.1127.0.1.1:80

Found on 2024-08-20 03:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34218e71f0ff

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 18-Aug-2024 21:23:22 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  787 days 14 hours 36 minutes 31 seconds
Server load: 0.07 0.06 0.01
Total accesses: 2224363829 - Total Traffic: 19467.3 GB - Total Duration: 84856169355
CPU Usage: u1197.78 s58707.8 cu7093710 cs1673360 - 13% CPU load
32.7 requests/sec - 300.0 kB/second - 9.2 kB/request - 38.1485 ms/request
1 requests currently being processed, 7 idle workers
W_______........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6317134740/37/281186398W
0.100047669085120.00.152438178.50
172.70.110.159http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6317134690/44/272662351_
0.150246614298960.00.202347317.00
172.70.111.156http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

2-6317134700/40/266097251_
0.140245667292520.00.242278063.75
172.70.231.41http/1.1kidsradio.ro:80GET /wp-content/themes/mantranews/assets/lib/sticky/sticky-sett

3-6317134750/38/251283149_
0.110443981920990.00.152151899.75
162.158.154.75http/1.1kidsradio.ro:80GET /wp-content/themes/mantranews/assets/lib/font-awesome/fonts

4-6317134760/38/241435240_
0.130042581422530.00.542060985.25
162.158.154.249http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-6317134680/58/234297217_
0.160241496632020.00.121997723.75
162.158.154.97http/1.1kidsradio.ro:80GET /wp-content/themes/mantranews/assets/js/custom-script.js HT

6-6317134710/40/222587950_
0.120140010804180.00.181904202.25
172.70.110.47http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-6317134770/37/143696484_
0.130631395737700.00.251316212.88
172.70.111.111http/1.1kidsradio.ro:80GET /wp-content/plugins/featured-image-from-url/includes/html/j

8-63-0/0/75249503.
0.00912022861583480.00.00759801.63
172.70.111.4http/1.1fiberartsconnsocal.org:80GET /byp.php HTTP/1.1

9-63-0/0/51972895.
0.005054118859746890.00.00538504.56
172.70.115.190http/1.1ideapractices.org:80GET /wp-admin/file.php HTTP/1.1

10-63-0/0/33354778.
0.00746841015559590510.00.00363136.78
172.70.110.181http/1.1universoviviente.com:80GET /astronomer-warns-of-physics-experiment-that-could-destroy-

11-63-0/0/20704103.
0.00867872013031872220.00.00239555.75
162.158.62.60http/1.1bugcrowdreports.com:80POST /Public/webuploader/0.1.5/server/preview.php HTTP/1.1

12-63-0/0/17794766.
0.0089347012107569300.00.00205810.13
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16541829.
0.00261358111557630950.00.00191195.81
162.158.155.197http/1.1bw-donningtonmanor.co.uk:80GET /.env HTTP/1.1

14-63-0/0/13134912.
0.00981882010557852750.00.00152174.56
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7124467.
0.001144080138870664330.00.0083787.91
172.70.110.153http/1.1dellpryorgalleries.com:80GET /wp-content/uploads/2023/09/government-funding.jpg HTTP/1.1

16-63-0/0/4601087.
0.00128352607884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.00128352037369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.00128331307006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.00128352506719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00228328406542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00228327006354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00228308406187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00228326706059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00228327205962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00228298645874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00228305025803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00228327105731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00228304785661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00228327705610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00228327405489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00373113105272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00373110705122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00373110404997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00373111204880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00373090204805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00373090074727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00373111114640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00373089944548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00373090104490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00373089914427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00373114004370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00373108004321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00373112904268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00373108904208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00373109804163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00373109004118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00373112004062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00373108804047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00373109704007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00373113903982180660.00.007189.07
::1http/1.

Found on 2024-08-18 21:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34219f3e5028

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 16-Aug-2024 20:16:09 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  785 days 13 hours 29 minutes 19 seconds
Server load: 0.10 0.14 0.10
Total accesses: 2223576113 - Total Traffic: 19462.9 GB - Total Duration: 84851444491
CPU Usage: u1194.84 s58676 cu7091300 cs1672800 - 13% CPU load
32.8 requests/sec - 300.7 kB/second - 9.2 kB/request - 38.1599 ms/request
1 requests currently being processed, 4 idle workers
.___.W_.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-63-0/0/281069218.
0.00771847662184010.00.002437514.75
172.70.111.97http/1.1babygrandsduelingpianos.com:80GET //?author=1 HTTP/1.1

1-6316282460/92/272546359_
0.320246607446850.00.342346662.25
172.70.110.124http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

2-6316282510/50/265982051_
0.210245660403170.00.302277403.75
162.158.154.41http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

3-6316282520/46/251171604_
0.180043975363130.00.282151266.75
162.158.159.109http/1.1hanadama.biz:80GET /about HTTP/1.1

4-63-0/0/241328196.
0.00102042575052340.00.002060375.38
162.158.154.202http/1.1deepmp3download.com:80GET /files/index.php HTTP/1.1

5-6316282450/93/234198137W
0.330041490740710.00.391997162.13
162.158.159.15http/1.1hanadama.biz:80GET /server-status HTTP/1.1

6-6316282470/92/222515915_
0.340040006187050.00.411903795.13
172.70.110.87http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-63-0/0/143665377.
0.00393431393637650.00.001316035.00
162.158.154.100http/1.1mma-fighter.com:80GET /?t=9256 HTTP/1.1

8-63-0/0/75236473.
0.002361022860827220.00.00759729.63
162.158.159.79http/1.1lostnomad.org:80GET //xmlrpc.php?rsd HTTP/1.1

9-63-0/0/51967695.
0.002362218859444460.00.00538476.19
162.158.158.26http/1.1mondovino-lefilm.com:80GET /wp-content/themes/publisher/includes/libs/bs-theme-core/li

10-63-0/0/33354577.
0.0038067115559582840.00.00363136.00
172.70.111.96http/1.1futuristtheatre.co.uk:80GET /robots.txt HTTP/1.1

11-63-0/0/20704002.
0.0054370313031869060.00.00239555.52
172.70.114.60http/1.1luxuryhoneybee.com:80GET /wp-sitemap-taxonomies-category-1.xml HTTP/1.1

12-63-0/0/17794765.
0.0054536012107569300.00.00205810.13
172.69.92.131http/1.1

13-63-0/0/16541829.
0.0084526111557630950.00.00191195.81
162.158.155.197http/1.1bw-donningtonmanor.co.uk:80GET /.env HTTP/1.1

14-63-0/0/13134912.
0.00805049010557852750.00.00152174.56
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7124467.
0.00967247138870664330.00.0083787.91
172.70.110.153http/1.1dellpryorgalleries.com:80GET /wp-content/uploads/2023/09/government-funding.jpg HTTP/1.1

16-63-0/0/4601087.
0.00110669307884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.00110668737369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.00110648107006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.00110669206719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00210645106542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00210643706354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00210625106187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00210643406059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00210643905962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00210615345874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00210621725803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00210643805731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00210621485661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00210644405610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00210644105489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00355429805272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00355427405122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00355427104997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00355427904880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00355406904805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00355406774727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00355427814640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00355406644548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00355406804490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00355406614427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00355430704370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00355424704321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00355429604268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00355425604208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00355426504163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00355425704118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00355428704062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00355425504047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00355426404007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00355430603982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.
0.00355428603

Found on 2024-08-16 20:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34218506289c

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 14-Aug-2024 13:43:04 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  783 days 6 hours 56 minutes 13 seconds
Server load: 0.01 0.07 0.08
Total accesses: 2222782636 - Total Traffic: 19457.9 GB - Total Duration: 84846017347
CPU Usage: u1191.24 s58642.1 cu7088760 cs1672200 - 13% CPU load
32.8 requests/sec - 301.5 kB/second - 9.2 kB/request - 38.1711 ms/request
1 requests currently being processed, 4 idle workers
_.__W._.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6315303610/32/280949793_
0.1401647654083700.00.212436732.00
172.70.110.135http/1.1h-outdoor.com:80GET /best-time-to-see-the-northern-lights-in-hokkaido/ HTTP/1.1

1-63-0/0/272427921.
0.003046599433960.00.002345891.25
162.158.159.74http/1.1blackmouse.biz:80GET /1081540-ariel-biological-liquid-laundry-detergent-65-washe

2-6315303420/72/265866092_
0.260045652476590.00.322276640.50
172.70.115.156http/1.1apdaweb.org:80GET /results/debater/845/ HTTP/1.1

3-6315303470/56/251058471_
0.190043967647240.00.312150536.00
172.70.110.182http/1.1apdaweb.org:80GET /results/debater/845/ HTTP/1.1

4-6315303450/71/241220885W
0.270042567746090.00.482059675.50
172.70.230.227http/1.1hanadama.biz:80GET /server-status HTTP/1.1

5-63-0/0/234097497.
0.00107041483837230.00.001996497.75
172.70.230.191http/1.1authenticmapleleafsshops.com:80GET /wp-content/plugins/Cache/Cache.php HTTP/1.1

6-6315303460/71/222441456_
0.250040000898610.00.291903303.88
162.158.154.219http/1.1apdaweb.org:80GET /results/debater/845/ HTTP/1.1

7-63-0/0/143637937.
0.001498631391742550.00.001315851.25
172.70.110.93http/1.1quickenaccountingsolution.com:8GET /monkeypox-the-ministry-of-health-publishes-a-notice-to-int

8-63-0/0/75225518.
0.001694722860080650.00.00759658.06
162.158.155.5http/1.1unitycemetery.org:80GET /columbarium-arrives-at-fountain-grove-cemetery-local-news/

9-63-0/0/51963317.
0.002774318859153930.00.00538447.38
172.70.115.142http/1.1esiq.org:80GET /?url=www.maricopapages.gq HTTP/1.1

10-63-0/0/33353706.
0.0059289015559521230.00.00363129.94
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

11-63-0/0/20703734.
0.0059121013031853300.00.00239553.92
172.70.230.196http/1.1whitewizzard.net:80GET /0o.php HTTP/1.1

12-63-0/0/17794665.
0.0059121012107565420.00.00205809.84
172.70.111.48http/1.1mhyc-lakeerie.com:80GET /files/ HTTP/1.1

13-63-0/0/16541729.
0.0059119311557626800.00.00191195.42
172.70.111.15http/1.1ltapersoonlijkeontwikkeling.comGET /?filesrc=//lib/modules/2.6.32-896.16.1.lve1.4.51.el6.x86_6

14-63-0/0/13134912.
0.00608664010557852750.00.00152174.56
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7124467.
0.00770862138870664330.00.0083787.91
172.70.110.153http/1.1dellpryorgalleries.com:80GET /wp-content/uploads/2023/09/government-funding.jpg HTTP/1.1

16-63-0/0/4601087.
0.0091030807884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.0091030237369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.0091009607006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.0091030706719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00191006606542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00191005206354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00190986606187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00191004906059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00191005405962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00190976845874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00190983225803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00191005305731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00190982985661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00191005905610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00191005605489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00335791305272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00335788905122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00335788604997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00335789404880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00335768404805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00335768274727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00335789314640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00335768144548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00335768304490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00335768114427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00335792204370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00335786204321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00335791104268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00335787104208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00335788004163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00335787204118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00335790204062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00335787004047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00335787904007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00335792103982180660.00.007189.07
::1http/1.1127.0.1.1:80

Found on 2024-08-14 13:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421b6dec7df

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Monday, 12-Aug-2024 15:19:27 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  781 days 8 hours 32 minutes 36 seconds
Server load: 0.06 0.14 0.12
Total accesses: 2222135093 - Total Traffic: 19453.6 GB - Total Duration: 84841114655
CPU Usage: u1187.86 s58613.6 cu7086600 cs1671670 - 13.1% CPU load
32.9 requests/sec - 302.2 kB/second - 9.2 kB/request - 38.18 ms/request
1 requests currently being processed, 6 idle workers
W_._____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6314543540/22/280850706W
0.080047646375970.00.132436058.50
172.70.230.195http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6314543550/20/272329883_
0.080246592054200.00.132345233.00
172.70.115.195http/1.1mhyc-lakeerie.com:80GET /inside-george-charlotte-louis-summer-kates-training-the-qu

2-63-0/0/265769358.
0.003045645217180.00.002275984.75
172.70.230.93http/1.1fsc-clan.org:80GET /wp-content/uploads/2023/09/virtual-economies.jpg HTTP/1.1

3-6314543560/19/250963815_
0.070043960508390.00.092149895.50
162.158.62.246http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

4-6314543570/19/241130281_
0.080442560901340.00.142059058.00
162.158.154.146http/1.1yeezys.org:80GET /wp-content/themes/publisher/css/theme-libs.min.css HTTP/1.

5-6314543580/19/234014257_
0.090041477524750.00.191995927.13
162.158.62.217http/1.1noomore.org:80GET /lewis-central-to-participate-in-librarys-student-access-ca

6-6314543590/19/222385989_
0.090039996775300.00.211902932.13
162.158.62.230http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-6314543600/19/143619615_
0.080031390351580.00.271315722.88
172.70.230.116http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

8-63-0/0/75217923.
0.0049022859502390.00.00759607.06
162.158.62.205http/1.1clarencehouse-hotel.co.uk:80GET //wp-includes/ID3/license.txt HTTP/1.1

9-63-0/0/51960221.
0.0049018858909510.00.00538424.31
162.158.154.100http/1.1milpkbk.co.uk:80GET /robots.txt HTTP/1.1

10-63-0/0/33353404.
0.0031351015559501510.00.00363128.00
172.70.230.143http/1.1babycountrywr.com:80GET /wp-includes/rest-api/about.php HTTP/1.1

11-63-0/0/20703534.
0.0059458113031839670.00.00239552.45
162.158.158.223http/1.1jameslangdonwork.net:80GET /composition/ HTTP/1.1

12-63-0/0/17794563.
0.00629781212107558900.00.00205809.02
172.70.114.33http/1.1vietcong-game.net:80GET /category/achievements/feed/ HTTP/1.1

13-63-0/0/16541629.
0.00231621211557619690.00.00191194.77
162.158.63.123http/1.1thedempseys.net:80HEAD /home HTTP/1.1

14-63-0/0/13134912.
0.00441647010557852750.00.00152174.56
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7124467.
0.00603844138870664330.00.0083787.91
172.70.110.153http/1.1dellpryorgalleries.com:80GET /wp-content/uploads/2023/09/government-funding.jpg HTTP/1.1

16-63-0/0/4601087.
0.0074329007884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.0074328437369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.0074307807006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.0074328906719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00174304906542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00174303506354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00174284906187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00174303206059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00174303705962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00174275145874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00174281525803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00174303605731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00174281285661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00174304205610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00174303905489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00319089605272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00319087205122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00319086904997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00319087704880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00319066604805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00319066474727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00319087614640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00319066344548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00319066504490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00319066314427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00319090504370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00319084504321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00319089404268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00319085404208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00319086304163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00319085504118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00319088504062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00319085304047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00319086204007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00319090403982180660.00.007189.07
::1http/1.11

Found on 2024-08-12 15:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342156e0d6a3

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Saturday, 10-Aug-2024 20:22:37 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  779 days 13 hours 35 minutes 46 seconds
Server load: 0.00 0.02 0.05
Total accesses: 2221552163 - Total Traffic: 19449.5 GB - Total Duration: 84836574942
CPU Usage: u1185.98 s58587.4 cu7084600 cs1671200 - 13.1% CPU load
33 requests/sec - 302.8 kB/second - 9.2 kB/request - 38.188 ms/request
1 requests currently being processed, 6 idle workers
W______.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6313768340/53/280761753W
0.200047639465490.00.272435415.00
162.158.159.158http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6313768320/55/272241699_
0.271146585225690.00.392344599.25
162.158.154.75http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

2-6313768310/60/265682632_
0.240045638499470.00.342275363.75
172.70.114.189http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-6313768330/55/250878772_
0.240043953823250.00.352149279.50
172.70.114.162http/1.1melnitsa.net:80GET /wp-content/themes/gloria/css/theme_plugins.css HTTP/1.1

4-6313768350/53/241049242_
0.211242554544630.00.292058473.63
172.70.114.66http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

5-6313768360/53/233939632_
0.200441471700760.00.241995390.63
172.70.230.141http/1.1chachasfamousfoods.com:80GET /author/tanya-s-norvell HTTP/1.1

6-6313768370/53/222336564_
0.2501439992926020.00.491902577.88
172.70.110.98http/1.1melnitsa.net:80GET /page/1/ HTTP/1.1

7-63-0/0/143601294.
0.0099031388926220.00.001315592.75
162.158.62.173http/1.1linuxpourlesnuls.org:80GET //wp-includes/pomo/about.php HTTP/1.1

8-63-0/0/75211019.
0.00585022858977490.00.00759556.75
172.70.230.248http/1.1jeffreylucklucas.com:80GET /wp-mail.php HTTP/1.1

9-63-0/0/51957218.
0.006306018858689030.00.00538403.81
162.158.159.213http/1.1oxuscom.com:80GET /robots.txt HTTP/1.1

10-63-0/0/33353000.
0.0015231015559475350.00.00363125.38
162.158.63.54http/1.1lostnomad.org:80GET /wp-content/uploads/2023/10/online-learning-platforms.jpg H

11-63-0/0/20703331.
0.0015231013031820390.00.00239550.88
172.70.230.24http/1.1nsms10.com:80GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1

12-63-0/0/17794463.
0.0077011212107549750.00.00205808.14
172.70.114.127http/1.1whistlestopdepot.com:80GET /chosen.php HTTP/1.1

13-63-0/0/16541629.
0.0077011211557619690.00.00191194.77
162.158.63.123http/1.1thedempseys.net:80HEAD /home HTTP/1.1

14-63-0/0/13134912.
0.00287037010557852750.00.00152174.56
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7124467.
0.00449234138870664330.00.0083787.91
172.70.110.153http/1.1dellpryorgalleries.com:80GET /wp-content/uploads/2023/09/government-funding.jpg HTTP/1.1

16-63-0/0/4601087.
0.0058868007884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.0058867437369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.0058846807006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.0058867906719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00158843906542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00158842506354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00158823906187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00158842206059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00158842705962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00158814145874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00158820525803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00158842605731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00158820285661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00158843205610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00158842905489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00303628605272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00303626205122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00303625904997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00303626704880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00303605604805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00303605474727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00303626614640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00303605344548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00303605504490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00303605314427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00303629504370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00303623504321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00303628404268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00303624404208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00303625304163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00303624504118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00303627504062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00303624304047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00303625204007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00303629403982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-6

Found on 2024-08-10 20:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34214dabea4b

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 08-Aug-2024 17:28:46 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  777 days 10 hours 41 minutes 55 seconds
Server load: 0.07 0.12 0.09
Total accesses: 2220798255 - Total Traffic: 19444.5 GB - Total Duration: 84830539999
CPU Usage: u1182.52 s58552.5 cu7081930 cs1670550 - 13.1% CPU load
33.1 requests/sec - 303.5 kB/second - 9.2 kB/request - 38.1982 ms/request
1 requests currently being processed, 5 idle workers
W_____..........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6312998500/39/280646699W
0.140047630214580.00.332434638.75
162.158.63.4http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6312998510/39/272127800_
0.130246576135500.00.222343841.50
162.158.63.95http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

2-6312997930/96/265570465_
0.420045629547170.00.782274620.25
172.70.110.46http/1.1hanadama.biz:80GET /about HTTP/1.1

3-6312998470/53/250770411_
0.200043945063590.00.242148549.25
162.158.158.58http/1.1hanadama.biz:80GET /.vscode/sftp.json HTTP/1.1

4-6312998490/41/240943907_
0.170042546177150.00.412057767.25
162.158.154.108http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

5-6312998480/46/233841583_
0.180041463800060.00.311994725.13
162.158.154.181http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-63-0/0/222273085.
0.0043039987891250.00.001902157.88
172.70.110.17http/1.1era-ard.org:80GET /blog HTTP/1.1

7-63-0/0/143579255.
0.001330331387135210.00.001315445.00
162.158.154.58http/1.1pensacolaframery.com:80GET /wp-content/uploads/2021/10/cropped-icon-32x32.png HTTP/1.1

8-63-0/0/75201266.
0.002224022858200020.00.00759495.06
172.70.115.168http/1.1best-custom-essay-writing.net:8GET /admin.php/.well-known/ HTTP/1.1

9-63-0/0/51952162.
0.006526018858309460.00.00538373.13
162.158.154.149http/1.1hiahbg.org:80GET /charm-bracelets-for-a-cause/ HTTP/1.1

10-63-0/0/33352743.
0.0069821415559458070.00.00363124.00
172.70.115.168http/1.1esiq.org:80GET /?url=id.pinterest.com/pin/753578950178893514/ HTTP/1.1

11-63-0/0/20703081.
0.0073447013031807320.00.00239549.86
162.158.154.193http/1.1kidsradio.ro:80GET /wp-admin/js/widgets/cloud.php HTTP/1.1

12-63-0/0/17794357.
0.0073447312107540660.00.00205807.59
162.158.155.196http/1.1tuscangrillwaltham.com:80GET /wp-includes/css/classic-themes.min.css HTTP/1.1

13-63-0/0/16541526.
0.00103659811557613770.00.00191194.13
172.70.231.28http/1.1lokikirjat.com:80GET /illinois-authors-write-family-book-about-real-life-corgi-d

14-63-0/0/13134912.
0.00103806010557852750.00.00152174.56
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7124467.
0.00266003138870664330.00.0083787.91
172.70.110.153http/1.1dellpryorgalleries.com:80GET /wp-content/uploads/2023/09/government-funding.jpg HTTP/1.1

16-63-0/0/4601087.
0.0040544907884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.0040544337369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.0040523707006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.0040544806719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00140520806542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00140519406354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00140500706187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00140519106059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00140519605962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00140490945874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00140497325803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00140519505731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00140497085661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00140520105610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00140519805489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00285305405272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00285303005122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00285302704997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00285303504880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00285282504805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00285282374727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00285303414640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00285282244548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00285282404490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00285282214427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00285306304370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00285300304321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00285305204268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00285301204208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00285302104163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00285301304118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00285304304062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00285301104047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00285302004007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00285306203982180660.00.007189.07
::1http/1.1127.0.1.1:80

Found on 2024-08-08 17:28

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34213580b63b

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Tuesday, 06-Aug-2024 14:45:36 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  775 days 7 hours 58 minutes 45 seconds
Server load: 0.01 0.12 0.15
Total accesses: 2220018140 - Total Traffic: 19439.4 GB - Total Duration: 84823905960
CPU Usage: u1178.88 s58517.1 cu7079170 cs1669870 - 13.1% CPU load
33.1 requests/sec - 304.3 kB/second - 9.2 kB/request - 38.2087 ms/request
1 requests currently being processed, 6 idle workers
_____W_.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6312142940/24/280526804_
0.070147620021590.00.042433834.50
162.158.158.41http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

1-6312142950/20/272009035_
0.060046566023500.00.052343040.25
162.158.158.130http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-6312142960/20/265453710_
0.080045619735960.00.082273842.75
172.70.230.138http/1.1vynebistrosj.com:80GET /wso112233.php HTTP/1.1

3-6312142970/18/250656376_
0.050043935371210.00.032147780.75
162.158.62.178http/1.1melnitsa.net:80GET //images/cloud.php HTTP/1.1

4-6312142980/18/240834198_
0.040042536874610.00.032057028.75
162.158.154.106http/1.1vynebistrosj.com:80GET /alfanew.php HTTP/1.1

5-6312142990/17/233742281W
0.050041455466260.00.061994062.00
162.158.158.40http/1.1hanadama.biz:80GET /server-status HTTP/1.1

6-6312143000/17/222205724_
0.050039982077110.00.031901704.88
172.70.230.249http/1.1melnitsa.net:80GET //wp-includes/Requests/Text/admin.php HTTP/1.1

7-63-0/0/143556847.
0.001882431385195160.00.001315294.38
172.70.115.196http/1.1photobolsillo.com:80GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1

8-63-0/0/75193405.
0.00188322857484350.00.00759441.56
162.158.158.112http/1.1photobolsillo.com:80GET /wp-content/themes/publisher/includes/libs/better-framework

9-63-0/0/51948764.
0.001881618857979760.00.00538350.19
162.158.155.210http/1.1photobolsillo.com:80GET /wp-content/themes/publisher/includes/libs/better-framework

10-63-0/0/33352441.
0.0053914915559416150.00.00363122.25
162.158.154.234http/1.1soulsurvivors-themovie.com:80GET /wp-content/uploads/2021/07/logo-3-e1625578318302.png HTTP/

11-63-0/0/20702971.
0.0053918013031788890.00.00239548.98
162.158.158.205http/1.1allantique.net:80GET /www.allantique.net/.env HTTP/1.1

12-63-0/0/17794250.
0.00615701012107525090.00.00205807.00
162.158.62.7http/1.1riotjs.com:80GET /wp-content/themes/mantranews/assets/lib/font-awesome/css/f

13-63-0/0/16541426.
0.0083638011557598470.00.00191193.33
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13134905.
0.0083643010557848050.00.00152174.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7124467.
0.0083413138870664330.00.0083787.91
172.70.110.153http/1.1dellpryorgalleries.com:80GET /wp-content/uploads/2023/09/government-funding.jpg HTTP/1.1

16-63-0/0/4601087.
0.0022285907884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.0022285337369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.0022264707006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.0022285806719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00122261806542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00122260406354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00122241806187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00122260106059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00122260605962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00122231945874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00122238425803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00122260505731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00122238185661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00122261105610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00122260805489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00267046505272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00267044105122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00267043804997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00267044604880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00267023504805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00267023374727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00267044514640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00267023244548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00267023404490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00267023214427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00267047404370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00267041404321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00267046304268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00267042304208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00267043204163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00267042404118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00267045404062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00267042204047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00267043104007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00267047303982180660.00.007189.07
::1http/1.1

Found on 2024-08-06 14:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421f47af5a6

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 04-Aug-2024 14:15:40 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  773 days 7 hours 28 minutes 49 seconds
Server load: 0.00 0.01 0.01
Total accesses: 2219222450 - Total Traffic: 19434.4 GB - Total Duration: 84817955376
CPU Usage: u1176.28 s58482.5 cu7076490 cs1669230 - 13.2% CPU load
33.2 requests/sec - 305.0 kB/second - 9.2 kB/request - 38.2197 ms/request
1 requests currently being processed, 4 idle workers
..___W_.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-63-0/0/280406386.
0.0033547611047360.00.002433057.75
172.70.110.187http/1.1babygrandsduelingpianos.com:80GET /loss-of-namesake-bar-and-grill-hits-small-alabama-communit

1-63-0/0/271890350.
0.003346557190160.00.002342272.75
162.158.159.187http/1.1willisbboyer.org:80GET /?phpinfo=1 HTTP/1.1

2-6311358050/65/265336036_
0.250045610908650.00.512273082.00
162.158.154.33http/1.1plainsnews.com:80GET /_profiler/phpinfo HTTP/1.1

3-6311358080/27/250542111_
0.090243926861060.00.112147041.25
172.70.230.27http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

4-6311358230/26/240724128_
0.090042528679950.00.162056319.75
162.158.63.6http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-6311358560/24/233639330W
0.060041447732870.00.081993396.50
162.158.63.15http/1.1hanadama.biz:80GET /server-status HTTP/1.1

6-6311358570/25/222136815_
0.080039976951500.00.111901263.50
172.70.231.14http/1.1flexexamples.com:80GET /admin/.env HTTP/1.1

7-63-0/0/143531225.
0.00645131383223810.00.001315126.75
162.158.158.234http/1.1honiton-today.co.uk:80GET //wp-json/wp/v2/users/ HTTP/1.1

8-63-0/0/75182029.
0.00596122856587360.00.00759363.19
162.158.62.134http/1.1gillansinn.com:80GET /system/_content/download.jsp?urltype=news.DownloadAttachUr

9-63-0/0/51944295.
0.0013332018857627610.00.00538319.69
162.158.154.130http/1.1michaeldorf.org:80GET /.well-known/acme-challenge/cloud.php HTTP/1.1

10-63-0/0/33351866.
0.00480511215559377640.00.00363118.69
172.70.230.65http/1.1alhaqaeq.net:80GET /wp-content/themes/magazine-hoot/hybrid/extend/css/font-awe

11-63-0/0/20702599.
0.0048052113031762810.00.00239546.75
162.158.158.17http/1.1dogs-r-us.org:80GET /wp-content/uploads/?C=S%3BO%3DA HTTP/1.1

12-63-0/0/17794051.
0.0048259012107512780.00.00205805.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16541424.
0.0048266011557598450.00.00191193.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13134901.
0.00480511010557847680.00.00152174.50
162.158.62.35http/1.1alhaqaeq.net:80GET /wp-content/uploads/2023/09/viewport-meta-tag.jpg HTTP/1.1

15-63-0/0/7124368.
0.004826508870654970.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601087.
0.004826407884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695740.
0.004825837369347290.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3066009.
0.004805107006150410.00.0036499.91
162.158.154.121http/1.1stopncafe.com:80GET /alfanew.php HTTP/1.1

19-63-0/0/2654460.
0.004826306719560910.00.0031511.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.00104802206542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.00104800806354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.00104782206187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.00104800506059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.00104801005962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.00104772445874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.00104778825803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.00104800905731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.00104778585661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.00104801505610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.00104801205489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00249586905272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00249584505122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00249584204997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00249585004880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00249564004805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00249563874727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00249584914640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00249563744548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00249563904490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00249563714427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00249587804370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00249581804321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00249586704268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00249582704208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00249583604163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00249582804118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00249585804062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00249582604047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00249583504007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00249587703982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553

Found on 2024-08-04 14:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34214666ebb2

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 02-Aug-2024 08:59:02 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  771 days 2 hours 12 minutes 11 seconds
Server load: 0.00 0.07 0.06
Total accesses: 2218360615 - Total Traffic: 19428.9 GB - Total Duration: 84811473289
CPU Usage: u1175.12 s58445.6 cu7073570 cs1668530 - 13.2% CPU load
33.3 requests/sec - 305.8 kB/second - 9.2 kB/request - 38.2316 ms/request
1 requests currently being processed, 6 idle workers
____W__.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6310446130/84/280275355_
0.430947601260250.00.742432204.75
172.70.230.153http/1.1classicitaliancycles.com:80GET /2023/05/ HTTP/1.1

1-6310446140/83/271760194_
0.440646547234600.00.972341419.25
172.70.114.187http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

2-6310446150/84/265208529_
0.430045601357830.00.732272250.00
172.70.114.121http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-6310446160/81/250418283_
0.430743917556350.00.772146227.00
162.158.62.250http/1.1quickenaccountingsolution.com:8GET /global-gotu-kola-extract-health-products-market-global-ind

4-6310446170/81/240604531W
0.410042519682060.00.732055535.50
172.70.230.133http/1.1hanadama.biz:80GET /server-status HTTP/1.1

5-6310446120/85/233529168_
0.4301541439499660.00.721992673.25
172.70.115.134http/1.1quickenaccountingsolution.com:8GET /neuronetics-and-alleviant-health-centers-announce-exclusiv

6-6310446180/81/222061105_
0.410239971260300.00.771900768.13
172.70.110.177http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

7-63-0/0/143504087.
0.0085131381200590.00.001314950.50
172.70.110.181http/1.1baker-to-vegas.org:80GET /calligraphy/ HTTP/1.1

8-63-0/0/75170631.
0.00436722855714710.00.00759289.06
172.70.110.200http/1.1luzi-m.org:80GET /wp-content/uploads/2021/08/logo-1-e1630393564600.png HTTP/

9-63-0/0/51939695.
0.0084841518857288390.00.00538290.38
162.158.159.78http/1.1us-submarine.com:80GET /wp-content/themes/publisher/js/theme-libs.min.js HTTP/1.1

10-63-0/0/33351466.
0.0084846615559346000.00.00363116.50
172.70.115.200http/1.1us-submarine.com:80GET /wp-content/themes/publisher/includes/libs/bs-theme-core/la

11-63-0/0/20702499.
0.0084841313031752380.00.00239545.84
162.158.158.208http/1.1us-submarine.com:80GET /wp-content/themes/publisher/includes/libs/bs-theme-core/li

12-63-0/0/17794049.
0.0036886012107512640.00.00205805.81
172.70.230.85http/1.1linuxpourlesnuls.org:80GET /robots.txt HTTP/1.1

13-63-0/0/16541423.
0.0036886811557598450.00.00191193.31
172.70.230.118http/1.1windgefluester.net:80GET /history-of-photography/ HTTP/1.1

14-63-0/0/13134801.
0.00582603010557834840.00.00152173.59
172.70.115.135http/1.1feidad.org:80GET /wp-content/uploads/2023/10/efficient-resource-utilization.

15-63-0/0/7124367.
0.0058274508870654960.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601086.
0.0058274907884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695738.
0.0058274807369347250.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3065909.
0.0058274407006140230.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654459.
0.0058260406719560900.00.0031511.19
172.70.115.34http/1.1feidad.org:80GET /wp-content/uploads/2023/10/eventdriven-integration.jpg HTT

20-63-0/0/2437105.
0.0085622406542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0085621006354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0085602406187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0085620706059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0085621205962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0085592645874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0085599025803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0085621105731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0085598785661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0085621705610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0085621405489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00230407105272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00230404705122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00230404404997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00230405204880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00230384104805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00230383974727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00230405114640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00230383844548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00230384004490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00230383814427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00230408004370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00230402004321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00230406904268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00230402904208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00230403804163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00230403004118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00230406004062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00230402804047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00230403704007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00230407903982180

Found on 2024-08-02 08:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421daca0e61

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 02-Aug-2024 02:16:05 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  770 days 19 hours 29 minutes 14 seconds
Server load: 0.08 0.20 0.17
Total accesses: 2218257072 - Total Traffic: 19428.2 GB - Total Duration: 84810532838
CPU Usage: u1173.06 s58440.6 cu7073200 cs1668440 - 13.2% CPU load
33.3 requests/sec - 305.9 kB/second - 9.2 kB/request - 38.233 ms/request
1 requests currently being processed, 6 idle workers
_____W_.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6310284200/39/280259869_
0.180047599843000.00.232432093.25
172.70.231.41http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-6310284240/40/271744862_
0.130146545864430.00.142341310.25
162.158.62.236http/1.1mlmwonders.com:80GET /dropdown.php HTTP/1.1

2-6310284250/38/265193423_
0.160045599984440.00.262272142.00
162.158.158.2http/1.1topclusters.org:80GET /db/ HTTP/1.1

3-6310284280/37/250403443_
0.130243916195850.00.172146118.00
172.70.230.98http/1.1kenttribune.com:80GET / HTTP/1.1

4-6310284290/39/240590009_
0.130042518366760.00.132055431.13
162.158.158.208http/1.1mlmwonders.com:80GET /about.php HTTP/1.1

5-6310284300/35/233515647W
0.120041438268650.00.181992575.00
172.70.230.121http/1.1hanadama.biz:80GET /server-status HTTP/1.1

6-6310284310/36/222052736_
0.120439970508730.00.171900708.63
172.70.230.36http/1.1mhyc-lakeerie.com:80GET /chinese-type-039b-submarine-conducts-maritime-combat-train

7-63-0/0/143499934.
0.0036731380834040.00.001314923.00
172.70.114.77http/1.1baker-to-vegas.org:80GET /budgeting-tips/ HTTP/1.1

8-63-0/0/75169081.
0.0037822855564720.00.00759278.38
172.70.230.42http/1.1martinlukac.com:80GET /an-update-on-net-working-capital/ HTTP/1.1

9-63-0/0/51939144.
0.0036018857231560.00.00538286.19
172.70.115.170http/1.1thebryanadamsexperience.co.uk:8GET /cgi-bin/xmrlpc.php?p= HTTP/1.1

10-63-0/0/33351409.
0.0035015559340950.00.00363116.19
162.158.62.111http/1.1thebryanadamsexperience.co.uk:8GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1

11-63-0/0/20702443.
0.0012710213031745500.00.00239545.36
162.158.62.7http/1.1mumbleshiphop.com:80GET /wp-admin/css/ HTTP/1.1

12-63-0/0/17794049.
0.0012710012107512640.00.00205805.81
172.70.230.85http/1.1linuxpourlesnuls.org:80GET /robots.txt HTTP/1.1

13-63-0/0/16541423.
0.0012710811557598450.00.00191193.31
172.70.230.118http/1.1windgefluester.net:80GET /history-of-photography/ HTTP/1.1

14-63-0/0/13134801.
0.00558426010557834840.00.00152173.59
172.70.115.135http/1.1feidad.org:80GET /wp-content/uploads/2023/10/efficient-resource-utilization.

15-63-0/0/7124367.
0.0055856808870654960.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601086.
0.0055857207884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695738.
0.0055857107369347250.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3065909.
0.0055856707006140230.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654459.
0.0055842706719560900.00.0031511.19
172.70.115.34http/1.1feidad.org:80GET /wp-content/uploads/2023/10/eventdriven-integration.jpg HTT

20-63-0/0/2437105.
0.0083204706542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0083203306354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0083184706187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0083203006059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0083203505962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0083174945874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0083181325803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0083203405731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0083181085661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0083204005610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0083203705489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00227989405272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00227987005122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00227986704997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00227987504880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00227966504805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00227966374727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00227987414640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00227966244548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00227966404490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00227966214427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00227990304370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00227984304321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00227989204268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00227985204208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00227986104163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00227985304118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00227988304062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00227985104047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00227986004007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00227990203982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/

Found on 2024-08-02 02:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421756cf2a1

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 02-Aug-2024 02:16:02 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  770 days 19 hours 29 minutes 11 seconds
Server load: 0.08 0.20 0.17
Total accesses: 2218257019 - Total Traffic: 19428.2 GB - Total Duration: 84810532309
CPU Usage: u1172.9 s58440.5 cu7073200 cs1668440 - 13.2% CPU load
33.3 requests/sec - 305.9 kB/second - 9.2 kB/request - 38.233 ms/request
1 requests currently being processed, 6 idle workers
W______.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6310284200/31/280259861W
0.140047599842330.00.192432093.00
162.158.158.174http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6310284240/33/271744855_
0.100046545863470.00.122341310.25
162.158.62.236http/1.1mlmwonders.com:80GET /wp-admin/js/about.php HTTP/1.1

2-6310284250/31/265193416_
0.140745599983640.00.242272142.00
172.70.114.64http/1.1hanadama.biz:80GET /category/cash-pooling/ HTTP/1.1

3-6310284280/29/250403435_
0.100043916195240.00.112146118.00
172.70.230.117http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-6310284290/31/240590001_
0.100442518365780.00.102055431.13
172.70.114.64http/1.1hanadama.biz:80GET / HTTP/1.1

5-6310284300/28/233515640_
0.100041438267980.00.151992574.88
162.158.158.209http/1.1mlmwonders.com:80GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1

6-6310284310/28/222052728_
0.090239970508130.00.121900708.50
172.70.230.66http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-63-0/0/143499934.
0.0033731380834040.00.001314923.00
172.70.114.77http/1.1baker-to-vegas.org:80GET /budgeting-tips/ HTTP/1.1

8-63-0/0/75169081.
0.0034822855564720.00.00759278.38
172.70.230.42http/1.1martinlukac.com:80GET /an-update-on-net-working-capital/ HTTP/1.1

9-63-0/0/51939144.
0.0033018857231560.00.00538286.19
172.70.115.170http/1.1thebryanadamsexperience.co.uk:8GET /cgi-bin/xmrlpc.php?p= HTTP/1.1

10-63-0/0/33351409.
0.0032015559340950.00.00363116.19
162.158.62.111http/1.1thebryanadamsexperience.co.uk:8GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1

11-63-0/0/20702443.
0.0012707213031745500.00.00239545.36
162.158.62.7http/1.1mumbleshiphop.com:80GET /wp-admin/css/ HTTP/1.1

12-63-0/0/17794049.
0.0012707012107512640.00.00205805.81
172.70.230.85http/1.1linuxpourlesnuls.org:80GET /robots.txt HTTP/1.1

13-63-0/0/16541423.
0.0012707811557598450.00.00191193.31
172.70.230.118http/1.1windgefluester.net:80GET /history-of-photography/ HTTP/1.1

14-63-0/0/13134801.
0.00558423010557834840.00.00152173.59
172.70.115.135http/1.1feidad.org:80GET /wp-content/uploads/2023/10/efficient-resource-utilization.

15-63-0/0/7124367.
0.0055856508870654960.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601086.
0.0055856907884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695738.
0.0055856807369347250.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3065909.
0.0055856407006140230.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654459.
0.0055842406719560900.00.0031511.19
172.70.115.34http/1.1feidad.org:80GET /wp-content/uploads/2023/10/eventdriven-integration.jpg HTT

20-63-0/0/2437105.
0.0083204406542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0083203006354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0083184406187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0083202706059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0083203205962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0083174645874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0083181025803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0083203105731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0083180785661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0083203705610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0083203405489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00227989105272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00227986705122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00227986404997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00227987204880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00227966204805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00227966074727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00227987114640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00227965944548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00227966104490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00227965914427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00227990004370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00227984004321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00227988904268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00227984904208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00227985804163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00227985004118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00227988004062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00227984804047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00227985704007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00227989903982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-

Found on 2024-08-02 02:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421ddbe8e7a

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 01-Aug-2024 23:02:22 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  770 days 16 hours 15 minutes 31 seconds
Server load: 0.12 0.10 0.10
Total accesses: 2218205134 - Total Traffic: 19427.8 GB - Total Duration: 84810105111
CPU Usage: u1173.4 s58438.4 cu7073010 cs1668390 - 13.2% CPU load
33.3 requests/sec - 305.9 kB/second - 9.2 kB/request - 38.2337 ms/request
1 requests currently being processed, 5 idle workers
___W__..........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6310168240/94/280252026_
0.290647599185850.00.282432040.75
162.158.158.47http/1.1business-continuity-and-disasteGET /?author=5 HTTP/1.1

1-6310168250/93/271737015_
0.300246545214750.00.272341258.25
172.70.114.187http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-6310168210/96/265185883_
0.320245599374100.00.352272094.00
162.158.159.159http/1.1codexinferno.com:80GET / HTTP/1.1

3-6310168350/82/250396188W
0.260043915598870.00.432146071.75
172.70.114.64http/1.1hanadama.biz:80GET /server-status HTTP/1.1

4-6310168410/63/240582933_
0.190542517783230.00.172055387.38
172.70.114.19http/1.1plusooo.com:80GET / HTTP/1.1

5-6310168260/94/233508806_
0.350341437713840.00.371992529.63
172.70.230.171http/1.1business-continuity-and-disasteGET /?author=6 HTTP/1.1

6-63-0/0/222048700.
0.00233039970164020.00.001900680.75
172.70.230.16http/1.1normandylets.com:80GET /wsoyanz.php HTTP/1.1

7-63-0/0/143498334.
0.00230031380698740.00.001314912.88
162.158.159.146http/1.1normandylets.com:80GET /chosen.php HTTP/1.1

8-63-0/0/75167881.
0.001282022855475010.00.00759271.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

9-63-0/0/51938544.
0.001087318857186120.00.00538282.44
162.158.62.81http/1.1quickenaccountingsolution.com:8GET /tiktok-viral-health-trends-you-should-never-try/ HTTP/1.1

10-63-0/0/33351309.
0.001087215559331320.00.00363115.41
162.158.154.65http/1.1quickenaccountingsolution.com:8GET /tiktok-viral-health-trends-you-should-never-try HTTP/1.1

11-63-0/0/20702443.
0.001087213031745500.00.00239545.36
162.158.62.7http/1.1mumbleshiphop.com:80GET /wp-admin/css/ HTTP/1.1

12-63-0/0/17794049.
0.001087012107512640.00.00205805.81
172.70.230.85http/1.1linuxpourlesnuls.org:80GET /robots.txt HTTP/1.1

13-63-0/0/16541423.
0.001087811557598450.00.00191193.31
172.70.230.118http/1.1windgefluester.net:80GET /history-of-photography/ HTTP/1.1

14-63-0/0/13134801.
0.00546803010557834840.00.00152173.59
172.70.115.135http/1.1feidad.org:80GET /wp-content/uploads/2023/10/efficient-resource-utilization.

15-63-0/0/7124367.
0.0054694508870654960.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601086.
0.0054694907884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695738.
0.0054694807369347250.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3065909.
0.0054694407006140230.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654459.
0.0054680406719560900.00.0031511.19
172.70.115.34http/1.1feidad.org:80GET /wp-content/uploads/2023/10/eventdriven-integration.jpg HTT

20-63-0/0/2437105.
0.0082042406542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0082041006354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0082022406187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0082040706059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0082041205962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0082012645874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0082019025803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0082041105731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0082018785661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0082041705610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0082041405489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00226827105272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00226824705122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00226824404997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00226825204880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00226804204805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00226804074727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00226825114640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00226803944548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00226804104490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00226803914427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00226828004370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00226822004321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00226826904268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00226822904208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00226823804163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00226823004118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00226826004062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00226822804047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00226823704007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00226827903982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.

Found on 2024-08-01 23:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421fb73dd65

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Tuesday, 30-Jul-2024 20:51:15 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  768 days 14 hours 4 minutes 24 seconds
Server load: 0.15 0.15 0.10
Total accesses: 2217469573 - Total Traffic: 19423.0 GB - Total Duration: 84804020790
CPU Usage: u1170.86 s58404.5 cu7070410 cs1667760 - 13.2% CPU load
33.4 requests/sec - 306.7 kB/second - 9.2 kB/request - 38.2436 ms/request
3 requests currently being processed, 2 idle workers
W...._.C_C......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-639009760/2/280139848W
0.010047589912370.00.022431284.25
172.70.111.16http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-63-0/0/271625600.
0.006046536014400.00.002340520.25
162.158.159.56http/1.1cowleylawofficesllc.com:80GET /category/legal-representation/ HTTP/1.1

2-63-0/0/265075980.
0.0011045590258480.00.002271361.00
162.158.155.203http/1.1blackseatrans.com:80GET /es/Geometry-Pad.php HTTP/1.1

3-63-0/0/250289905.
0.001971143906831520.00.002145360.00
162.158.155.220http/1.1cohoestates.com:80GET //?author=1 HTTP/1.1

4-63-0/0/240479917.
0.001971342509339060.00.002054702.38
162.158.158.198http/1.1topclusters.org:80GET / HTTP/1.1

5-639008840/99/233414982_
0.520241429993740.01.031991903.88
162.158.155.63http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

6-63-0/0/221986360.
0.00197239964966350.00.001900263.00
162.158.158.136http/1.1stampnhandlacrosse.com:80GET /wp-includes/js/dist/i18n.min.js HTTP/1.1

7-639008851/100/143476045C
0.500231378784801.00.851314761.75
172.70.110.155http/1.1kenttribune.com:80GET /as-covid-19-spreads-africa-needs-another-london-moment/ HT

8-639008860/98/75158472_
0.470222854677840.00.76759206.38
172.70.111.141http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

9-639008871/100/51934440C
0.510018856843620.80.91538254.56
172.70.230.11http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

10-63-0/0/33351009.
0.001700015559303700.00.00363112.72
172.70.111.15http/1.1indianpropertyloans.com:80HEAD / HTTP/1.1

11-63-0/0/20702243.
0.0079494113031730290.00.00239543.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17793849.
0.0079493012107494970.00.00205803.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16541323.
0.00231821011557588070.00.00191192.41
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13134801.
0.00366136010557834840.00.00152173.59
172.70.115.135http/1.1feidad.org:80GET /wp-content/uploads/2023/10/efficient-resource-utilization.

15-63-0/0/7124367.
0.0036627808870654960.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601086.
0.0036628207884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695738.
0.0036628107369347250.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3065909.
0.0036627707006140230.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654459.
0.0036613706719560900.00.0031511.19
172.70.115.34http/1.1feidad.org:80GET /wp-content/uploads/2023/10/eventdriven-integration.jpg HTT

20-63-0/0/2437105.
0.0063975706542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0063974306354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0063955706187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0063974006059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0063974505962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0063945945874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0063952325803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0063974405731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0063952085661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0063975005610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0063974705489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00208760405272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00208758005122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00208757704997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00208758504880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00208737504805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00208737374727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00208758414640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00208737244548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00208737404490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00208737214427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00208761304370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00208755304321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00208760204268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00208756204208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00208757104163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00208756304118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00208759304062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00208756104047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00208757004007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00208761203982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.
0.0020875920394059784<

Found on 2024-07-30 20:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34210e1cb247

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 28-Jul-2024 15:23:30 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  766 days 8 hours 36 minutes 39 seconds
Server load: 0.11 0.18 0.11
Total accesses: 2216622847 - Total Traffic: 19417.8 GB - Total Duration: 84797743395
CPU Usage: u1167.14 s58368.2 cu7067590 cs1667090 - 13.3% CPU load
33.5 requests/sec - 307.5 kB/second - 9.2 kB/request - 38.2554 ms/request
1 requests currently being processed, 5 idle workers
W_.____.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-638146720/41/280009332W
0.150047580247130.00.262430457.00
162.158.62.14http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-638146730/39/271496928_
0.151446526435390.00.292339712.50
172.70.231.11http/1.1willisbboyer.org:80GET / HTTP/1.1

2-63-0/0/264949558.
0.0058045580931260.00.002270568.75
172.70.111.155http/1.1gillansinn.com:80GET /v2/_catalog HTTP/1.1

3-638146690/84/250164808_
0.351143897627110.00.672144568.50
172.70.110.15http/1.1hanadama.biz:80GET /about HTTP/1.1

4-638146700/84/240362266_
0.350042500540370.00.682053951.38
162.158.155.176http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-638146710/84/233305639_
0.360141421903110.00.691991217.13
162.158.159.158http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

6-638146740/39/221912593_
0.150239959516820.00.301899799.25
172.70.114.188http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-63-0/0/143453435.
0.003005031377117050.00.001314620.00
162.158.62.141http/1.1sekaiseifuku.net:80GET /wp-content/uploads/2023/10/virtual-reality.jpg HTTP/1.1

8-63-0/0/75149451.
0.003278022853989750.00.00759147.50
172.70.114.70http/1.1yoimise.info:80GET /wp-admin/js/widgets/about.php7 HTTP/1.1

9-63-0/0/51931215.
0.003458018856588110.00.00538233.56
172.70.230.52http/1.1ftlauderdaleconvention.com:80GET /cgi-bin/themes.php HTTP/1.1

10-63-0/0/33350609.
0.0039296015559255880.00.00363109.75
162.158.154.131http/1.1allantique.net:80GET /goods/3474/news/banner.html HTTP/1.1

11-63-0/0/20702242.
0.0039297013031730280.00.00239543.78
172.70.231.87http/1.1notoxicburning.org:80POST /accesson.php HTTP/1.1

12-63-0/0/17793848.
0.00392965712107494960.00.00205803.98
172.70.231.30http/1.1welcometopoole.co.uk:80GET / HTTP/1.1

13-63-0/0/16541323.
0.0039356011557588070.00.00191192.41
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13134801.
0.00173671010557834840.00.00152173.59
172.70.115.135http/1.1feidad.org:80GET /wp-content/uploads/2023/10/efficient-resource-utilization.

15-63-0/0/7124367.
0.0017381308870654960.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601086.
0.0017381707884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695738.
0.0017381607369347250.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3065909.
0.0017381207006140230.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654459.
0.0017367206719560900.00.0031511.19
172.70.115.34http/1.1feidad.org:80GET /wp-content/uploads/2023/10/eventdriven-integration.jpg HTT

20-63-0/0/2437105.
0.0044729206542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0044727806354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0044709206187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0044727506059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0044728005962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0044699445874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0044705825803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0044727905731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0044705585661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0044728505610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0044728205489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00189513905272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00189511505122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00189511204997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00189512004880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00189490904805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00189490774727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00189511914640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00189490644548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00189490804490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00189490614427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00189514804370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00189508804321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00189513704268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00189509704208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00189510604163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00189509804118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00189512804062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00189509604047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00189510504007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00189514703982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.
0.0018951270

Found on 2024-07-28 15:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342141fbae4c

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 26-Jul-2024 20:56:38 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  764 days 14 hours 9 minutes 48 seconds
Server load: 0.10 0.12 0.09
Total accesses: 2215849742 - Total Traffic: 19412.8 GB - Total Duration: 84792286183
CPU Usage: u1164.79 s58336.5 cu7065030 cs1666490 - 13.3% CPU load
33.5 requests/sec - 308.1 kB/second - 9.2 kB/request - 38.2663 ms/request
1 requests currently being processed, 4 idle workers
__..W_._........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-637462450/83/279892550_
0.340147572004780.00.522429682.75
172.70.110.87http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-637463020/62/271381175_
0.240246518249200.00.352338947.75
162.158.159.231http/1.1hanadama.biz:80GET /about HTTP/1.1

2-63-0/0/264834555.
0.008345572826490.00.002269814.00
172.70.231.21http/1.1sallyruttergroup.com:80GET /server-status HTTP/1.1

3-63-0/0/250054287.
0.00951543889865220.00.002143841.25
162.158.154.194http/1.1monolithdoes.com:80GET /wp-content/plugins/featured-image-from-url/includes/html/j

4-637462460/83/240255279W
0.340042492958970.00.502053246.50
162.158.158.171http/1.1hanadama.biz:80GET /server-status HTTP/1.1

5-637462470/83/233208802_
0.330141415102030.00.461990580.50
162.158.154.215http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

6-63-0/0/221844796.
0.00951339954658300.00.001899348.63
162.158.62.149http/1.1dewindesigns.co.uk:80GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1

7-637463010/73/143428091_
0.260231375331660.00.311314457.25
162.158.155.125http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

8-63-0/0/75138080.
0.001908022853195840.00.00759076.19
172.70.115.143http/1.1012webtools.com:80GET /public/css/style.css HTTP/1.1

9-63-0/0/51925601.
0.003969018856198430.00.00538198.94
162.158.154.70http/1.1delandcountryinn.com:80GET /category/country-homes/ HTTP/1.1

10-63-0/0/33350101.
0.00208591215559224600.00.00363106.84
162.158.158.137http/1.1prague-hotel.co.uk:80GET /alarko-gayrimenkul-yatirim-ortakligi-result-of-application

11-63-0/0/20701995.
0.0020999013031715340.00.00239542.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17793608.
0.0021002012107480690.00.00205802.66
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16541222.
0.0020997011557581610.00.00191191.59
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13134801.
0.0020859010557834840.00.00152173.59
172.70.115.135http/1.1feidad.org:80GET /wp-content/uploads/2023/10/efficient-resource-utilization.

15-63-0/0/7124367.
0.002100108870654960.00.0083786.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4601086.
0.002100507884077900.00.0054555.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695738.
0.002100407369347250.00.0043897.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3065909.
0.002100007006140230.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654459.
0.002086006719560900.00.0031511.19
172.70.115.34http/1.1feidad.org:80GET /wp-content/uploads/2023/10/eventdriven-integration.jpg HTT

20-63-0/0/2437105.
0.0029448106542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0029446706354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0029428006187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0029446306059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0029446905962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0029418245874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0029424625803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0029446805731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0029424385661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0029447405610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0029447105489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00174232705272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00174230305122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00174230004997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00174230804880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00174209804805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00174209674727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00174230714640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00174209544548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00174209704490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00174209514427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00174233604370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00174227604321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00174232504268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00174228504208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00174229404163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00174228604118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00174231604062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00174228404047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00174229304007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00174233503982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593553.
0.00

Found on 2024-07-26 20:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421597df908

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 24-Jul-2024 16:36:17 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  762 days 9 hours 49 minutes 26 seconds
Server load: 0.10 0.07 0.07
Total accesses: 2214988738 - Total Traffic: 19406.6 GB - Total Duration: 84785427525
CPU Usage: u1160.59 s58298.9 cu7061940 cs1665780 - 13.3% CPU load
33.6 requests/sec - 308.9 kB/second - 9.2 kB/request - 38.278 ms/request
1 requests currently being processed, 6 idle workers
_W_._..___......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-636552130/1/279761600_
0.000047561646010.00.002428717.50
162.158.158.40http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-636552100/3/271251047W
0.010046507926480.00.022337976.75
162.158.62.202http/1.1hanadama.biz:80GET /server-status HTTP/1.1

2-636552110/3/264706060_
0.010445562644560.00.022268866.25
162.158.158.174http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

3-63-0/0/249930266.
0.000343879958630.00.002142922.00
172.70.111.131http/1.1hanadama.biz:80GET / HTTP/1.1

4-636552120/3/240136353_
0.010042483447360.00.022052364.13
162.158.158.107http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

5-63-0/0/233100118.
0.000141406425940.00.001989774.75
162.158.158.196http/1.1hanadama.biz:80GET /server HTTP/1.1

6-63-0/0/221767715.
0.000039948545070.00.001898787.50
162.158.158.230http/1.1zai-amelex.com:80GET /quite-a-few-early-childhood-education-degree-points-433 HT

7-636552140/0/143401917_
0.000031373199120.00.001314264.25
162.158.154.47http/1.1libroalibro.org:80GET /robots.txt HTTP/1.1

8-636552150/0/75126482_
0.000322852222370.00.00758989.50
162.158.155.120http/1.1loftonmeadows.com:80GET /wp-content/themes/gloria/js/customjs.js HTTP/1.1

9-636552160/0/51921596_
0.000118855866290.00.00538168.50
172.70.114.60http/1.1enfocant.net:80GET /about HTTP/1.1

10-63-0/0/33349602.
0.001351215559184490.00.00363103.53
172.70.111.172http/1.1wankanyaklaselfhelpgroup.com:80GET /author/bradley-j-bridges/feed/ HTTP/1.1

11-63-0/0/20701886.
0.001351613031705380.00.00239541.56
172.70.114.249http/1.1jazznotjazz.co.uk:80GET /wp-content/themes/smart-mag/css/fontawesome/css/font-aweso

12-63-0/0/17793505.
0.0062432212107470840.00.00205801.77
162.158.155.73http/1.1blackseatrans.com:80GET /wp-content/plugins/yet-another-related-posts-plugin/ HTTP/

13-63-0/0/16541216.
0.00102376011557581570.00.00191191.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/13134702.
0.00102201910557826520.00.00152173.02
162.158.159.221http/1.1012webtools.com:80GET /wp-content/uploads/2021/10/default-e1634793112709.png HTTP

15-63-0/0/7124360.
0.0010220748870654830.00.0083786.90
162.158.154.249http/1.1winegasmeatery.com:80GET /wp-content/plugins/yet-another-related-posts-plugin/style/

16-63-0/0/4601079.
0.0010605807884077650.00.0054555.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3695732.
0.0010594707369346930.00.0043897.35
172.70.111.120http/1.1infiniteeureka.com:80GET /robots.txt HTTP/1.1

18-63-0/0/3065903.
0.0010604107006140120.00.0036499.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2654359.
0.0010605306719552490.00.0031510.66
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2437105.
0.0010605906542464070.00.0029026.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2214368.
0.0010604506354822430.00.0026415.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2033306.
0.0010585806187366020.00.0024226.21
162.158.154.130http/1.1monclerpaschereenligne.com:80GET //wp-includes/ID3/license.txt HTTP/1.1

23-63-0/0/1930683.
0.0010604206059925820.00.0023020.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1854015.
0.0010604705962251400.00.0022105.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1803804.
0.0010576045874760570.00.0021495.71
172.70.110.243http/1.1horror-fanatics.com:80GET /category/availability/ HTTP/1.1

26-63-0/0/1755936.
0.0010582425803782700.00.0020932.51
162.158.155.229http/1.1luzi-m.org:80GET //wp-json/wp/v2/users/ HTTP/1.1

27-63-0/0/1725653.
0.0010604605731359420.00.0020555.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1675997.
0.0010582185661003060.00.0019996.14
172.70.114.65http/1.1baselabs.org:80GET /abstraction/ HTTP/1.1

29-63-0/0/1649165.
0.0010605205610189560.00.0019659.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1512708.
0.0010604905489700060.00.0018029.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247773.
0.00155390505272879400.00.0014902.05
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104780.
0.00155388105122597990.00.0013208.44
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1018549.
0.00155387804997088420.00.0012187.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946817.
0.00155388604880406790.00.0011306.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/892448.
0.00155367604805211470.00.0010666.14
172.70.230.109http/1.1normandylets.com:80GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1

36-63-0/0/852986.
0.00155367474727227750.00.0010241.12
162.158.154.69http/1.1mhyc-lakeerie.com:80GET /yacht-insurance/ HTTP/1.1

37-63-0/0/822904.
0.00155388514640506920.00.009855.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772633.
0.00155367344548004780.00.009254.04
172.70.114.31http/1.1fyj5.net:80GET / HTTP/1.1

39-63-0/0/748619.
0.00155367504490090770.00.009008.12
172.70.110.157http/1.1normandylets.com:80GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1

40-63-0/0/722296.
0.00155367314427092550.00.008672.49
172.70.230.108http/1.1normandylets.com:80GET /themes.php HTTP/1.1

41-63-0/0/710035.
0.00155391404370571730.00.008509.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688280.
0.00155385404321067480.00.008243.46
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/670950.
0.00155390304268071420.00.008024.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653526.
0.00155386304208587950.00.007820.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/640487.
0.00155387204163324150.00.007669.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/631274.
0.00155386404118791060.00.007535.01
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618993.
0.00155389404062606050.00.007383.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614714.
0.00155386204047455340.00.007360.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/607309.
0.00155387104007279680.00.007270.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599409.
0.00155391303982180660.00.007189.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/

Found on 2024-07-24 16:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34216fda4c7c

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Tuesday, 19-Sep-2023 01:38:06 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  452 days 18 hours 51 minutes 15 seconds
Server load: 0.45 0.20 0.20
Total accesses: 1774768811 - Total Traffic: 16235.9 GB - Total Duration: 80745248226
CPU Usage: u738.68 s45374.6 cu5628130 cs1335760 - 17.9% CPU load
45.4 requests/sec - 435.2 kB/second - 9.6 kB/request - 45.4962 ms/request
1 requests currently being processed, 5 idle workers
.._W____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-63-0/0/218253798.
0.0011242026755360.00.001975803.00
172.70.110.29http/1.1paydayloan-consolidation.com:80GET /india-fintech-forum-unveils-28-high-potential-fintech-star

1-63-0/0/210284135.
0.0021140964928090.00.001888866.63
172.70.230.30http/1.1velvetribbonbaskets.com:80GET /category/packaging-and-labeling/ HTTP/1.1

2-6332975820/91/204346020_
0.320140071300230.00.591824207.00
172.70.111.154http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

3-6332975830/92/192509593W
0.340038645207740.00.721719725.75
172.70.230.161http/1.1hanadama.biz:80GET /server-status HTTP/1.1

4-6332975840/87/184429140_
0.3201237398905420.00.591641705.63
172.70.114.85http/1.1filmwizards.com:80GET / HTTP/1.1

5-6332975850/87/179270891_
0.310136496775170.00.561593444.50
162.158.62.39http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-6332975860/87/172231104_
0.300135423321500.00.591534735.25
172.70.110.157http/1.11stdvdripper.com:80GET /phishing HTTP/1.1

7-6332975870/85/117778081_
0.300028978699710.00.541123656.00
162.158.62.192http/1.1jjkelleyslansing.com:80GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1

8-63-0/0/66454754.
0.0060022015658670.00.00693642.69
172.70.114.217http/1.1denversnow.co:80GET /denversnow@gl/login.php HTTP/1.1

9-63-0/0/47467787.
0.0061218424231680.00.00504848.56
162.158.158.34http/1.1speedskating.org:80GET //wp-content/themes/twenty/twenty.php HTTP/1.1

10-63-0/0/32058333.
0.001325315425334320.00.00353477.59
162.158.62.198http/1.1somethinjumpinrabbits.com:80GET / HTTP/1.1

11-63-0/0/20478693.
0.004080012997490510.00.00237717.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17612401.
0.004077012077388840.00.00204308.70
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16368949.
0.004081811529837760.00.00189787.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12975428.
0.004029910532062410.00.00150883.88
172.70.230.123http/1.1tmgcreativegifts.com:80GET / HTTP/1.1

15-63-0/0/7079488.
0.00402968859541250.00.0083414.10
172.70.114.224http/1.1mondovino-lefilm.com:80GET /online-loan-and-renovation-comparison/ HTTP/1.1

16-63-0/0/4592930.
0.004899007876073000.00.0054482.59
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689589.
0.0076324807362966460.00.0043842.72
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061810.
0.0076326007000804960.00.0036463.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649904.
0.0076325606713898790.00.0031474.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433469.
0.0076323706537467530.00.0028997.89
162.158.63.82http/1.1troydeltachi.org:80GET //update-core.php HTTP/1.1

21-63-0/0/2210760.
0.0076323706350094650.00.0026384.56
172.70.230.18http/1.1troydeltachi.org:80GET //user-new.php HTTP/1.1

22-63-0/0/2030253.
0.0076325506181540620.00.0024200.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1927201.
0.0076325906055829660.00.0022993.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1851135.
0.0076325405958349920.00.0022079.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800844.
0.0076325705869767620.00.0021469.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753346.
0.0076323705800725090.00.0020909.84
172.70.114.97http/1.1center-hostel.com:80GET /robots.txt HTTP/1.1

27-63-0/0/1722997.
0.0076324905728010200.00.0020532.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673952.
0.0076323705657577360.00.0019978.05
162.158.159.132http/1.1lyoness-mobile.com:80GET //alfanew.php7 HTTP/1.1

29-63-0/0/1647489.
0.0076323795607414520.00.0019644.65
162.158.154.138http/1.1normandylets.com:80GET /nature-walks/ HTTP/1.1

30-63-0/0/1511361.
0.0076325005487085950.00.0018016.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247178.
0.00112717405270373280.00.0014897.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.00215908005120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.00215908164994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.0021591293464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.00215914104803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00325516304725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00325521704638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00325520104545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00325511204488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00325520404425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00325520204368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00325511114319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00325519804266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00325511104206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00325519504161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.003255112104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00325515704061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00325521404046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00325515304005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00325514103980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.00325

Found on 2023-09-19 01:38

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421a0d676e0

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Saturday, 16-Sep-2023 14:21:19 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  450 days 7 hours 34 minutes 28 seconds
Server load: 0.28 0.25 0.26
Total accesses: 1770186515 - Total Traffic: 16204.0 GB - Total Duration: 80699367851
CPU Usage: u734.08 s45242.4 cu5612780 cs1332150 - 18% CPU load
45.5 requests/sec - 436.7 kB/second - 9.6 kB/request - 45.5881 ms/request
1 requests currently being processed, 1 idle workers
W_..............................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6330929270/19/217620658W
0.080041964575360.00.121971306.38
172.70.230.96http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6330929280/3/209655394_
0.0101240901993080.00.001884385.38
172.70.114.231http/1.1parket-ukladka.com:80GET /page/33/ HTTP/1.1

2-63-0/0/203723713.
0.001040009203490.00.001819764.63
162.158.62.250http/1.1clay-wood-winds.com:80GET /feed HTTP/1.1

3-63-0/0/191920044.
0.000238586113580.00.001715513.25
162.158.158.219http/1.1edgalerie.net:80GET /staticwp-paydayjv/wp/4105-edgalerie.net/manufacturing-proc

4-63-0/0/183854213.
0.0002037341410410.00.001637612.13
172.70.114.156http/1.1foundationforthelawoftime.org:8GET /the-fbi-has-watched-and-criticized-african-american-writer

5-63-0/0/178710631.
0.000036440475370.00.001589433.38
162.158.155.160http/1.1hotel-couronne-jougne.com:80GET /robots.txt HTTP/1.1

6-63-0/0/171704104.
0.000035370530580.00.001530968.88
172.70.114.234http/1.1center-hostel.com:80GET /favicon.ico HTTP/1.1

7-63-0/0/117497779.
0.0035628950114460.00.001121642.50
172.70.230.193http/1.1lacledeslanding.org:80GET /robots.txt HTTP/1.1

8-63-0/0/66361614.
0.00454722006004600.00.00692969.56
162.158.62.113http/1.1allin1-travel.com:80GET //wp-content/plugins/fix/up.php HTTP/1.1

9-63-0/0/47419864.
0.00426118419327610.00.00504500.78
162.158.155.184http/1.1hatterashi.com:80GET /newcastles-discovery-museum-launches-project-to-explore-th

10-63-0/0/32042998.
0.0033611415423703920.00.00353363.38
172.70.114.182http/1.1jw-tools.com:80GET /privacy-policy/ HTTP/1.1

11-63-0/0/20476238.
0.005025212997207130.00.00237697.72
172.70.111.62http/1.1mosciski.com:80GET /around-kings-county-faraday-future-hires-manufacturing-man

12-63-0/0/17610412.
0.005024312077175770.00.00204293.89
172.70.114.166http/1.1hairextensionsclip.org.uk:80GET /?s=static-wp-test HTTP/1.1

13-63-0/0/16366592.
0.005025311529566190.00.00189768.97
162.158.62.42http/1.1mesoneuropeandining.com:80GET /wow-house-2m-kirkland-home-is-like-a-private-nature-oasis/

14-63-0/0/12973062.
0.00116501510531774250.00.00150864.89
162.158.154.144http/1.1shanesjewelry.com:80GET /author/howard-f-martinez/ HTTP/1.1

15-63-0/0/7078988.
0.001169108859460350.00.0083409.73
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4592925.
0.0054983007876071770.00.0054482.52
172.70.230.91http/1.1monroeswifts.org:80GET /html.zip HTTP/1.1

17-63-0/0/3689589.
0.0054984107362966460.00.0043842.72
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061810.
0.0054985307000804960.00.0036463.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649904.
0.0054984906713898790.00.0031474.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433469.
0.0054983006537467530.00.0028997.89
162.158.63.82http/1.1troydeltachi.org:80GET //update-core.php HTTP/1.1

21-63-0/0/2210760.
0.0054983006350094650.00.0026384.56
172.70.230.18http/1.1troydeltachi.org:80GET //user-new.php HTTP/1.1

22-63-0/0/2030253.
0.0054984806181540620.00.0024200.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1927201.
0.0054985206055829660.00.0022993.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1851135.
0.0054984705958349920.00.0022079.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800844.
0.0054985005869767620.00.0021469.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753346.
0.0054983005800725090.00.0020909.84
172.70.114.97http/1.1center-hostel.com:80GET /robots.txt HTTP/1.1

27-63-0/0/1722997.
0.0054984205728010200.00.0020532.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673952.
0.0054983005657577360.00.0019978.05
162.158.159.132http/1.1lyoness-mobile.com:80GET //alfanew.php7 HTTP/1.1

29-63-0/0/1647489.
0.0054983095607414520.00.0019644.65
162.158.154.138http/1.1normandylets.com:80GET /nature-walks/ HTTP/1.1

30-63-0/0/1511361.
0.0054984305487085950.00.0018016.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247178.
0.0091376705270373280.00.0014897.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.00194567405120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.00194567564994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.0019457223464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.00194573404803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00304175704725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00304181104638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00304179504545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00304170604488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00304179804425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00304179604368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00304170514319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00304179204266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00304170504206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00304178904161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.003041706104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00304175104061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00304180804046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00304174704005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00304173503980890410.00.007187.02
::1http/1.1127.0.1

Found on 2023-09-16 14:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342105b1fe25

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 13-Sep-2023 22:12:36 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  447 days 15 hours 25 minutes 45 seconds
Server load: 0.21 0.23 0.23
Total accesses: 1765280680 - Total Traffic: 16171.1 GB - Total Duration: 80652507055
CPU Usage: u730.75 s45099.7 cu5596720 cs1328300 - 18% CPU load
45.6 requests/sec - 438.4 kB/second - 9.6 kB/request - 45.6882 ms/request
1 requests currently being processed, 7 idle workers
__W_____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6328864120/30/216940386_
0.120141900486870.00.191966674.63
172.70.110.68http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

1-6328864130/25/208982753_
0.090040837790630.00.141879765.50
162.158.154.93http/1.1center-hostel.com:80GET /simple.php HTTP/1.1

2-6328864140/19/203056763W
0.050039945900250.00.031815210.25
172.70.230.96http/1.1hanadama.biz:80GET /server-status HTTP/1.1

3-6328864160/16/191284296_
0.060138525410680.00.101711145.50
172.70.230.159http/1.1thedirectories.org:80GET /robots.txt HTTP/1.1

4-6328864150/19/183238657_
0.070037282677870.00.101633387.75
162.158.159.134http/1.1stetmagazine.com:80GET /Bd%E3%82%AF%E3%83%AD%E3%83%8E%E3%82%B9%E3%82%A4%E3%82%B9-%

5-6328864170/16/178109940_
0.040136383216600.00.041585330.75
162.158.63.149http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-6328864180/16/171143473_
0.070135316998330.00.071527108.75
162.158.159.179http/1.1zoobooksales.com:80GET /wp-content/uploads/2021/05/1620457926_138_Marxists-feminis

7-6328864200/16/117198943_
0.060028921008380.00.071119579.00
162.158.154.179http/1.1cliffrichardtennis.org:80GET /gauff-has-nothing-to-lose-against-swiatek-in-the-french-op

8-63-0/0/66264428.
0.009121996370780.00.00692294.56
162.158.159.103http/1.1liverpool-il.com:80GET /telescope/requests HTTP/1.1

9-63-0/0/47366788.
0.008018414062330.00.00504124.53
162.158.62.57http/1.1stetmagazine.com:80GET /Bd%E3%82%AF%E3%83%AD%E3%83%8E%E3%82%B9%E3%82%A4%E3%82%B9-%

10-63-0/0/32027106.
0.00165115422016450.00.00353248.81
162.158.159.164http/1.1selfservebacklinks.com:80GET /wordpress HTTP/1.1

11-63-0/0/20473897.
0.006780112996856700.00.00237679.34
172.70.111.73http/1.1valleysmileschatsworth.com:80GET /wp HTTP/1.1

12-63-0/0/17608278.
0.006811012076846630.00.00204275.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16365377.
0.006780711529440450.00.00189760.98
162.158.155.93http/1.1officialauthenticbearstore.com:GET /wp-login.php HTTP/1.1

14-63-0/0/12971102.
0.006780110531552480.00.00150850.47
172.70.230.193http/1.1officialauthenticbearstore.com:POST /xmlrpc.php HTTP/1.1

15-63-0/0/7078282.
0.002501708859392760.00.0083404.77
162.158.155.153http/1.1r4isdhcx.com:80GET /admin/index.php HTTP/1.1

16-63-0/0/4592925.
0.0031890707876071770.00.0054482.52
172.70.230.91http/1.1monroeswifts.org:80GET /html.zip HTTP/1.1

17-63-0/0/3689589.
0.0031891807362966460.00.0043842.72
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061810.
0.0031893007000804960.00.0036463.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649904.
0.0031892606713898790.00.0031474.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433469.
0.0031890706537467530.00.0028997.89
162.158.63.82http/1.1troydeltachi.org:80GET //update-core.php HTTP/1.1

21-63-0/0/2210760.
0.0031890706350094650.00.0026384.56
172.70.230.18http/1.1troydeltachi.org:80GET //user-new.php HTTP/1.1

22-63-0/0/2030253.
0.0031892506181540620.00.0024200.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1927201.
0.0031892906055829660.00.0022993.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1851135.
0.0031892405958349920.00.0022079.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800844.
0.0031892705869767620.00.0021469.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753346.
0.0031890705800725090.00.0020909.84
172.70.114.97http/1.1center-hostel.com:80GET /robots.txt HTTP/1.1

27-63-0/0/1722997.
0.0031891905728010200.00.0020532.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673952.
0.0031890705657577360.00.0019978.05
162.158.159.132http/1.1lyoness-mobile.com:80GET //alfanew.php7 HTTP/1.1

29-63-0/0/1647489.
0.0031890795607414520.00.0019644.65
162.158.154.138http/1.1normandylets.com:80GET /nature-walks/ HTTP/1.1

30-63-0/0/1511361.
0.0031892005487085950.00.0018016.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247178.
0.0068284405270373280.00.0014897.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.00171475105120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.00171475264994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.0017147993464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.00171481104803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00281083304725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00281088704638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00281087104545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00281078204488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00281087404425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00281087204368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00281078114319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00281086804266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00281078104206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00281086504161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.002810782104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00281082704061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00281088404046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00281082304005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00281081103980890410.00.007187.02
::1http/1.112

Found on 2023-09-13 22:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421c01812a5

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 13-Sep-2023 00:23:18 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  446 days 17 hours 36 minutes 27 seconds
Server load: 0.07 0.12 0.16
Total accesses: 1763569857 - Total Traffic: 16160.3 GB - Total Duration: 80635644273
CPU Usage: u730.58 s45045.8 cu5590810 cs1326840 - 18% CPU load
45.7 requests/sec - 439.0 kB/second - 9.6 kB/request - 45.723 ms/request
1 requests currently being processed, 6 idle workers
_W_..____.......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6328230730/81/216703948_
0.280141877447790.00.211965154.00
162.158.63.101http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-6328230740/78/208748661W
0.340040814863180.00.181878252.75
162.158.63.66http/1.1hanadama.biz:80GET /server-status HTTP/1.1

2-6328230700/94/202824427_
0.360139923144440.00.341813705.75
172.70.110.130http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

3-63-0/0/191063051.
0.0017038503565190.00.001709706.38
162.158.159.155http/1.1daisysdollhouseminis.com:80GET //moto.php HTTP/1.1

4-63-0/0/183023117.
0.002037261426430.00.001631996.13
172.70.115.40http/1.1jazzfin.com:80GET /.well-known/acme-challenge/bala.php HTTP/1.1

5-6328230710/84/177900619_
0.350036362663870.00.541583979.25
172.70.230.145http/1.1angsecyp.org:80GET //wp-content/mari.php HTTP/1.1

6-6328230720/86/170946986_
0.280135297736980.00.211525845.38
162.158.154.21http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

7-6328230750/80/117095071_
0.290328910513620.00.301118894.88
172.70.110.60http/1.1lhdiversity.org.uk:80GET /get-quick-credit-approval-from-us/ HTTP/1.1

8-6328230760/80/66231946_
0.320021993060840.00.29692080.81
172.70.230.21http/1.1ufc238.com:80GET //ee.php HTTP/1.1

9-63-0/0/47349129.
0.00378018412211070.00.00504008.06
162.158.158.208http/1.1r4i3dsr4fr.com:80GET /NewsAll.aspx?Newsid=95&NewsClass=%E4%BC%81%E4%B8%9A%E6%96%

10-63-0/0/32020800.
0.001117015421320420.00.00353207.41
162.158.158.85http/1.1come2belgrade.com:80GET /feed HTTP/1.1

11-63-0/0/20472814.
0.005159912996714760.00.00237673.19
172.70.110.169http/1.1plusooo.com:80GET /sentry-app-performance-monitoring-platform-raises-90-milli

12-63-0/0/17607128.
0.005159712076719960.00.00204267.61
162.158.158.85http/1.1samusicawards.com:80GET /2023/?C=S%3BO%3DA HTTP/1.1

13-63-0/0/16364129.
0.005159911529300880.00.00189752.77
172.70.230.204http/1.1eartdocuments.com:80GET /where-rust-fits-into-linux-the-registry/ HTTP/1.1

14-63-0/0/12969849.
0.005159510531355030.00.00150841.34
172.70.230.9http/1.1criminaljustice-online.com:80GET / HTTP/1.1

15-63-0/0/7077971.
0.002111618859355900.00.0083402.59
172.70.230.113http/1.1sociologyesoscience.com:80GET /renowned-historian-pressly-will-speak-at-the-historical-so

16-63-0/0/4592925.
0.0024034907876071770.00.0054482.52
172.70.230.91http/1.1monroeswifts.org:80GET /html.zip HTTP/1.1

17-63-0/0/3689589.
0.0024036007362966460.00.0043842.72
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061810.
0.0024037207000804960.00.0036463.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649904.
0.0024036806713898790.00.0031474.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433469.
0.0024034906537467530.00.0028997.89
162.158.63.82http/1.1troydeltachi.org:80GET //update-core.php HTTP/1.1

21-63-0/0/2210760.
0.0024034906350094650.00.0026384.56
172.70.230.18http/1.1troydeltachi.org:80GET //user-new.php HTTP/1.1

22-63-0/0/2030253.
0.0024036706181540620.00.0024200.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1927201.
0.0024037106055829660.00.0022993.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1851135.
0.0024036605958349920.00.0022079.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800844.
0.0024036905869767620.00.0021469.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753346.
0.0024034905800725090.00.0020909.84
172.70.114.97http/1.1center-hostel.com:80GET /robots.txt HTTP/1.1

27-63-0/0/1722997.
0.0024036105728010200.00.0020532.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673952.
0.0024034905657577360.00.0019978.05
162.158.159.132http/1.1lyoness-mobile.com:80GET //alfanew.php7 HTTP/1.1

29-63-0/0/1647489.
0.0024034995607414520.00.0019644.65
162.158.154.138http/1.1normandylets.com:80GET /nature-walks/ HTTP/1.1

30-63-0/0/1511361.
0.0024036205487085950.00.0018016.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247178.
0.0060428605270373280.00.0014897.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.00163619305120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.00163619464994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.0016362413464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.00163625304803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00273227604725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00273233004638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00273231404545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00273222504488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00273231704425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00273231504368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00273222414319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00273231104266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00273222404206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00273230804161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.002732225104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00273227004061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00273232704046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00273226604005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00273225403980890410.00.007187.02
::1

Found on 2023-09-13 00:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34215b3b1e3b

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 10-Sep-2023 11:51:25 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  444 days 5 hours 4 minutes 34 seconds
Server load: 0.71 0.33 0.27
Total accesses: 1758630669 - Total Traffic: 16130.3 GB - Total Duration: 80591258126
CPU Usage: u725.8 s44905.5 cu5575660 cs1323060 - 18.1% CPU load
45.8 requests/sec - 440.7 kB/second - 9.6 kB/request - 45.8261 ms/request
1 requests currently being processed, 6 idle workers
___...._W__.....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6325889410/44/216018062_
0.130641817047110.00.131960935.63
162.158.158.26http/1.1yahalava.com:80GET / HTTP/1.1

1-6325889420/36/208068621_
0.130140754035150.00.171874000.88
162.158.159.40http/1.1longbranchraleigh.com:80GET / HTTP/1.1

2-6325889430/37/202151352_
0.110039862681000.00.371809534.88
172.70.114.10http/1.1qmmm.org:80GET //0x.php HTTP/1.1

3-63-0/0/190420567.
0.006038445719470.00.001705707.38
162.158.159.149http/1.1kanbisai8.com:80GET /update/data.txt?t=36000 HTTP/1.1

4-63-0/0/182400446.
0.006037205463980.00.001628102.88
172.70.230.43http/1.1qmmm.org:80GET /wp-content/index.php HTTP/1.1

5-63-0/0/177297582.
0.006036308399140.00.001580233.25
172.70.230.42http/1.1qmmm.org:80GET //emergency.php HTTP/1.1

6-63-0/0/170384536.
0.006035247284540.00.001522347.38
162.158.62.6http/1.1qmmm.org:80GET //cp.php HTTP/1.1

7-6325889440/30/116797023_
0.080228883031190.00.061116997.88
172.70.114.165http/1.1mombasainfo.com:80GET /kenyas-gm-cassava-plant-is-given-the-green-light/ HTTP/1.1

8-6325889450/28/66137186W
0.080021984198890.00.08691477.44
172.70.230.11http/1.1hanadama.biz:80GET /server-status HTTP/1.1

9-6325889460/28/47299317_
0.110018407494040.00.15503691.13
172.70.114.212http/1.1neode.ch:80GET /images/xmrlpc.php?p= HTTP/1.1

10-6325889470/30/32003278_
0.100015419633620.00.14353095.69
172.70.230.43http/1.1qmmm.org:80GET //wp-content/themes/welfare-charity/www.php HTTP/1.1

11-63-0/0/20469698.
0.007164012996377820.00.00237652.45
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17605344.
0.007165012076554560.00.00204256.59
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16361978.
0.0071321111529102850.00.00189738.91
172.70.230.158http/1.1english-daily.com:80GET /crypto-cio-explains-why-sushi-could-triple-2-tokens-hes-bu

14-63-0/0/12967902.
0.007163010531190780.00.00150830.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7077566.
0.00713228859324730.00.0083400.81
162.158.159.25http/1.1actionfotoz.com:80GET //wp-includes/css/ty.php HTTP/1.1

16-63-0/0/4592925.
0.002243607876071770.00.0054482.52
172.70.230.91http/1.1monroeswifts.org:80GET /html.zip HTTP/1.1

17-63-0/0/3689589.
0.002244707362966460.00.0043842.72
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061810.
0.002245907000804960.00.0036463.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649904.
0.002245506713898790.00.0031474.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433469.
0.002243606537467530.00.0028997.89
162.158.63.82http/1.1troydeltachi.org:80GET //update-core.php HTTP/1.1

21-63-0/0/2210760.
0.002243606350094650.00.0026384.56
172.70.230.18http/1.1troydeltachi.org:80GET //user-new.php HTTP/1.1

22-63-0/0/2030253.
0.002245406181540620.00.0024200.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1927201.
0.002245806055829660.00.0022993.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1851135.
0.002245305958349920.00.0022079.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800844.
0.002245605869767620.00.0021469.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753346.
0.002243605800725090.00.0020909.84
172.70.114.97http/1.1center-hostel.com:80GET /robots.txt HTTP/1.1

27-63-0/0/1722997.
0.002244805728010200.00.0020532.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673952.
0.002243605657577360.00.0019978.05
162.158.159.132http/1.1lyoness-mobile.com:80GET //alfanew.php7 HTTP/1.1

29-63-0/0/1647489.
0.002243695607414520.00.0019644.65
162.158.154.138http/1.1normandylets.com:80GET /nature-walks/ HTTP/1.1

30-63-0/0/1511361.
0.002244905487085950.00.0018016.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247178.
0.0038637305270373280.00.0014897.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.00141828005120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.00141828164994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.0014183283464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.00141834004803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00251436304725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00251441704638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00251440104545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00251431204488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00251440404425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00251440204368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00251431114319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00251439804266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00251431104206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00251439504161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.002514312104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00251435704061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00251441404046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00251435304005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00251434103980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.00251434303939355050.00.007117.19
::1http/

Found on 2023-09-10 11:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421f112fa22

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 07-Sep-2023 01:57:41 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  440 days 19 hours 10 minutes 50 seconds
Server load: 0.12 0.22 0.23
Total accesses: 1752334050 - Total Traffic: 16090.0 GB - Total Duration: 80531974520
CPU Usage: u721.01 s44728.2 cu5556020 cs1318210 - 18.2% CPU load
46 requests/sec - 443.0 kB/second - 9.6 kB/request - 45.957 ms/request
1 requests currently being processed, 6 idle workers
W_._____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



</SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6323037860/36/215148625W
0.140041736447510.00.331955261.88
172.70.230.188http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6323037850/43/207205721_
0.170240673308820.00.331868379.25
162.158.63.150http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-63-0/0/201296325.
0.0081239782482580.00.001803960.00
172.70.111.66http/1.1salemschooldistrictnh.com:80GET /grants/ HTTP/1.1

3-6323037870/36/189609562_
0.140038369119020.00.321700388.38
172.70.114.224http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

4-6323037880/31/181612243_
0.180637131008060.00.551622924.25
162.158.158.88http/1.1aisa-net.com:80GET /june-7-live-updates-zelensky-says-standoff-with-russia-not

5-6323037890/31/176529604_
0.120636236554000.00.231575216.50
162.158.154.246http/1.1jigoloantalya.com:80GET / HTTP/1.1

6-6323037900/30/169660325_
0.100135178859520.00.171517611.38
172.70.110.101http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-6323037910/31/116411119_
0.1001428845856810.00.171114446.63
162.158.154.23http/1.1huarachesshop.com:80GET /sneaker-press-release-updates-for-july-10-2021/ HTTP/1.1

8-63-0/0/66008644.
0.0015921971539270.00.00690621.69
172.70.115.82http/1.1jigoloantalya.com:80GET /loan-options/ HTTP/1.1

9-63-0/0/47231222.
0.003531118400837200.00.00503238.97
172.70.114.244http/1.1classicitaliancycles.com:80HEAD /stunning-merseyside-streets-that-will-take-your-breath-aw

10-63-0/0/31981494.
0.001602915417572380.00.00352957.09
162.158.155.7http/1.1avtoinsurance.net:80GET /you-may-soon-be-getting-fewer-car-warranty-scam-calls-than

11-63-0/0/20465997.
0.006529012996022310.00.00237628.75
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17602451.
0.006482712076238240.00.00204237.59
172.70.230.114http/1.1carlinkmall.com:80GET /used-car-tradein-value/ HTTP/1.1

13-63-0/0/16358888.
0.0020181211528777440.00.00189717.34
172.70.230.66http/1.1durhampast.net:80GET /wp-content/plugins/envato-market/inc/class-envato-market-a

14-63-0/0/12965668.
0.0020182810530965730.00.00150816.09
162.158.158.40http/1.1bridesmaiddresses101.com:80GET /robots.txt HTTP/1.1

15-63-0/0/7076912.
0.005014908859251870.00.0083396.86
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4592725.
0.008701007876054030.00.0054481.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689546.
0.009153807362958810.00.0043842.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061791.
0.009151007000797070.00.0036463.59
172.70.230.93http/1.1geofdarrow.net:80POST //xmlrpc.php HTTP/1.1

19-63-0/0/2649879.
0.009154506713890940.00.0031474.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433369.
0.009154306537456890.00.0028997.33
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210660.
0.009153606350084060.00.0026384.11
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030226.
0.009151006181535520.00.0024200.09
162.158.62.146http/1.1kanbisai8.com:80GET /xml/kanbisai8pop_yy.xml HTTP/1.1

23-63-0/0/1927180.
0.009153406055822140.00.0022993.66
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1851106.
0.009153705958342250.00.0022079.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800821.
0.009151005869760310.00.0021469.40
172.70.110.10http/1.1hcingenieria.com:80GET //xxl.php HTTP/1.1

26-63-0/0/1753246.
0.009155205800713120.00.0020909.45
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722958.
0.009154605728001780.00.0020532.65
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673852.
0.009155305657568010.00.0019977.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647389.
0.009151015607403320.00.0019644.03
172.70.110.65http/1.17huoxing.com:80GET /?feed=rss2&tag=%E5%87%80%E6%B0%B4%E5%99%A8 HTTP/1.1

30-63-0/0/1511326.
0.009154105487078910.00.0018016.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247178.
0.009154905270373280.00.0014897.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.00112345605120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.00112345764994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.0011235043464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.00112351604803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00221953904725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00221959304638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00221957704545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00221948704488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00221958004425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00221957804368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00221948614319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00221957404266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00221948604206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00221957104161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.002219487104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00221953304061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00221959004046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00221952904005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00221951603980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

Found on 2023-09-07 01:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421ac35fa0e

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 03-Sep-2023 18:12:08 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  437 days 11 hours 25 minutes 17 seconds
Server load: 0.27 0.29 0.25
Total accesses: 1745973729 - Total Traffic: 16047.1 GB - Total Duration: 80475696296
CPU Usage: u715.98 s44554.5 cu5535980 cs1313610 - 18.2% CPU load
46.2 requests/sec - 445.2 kB/second - 9.6 kB/request - 46.0922 ms/request
1 requests currently being processed, 5 idle workers
__..__W_........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6320150070/31/214268530_
0.090141659734560.00.081949205.63
162.158.155.43http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

1-6320150100/7/206332908_
0.020140596600070.00.031862338.75
172.70.110.49http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

2-63-0/0/200432117.
0.001739706304380.00.001797980.63
172.70.111.86http/1.1freedomtoons.org:80GET / HTTP/1.1

3-63-0/0/188791084.
0.001038296657620.00.001694727.75
172.70.230.41http/1.1clay-wood-winds.com:80GET /skin/default/JS/tabs.js HTTP/1.1

4-6320150080/20/180814002_
0.060137060428960.00.071617415.13
162.158.62.253http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-6320150090/19/175756202_
0.090036168318310.00.171569902.13
172.70.114.49http/1.1voxincamera.com:80GET /class.api.php HTTP/1.1

6-6320150110/4/168927333W
0.010035114199500.00.021512565.00
162.158.63.64http/1.1hanadama.biz:80GET /server-status HTTP/1.1

7-6320150120/4/116023093_
0.010128810739250.00.011111728.88
172.70.114.39http/1.1hanadama.biz:80GET /about HTTP/1.1

8-63-0/0/65882576.
0.007021959812430.00.00689737.75
162.158.159.62http/1.1stokelysbbq.com:80GET /2022/10/ HTTP/1.1

9-63-0/0/47162953.
0.001890118394493630.00.00502752.72
162.158.62.228http/1.1rgshotel.com:80GET //alfa.php HTTP/1.1

10-63-0/0/31957085.
0.002257015415281750.00.00352780.00
172.70.230.34http/1.1unitycemetery.org:80GET //406.php HTTP/1.1

11-63-0/0/20462869.
0.002416012995657350.00.00237605.66
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17599425.
0.0023881912075898120.00.00204214.16
162.158.62.193http/1.1weberdebate.com:80GET / HTTP/1.1

13-63-0/0/16356181.
0.0023891711528450100.00.00189696.36
172.70.111.110http/1.1icgsdeepwater.com:80GET /texarkana-texas-tisd-announces-major-staff-assignments/ HT

14-63-0/0/12962587.
0.002389810530592860.00.00150790.45
172.70.110.193http/1.1dalecoffing.com:80GET /wp-content/uploads/2021/10/icon-70x70.png HTTP/1.1

15-63-0/0/7076285.
0.00238998859172170.00.0083392.50
172.70.230.35http/1.16toros6.com:80GET /rbi-revokes-pc-financial-services-registration-over-kyc-br

16-63-0/0/4592514.
0.0036778557876018560.00.0054480.14
162.158.159.77http/1.1kittycastaways.org:80GET /wp-content/themes/seotheme/db.php?u HTTP/1.1

17-63-0/0/3689528.
0.0036779307362942500.00.0043842.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061691.
0.0036778577000770470.00.0036462.88
172.70.114.101http/1.1maxkol.org:80GET / HTTP/1.1

19-63-0/0/2649870.
0.0036778506713874870.00.0031474.70
172.70.111.118http/1.1kittycastaways.org:80GET /plugins/content/apismtp/apismtp.php.suspected?test=hello H

20-63-0/0/2433357.
0.0036778506537441660.00.0028997.25
162.158.158.161http/1.1kittycastaways.org:80POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1

21-63-0/0/2210639.
0.0067410506350067970.00.0026384.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030126.
0.0067407616181511130.00.0024199.27
162.158.159.178http/1.1fallensouffle.com:80GET //xmlrpc.php?rsd HTTP/1.1

23-63-0/0/1927156.
0.0067407606055806090.00.0022993.46
172.70.114.93http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

24-63-0/0/1851087.
0.0067407605958326490.00.0022078.93
162.158.62.251http/1.11000friends.org:80GET /wp-admin/alfa.php HTTP/1.1

25-63-0/0/1800721.
0.0067411015869737030.00.0021468.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753241.
0.0067411105800699580.00.0020909.43
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722949.
0.0067407605727987640.00.0020532.60
172.70.230.66http/1.1plusooo.com:80GET /index.php?showtopic=17261&k=880ea6a14ea49e853634fbdc5015a0

28-63-0/0/1673849.
0.00674076155657554770.00.0019977.59
162.158.62.9http/1.1banyan.ro:80GET / HTTP/1.1

29-63-0/0/1647289.
0.0067409705607381840.00.0019643.34
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511312.
0.0068706205487070890.00.0018016.22
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247172.
0.0083636505270366390.00.0014897.53
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.0083632305120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.0083632464994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.008363713464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.0083638304803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00193240604725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00193246004638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00193244404545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00193235504488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00193244704425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00193244504368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00193235414319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00193244104266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00193235404206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00193243804161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001932355104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00193240004061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00193245704046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00193239604005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00193238403980890410.00.007187.02

Found on 2023-09-03 18:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34215e98be47

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 31-Aug-2023 11:47:49 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  434 days 5 hours 58 seconds
Server load: 0.12 0.23 0.25
Total accesses: 1739727626 - Total Traffic: 16007.2 GB - Total Duration: 80422686317
CPU Usage: u711.88 s44391.8 cu5517590 cs1309260 - 18.3% CPU load
46.4 requests/sec - 447.4 kB/second - 9.6 kB/request - 46.2272 ms/request
1 requests currently being processed, 6 idle workers
_.___W_._.......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6317914400/11/213404632_
0.040241587779800.00.031943585.75
172.70.114.55http/1.1saltwaterconnections.org:80GET /robots.txt HTTP/1.1

1-63-0/0/205476118.
0.002240524137170.00.001856755.00
172.70.111.130http/1.1sgma-saipan.org:80GET //anon.php HTTP/1.1

2-6317914370/25/199581262_
0.090039634261820.00.081792426.50
172.70.114.115http/1.1adeiso.com:80GET /wp/cgishell.plkiller.php HTTP/1.1

3-6317914380/18/187983746_
0.080338227866150.00.111689438.75
162.158.63.149http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-6317914390/18/180027737_
0.070136993948230.00.231612283.38
162.158.63.47http/1.1saltwaterconnections.org:80GET /mumbai-water-taxi-service-to-be-inaugurated-on-february-17

5-6317914410/10/174987265W
0.030036102901750.00.021564859.00
172.70.230.2http/1.1hanadama.biz:80GET /server-status HTTP/1.1

6-6317914420/11/168203344_
0.020035052439180.00.011507824.75
172.70.111.129http/1.1sgma-saipan.org:80GET //wp-includes/atom.php HTTP/1.1

7-63-0/0/115646252.
0.002128778084530.00.001109231.63
162.158.63.13http/1.1faceovl.com:80GET /page/686/?do=/blog/54/pozyczka-na-dow%C3%B3d/ HTTP/1.1

8-6317914430/10/65765179_
0.030521949484390.00.04688959.50
172.70.111.18http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

9-63-0/0/47099394.
0.002018389077900.00.00502339.13
172.70.114.146http/1.1sgma-saipan.org:80GET //mad.php HTTP/1.1

10-63-0/0/31936388.
0.00153015413482710.00.00352645.66
172.70.110.62http/1.1thearcmarion.org:80GET /apsu-newton-military-family-resource-center-now-open-open-

11-63-0/0/20460832.
0.001405212995459020.00.00237592.66
172.70.230.200http/1.1insurancequoteslist.net:80GET /manipalcigna-health-insurance-launches-manipalcigna-prohea

12-63-0/0/17597122.
0.0014051312075641720.00.00204198.77
162.158.62.148http/1.1pforteverlag.com:80GET / HTTP/1.1

13-63-0/0/16353984.
0.001405011528203920.00.00189681.69
172.70.230.33http/1.1coachoutletonlinespick.org:80GET /robots.txt HTTP/1.1

14-63-0/0/12960301.
0.001406410530363720.00.00150774.09
172.70.230.170http/1.1prepakine06.com:80GET /2023/03/ HTTP/1.1

15-63-0/0/7075571.
0.00199108859109300.00.0083388.19
162.158.154.145http/1.1armas-guerracivil.org:80GET /frederick-face-assault-mayoral-candidate-charges-weapons-n

16-63-0/0/4592514.
0.008552657876018560.00.0054480.14
162.158.159.77http/1.1kittycastaways.org:80GET /wp-content/themes/seotheme/db.php?u HTTP/1.1

17-63-0/0/3689528.
0.008553407362942500.00.0043842.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061691.
0.008552677000770470.00.0036462.88
172.70.114.101http/1.1maxkol.org:80GET / HTTP/1.1

19-63-0/0/2649870.
0.008552606713874870.00.0031474.70
172.70.111.118http/1.1kittycastaways.org:80GET /plugins/content/apismtp/apismtp.php.suspected?test=hello H

20-63-0/0/2433357.
0.008552606537441660.00.0028997.25
162.158.158.161http/1.1kittycastaways.org:80POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1

21-63-0/0/2210639.
0.0039184606350067970.00.0026384.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030126.
0.0039181716181511130.00.0024199.27
162.158.159.178http/1.1fallensouffle.com:80GET //xmlrpc.php?rsd HTTP/1.1

23-63-0/0/1927156.
0.0039181706055806090.00.0022993.46
172.70.114.93http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

24-63-0/0/1851087.
0.0039181705958326490.00.0022078.93
162.158.62.251http/1.11000friends.org:80GET /wp-admin/alfa.php HTTP/1.1

25-63-0/0/1800721.
0.0039185115869737030.00.0021468.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753241.
0.0039185205800699580.00.0020909.43
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722949.
0.0039181705727987640.00.0020532.60
172.70.230.66http/1.1plusooo.com:80GET /index.php?showtopic=17261&k=880ea6a14ea49e853634fbdc5015a0

28-63-0/0/1673849.
0.00391817155657554770.00.0019977.59
162.158.62.9http/1.1banyan.ro:80GET / HTTP/1.1

29-63-0/0/1647289.
0.0039183805607381840.00.0019643.34
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511312.
0.0040480305487070890.00.0018016.22
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247172.
0.0055410605270366390.00.0014897.53
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.0055406405120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.0055406564994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.005541123464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.0055412404803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00165014704725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00165020104638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00165018504545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00165009604488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00165018804425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00165018604368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00165009514319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00165018204266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00165009504206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00165017904161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001650096104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00165014104061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00165019804046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00165013704005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63

Found on 2023-08-31 11:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342104c212ee

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 30-Aug-2023 00:32:07 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  432 days 17 hours 45 minutes 16 seconds
Server load: 0.35 0.20 0.18
Total accesses: 1736875416 - Total Traffic: 15989.7 GB - Total Duration: 80398023675
CPU Usage: u712.1 s44317.4 cu5509270 cs1307250 - 18.4% CPU load
46.5 requests/sec - 448.4 kB/second - 9.7 kB/request - 46.2889 ms/request
2 requests currently being processed, 6 idle workers
C___W___........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6316471251/100/213011054C
0.360041554372230.90.741941112.88
162.158.158.162http/1.1owlandmonkeyhaven.co.uk:80GET /betty-white-challenges-to-help-animal-rescues/ HTTP/1.1

1-6316471260/90/205085063_
0.310040490523710.00.681854286.13
162.158.158.234http/1.1wmoc2010.org:80GET /wp-content/themes/gloria/css/fonts/awesome-fonts/fonts/fon

2-6316471270/80/199193023_
0.390339600791140.00.801789990.38
162.158.62.142http/1.1georgetownartgallery-sc.com:80GET /category/artistic-techniques/ HTTP/1.1

3-6316471280/79/187616426_
0.320138196209870.00.661687142.75
162.158.63.54http/1.1icgsdeepwater.com:80GET /wp-content/plugins/essential-addons-for-elementor-lite/rea

4-6316471320/75/179668433W
0.300036962989820.00.741610026.25
172.70.230.52http/1.1hanadama.biz:80GET /server-status HTTP/1.1

5-6316471330/76/174637838_
0.270036072869340.00.541562679.88
162.158.159.179http/1.1wmoc2010.org:80GET /wp-content/themes/gloria/css/fonts/awesome-fonts/fonts/fon

6-6316471340/75/167876002_
0.340035024039930.00.741505768.25
162.158.63.45http/1.1weberdebate.com:80GET //wp-content/about.php HTTP/1.1

7-6316471350/77/115468505_
0.290128762408380.00.581108098.13
172.70.111.30http/1.1thedonkey.org:80GET /robots.txt HTTP/1.1

8-63-0/0/65710476.
0.00400021944585180.00.00688607.94
172.70.111.116http/1.1nkfan.net:80GET /robots.txt HTTP/1.1

9-63-0/0/47070517.
0.00832018386461960.00.00502153.19
162.158.154.68http/1.1adsenzia.com:80GET /rmc-anticipates-57-million-loan-to-acquire-silver-from-hon

10-63-0/0/31927645.
0.00832015412630850.00.00352585.78
172.70.111.36http/1.1namiaz.org:80GET /data/404test.php HTTP/1.1

11-63-0/0/20459529.
0.003089012995302770.00.00237582.17
162.158.159.108http/1.1eshcinsel.net:80GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1

12-63-0/0/17595874.
0.0044566012075520610.00.00204191.33
172.70.111.77http/1.1kanbisai8.com:80GET /update/data.txt?t=32400 HTTP/1.1

13-63-0/0/16352755.
0.0044566411528103700.00.00189674.59
172.70.110.209http/1.1lavang.co.uk:80GET /wp-content/plugins/featured-image-from-url/includes/html/j

14-63-0/0/12959069.
0.0044566010530166100.00.00150763.97
172.70.114.65http/1.1oryxoman.com:80GET /wp-login.php HTTP/1.1

15-63-0/0/7075168.
0.004456638859070130.00.0083385.25
162.158.159.45http/1.1oryxoman.com:80GET / HTTP/1.1

16-63-0/0/4592414.
0.0026490707875933360.00.0054478.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689468.
0.0026489707362881600.00.0043841.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061591.
0.0026489807000680410.00.0036460.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649770.
0.0026489206713765860.00.0031472.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433257.
0.0026487676537355980.00.0028995.14
172.70.230.70http/1.1pquiles.com:80GET /eu-must-make-african-offer-on-legal-migration-says-greek-p

21-63-0/0/2210639.
0.0026490406350067970.00.0026384.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030126.
0.0026487516181511130.00.0024199.27
162.158.159.178http/1.1fallensouffle.com:80GET //xmlrpc.php?rsd HTTP/1.1

23-63-0/0/1927156.
0.0026487506055806090.00.0022993.46
172.70.114.93http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

24-63-0/0/1851087.
0.0026487505958326490.00.0022078.93
162.158.62.251http/1.11000friends.org:80GET /wp-admin/alfa.php HTTP/1.1

25-63-0/0/1800721.
0.0026490915869737030.00.0021468.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753241.
0.0026491005800699580.00.0020909.43
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722949.
0.0026487505727987640.00.0020532.60
172.70.230.66http/1.1plusooo.com:80GET /index.php?showtopic=17261&k=880ea6a14ea49e853634fbdc5015a0

28-63-0/0/1673849.
0.00264875155657554770.00.0019977.59
162.158.62.9http/1.1banyan.ro:80GET / HTTP/1.1

29-63-0/0/1647289.
0.0026489605607381840.00.0019643.34
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511312.
0.0027786105487070890.00.0018016.22
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247172.
0.0042716405270366390.00.0014897.53
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.0042712205120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.0042712364994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.004271703464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.0042718204803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00152320504725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00152325904638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00152324304545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00152315404488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00152324604425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00152324404368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00152315314319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00152324004266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00152315304206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00152323704161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001523154104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00152319904061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00152325604046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00152319504005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00</

Found on 2023-08-30 00:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34219e8e75be

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Monday, 28-Aug-2023 21:35:18 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  431 days 14 hours 48 minutes 28 seconds
Server load: 0.21 0.19 0.19
Total accesses: 1734881198 - Total Traffic: 15977.6 GB - Total Duration: 80381741116
CPU Usage: u709.72 s44265.8 cu5503410 cs1305890 - 18.4% CPU load
46.5 requests/sec - 449.3 kB/second - 9.7 kB/request - 46.3327 ms/request
3 requests currently being processed, 3 idle workers
.CCW___.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-63-0/0/212735555.
0.005141532371280.00.001939428.38
172.70.230.120http/1.1rinconrestaurants.com:80GET /.DS_Store HTTP/1.1

1-6314943001/100/204811940C
0.290140468316740.80.561852597.00
172.70.114.228http/1.1hanadama.biz:80GET /about HTTP/1.1

2-6314943011/100/198921748C
0.320539578674718.40.561788317.50
172.70.230.175http/1.1winterhawkgraphics.com:80GET /category/digital-printing/ HTTP/1.1

3-6314943350/89/187360091W
0.290038175204030.00.481685553.50
172.70.230.127http/1.1hanadama.biz:80GET /server-status HTTP/1.1

4-6314943360/89/179417056_
0.240036942464460.00.381608465.88
162.158.62.114http/1.11000webu.com:80GET /tv-serialy/?feed=rss2 HTTP/1.1

5-6314943370/89/174394516_
0.260136052934180.00.351561176.75
162.158.62.16http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-6314943380/89/167643693_
0.270135005002080.00.521504329.75
172.70.230.97http/1.1kempinski-ajman.com:80GET /valid-14-day-pcr-test-required-to-enter-government-departm

7-63-0/0/115346628.
0.0024028752285910.00.001107341.13
162.158.63.76http/1.1neode.ch:80GET /2015 HTTP/1.1

8-63-0/0/65671257.
0.0024021941257100.00.00688361.94
162.158.62.220http/1.1neode.ch:80GET /2014 HTTP/1.1

9-63-0/0/47049394.
0.00241618384716360.00.00502024.91
162.158.62.251http/1.1frumbl.com:80GET / HTTP/1.1

10-63-0/0/31921900.
0.0024015412150950.00.00352551.94
172.70.230.63http/1.1neode.ch:80GET /2012 HTTP/1.1

11-63-0/0/20458784.
0.005858012995203970.00.00237576.81
162.158.154.185http/1.1chuckgarric.com:80GET /sri-lankas-net-foreign-debt-soars-in-2021-due-to-currency-

12-63-0/0/17595249.
0.005886012075453710.00.00204186.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16352025.
0.005888011528032860.00.00189668.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12958455.
0.005857810530103030.00.00150759.11
172.70.230.62http/1.1richardosinga.com:80GET /new-york-2022-solar-tax-credit-and-other-incentives/ HTTP/

15-63-0/0/7074868.
0.003209408859048770.00.0083383.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4592414.
0.0016789807875933360.00.0054478.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689468.
0.0016788807362881600.00.0043841.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061591.
0.0016788907000680410.00.0036460.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649770.
0.0016788306713765860.00.0031472.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433257.
0.0016786776537355980.00.0028995.14
172.70.230.70http/1.1pquiles.com:80GET /eu-must-make-african-offer-on-legal-migration-says-greek-p

21-63-0/0/2210639.
0.0016789506350067970.00.0026384.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030126.
0.0016786616181511130.00.0024199.27
162.158.159.178http/1.1fallensouffle.com:80GET //xmlrpc.php?rsd HTTP/1.1

23-63-0/0/1927156.
0.0016786606055806090.00.0022993.46
172.70.114.93http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

24-63-0/0/1851087.
0.0016786605958326490.00.0022078.93
162.158.62.251http/1.11000friends.org:80GET /wp-admin/alfa.php HTTP/1.1

25-63-0/0/1800721.
0.0016790015869737030.00.0021468.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753241.
0.0016790105800699580.00.0020909.43
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722949.
0.0016786605727987640.00.0020532.60
172.70.230.66http/1.1plusooo.com:80GET /index.php?showtopic=17261&k=880ea6a14ea49e853634fbdc5015a0

28-63-0/0/1673849.
0.00167866155657554770.00.0019977.59
162.158.62.9http/1.1banyan.ro:80GET / HTTP/1.1

29-63-0/0/1647289.
0.0016788705607381840.00.0019643.34
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511312.
0.0018085205487070890.00.0018016.22
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247172.
0.0033015505270366390.00.0014897.53
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.0033011305120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.0033011464994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.003301613464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.0033017304803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00142619604725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00142625004638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00142623404545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00142614504488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00142623704425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00142623504368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00142614414319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00142623104266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00142614404206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00142622804161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001426145104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00142619004061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00142624704046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00142618604005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00142617403980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211

Found on 2023-08-28 21:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421d2f263e2

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 27-Aug-2023 19:30:53 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  430 days 12 hours 44 minutes 3 seconds
Server load: 0.26 0.18 0.20
Total accesses: 1732869670 - Total Traffic: 15965.8 GB - Total Duration: 80366002307
CPU Usage: u707.41 s44214.1 cu5497610 cs1304540 - 18.4% CPU load
46.6 requests/sec - 450.1 kB/second - 9.7 kB/request - 46.3774 ms/request
1 requests currently being processed, 5 idle workers
W_____..........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6313926300/71/212455174W
0.200041510731990.00.281937747.38
172.70.230.42http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6313926340/16/204534123_
0.040140446688930.00.091850928.63
162.158.155.74http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

2-6313926280/94/198645302_
0.270139557113830.00.411786656.75
172.70.110.163http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

3-6313926330/27/187099135_
0.080038154804520.00.141683985.00
172.70.114.165http/1.1qmmm.org:80POST /wp-comments-post.php HTTP/1.1

4-6313926350/16/179161779_
0.060136922502670.00.161606938.25
162.158.62.249http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-6313926360/6/174145510_
0.010036033510960.00.051559674.25
162.158.154.52http/1.1reklami.net:80GET /z.php HTTP/1.1

6-63-0/0/167412025.
0.004134986843100.00.001502929.13
172.70.230.69http/1.1ilfarodellavita.com:80GET /old HTTP/1.1

7-63-0/0/115230708.
0.004228742999840.00.001106631.00
162.158.62.223http/1.1ilfarodellavita.com:80GET /blog/ HTTP/1.1

8-63-0/0/65634295.
0.00819021938296990.00.00688139.25
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

9-63-0/0/47029917.
0.00779118383126320.00.00501906.63
172.70.230.214http/1.1awryt.com:80GET /new HTTP/1.1

10-63-0/0/31916399.
0.00817015411664580.00.00352514.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

11-63-0/0/20458164.
0.00779912995116510.00.00237571.25
162.158.62.160http/1.1thearcmarion.org:80GET /wp-content/uploads/2023/08/social-skills-deficits.jpg HTTP

12-63-0/0/17594625.
0.00818012075372130.00.00204181.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16351602.
0.00779311527961780.00.00189665.41
172.70.111.14http/1.1dsharma.org:80GET / HTTP/1.1

14-63-0/0/12958015.
0.00780310530049560.00.00150756.22
172.70.230.87http/1.1badminton-isere.org:80GET /server-status HTTP/1.1

15-63-0/0/7074858.
0.002690808859048330.00.0083383.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4592414.
0.007403307875933360.00.0054478.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689468.
0.007402307362881600.00.0043841.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061591.
0.007402407000680410.00.0036460.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649770.
0.007401806713765860.00.0031472.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433257.
0.007400276537355980.00.0028995.14
172.70.230.70http/1.1pquiles.com:80GET /eu-must-make-african-offer-on-legal-migration-says-greek-p

21-63-0/0/2210639.
0.007403006350067970.00.0026384.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030126.
0.007400116181511130.00.0024199.27
162.158.159.178http/1.1fallensouffle.com:80GET //xmlrpc.php?rsd HTTP/1.1

23-63-0/0/1927156.
0.007400106055806090.00.0022993.46
172.70.114.93http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

24-63-0/0/1851087.
0.007400105958326490.00.0022078.93
162.158.62.251http/1.11000friends.org:80GET /wp-admin/alfa.php HTTP/1.1

25-63-0/0/1800721.
0.007403515869737030.00.0021468.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753241.
0.007403605800699580.00.0020909.43
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722949.
0.007400105727987640.00.0020532.60
172.70.230.66http/1.1plusooo.com:80GET /index.php?showtopic=17261&k=880ea6a14ea49e853634fbdc5015a0

28-63-0/0/1673849.
0.0074001155657554770.00.0019977.59
162.158.62.9http/1.1banyan.ro:80GET / HTTP/1.1

29-63-0/0/1647289.
0.007402205607381840.00.0019643.34
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511312.
0.008698705487070890.00.0018016.22
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247172.
0.0023629005270366390.00.0014897.53
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.0023624805120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.0023624964994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.002362963464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.0023630804803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00133233104725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00133238504638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00133236904545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00133228004488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00133237204425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00133237004368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00133227914319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00133236604266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00133227904206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00133236304161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001332280104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00133232504061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00133238204046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00133232104005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00133230903980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.00133231103939355050.00.007117.19
::1http/1.

Found on 2023-08-27 19:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421b29ff370

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Saturday, 26-Aug-2023 13:48:40 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  429 days 7 hours 1 minute 49 seconds
Server load: 0.19 0.20 0.18
Total accesses: 1730473258 - Total Traffic: 15950.8 GB - Total Duration: 80346474217
CPU Usage: u705.97 s44153.5 cu5490770 cs1302890 - 18.4% CPU load
46.7 requests/sec - 450.9 kB/second - 9.7 kB/request - 46.4303 ms/request
1 requests currently being processed, 7 idle workers
______W_........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6313212380/63/212122205_
0.240141483964710.00.351935625.13
172.70.111.91http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

1-6313212390/35/204204158_
0.130040419932280.00.201848814.50
162.158.154.229http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

2-6313212400/31/198317144_
0.120139530319150.00.211784555.00
162.158.62.50http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-6313212410/30/186787127_
0.100938129389780.00.131681986.50
172.70.114.233http/1.1psposte.org:80GET /consider-emergency-loan/ HTTP/1.1

4-6313212420/27/178857192_
0.100136897637370.00.191604978.00
172.70.114.39http/1.1echecs-faciles.com:80GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1

5-6313212430/26/173850844_
0.090236009359000.00.141557768.00
162.158.158.158http/1.1talkshowsf.com:80GET /adminer-4.7.0.php HTTP/1.1

6-6313212440/25/167135986W
0.090034964417190.00.151501164.25
172.70.230.188http/1.1hanadama.biz:80GET /server-status HTTP/1.1

7-6313212450/27/115089669_
0.090028731382200.00.131105726.38
162.158.62.127http/1.1wildlife-conservation.org:80GET /wp-login.php?action=register HTTP/1.1

8-63-0/0/65590704.
0.00266021934635740.00.00687848.00
172.70.111.35http/1.1ekimusart.com:80GET /wp-admin//wp-content/themes/FifteenTen/404.php HTTP/1.1

9-63-0/0/47007099.
0.00266018381229570.00.00501757.41
172.70.230.91http/1.1talkshowsf.com:80GET /site.zip HTTP/1.1

10-63-0/0/31910222.
0.002411015411167980.00.00352477.25
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

11-63-0/0/20457434.
0.002409012995053070.00.00237566.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17593750.
0.002390112075275430.00.00204174.31
162.158.62.187http/1.1bismajeur.com:80GET /trump-publishes-photo-book-of-his-tenure/ HTTP/1.1

13-63-0/0/16351031.
0.002390211527890650.00.00189660.69
162.158.155.61http/1.1thebackwaterspress.org:80GET /kabral-kufour-and-others-honored-for-their-contribution-to

14-63-0/0/12957352.
0.004626010529977560.00.00150750.33
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7074627.
0.004595108859022100.00.0083382.00
162.158.158.61http/1.1onsdorp.net:80GET /are-you-retiring-with-student-loans-here-is-how-to-manage-

16-63-0/0/4592298.
0.00462407875925190.00.0054477.61
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689429.
0.0011576207362879890.00.0043841.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061545.
0.0012937107000676130.00.0036460.28
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649696.
0.0012935506713761670.00.0031471.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433152.
0.0012937756537344200.00.0028994.71
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210516.
0.0012937406350060340.00.0026383.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030018.
0.0012936706181499820.00.0024198.72
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1927054.
0.0012931516055796960.00.0022992.84
162.158.158.195http/1.1raisinrats.com:80GET /wp-includes/css/classic-themes.min.css HTTP/1.1

24-63-0/0/1850887.
0.0012931685958311220.00.0022077.96
172.70.110.72http/1.1raumastevedoring.com:80GET / HTTP/1.1

25-63-0/0/1800693.
0.001293681535869734760.00.0021468.62
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753234.
0.0012935805800699500.00.0020909.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722749.
0.0012937605727974890.00.0020531.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673737.
0.0012935605657543110.00.0019977.03
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647247.
0.0012931605607380540.00.0019643.27
162.158.154.71http/1.1mangomikes.com:80GET /tips-for-delivering-the-perks-restaurant-workers-want-and-

30-63-0/0/1511289.
0.0012931505487069770.00.0018016.12
172.70.230.42http/1.1huarachesshop.com:80GET /test1/.env HTTP/1.1

31-63-0/0/1247172.
0.0012935705270366390.00.0014897.53
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.0012931505120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.0012931664994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.001293633464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.0012937504803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00122539704725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00122545204638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00122543604545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00122534604488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00122543904425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00122543704368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00122534514319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00122543304266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00122534504206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00122543004161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001225346104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00122539104061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00122544904046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00122538704005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00122537503980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/

Found on 2023-08-26 13:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34218c9f4162

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 25-Aug-2023 07:27:28 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  428 days 40 minutes 37 seconds
Server load: 0.15 0.77 0.78
Total accesses: 1728194965 - Total Traffic: 15936.9 GB - Total Duration: 80328136603
CPU Usage: u703.77 s44095.6 cu5484170 cs1301320 - 18.5% CPU load
46.7 requests/sec - 451.9 kB/second - 9.7 kB/request - 46.4809 ms/request
1 requests currently being processed, 5 idle workers
W_____..........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6312360210/14/211807333W
0.040041458893460.00.071933661.88
172.70.230.70http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6312360220/11/203893065_
0.030040395139890.00.051846882.88
162.158.63.81http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-6312360190/24/198008041_
0.120039505523740.00.311782635.88
172.70.110.213http/1.1kanbisai8.com:80GET /update/data.txt?t=25200 HTTP/1.1

3-6312360230/11/186494538_
0.040538105893210.00.081680159.13
172.70.114.140http/1.1xml-acronym-demystifier.org:80GET / HTTP/1.1

4-6312360180/27/178574722_
0.070136874903900.00.081603219.75
172.70.230.17http/1.1youranyway.com:80GET /wp HTTP/1.1

5-6312360200/24/173572357_
0.070135986865190.00.071556026.63
162.158.63.63http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

6-63-0/0/166871207.
0.003034943183410.00.001499512.38
172.70.110.75http/1.1kanbisai8.com:80GET /update/data.txt?t=25200 HTTP/1.1

7-63-0/0/114951974.
0.0042428720093280.00.001104867.63
162.158.62.246http/1.1peninsulachristian.org:80GET / HTTP/1.1

8-63-0/0/65545316.
0.00112321930725250.00.00687555.81
172.70.110.205http/1.1babycountrywr.com:80GET /wp-content/themes/mantranews/assets/lib/sticky/jquery.stic

9-63-0/0/46980258.
0.00112518378976570.00.00501585.72
162.158.62.106http/1.1seattlemeditation.org:80GET /?s=static-wp-test HTTP/1.1

10-63-0/0/31901620.
0.00475315410457370.00.00352423.94
172.70.230.137http/1.1crashoverall.net:80GET /server-status HTTP/1.1

11-63-0/0/20455581.
0.006436812994870000.00.00237554.34
172.70.111.3http/1.1interportal.info:80GET /wp-content/plugins/core-plugin/include.php HTTP/1.1

12-63-0/0/17592209.
0.006493012075127250.00.00204163.77
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16349873.
0.006492011527777440.00.00189652.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12955991.
0.006436110529865820.00.00150741.77
162.158.62.224http/1.1softworldnet.com:80GET /local/.env HTTP/1.1

15-63-0/0/7074173.
0.00649108858982020.00.0083378.98
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4592291.
0.00643617875925050.00.0054477.61
172.70.110.184http/1.1softworldnet.com:80GET /api/.env HTTP/1.1

17-63-0/0/3689429.
0.00648907362879890.00.0043841.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061545.
0.002009807000676130.00.0036460.28
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649696.
0.002008206713761670.00.0031471.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433152.
0.002010456537344200.00.0028994.71
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210516.
0.002010106350060340.00.0026383.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2030018.
0.002009406181499820.00.0024198.72
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1927054.
0.002004216055796960.00.0022992.84
162.158.158.195http/1.1raisinrats.com:80GET /wp-includes/css/classic-themes.min.css HTTP/1.1

24-63-0/0/1850887.
0.002004385958311220.00.0022077.96
172.70.110.72http/1.1raumastevedoring.com:80GET / HTTP/1.1

25-63-0/0/1800693.
0.00200951535869734760.00.0021468.62
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753234.
0.002008505800699500.00.0020909.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722749.
0.002010305727974890.00.0020531.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673737.
0.002008305657543110.00.0019977.03
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647247.
0.002004305607380540.00.0019643.27
162.158.154.71http/1.1mangomikes.com:80GET /tips-for-delivering-the-perks-restaurant-workers-want-and-

30-63-0/0/1511289.
0.002004205487069770.00.0018016.12
172.70.230.42http/1.1huarachesshop.com:80GET /test1/.env HTTP/1.1

31-63-0/0/1247172.
0.002008405270366390.00.0014897.53
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1104060.
0.002004205120391550.00.0013202.15
162.158.154.131http/1.1huarachesshop.com:80GET /test2/.env HTTP/1.1

33-63-0/0/1017926.
0.002004364994919570.00.0012181.95
172.70.111.112http/1.1notoxicburning.org:80GET /miami-plans-to-pay-city-employees-in-bitcoin-should-you-ac

34-63-0/0/946248.
0.00200903464878159500.00.0011301.58
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891605.
0.002010204803052860.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00111612504725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00111617904638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00111616304545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00111607404488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00111616604425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00111616404368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00111607314319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00111616004266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00111607304206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00111615704161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001116074104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00111611904061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00111617604046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00111611504005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00111610303980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.00111610503939355050.00.00

Found on 2023-08-25 07:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421f3e04457

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 24-Aug-2023 11:33:15 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  427 days 4 hours 46 minutes 24 seconds
Server load: 0.19 0.24 0.25
Total accesses: 1726491631 - Total Traffic: 15927.3 GB - Total Duration: 80315849083
CPU Usage: u703.06 s44055 cu5479580 cs1300240 - 18.5% CPU load
46.8 requests/sec - 452.5 kB/second - 9.7 kB/request - 46.5197 ms/request
1 requests currently being processed, 6 idle workers
.__W____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-63-0/0/211572511.
0.000041442376180.00.001932317.38
162.158.154.76http/1.1nordicmobler.com:80GET /wp-content/access.php.suspected HTTP/1.1

1-6311541040/47/203659163_
0.120040378389940.00.301845526.63
162.158.63.125http/1.1nordicmobler.com:80GET /wp-content/data.php HTTP/1.1

2-6311541030/62/197775938_
0.160039489067310.00.221781313.38
162.158.154.205http/1.1nordicmobler.com:80GET /authorize.php.suspected HTTP/1.1

3-6311541050/47/186275868W
0.140038090120820.00.231678898.25
172.70.230.214http/1.1hanadama.biz:80GET /server-status HTTP/1.1

4-6311541060/39/178359714_
0.100636859526250.00.131601978.63
162.158.154.90http/1.1borsehermes.com:80GET /wp-content/themes/smart-mag/js/jquery.prettyPhoto.js HTTP/

5-6311541070/39/173364697_
0.1201035971789310.00.281554809.75
172.70.110.150http/1.1cyrank.net:80GET /wp-content/uploads/2023/08/wireframing.jpg HTTP/1.1

6-6311541080/38/166671975_
0.110634928783820.00.181498346.13
162.158.158.206http/1.1mediacarslondon.com:80GET /wp-content/uploads/2022/09/Online-Payday-Loans-In-South-Ca

7-6311541090/39/114849591_
0.100028712458040.00.141104264.00
162.158.63.98http/1.1kanbisai8.com:80GET /update/data.txt?t=39600 HTTP/1.1

8-63-0/0/65513321.
0.00112121928311060.00.00687370.81
162.158.159.18http/1.1sos-rpg.com:80GET /rumbleverse-adds-melee-touch-to-battle-royale/ HTTP/1.1

9-63-0/0/46961154.
0.00112018377507470.00.00501473.22
162.158.62.126http/1.1customvmail.com:80GET //xmlrpc.php?rsd HTTP/1.1

10-63-0/0/31896118.
0.0078015410000090.00.00352392.50
162.158.63.78http/1.1kanbisai8.com:80GET /update/data.txt?t=39600 HTTP/1.1

11-63-0/0/20455046.
0.0014829012994751250.00.00237551.27
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17591770.
0.0027523012075065110.00.00204161.42
172.70.230.107http/1.1deepwood.net:80GET //wp-content/themes/gaukingo/db.php?u HTTP/1.1

13-63-0/0/16349374.
0.0027523111527714780.00.00189650.02
162.158.158.137http/1.1nikefreerunlunarglide.com:80GET /wp-includes/wp-class.php HTTP/1.1

14-63-0/0/12955451.
0.0027523010529780960.00.00150738.81
172.70.230.43http/1.1laprairie-shlm.com:80GET /shop/.env HTTP/1.1

15-63-0/0/7074058.
0.0010332008858946350.00.0083378.13
162.158.155.117http/1.12-05.com:80GET /engine.php.suspected HTTP/1.1

16-63-0/0/4592186.
0.0010332017875874000.00.0054476.77
162.158.158.187http/1.1cnctb.org:80GET //wp-admin/css/colors/blue/blue.php?wall=ZWNobyBhRHJpdjQ7ZX

17-63-0/0/3689411.
0.0012485907362858310.00.0043841.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061537.
0.0012481207000655620.00.0036460.25
162.158.62.110http/1.1portal-algarve.net:80GET /robots.txt HTTP/1.1

19-63-0/0/2649673.
0.0012485406713739230.00.0031471.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433151.
0.0012485506537344140.00.0028994.71
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210514.
0.0023896906350060330.00.0026383.51
172.70.230.159http/1.1artists-studio.com:80GET //wp-content/patior/ HTTP/1.1

22-63-0/0/2030012.
0.0023899006181498910.00.0024198.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926954.
0.0023896806055785590.00.0022991.84
162.158.158.246http/1.1club-mouche-odet.com:80GET /wp-content/uploads/2023/03/wp-rate.php HTTP/1.1

24-63-0/0/1850788.
0.0046858805958303140.00.0022077.13
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800689.
0.0046858405869732720.00.0021468.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753219.
0.0046855335800697220.00.0020909.33
172.70.114.111http/1.1nismo-club.com:80GET /category/humane-association/ HTTP/1.1

27-63-0/0/1722748.
0.0046857605727974890.00.0020531.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673719.
0.0046858705657541730.00.0019976.88
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647147.
0.0046855305607369090.00.0019642.46
162.158.158.2http/1.1mishnish.co.uk:80GET //wp-json/oembed/1.0/embed?url=https://mishnish.co.uk/ HTTP

30-63-0/0/1511189.
0.00104448005487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.00104451605270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.00104447905120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.00104446604994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.00104449204878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.00104444204803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.00104447304725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.00104452704638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.00104451104545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.00104442204488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.00104451404425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.00104451204368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.00104442114319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.00104450804266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.00104442104206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.00104450504161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.001044422104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.00104446704061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.00104452404046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.00104446304005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.00104445103980890410.00.007187.02
:

Found on 2023-08-24 11:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342112c18e79

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 23-Aug-2023 02:05:47 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  425 days 19 hours 18 minutes 56 seconds
Server load: 0.29 0.21 0.20
Total accesses: 1723691064 - Total Traffic: 15912.1 GB - Total Duration: 80295869996
CPU Usage: u701.94 s43987.4 cu5472080 cs1298440 - 18.5% CPU load
46.9 requests/sec - 453.5 kB/second - 9.7 kB/request - 46.5837 ms/request
1 requests currently being processed, 6 idle workers
_.____W_........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6310004080/2/211183967_
0.010841415196790.00.011930200.50
162.158.158.239http/1.1hcingenieria.com:80GET /close-the-gaps-democrat-az-backs-continued-construction-of

1-63-0/0/203274816.
0.001140351077690.00.001843395.75
162.158.63.104http/1.1month-ntx.org:80GET /tag/short-term/ HTTP/1.1

2-6310003960/95/197394849_
0.290839461872670.00.511779206.13
162.158.154.202http/1.1hotelmarketingworks.com:80GET /conversion-rate-optimization/ HTTP/1.1

3-6310003970/96/185912798_
0.330138064206930.00.631676889.38
162.158.62.249http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-6310003980/87/178005790_
0.260036834203810.00.431600025.25
172.70.114.89http/1.1nordbi.org:80GET / HTTP/1.1

5-6310003990/87/173021553_
0.320135947321490.00.611552898.13
162.158.62.219http/1.1hotelmarketingworks.com:80GET /robots.txt HTTP/1.1

6-6310004000/86/166348796W
0.280034905690880.00.531496555.25
172.70.230.43http/1.1hanadama.biz:80GET /server-status HTTP/1.1

7-6310004010/87/114675726_
0.320028699715270.00.651103278.88
162.158.158.197http/1.1artdeko-bg.com:80GET /uploads/ HTTP/1.1

8-63-0/0/65464178.
0.00200121924656810.00.00687097.13
172.70.114.142http/1.1hotelrondinella.com:80GET / HTTP/1.1

9-63-0/0/46933520.
0.00311018375515060.00.00501319.59
162.158.158.83http/1.1eaglerock-is.com:80GET /a.php HTTP/1.1

10-63-0/0/31887274.
0.001350015409341570.00.00352344.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

11-63-0/0/20453708.
0.001346012994660450.00.00237543.30
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17591036.
0.001305912075014140.00.00204157.75
162.158.158.109http/1.1villageunderforest.com:80GET /traditional-clothing/ HTTP/1.1

13-63-0/0/16348588.
0.001348011527666870.00.00189646.84
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12954725.
0.001305310529719700.00.00150735.83
162.158.155.86http/1.1justcatholic.org:80GET /?p=3671 HTTP/1.1

15-63-0/0/7073958.
0.00436308858942460.00.0083377.91
172.70.114.242http/1.1aid4teens.org:80GET /robots.txt HTTP/1.1

16-63-0/0/4592086.
0.004363117875869300.00.0054476.47
162.158.62.192http/1.1salon-oliwia.com:80GET /micro-bead-extensions/ HTTP/1.1

17-63-0/0/3689411.
0.00441007362858310.00.0043841.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061537.
0.00436307000655620.00.0036460.25
162.158.62.110http/1.1portal-algarve.net:80GET /robots.txt HTTP/1.1

19-63-0/0/2649673.
0.00440506713739230.00.0031471.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433151.
0.00440606537344140.00.0028994.71
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210514.
0.0011852006350060330.00.0026383.51
172.70.230.159http/1.1artists-studio.com:80GET //wp-content/patior/ HTTP/1.1

22-63-0/0/2030012.
0.0011854106181498910.00.0024198.63
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926954.
0.0011851906055785590.00.0022991.84
162.158.158.246http/1.1club-mouche-odet.com:80GET /wp-content/uploads/2023/03/wp-rate.php HTTP/1.1

24-63-0/0/1850788.
0.0034813905958303140.00.0022077.13
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800689.
0.0034813505869732720.00.0021468.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753219.
0.0034810535800697220.00.0020909.33
172.70.114.111http/1.1nismo-club.com:80GET /category/humane-association/ HTTP/1.1

27-63-0/0/1722748.
0.0034812805727974890.00.0020531.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673719.
0.0034813805657541730.00.0019976.88
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647147.
0.0034810505607369090.00.0019642.46
162.158.158.2http/1.1mishnish.co.uk:80GET //wp-json/oembed/1.0/embed?url=https://mishnish.co.uk/ HTTP

30-63-0/0/1511189.
0.0092403105487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0092406705270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0092403005120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0092401704994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0092404304878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0092399304803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0092402404725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0092407804638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0092406204545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0092397304488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0092406504425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0092406304368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0092397214319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0092405904266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0092397204206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0092405604161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00923973104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0092401804061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0092407504046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0092401404005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0092400203980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.0092400403939355050.00.007117.19
::1<

Found on 2023-08-23 02:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421551811a2

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Monday, 21-Aug-2023 10:58:04 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  424 days 4 hours 11 minutes 13 seconds
Server load: 0.08 0.23 0.31
Total accesses: 1720755556 - Total Traffic: 15895.2 GB - Total Duration: 80272922981
CPU Usage: u698.77 s43912.2 cu5464000 cs1296460 - 18.6% CPU load
47 requests/sec - 454.8 kB/second - 9.7 kB/request - 46.6498 ms/request
1 requests currently being processed, 7 idle workers
___W____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-637855270/10/210775959_
0.030041383864220.00.051927794.00
162.158.62.29http/1.1hardware-specs.net:80GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e29726

1-637855280/10/202869453_
0.030040319711610.00.021841023.13
162.158.62.224http/1.1kanbisai8.com:80GET /update/data.txt?t=39600 HTTP/1.1

2-637855210/58/196993924_
0.190039430786690.00.281776839.88
162.158.159.117http/1.1cheecalodgehotel.com:80GET /hells-angels-member-admits-running-illegal-bar-in-palmerst

3-637855240/28/185533030W
0.080038034568380.00.121674641.50
172.70.230.10http/1.1hanadama.biz:80GET /server-status HTTP/1.1

4-637855250/15/177635581_
0.060636805402320.00.071597851.50
172.70.115.41http/1.1lancsycs.org:80GET /wp-includes/?C=M%3BO%3DA HTTP/1.1

5-637855290/9/172661918_
0.030235919336070.00.051550778.25
162.158.155.65http/1.1callalilypalmsprings.com:80GET /forza-horizon-5-loyalty-rewards-gives-you-cars-for-playing

6-637855260/14/166014003_
0.110134879364090.00.401494574.38
162.158.62.227http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-637855300/10/114503061_
0.040728685863470.00.051102252.50
172.70.115.11http/1.1qmmm.org:80GET /next-revolution-in-gene-editing/ HTTP/1.1

8-63-0/0/65407798.
0.00473021920037670.00.00686758.44
172.70.111.48http/1.1nocensor.org:80GET /shenzhen-high-tech-hub-gears-up-for-steady-economic-expans

9-63-0/0/46901844.
0.001159118372894810.00.00501127.38
162.158.154.88http/1.1onsdorp.net:80GET //wp-includes/wlwmanifest.xml HTTP/1.1

10-63-0/0/31878514.
0.001159315408560680.00.00352290.22
162.158.63.95http/1.1fauve.info:80GET / HTTP/1.1

11-63-0/0/20452126.
0.006964012994433970.00.00237532.69
162.158.63.68http/1.1kanbisai8.com:80GET /update/data.txt?t=39600 HTTP/1.1

12-63-0/0/17589302.
0.009010212074777810.00.00204146.45
172.70.114.121http/1.1bizchina-update.com:80GET /wp-login.php HTTP/1.1

13-63-0/0/16347301.
0.009034011527508150.00.00189637.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12953555.
0.0039748510529591360.00.00150728.55
162.158.155.25http/1.1rsspl.org:80GET /wall-streets-new-enemy-is-a-close-ally-of-elizabeth-warren

15-63-0/0/7073355.
0.005730908858841780.00.0083373.37
172.70.114.175http/1.1reciprocity2014.com:80GET /siemens-digital-industries-software-focuses-on-digital-tra

16-63-0/0/4591774.
0.005735617875799880.00.0054473.29
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689314.
0.005735107362830670.00.0043840.77
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061346.
0.005735207000613810.00.0036459.30
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649629.
0.005730906713708040.00.0031471.60
162.158.154.152http/1.1webtematico.com:80GET ///wp-admin/includes/cloud.php HTTP/1.1

20-63-0/0/2433052.
0.005735306537323290.00.0028993.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210421.
0.005734806350051480.00.0026383.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029992.
0.005730916181497230.00.0024198.62
162.158.158.63http/1.1patinar-bcn.org:80GET /repeater.php HTTP/1.1

23-63-0/0/1926860.
0.0020726606055776380.00.0022991.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850788.
0.0020727605958303140.00.0022077.13
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800689.
0.0020727205869732720.00.0021468.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753219.
0.0020724235800697220.00.0020909.33
172.70.114.111http/1.1nismo-club.com:80GET /category/humane-association/ HTTP/1.1

27-63-0/0/1722748.
0.0020726505727974890.00.0020531.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673719.
0.0020727505657541730.00.0019976.88
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647147.
0.0020724205607369090.00.0019642.46
162.158.158.2http/1.1mishnish.co.uk:80GET //wp-json/oembed/1.0/embed?url=https://mishnish.co.uk/ HTTP

30-63-0/0/1511189.
0.0078316805487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0078320405270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0078316705120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0078315404994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0078318004878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0078313004803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0078316104725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0078321604638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0078319904545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0078311004488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0078320204425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0078320004368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0078310914319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0078319604266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0078310904206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0078319304161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00783110104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0078315504061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0078321204046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0078315104005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0078313903980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1

Found on 2023-08-21 10:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421bc2e435a

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Saturday, 19-Aug-2023 17:19:23 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  422 days 10 hours 32 minutes 33 seconds
Server load: 0.13 0.17 0.14
Total accesses: 1717662916 - Total Traffic: 15877.8 GB - Total Duration: 80249406507
CPU Usage: u696.51 s43838 cu5455820 cs1294460 - 18.6% CPU load
47.1 requests/sec - 456.2 kB/second - 9.7 kB/request - 46.7201 ms/request
1 requests currently being processed, 5 idle workers
_W____..........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-636146770/4/210346974_
0.010041351651990.00.011925328.63
162.158.154.177http/1.1bergdahldental.com:80GET /indian-council-of-medical-research-lays-down-rules-for-the

1-636146260/98/202443982W
0.270040287517640.00.451838569.63
172.70.230.28http/1.1hanadama.biz:80GET /server-status HTTP/1.1

2-636146740/82/196571254_
0.220039398789430.00.331774410.88
172.70.230.72http/1.1triadntr.net:80GET /robots.txt HTTP/1.1

3-636146750/20/185133057_
0.040338004245020.00.081672350.13
172.70.230.30http/1.1stinaonline.com:80GET /mario-strikers-battle-league-will-receive-post-launch-upda

4-636146760/6/177245811_
0.010236775853760.00.031595614.88
172.70.111.92http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

5-636146780/4/172282644_
0.010135890521300.00.001548586.88
162.158.63.64http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-63-0/0/165655993.
0.00322934852143660.00.001492520.00
162.158.63.161http/1.1arbeiasociety.org.uk:80GET /wp-content/themes/publisher/includes/libs/bs-theme-core/li

7-63-0/0/114321329.
0.00113028671769700.00.001101206.25
172.70.230.29http/1.1hiahbg.org:80GET /ohayo.php HTTP/1.1

8-63-0/0/65348764.
0.00342021915313400.00.00686414.81
162.158.62.83http/1.1ukdigitala.com:80GET /images/xmrlpc.php?p= HTTP/1.1

9-63-0/0/46868485.
0.00342118370220090.00.00500929.59
162.158.159.176http/1.1overtonspeech.net:80GET /robots.txt HTTP/1.1

10-63-0/0/31868707.
0.00412015407716230.00.00352231.88
162.158.154.13http/1.1ygdssc.com:80GET /store/.git/config HTTP/1.1

11-63-0/0/20450696.
0.005264112994277520.00.00237524.13
172.70.230.192http/1.1nasfonline.org:80GET /wp-content/uploads/xl2023.php HTTP/1.1

12-63-0/0/17588373.
0.0052641612074677610.00.00204141.27
162.158.63.103http/1.1r-goldberg.com:80GET /trip-with-gordon-paid-dividends-for-byron-in-martinsville-

13-63-0/0/16346454.
0.005264111527391450.00.00189633.47
172.70.111.89http/1.1buzzez.co.uk:80GET /the-global-content-intelligence-market-is-expected-to-grow

14-63-0/0/12952638.
0.005301010529499820.00.00150723.11
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7073152.
0.005732328858822280.00.0083372.08
172.70.115.76http/1.1rkenneylaw.com:80GET /252creditcomparercomparatif-credit-car-autophp-en.html HTT

16-63-0/0/4591771.
0.005734807875798070.00.0054473.29
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689307.
0.005734307362827420.00.0043840.76
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061340.
0.005732247000611190.00.0036459.29
162.158.154.196http/1.1mishnish.co.uk:80GET / HTTP/1.1

19-63-0/0/2649529.
0.005735406713700210.00.0031471.15
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2433047.
0.005735706537320280.00.0028993.86
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210413.
0.005734406350047010.00.0026383.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029892.
0.005734106181487650.00.0024198.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926860.
0.005734606055776380.00.0022991.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850788.
0.005735605958303140.00.0022077.13
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800689.
0.005735205869732720.00.0021468.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753219.
0.005732235800697220.00.0020909.33
172.70.114.111http/1.1nismo-club.com:80GET /category/humane-association/ HTTP/1.1

27-63-0/0/1722748.
0.005734505727974890.00.0020531.78
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673719.
0.005735505657541730.00.0019976.88
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647147.
0.005732205607369090.00.0019642.46
162.158.158.2http/1.1mishnish.co.uk:80GET //wp-json/oembed/1.0/embed?url=https://mishnish.co.uk/ HTTP

30-63-0/0/1511189.
0.0063324805487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0063328405270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0063324705120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0063323404994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0063326004878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0063321004803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0063324104725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0063329504638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0063327904545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0063319004488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0063328204425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0063328004368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0063318914319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0063327604266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0063318904206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0063327304161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00633190104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0063323504061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0063329204046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0063323104005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0063321903980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.006332210</

Found on 2023-08-19 17:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421934ae914

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Friday, 18-Aug-2023 15:54:43 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  421 days 9 hours 7 minutes 52 seconds
Server load: 0.24 0.28 0.22
Total accesses: 1715600438 - Total Traffic: 15866.6 GB - Total Duration: 80234565424
CPU Usage: u695.02 s43787.5 cu5450270 cs1293120 - 18.6% CPU load
47.1 requests/sec - 457.0 kB/second - 9.7 kB/request - 46.7676 ms/request
1 requests currently being processed, 7 idle workers
__W_____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-635496020/44/210061680_
0.150941331388820.00.311923744.00
162.158.62.137http/1.1aqnailspa.com:80GET / HTTP/1.1

1-635496030/32/202160497_
0.120140267291300.00.261836985.88
162.158.155.163http/1.1offshores-nextdoor.com:80GET /?s=static-wp-test HTTP/1.1

2-635496040/22/196289380W
0.060039378637970.00.091772839.38
172.70.230.150http/1.1hanadama.biz:80GET /server-status HTTP/1.1

3-635496050/22/184865862_
0.070637985042010.00.101670865.75
162.158.62.19http/1.1we-are-africa.org:80GET /wp-content/?C=S;O=D HTTP/1.1

4-635496060/17/176987448_
0.050536757288290.00.141594166.63
162.158.62.114http/1.1jinseirpg.com:80GET /online-multiplayer/ HTTP/1.1

5-635496070/18/172028449_
0.060535872236220.00.141547160.00
162.158.158.192http/1.1jinseirpg.com:80GET /nintendo-switch/ HTTP/1.1

6-635496080/17/165415781_
0.060134834958370.00.161491179.63
162.158.62.135http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-635496090/17/114197447_
0.060228662713430.00.121100509.13
172.70.115.72http/1.1bamiyanlaser.org:80GET /feed/ HTTP/1.1

8-63-0/0/65311007.
0.00106121912471350.00.00686200.56
162.158.159.11http/1.1zai-amelex.com:80GET /wp-login.php HTTP/1.1

9-63-0/0/46847829.
0.00162818368692870.00.00500814.13
172.70.111.48http/1.1dsharma.org:80GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1

10-63-0/0/31862160.
0.00162915407178980.00.00352196.03
162.158.155.41http/1.1monolithdoes.com:80GET /robots.txt HTTP/1.1

11-63-0/0/20449963.
0.0010916012994175330.00.00237519.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17587859.
0.0010869112074584910.00.00204138.33
162.158.154.124http/1.1gurugama.org:80GET / HTTP/1.1

13-63-0/0/16345835.
0.0010869411527272250.00.00189629.77
162.158.154.59http/1.1penta-music.com:80GET /wp-includes/js/thickbox/index.php HTTP/1.1

14-63-0/0/12952106.
0.0010918010529441850.00.00150719.64
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7073052.
0.0010918428858800510.00.0083371.45
162.158.159.46http/1.1lavang.co.uk:80GET / HTTP/1.1

16-63-0/0/4591746.
0.0015216077875781270.00.0054473.02
162.158.158.34http/1.1jumprunproductions.com:80HEAD /michael-eric-dyson-winsome-sears-is-the-white-supremacist

17-63-0/0/3689273.
0.0015220407362807860.00.0043840.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061240.
0.0015216087000585680.00.0036458.60
162.158.63.5http/1.1nkfan.net:80GET /palm-springs-art-museum-announces-cabaret-88-artists/ HTTP

19-63-0/0/2649516.
0.00537304186713687060.00.0031471.03
172.70.230.66http/1.1letajmahal-restaurant.com:80GET /wp-content/themes/newses/style.css HTTP/1.1

20-63-0/0/2433037.
0.0053732606537309590.00.0028993.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210384.
0.0053733506350030140.00.0026382.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029853.
0.0053734306181476760.00.0024197.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926838.
0.0054176306055764650.00.0022991.35
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850781.
0.0054173805958297320.00.0022077.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800677.
0.0054179805869725390.00.0021468.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753119.
0.0054180805800685900.00.0020908.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722725.
0.0054181005727969000.00.0020531.65
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673713.
0.0054173105657536370.00.0019976.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647047.
0.0054173705607355620.00.0019641.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511189.
0.0054176805487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0054180405270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0054176705120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0054175404994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0054178004878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0054173004803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0054176104725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0054181504638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0054179904545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0054171004488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0054180204425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0054180004368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0054170914319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0054179604266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0054170904206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0054179304161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00541710104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0054175504061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0054181204046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0054175104005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0054173903980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.0054174103939355050.00.007117.19
::1http/1.1127.0.1.1:80OPTIONS

Found on 2023-08-18 15:54

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34216d09d773

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 17-Aug-2023 13:25:38 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  420 days 6 hours 38 minutes 47 seconds
Server load: 0.21 0.22 0.19
Total accesses: 1713609741 - Total Traffic: 15855.0 GB - Total Duration: 80219274040
CPU Usage: u693.73 s43740 cu5444930 cs1291820 - 18.7% CPU load
47.2 requests/sec - 457.8 kB/second - 9.7 kB/request - 46.813 ms/request
1 requests currently being processed, 7 idle workers
___W____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-634881590/41/209785380_
0.1301441310520410.00.271922098.63
172.70.110.63http/1.1nottinghamexpresstransit.com:80GET /network?C=M%3BO%3DA HTTP/1.1

1-634881600/32/201886180_
0.110140245996900.00.251835344.50
172.70.114.44http/1.1hanadama.biz:80GET /about HTTP/1.1

2-634881610/32/196017120_
0.070439357775080.00.091771222.88
162.158.158.241http/1.1welkominnthailand.com:80GET / HTTP/1.1

3-634881580/49/184608850W
0.170037965318450.00.411669338.13
172.70.230.138http/1.1hanadama.biz:80GET /server-status HTTP/1.1

4-634881620/28/176737524_
0.080136738064810.00.131592677.88
162.158.63.117http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-634881630/29/171782882_
0.100135853372790.00.201545685.88
162.158.154.240http/1.1welkominnthailand.com:80GET //wp-includes/wlwmanifest.xml HTTP/1.1

6-634881640/28/165182592_
0.090134817057180.00.201489787.88
172.70.110.116http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-634881650/27/114079944_
0.100128653521370.00.181099800.75
162.158.154.96http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

8-63-0/0/65275807.
0.0015021909723780.00.00685989.19
162.158.159.104http/1.1fisheriesmanagement.co.uk:80GET /robots.txt HTTP/1.1

9-63-0/0/46826724.
0.0015018367084360.00.00500687.34
172.70.230.23http/1.1malenyceltic.org:80GET /robots.txt HTTP/1.1

10-63-0/0/31855057.
0.001938015406644850.00.00352152.72
172.70.110.191http/1.14xcircle.com:80GET /wp-content/repeater.php HTTP/1.1

11-63-0/0/20449655.
0.005374712994151990.00.00237517.97
172.70.114.225http/1.1werecookingrestaurantsusa.com:8GET / HTTP/1.1

12-63-0/0/17587652.
0.0056931512074571400.00.00204137.45
162.158.62.120http/1.1jameslangdonwork.net:80GET /server-status HTTP/1.1

13-63-0/0/16345435.
0.005693111527239280.00.00189627.56
162.158.154.152http/1.1highriverhighlandgames.com:80GET / HTTP/1.1

14-63-0/0/12951804.
0.005732010529417460.00.00150717.77
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7073052.
0.001383928858800510.00.0083371.45
162.158.159.46http/1.1lavang.co.uk:80GET / HTTP/1.1

16-63-0/0/4591746.
0.005681577875781270.00.0054473.02
162.158.158.34http/1.1jumprunproductions.com:80HEAD /michael-eric-dyson-winsome-sears-is-the-white-supremacist

17-63-0/0/3689273.
0.005685807362807860.00.0043840.51
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061240.
0.005681587000585680.00.0036458.60
162.158.63.5http/1.1nkfan.net:80GET /palm-springs-art-museum-announces-cabaret-88-artists/ HTTP

19-63-0/0/2649516.
0.00441958186713687060.00.0031471.03
172.70.230.66http/1.1letajmahal-restaurant.com:80GET /wp-content/themes/newses/style.css HTTP/1.1

20-63-0/0/2433037.
0.0044198006537309590.00.0028993.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210384.
0.0044198906350030140.00.0026382.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029853.
0.0044199706181476760.00.0024197.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926838.
0.0044641806055764650.00.0022991.35
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850781.
0.0044639305958297320.00.0022077.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800677.
0.0044645305869725390.00.0021468.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753119.
0.0044646305800685900.00.0020908.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722725.
0.0044646505727969000.00.0020531.65
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673713.
0.0044638605657536370.00.0019976.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647047.
0.0044639205607355620.00.0019641.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511189.
0.0044642305487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0044645905270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0044642205120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0044640904994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0044643504878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0044638504803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0044641604725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0044647004638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0044645404545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0044636504488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0044645704425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0044645504368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0044636414319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0044645104266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0044636404206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0044644804161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00446365104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0044641004061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0044646704046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0044640604005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0044639403980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.0044639603939355050.00.007117.19
::1http/1.1

Found on 2023-08-17 13:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421f266cfe9

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Wednesday, 16-Aug-2023 11:33:19 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  419 days 4 hours 46 minutes 29 seconds
Server load: 0.27 0.25 0.25
Total accesses: 1711596857 - Total Traffic: 15842.9 GB - Total Duration: 80201515401
CPU Usage: u692.14 s43685.8 cu5439060 cs1290360 - 18.7% CPU load
47.3 requests/sec - 458.7 kB/second - 9.7 kB/request - 46.8577 ms/request
1 requests currently being processed, 7 idle workers
____W___........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-633873410/33/209506648_
0.110141286215830.00.191920393.00
172.70.114.152http/1.1hanadama.biz:80GET /about HTTP/1.1

1-633873420/24/201608827_
0.070140221706650.00.141833656.00
172.70.110.100http/1.1texansnflofficialproshop.com:80GET /wp-content/themes/publisher/includes/libs/bs-theme-core/?C

2-633873430/25/195742214_
0.060139333682440.00.111769540.00
172.70.110.119http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

3-633873440/17/184345715_
0.040137942008410.00.081667729.75
162.158.62.249http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-633873450/16/176482092W
0.050036715568950.00.171591119.50
172.70.230.170http/1.1hanadama.biz:80GET /server-status HTTP/1.1

5-633873460/16/171537105_
0.060135831669560.00.091544175.50
162.158.154.229http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

6-633873470/16/164948806_
0.040234796433220.00.061488354.25
162.158.154.95http/1.1hanadama.biz:80GET /.vscode/sftp.json HTTP/1.1

7-633873380/90/113961084_
0.2901228642844760.00.521099074.63
162.158.158.16http/1.1arropaydayloans.com:80GET /category/interest-rates/ HTTP/1.1

8-63-0/0/65239859.
0.00185321906390680.00.00685765.69
172.70.114.38http/1.1milky-web.net:80GET /server-status HTTP/1.1

9-63-0/0/46808181.
0.00314118365383890.00.00500570.59
162.158.62.114http/1.1edukafaso.org:80GET /.well-known/ HTTP/1.1

10-63-0/0/31848924.
0.001250015406058310.00.00352115.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

11-63-0/0/20448426.
0.001226312994012840.00.00237510.23
162.158.62.79http/1.1crochetindia.com:80GET /spes-a-hair-care-product-manufacturer-in-korea-plans-to-pe

12-63-0/0/17586640.
0.001226112074451560.00.00204131.38
162.158.62.123http/1.1cimarronalliance.org:80GET /review-ardell-beauty-magnetic-megahold-lashes-and-more/ HT

13-63-0/0/16344519.
0.001226811527138600.00.00189621.22
162.158.62.42http/1.1revoltaglobal.net:80GET /russian-revolution-at-100-inconvenient-for-putin/ HTTP/1.1

14-63-0/0/12951114.
0.001226010529344890.00.00150713.67
172.70.111.49http/1.1pensacolaframery.com:80GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1

15-63-0/0/7072831.
0.00971508858781530.00.0083370.32
162.158.158.41http/1.1mountainviewhse.com:80GET //byp.php HTTP/1.1

16-63-0/0/4591646.
0.006451107875773220.00.0054472.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689262.
0.0034884907362807310.00.0043840.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061140.
0.0034885207000576400.00.0036457.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649516.
0.00348820186713687060.00.0031471.03
172.70.230.66http/1.1letajmahal-restaurant.com:80GET /wp-content/themes/newses/style.css HTTP/1.1

20-63-0/0/2433037.
0.0034884206537309590.00.0028993.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210384.
0.0034885106350030140.00.0026382.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029853.
0.0034885906181476760.00.0024197.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926838.
0.0035327906055764650.00.0022991.35
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850781.
0.0035325405958297320.00.0022077.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800677.
0.0035331405869725390.00.0021468.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753119.
0.0035332405800685900.00.0020908.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722725.
0.0035332605727969000.00.0020531.65
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673713.
0.0035324705657536370.00.0019976.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647047.
0.0035325305607355620.00.0019641.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511189.
0.0035328405487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0035332005270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0035328305120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0035327004994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0035329604878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0035324604803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0035327704725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0035333104638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0035331504545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0035322604488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0035331804425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0035331604368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0035322514319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0035331204266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0035322504206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0035330904161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00353226104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0035327104061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0035332804046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0035326704005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0035325503980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.0035325703939355050.00

Found on 2023-08-16 11:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34211c00d759

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Tuesday, 15-Aug-2023 20:52:08 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  418 days 14 hours 5 minutes 17 seconds
Server load: 0.13 0.13 0.18
Total accesses: 1710496750 - Total Traffic: 15836.6 GB - Total Duration: 80193101811
CPU Usage: u692.53 s43659 cu5436100 cs1289640 - 18.7% CPU load
47.3 requests/sec - 459.2 kB/second - 9.7 kB/request - 46.8829 ms/request
1 requests currently being processed, 6 idle workers
___._._W_.......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-633125490/99/209355179_
0.350141274805090.00.591919501.75
162.158.63.125http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-633125500/93/201458178_
0.330040210287490.00.631832773.50
172.70.115.4http/1.1melnitsa.net:80GET /wiki/doku.php?id=%D0%BE_%D0%B3%D1%80%D1%83%D0%BF%D0%BF%D0%

2-633125520/90/195592519_
0.310339322048930.00.601768661.13
162.158.62.51http/1.1abandonrock.com:80GET /admin/controller/extension/extension/ HTTP/1.1

3-63-0/0/184203296.
0.0035137931147310.00.001666882.88
172.70.114.54http/1.1chatologica.com:80GET / HTTP/1.1

4-633125510/94/176344101_
0.300036704978740.00.461590303.38
162.158.155.183http/1.1lacledeslanding.org:80HEAD /restore/wallet.dat HTTP/1.1

5-63-0/0/171400835.
0.0035135821235340.00.001543364.50
162.158.154.211http/1.1domain-assurance.org:80GET /repeater.php HTTP/1.1

6-633125530/92/164818988_
0.310134786503530.00.521487584.63
172.70.110.119http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

7-633125540/91/113893739W
0.280028637646590.00.381098678.00
172.70.230.151http/1.1hanadama.biz:80GET /server-status HTTP/1.1

8-633125550/89/65220629_
0.3001421904874770.00.52685646.94
162.158.62.249http/1.1signalboosterspick.com:80GET /income-sharing-agreements-in-search-of-legitimacy/ HTTP/1.

9-63-0/0/46797755.
0.00211018364563860.00.00500503.56
162.158.62.139http/1.1moldweb.co.uk:80GET /d00990664-%E3%83%96%E3%83%A9%E3%83%B3%E3%83%89-%E6%99%82%E

10-63-0/0/31845637.
0.00209115405822970.00.00352096.66
162.158.63.53http/1.1fantasiando.net:80GET /GRAFICA/SCRITTE/dragoarriv.gif HTTP/1.1

11-63-0/0/20448042.
0.0011636012993990930.00.00237508.41
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17586326.
0.00116186512074432680.00.00204129.78
172.70.230.113http/1.1universoviviente.com:80GET /peter-mcknight-do-we-still-matter/ HTTP/1.1

13-63-0/0/16344214.
0.0011637011527121340.00.00189619.73
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12950709.
0.00116183910529318970.00.00150711.63
162.158.154.172http/1.1universoviviente.com:80GET /astrology-for-march-2022-includes-a-lucky-jupiter-alignmen

15-63-0/0/7072731.
0.001161908858777690.00.0083370.02
162.158.158.45http/1.1justcatholic.org:80GET /wp-content/plugins/capability-manager-enhanced/readme.txt 

16-63-0/0/4591646.
0.001163907875773220.00.0054472.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689262.
0.0029597707362807310.00.0043840.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061140.
0.0029598007000576400.00.0036457.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649516.
0.00295948186713687060.00.0031471.03
172.70.230.66http/1.1letajmahal-restaurant.com:80GET /wp-content/themes/newses/style.css HTTP/1.1

20-63-0/0/2433037.
0.0029597006537309590.00.0028993.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210384.
0.0029597906350030140.00.0026382.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029853.
0.0029598706181476760.00.0024197.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926838.
0.0030040706055764650.00.0022991.35
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850781.
0.0030038205958297320.00.0022077.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800677.
0.0030044205869725390.00.0021468.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753119.
0.0030045205800685900.00.0020908.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722725.
0.0030045405727969000.00.0020531.65
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673713.
0.0030037505657536370.00.0019976.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647047.
0.0030038105607355620.00.0019641.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511189.
0.0030041205487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0030044805270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0030041105120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0030039804994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0030042404878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0030037404803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0030040504725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0030045904638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0030044304545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0030035404488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0030044604425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0030044404368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0030035314319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0030044004266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0030035304206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0030043704161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00300354104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0030039904061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0030045604046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0030039504005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0030038303980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.003003850393935505

Found on 2023-08-15 20:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e34217dd2cb2c

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 13-Aug-2023 17:26:50 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  416 days 10 hours 39 minutes 59 seconds
Server load: 0.40 0.31 0.28
Total accesses: 1706699120 - Total Traffic: 15817.1 GB - Total Duration: 80164832392
CPU Usage: u688.65 s43565.2 cu5426140 cs1287190 - 18.8% CPU load
47.4 requests/sec - 461.0 kB/second - 9.7 kB/request - 46.9707 ms/request
1 requests currently being processed, 6 idle workers
______W.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6340331380/68/208826878_
0.180041236065490.00.241916738.63
162.158.154.33http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

1-6340331390/47/200933241_
0.120140171318820.00.201830018.00
172.70.114.238http/1.1outinprint.net:80GET /robots.txt HTTP/1.1

2-6340331400/45/195071062_
0.140039283456530.00.271765918.00
172.70.110.247http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

3-6340331430/37/183709079_
0.090337894515150.00.121664287.75
172.70.230.84http/1.1ebonex.co.uk:80GET /2018/10/ HTTP/1.1

4-6340331440/38/175862940_
0.080836669154730.00.071587757.63
162.158.159.125http/1.1parentsofallergicchildren.org:8GET /server-status HTTP/1.1

5-6340331450/37/170930875_
0.090035786385800.00.141540906.25
162.158.63.116http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-6340331460/36/164379352W
0.070034753906370.00.101485279.50
162.158.63.110http/1.1hanadama.biz:80GET /server-status HTTP/1.1

7-63-0/0/113673288.
0.0015428620971440.00.001097507.88
172.70.111.49http/1.1pad-service.com:80GET //wp-json/wp/v2/users/ HTTP/1.1

8-63-0/0/65155805.
0.00266021899770150.00.00685296.69
172.70.110.3http/1.1depoezenshop.com:80GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1

9-63-0/0/46760123.
0.00450718361542540.00.00500298.78
172.70.230.135http/1.1lakecityjournal.com:80GET / HTTP/1.1

10-63-0/0/31835785.
0.001219415405024570.00.00352041.66
162.158.62.241http/1.1avtoinsurance.net:80GET /server-status HTTP/1.1

11-63-0/0/20446863.
0.0029855012993863080.00.00237501.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17585270.
0.0029818912074229100.00.00204123.14
172.70.114.154http/1.1uscprssa.com:80GET /wp-content/uploads/2019/06/article_184521_h_2_4.jpg HTTP/1

13-63-0/0/16342899.
0.0029856111526959650.00.00189611.86
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12949663.
0.0029818010529102040.00.00150704.17
162.158.154.18http/1.1kanbisai8.com:80GET /update/data.txt?t=61200 HTTP/1.1

15-63-0/0/7072131.
0.0011086508858608100.00.0083365.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4591640.
0.0011085107875761670.00.0054472.29
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689262.
0.0011085907362807310.00.0043840.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061140.
0.0011086207000576400.00.0036457.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649516.
0.00110830186713687060.00.0031471.03
172.70.230.66http/1.1letajmahal-restaurant.com:80GET /wp-content/themes/newses/style.css HTTP/1.1

20-63-0/0/2433037.
0.0011085206537309590.00.0028993.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210384.
0.0011086106350030140.00.0026382.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029853.
0.0011086906181476760.00.0024197.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926838.
0.0011529006055764650.00.0022991.35
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850781.
0.0011526505958297320.00.0022077.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800677.
0.0011532505869725390.00.0021468.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753119.
0.0011533505800685900.00.0020908.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722725.
0.0011533705727969000.00.0020531.65
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673713.
0.0011525805657536370.00.0019976.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647047.
0.0011526405607355620.00.0019641.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511189.
0.0011529505487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0011533105270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0011529405120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0011528104994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0011530704878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0011525704803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0011528804725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0011534204638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0011532604545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0011523704488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0011532904425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0011532704368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0011523614319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0011532304266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0011523604206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0011532004161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00115237104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0011528204061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0011533904046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0011527804005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0011526603980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.0011526803939355050.00.007117.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

52-63-0/0/591234

Found on 2023-08-13 17:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421359cafb8

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Sunday, 13-Aug-2023 17:26:50 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  416 days 10 hours 39 minutes 59 seconds
Server load: 0.40 0.31 0.28
Total accesses: 1706699093 - Total Traffic: 15817.1 GB - Total Duration: 80164832279
CPU Usage: u688.58 s43565.2 cu5426140 cs1287190 - 18.8% CPU load
47.4 requests/sec - 461.0 kB/second - 9.7 kB/request - 46.9707 ms/request
1 requests currently being processed, 6 idle workers
W______.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6340331380/64/208826874W
0.160041236065250.00.221916738.63
172.70.230.70http/1.1hanadama.biz:80GET /server-status HTTP/1.1

1-6340331390/43/200933237_
0.110040171318710.00.181830018.00
162.158.154.54http/1.1hanadama.biz:80GET /debug/default/view?panel=config HTTP/1.1

2-6340331400/41/195071058_
0.130139283456300.00.251765918.00
162.158.154.92http/1.1hanadama.biz:80GET /.vscode/sftp.json HTTP/1.1

3-6340331430/33/183709075_
0.080137894514960.00.101664287.75
172.70.115.58http/1.1hanadama.biz:80GET /about HTTP/1.1

4-6340331440/34/175862936_
0.070036669154450.00.051587757.63
162.158.63.163http/1.1hanadama.biz:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-6340331450/33/170930871_
0.080135786385780.00.141540906.25
172.70.110.45http/1.1hanadama.biz:80GET /v2/_catalog HTTP/1.1

6-6340331460/33/164379349_
0.070234753906320.00.091485279.50
172.70.110.36http/1.1blissfield.net:80GET /robots.txt HTTP/1.1

7-63-0/0/113673288.
0.0015428620971440.00.001097507.88
172.70.111.49http/1.1pad-service.com:80GET //wp-json/wp/v2/users/ HTTP/1.1

8-63-0/0/65155805.
0.00266021899770150.00.00685296.69
172.70.110.3http/1.1depoezenshop.com:80GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1

9-63-0/0/46760123.
0.00449718361542540.00.00500298.78
172.70.230.135http/1.1lakecityjournal.com:80GET / HTTP/1.1

10-63-0/0/31835785.
0.001218415405024570.00.00352041.66
162.158.62.241http/1.1avtoinsurance.net:80GET /server-status HTTP/1.1

11-63-0/0/20446863.
0.0029855012993863080.00.00237501.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17585270.
0.0029818912074229100.00.00204123.14
172.70.114.154http/1.1uscprssa.com:80GET /wp-content/uploads/2019/06/article_184521_h_2_4.jpg HTTP/1

13-63-0/0/16342899.
0.0029856111526959650.00.00189611.86
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12949663.
0.0029818010529102040.00.00150704.17
162.158.154.18http/1.1kanbisai8.com:80GET /update/data.txt?t=61200 HTTP/1.1

15-63-0/0/7072131.
0.0011086508858608100.00.0083365.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

16-63-0/0/4591640.
0.0011085107875761670.00.0054472.29
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3689262.
0.0011085907362807310.00.0043840.49
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3061140.
0.0011086207000576400.00.0036457.99
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

19-63-0/0/2649516.
0.00110830186713687060.00.0031471.03
172.70.230.66http/1.1letajmahal-restaurant.com:80GET /wp-content/themes/newses/style.css HTTP/1.1

20-63-0/0/2433037.
0.0011085206537309590.00.0028993.80
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2210384.
0.0011086106350030140.00.0026382.95
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

22-63-0/0/2029853.
0.0011086906181476760.00.0024197.97
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926838.
0.0011528906055764650.00.0022991.35
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1850781.
0.0011526405958297320.00.0022077.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800677.
0.0011532405869725390.00.0021468.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1753119.
0.0011533405800685900.00.0020908.74
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722725.
0.0011533605727969000.00.0020531.65
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

28-63-0/0/1673713.
0.0011525705657536370.00.0019976.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1647047.
0.0011526305607355620.00.0019641.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1511189.
0.0011529405487062340.00.0018015.20
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1247156.
0.0011533005270364790.00.0014897.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103961.
0.0011529305120379810.00.0013201.24
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017826.
0.0011528004994912080.00.0012181.16
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

34-63-0/0/946239.
0.0011530604878154780.00.0011301.52
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

35-63-0/0/891604.
0.0011525604803052850.00.0010659.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852387.
0.0011528704725242280.00.0010236.83
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822396.
0.0011534104638587270.00.009851.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/772125.
0.0011532504545946430.00.009251.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747980.
0.0011523604488161500.00.009004.25
172.70.114.5http/1.1911policeaidfoundation.org:80GET /lufix.php HTTP/1.1

40-63-0/0/721954.
0.0011532804425122870.00.008670.31
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709691.
0.0011532604368940770.00.008506.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/688111.
0.0011523514319643010.00.008242.36
162.158.155.179http/1.1aubergeetfermeauberge.com:80GET /robots.txt HTTP/1.1

43-63-0/0/670679.
0.0011532204266368310.00.008023.09
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

44-63-0/0/653203.
0.0011523504206881410.00.007818.05
172.70.114.229http/1.1kanbisai8.com:80GET /xml/kanbisai8qipao.xml HTTP/1.1

45-63-0/0/640172.
0.0011531904161570300.00.007667.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630959.
0.00115236104117499300.00.007533.23
172.70.111.49http/1.1flexexamples.com:80GET /5-sample-action-plan-templates/ HTTP/1.1

47-63-0/0/618688.
0.0011528104061064790.00.007381.32
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614439.
0.0011533804046151600.00.007359.40
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606936.
0.0011527704005831430.00.007267.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599073.
0.0011526503980890410.00.007187.02
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593211.
0.0011526703939355050.00.007117.19
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

52-63-0/0/591234.
0.00

Found on 2023-08-13 17:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e342104484460

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Monday, 09-Jan-2023 23:27:20 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  200 days 16 hours 40 minutes 30 seconds
Server load: 0.06 0.25 0.27
Total accesses: 1242752364 - Total Traffic: 13588.8 GB - Total Duration: 76612054630
CPU Usage: u400.18 s31665.7 cu4223170 cs965957 - 30.1% CPU load
71.7 requests/sec - 0.8 MB/second - 11.5 kB/request - 61.6471 ms/request
4 requests currently being processed, 0 idle workers
WCC....W........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6323182900/39/144685468W
0.070036394648060.00.201601146.50
162.158.63.49http/1.1plusooo.com:80GET /asian-markets-mixed-after-chinas-pledge-of-economic-suppor

1-6323182921/9/137324289C
0.0205353282055311.50.071517211.50
162.158.62.235http/1.1hanadama.biz:80GET / HTTP/1.1

2-6323182931/11/131969529C
0.020034472455280.80.041455553.75
162.158.63.135http/1.1hanadama.biz:80GET /s/2363e26373e21323e2430313/_/;/META-INF/maven/com.atlassia

3-63-0/0/124261486.
0.000533348451360.00.001371581.50
162.158.63.81http/1.1ltapersoonlijkeontwikkeling.comGET /feed/ HTTP/1.1

4-63-0/0/118116687.
0.000032251249520.00.001303541.13
162.158.62.28http/1.1weberdebate.com:80GET /school-board-considering-policy-change-regarding-controver

5-63-0/0/114623022.
0.000131480688320.00.001263795.25
162.158.62.246http/1.1freekuzen.com:80GET /author/jeremy-a-whitehair/ HTTP/1.1

6-63-0/0/110887737.
0.000030668934850.00.001222316.00
162.158.62.244http/1.1panasonic-nsk.com:80GET /kazuo-inamori-japanese-mogul-turned-buddhist-monk-dies-age

7-6323182910/25/85314800W
0.040026416590910.00.05957941.50
162.158.63.136http/1.1hanadama.biz:80GET /server-status HTTP/1.1

8-63-0/0/55907144.
0.0091421157882950.00.00639812.31
162.158.63.69http/1.1euronaid.net:80GET /category/fashion-designer/ HTTP/1.1

9-63-0/0/41319731.
0.0090117930540380.00.00473802.00
162.158.63.83http/1.1auction2525.com:80GET /robots.txt HTTP/1.1

10-63-0/0/29705377.
0.00149015236352520.00.00341973.72
162.158.63.5http/1.1twostringers.com:80GET /wp-content/themes/sahifa/fonts/BebasNeue/BebasNeue-webfont

11-63-0/0/20205029.
0.002887012967383770.00.00236356.53
162.158.62.242http/1.1wnctrout.com:80POST //xmlrpc.php HTTP/1.1

12-63-0/0/17384733.
0.0028871112052308370.00.00203165.41
162.158.62.10http/1.1huarachesshop.com:80GET /womens-sneaker-releases-for-spring-nike-yeezy/ HTTP/1.1

13-63-0/0/16153943.
0.002887811506866750.00.00188713.81
162.158.62.48http/1.1notdonetravelling.com:80GET /iowa-tourist-board-launches-redesigned-website-and-latest-

14-63-0/0/12775015.
0.002900010510563340.00.00149864.27
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7027819.
0.003944338851594540.00.0083151.75
162.158.62.228http/1.1raveweb.net:80GET /server-status HTTP/1.1

16-63-0/0/4581674.
0.0024608007872709130.00.0054422.62
162.158.63.61http/1.1cherokeeroadrunners.org:80GET /category/run-game/ HTTP/1.1

17-63-0/0/3683187.
0.0033723017360692640.00.0043809.20
162.158.63.55http/1.1isdepo.com:80GET /?q=Akaryak%C4%B1t%20%C4%B0stasyonlar%C4%B1%20Koordinat%C3%

18-63-0/0/3056468.
0.0033723006998742630.00.0036434.68
162.158.62.120http/1.1stanleybeautycare.com:80GET /walmart-expands-market-opportunities-for-indian-exporters-

19-63-0/0/2645476.
0.0033723036711896680.00.0031453.78
162.158.62.153http/1.1georgetownartgallery-sc.com:80GET /category/art-style/page/7/ HTTP/1.1

20-63-0/0/2429832.
0.0056083406535709760.00.0028976.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2206647.
0.0056082736348482520.00.0026365.72
162.158.198.104http/1.1

22-63-0/0/2026697.
0.0056082706179892640.00.0024183.99
162.158.62.99http/1.1kanbisai8.com:80GET /update/data.txt?t=82800 HTTP/1.1

23-63-0/0/1923948.
0.0056083606054426080.00.0022976.28
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1848858.
0.00138086655957112640.00.0022066.26
162.158.62.19http/1.1obotafumeiro.com:80GET /explore-utrecht-a-vibrant-and-colorful-city-and-a-true-dut

25-63-0/0/1798827.
0.00138086655868625500.00.0021460.72
162.158.63.85http/1.1serracb.org:80GET /truck-full-of-vibrators-and-lube-spills-all-over-the-highw

26-63-0/0/1751222.
0.00138086725799513130.00.0020900.29
162.158.62.221http/1.1obotafumeiro.com:80GET /ukrainian-greek-catholic-leader-details-churchs-response-t

27-63-0/0/1720696.
0.001380867105726982610.00.0020522.11
162.158.63.147http/1.1rematerialise.org:80GET /?s=static-wp-test HTTP/1.1

28-63-0/0/1672250.
0.001380867115656536240.00.0019970.00
162.158.62.139http/1.1myrumah.net:80GET /office-design-tips-top-trends-in-designing-flexible-forwar

29-63-0/0/1645053.
0.00138087405606197600.00.0019632.18
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1509155.
0.00140987115486022920.00.0018005.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1245934.
0.00140986105269518090.00.0014891.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103139.
0.00140986045119792830.00.0013197.62
162.158.63.61http/1.1ng2100.com:80GET /tech-review-miofive-dash-cam-can-tell-you-when-youre-a-foo

33-63-0/0/1017293.
0.00157869814994396380.00.0012179.03
162.158.63.162http/1.1dewindesigns.co.uk:80GET /over-15-modern-and-vintage-candlesticks-candelabras-and-ca

34-63-0/0/945617.
0.00157869964877598040.00.0011299.06
162.158.63.119http/1.12thewalls.com:80GET /circle-of-heroes-monument-in-battery-park-city-to-honor-es

35-63-0/0/890854.
0.00157871604802468700.00.0010657.27
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/851856.
0.00157869964724712320.00.0010234.90
162.158.62.245http/1.1nackte-frauen.info:80GET /elton-john-home-inside-the-singers-5-3million-la-mansion-h

37-63-0/0/821786.
0.00157870904638091610.00.009849.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/771631.
0.001578699154545476450.00.009249.36
162.158.62.229http/1.1raveweb.net:80GET /top-5-new-web-hosting-companies/ HTTP/1.1

39-63-0/0/747314.
0.001578698154487762620.00.009001.89
162.158.63.91http/1.1replicachristianlouboutinstore.GET /?s=static-wp-test HTTP/1.1

40-63-0/0/721352.
0.00157872604424722290.00.008668.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/708857.
0.00157871004368558290.00.008503.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/687493.
0.00157871504319240360.00.008239.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/669956.
0.00157869844265961660.00.008020.04
162.158.62.196http/1.1dianelent.com:80GET /everyone-needs-a-little-encouragement-news-sports-jobs/ HT

44-63-0/0/652520.
0.001578698154206574820.00.007815.42
162.158.62.227http/1.1english-daily.com:80GET /wp-content/themes/sahifa/js/ilightbox.packed.js HTTP/1.1

45-63-0/0/639337.
0.00157870104161256530.00.007664.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630194.
0.00157869814117226060.00.007530.68
162.158.62.53http/1.1freekuzen.com:80GET /what-do-you-need-to-know-about-home-improvement-loans/ HTT

47-63-0/0/617961.
0.00157871804060784250.00.007378.94
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/613973.
0.00

Found on 2023-01-09 23:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31922e3421922e3421185577d1

Apache Status

Apache Server Status for hanadama.biz (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Monday, 09-Jan-2023 23:27:20 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  200 days 16 hours 40 minutes 30 seconds
Server load: 0.06 0.25 0.27
Total accesses: 1242752346 - Total Traffic: 13588.8 GB - Total Duration: 76612054561
CPU Usage: u400.15 s31665.7 cu4223170 cs965957 - 30.1% CPU load
71.7 requests/sec - 0.8 MB/second - 11.5 kB/request - 61.6471 ms/request
4 requests currently being processed, 0 idle workers
CWW....C........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-6323182901/34/144685463C
0.070236394648020.80.191601146.50
162.158.62.234http/1.1hanadama.biz:80GET /info.php HTTP/1.1

1-6323182920/6/137324286W
0.010035328205170.00.031517211.38
162.158.63.136http/1.1hanadama.biz:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

2-6323182930/8/131969526W
0.010034472455050.00.011455553.75
162.158.62.234http/1.1hanadama.biz:80GET /server-status HTTP/1.1

3-63-0/0/124261486.
0.000533348451360.00.001371581.50
162.158.63.81http/1.1ltapersoonlijkeontwikkeling.comGET /feed/ HTTP/1.1

4-63-0/0/118116687.
0.000032251249520.00.001303541.13
162.158.62.28http/1.1weberdebate.com:80GET /school-board-considering-policy-change-regarding-controver

5-63-0/0/114623022.
0.000131480688320.00.001263795.25
162.158.62.246http/1.1freekuzen.com:80GET /author/jeremy-a-whitehair/ HTTP/1.1

6-63-0/0/110887737.
0.000030668934850.00.001222316.00
162.158.62.244http/1.1panasonic-nsk.com:80GET /kazuo-inamori-japanese-mogul-turned-buddhist-monk-dies-age

7-6323182911/18/85314793C
0.030026416590861.20.05957941.50
162.158.63.89http/1.1villageunderforest.com:80GET /snowmass-village-gets-a-bumper-crop-of-new-restaurants/ HT

8-63-0/0/55907144.
0.0091421157882950.00.00639812.31
162.158.63.69http/1.1euronaid.net:80GET /category/fashion-designer/ HTTP/1.1

9-63-0/0/41319731.
0.0090117930540380.00.00473802.00
162.158.63.83http/1.1auction2525.com:80GET /robots.txt HTTP/1.1

10-63-0/0/29705377.
0.00149015236352520.00.00341973.72
162.158.63.5http/1.1twostringers.com:80GET /wp-content/themes/sahifa/fonts/BebasNeue/BebasNeue-webfont

11-63-0/0/20205029.
0.002887012967383770.00.00236356.53
162.158.62.242http/1.1wnctrout.com:80POST //xmlrpc.php HTTP/1.1

12-63-0/0/17384733.
0.0028871112052308370.00.00203165.41
162.158.62.10http/1.1huarachesshop.com:80GET /womens-sneaker-releases-for-spring-nike-yeezy/ HTTP/1.1

13-63-0/0/16153943.
0.002887811506866750.00.00188713.81
162.158.62.48http/1.1notdonetravelling.com:80GET /iowa-tourist-board-launches-redesigned-website-and-latest-

14-63-0/0/12775015.
0.002900010510563340.00.00149864.27
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

15-63-0/0/7027819.
0.003944338851594540.00.0083151.75
162.158.62.228http/1.1raveweb.net:80GET /server-status HTTP/1.1

16-63-0/0/4581674.
0.0024608007872709130.00.0054422.62
162.158.63.61http/1.1cherokeeroadrunners.org:80GET /category/run-game/ HTTP/1.1

17-63-0/0/3683187.
0.0033723017360692640.00.0043809.20
162.158.63.55http/1.1isdepo.com:80GET /?q=Akaryak%C4%B1t%20%C4%B0stasyonlar%C4%B1%20Koordinat%C3%

18-63-0/0/3056468.
0.0033723006998742630.00.0036434.68
162.158.62.120http/1.1stanleybeautycare.com:80GET /walmart-expands-market-opportunities-for-indian-exporters-

19-63-0/0/2645476.
0.0033723036711896680.00.0031453.78
162.158.62.153http/1.1georgetownartgallery-sc.com:80GET /category/art-style/page/7/ HTTP/1.1

20-63-0/0/2429832.
0.0056083406535709760.00.0028976.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2206647.
0.0056082736348482520.00.0026365.72
162.158.198.104http/1.1

22-63-0/0/2026697.
0.0056082706179892640.00.0024183.99
162.158.62.99http/1.1kanbisai8.com:80GET /update/data.txt?t=82800 HTTP/1.1

23-63-0/0/1923948.
0.0056083606054426080.00.0022976.28
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

24-63-0/0/1848858.
0.00138086655957112640.00.0022066.26
162.158.62.19http/1.1obotafumeiro.com:80GET /explore-utrecht-a-vibrant-and-colorful-city-and-a-true-dut

25-63-0/0/1798827.
0.00138086655868625500.00.0021460.72
162.158.63.85http/1.1serracb.org:80GET /truck-full-of-vibrators-and-lube-spills-all-over-the-highw

26-63-0/0/1751222.
0.00138086725799513130.00.0020900.29
162.158.62.221http/1.1obotafumeiro.com:80GET /ukrainian-greek-catholic-leader-details-churchs-response-t

27-63-0/0/1720696.
0.001380867105726982610.00.0020522.11
162.158.63.147http/1.1rematerialise.org:80GET /?s=static-wp-test HTTP/1.1

28-63-0/0/1672250.
0.001380867115656536240.00.0019970.00
162.158.62.139http/1.1myrumah.net:80GET /office-design-tips-top-trends-in-designing-flexible-forwar

29-63-0/0/1645053.
0.00138087405606197600.00.0019632.18
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1509155.
0.00140987115486022920.00.0018005.50
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1245934.
0.00140986105269518090.00.0014891.96
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103139.
0.00140986045119792830.00.0013197.62
162.158.63.61http/1.1ng2100.com:80GET /tech-review-miofive-dash-cam-can-tell-you-when-youre-a-foo

33-63-0/0/1017293.
0.00157869814994396380.00.0012179.03
162.158.63.162http/1.1dewindesigns.co.uk:80GET /over-15-modern-and-vintage-candlesticks-candelabras-and-ca

34-63-0/0/945617.
0.00157869964877598040.00.0011299.06
162.158.63.119http/1.12thewalls.com:80GET /circle-of-heroes-monument-in-battery-park-city-to-honor-es

35-63-0/0/890854.
0.00157871604802468700.00.0010657.27
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/851856.
0.00157869964724712320.00.0010234.90
162.158.62.245http/1.1nackte-frauen.info:80GET /elton-john-home-inside-the-singers-5-3million-la-mansion-h

37-63-0/0/821786.
0.00157870904638091610.00.009849.17
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

38-63-0/0/771631.
0.001578699154545476450.00.009249.36
162.158.62.229http/1.1raveweb.net:80GET /top-5-new-web-hosting-companies/ HTTP/1.1

39-63-0/0/747314.
0.001578698154487762620.00.009001.89
162.158.63.91http/1.1replicachristianlouboutinstore.GET /?s=static-wp-test HTTP/1.1

40-63-0/0/721352.
0.00157872604424722290.00.008668.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/708857.
0.00157871004368558290.00.008503.00
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/687493.
0.00157871504319240360.00.008239.93
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

43-63-0/0/669956.
0.00157869844265961660.00.008020.04
162.158.62.196http/1.1dianelent.com:80GET /everyone-needs-a-little-encouragement-news-sports-jobs/ HT

44-63-0/0/652520.
0.001578698154206574820.00.007815.42
162.158.62.227http/1.1english-daily.com:80GET /wp-content/themes/sahifa/js/ilightbox.packed.js HTTP/1.1

45-63-0/0/639337.
0.00157870104161256530.00.007664.39
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

46-63-0/0/630194.
0.00157869814117226060.00.007530.68
162.158.62.53http/1.1freekuzen.com:80GET /what-do-you-need-to-know-about-home-improvement-loans/ HTT

47-63-0/0/617961.
0.00157871804060784250.00.007378.94
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/613973.
0.00157870

Found on 2023-01-09 23:27

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: cpcontacts.deckerxpl.online
Port: 443
URL: https://cpcontacts.deckerxpl.online

First seen 2024-04-16 20:03
Last seen 2024-04-19 00:52
Open for 2 days
- Fingerprint: b18befd9dd6536ad3355122c67e9daba7b7bb5fa5dbf78f35dbf78f35dbf78f3
```
{
  "token": "IGMMVHGASMWUYIA6480C62609C67",
  "api": "7LClWkwsOdlQbW6m"
}
```
  Found on 2024-04-19 00:52
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: deckerxpl.online
Port: 80
URL: http://deckerxpl.online

First seen 2024-04-16 20:03
Last seen 2024-04-19 00:52
Open for 2 days
- Fingerprint: b18befd9dd6536ad3355122c67e9daba7b7bb5fa5dbf78f35dbf78f35dbf78f3
```
{
  "token": "IGMMVHGASMWUYIA6480C62609C67",
  "api": "7LClWkwsOdlQbW6m"
}
```
  Found on 2024-04-19 00:52
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: cpanel.deckerxpl.online
Port: 80
URL: http://cpanel.deckerxpl.online

First seen 2024-04-16 20:03
Last seen 2024-04-19 00:52
Open for 2 days
- Fingerprint: b18befd9dd6536ad3355122c67e9daba7b7bb5fa5dbf78f35dbf78f35dbf78f3
```
{
  "token": "IGMMVHGASMWUYIA6480C62609C67",
  "api": "7LClWkwsOdlQbW6m"
}
```
  Found on 2024-04-19 00:52
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: www.deckerxpl.online
Port: 443
URL: https://www.deckerxpl.online

First seen 2024-04-16 20:03
Last seen 2024-04-19 00:41
Open for 2 days
- Fingerprint: b18befd9dd6536ad3355122c67e9daba7b7bb5fa5dbf78f35dbf78f35dbf78f3
```
{
  "token": "IGMMVHGASMWUYIA6480C62609C67",
  "api": "7LClWkwsOdlQbW6m"
}
```
  Found on 2024-04-19 00:41
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: www.deckerxpl.online
Port: 80
URL: http://www.deckerxpl.online

First seen 2024-04-16 20:03
Last seen 2024-04-19 00:41
Open for 2 days
- Fingerprint: b18befd9dd6536ad3355122c67e9daba7b7bb5fa5dbf78f35dbf78f35dbf78f3
```
{
  "token": "IGMMVHGASMWUYIA6480C62609C67",
  "api": "7LClWkwsOdlQbW6m"
}
```
  Found on 2024-04-19 00:41
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: deckerxpl.online
Port: 443
URL: https://deckerxpl.online

First seen 2024-04-16 20:03
Last seen 2024-04-19 00:18
Open for 2 days
- Fingerprint: b18befd9dd6536ad3355122c67e9daba7b7bb5fa5dbf78f35dbf78f35dbf78f3
```
{
  "token": "IGMMVHGASMWUYIA6480C62609C67",
  "api": "7LClWkwsOdlQbW6m"
}
```
  Found on 2024-04-19 00:18
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: mail.deckerxpl.online
Port: 443
URL: https://mail.deckerxpl.online

First seen 2024-04-16 20:03
Last seen 2024-04-18 22:12
Open for 2 days
- Fingerprint: b18befd9dd6536ad3355122c67e9daba7b7bb5fa5dbf78f35dbf78f35dbf78f3
```
{
  "token": "IGMMVHGASMWUYIA6480C62609C67",
  "api": "7LClWkwsOdlQbW6m"
}
```
  Found on 2024-04-18 22:12
Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: teffoo.top
Port: 8443
URL: https://teffoo.top:8443

First seen 2024-01-24 15:44
Last seen 2024-02-03 01:38
Open for 9 days

Fingerprint: b18befd9dd653682465ecd60465ecd60465ecd60465ecd60465ecd60465ecd60

{"inputs":{"image":[]},"response":[{"label":"BRITTANY SPANIEL","score":0.32286638021469116},{"label":"WELSH SPRINGER SPANIEL","score":0.31369057297706604},{"label":"IBIZAN HOUND","score":0.1869044005870819},{"label":"DOORMAT","score":0.02850545570254326},{"label":"BLENHEIM SPANIEL","score":0.027596965432167053}]}

Found on 2024-02-03 01:38

Fingerprint: b18befd9dd6536821d54a2611d54a2611d54a2611d54a2611d54a2611d54a261

{"inputs":{"image":[]},"response":[{"label":"SIAMESE CAT","score":0.48661330342292786},{"label":"WEASEL","score":0.21657535433769226},{"label":"LLAMA","score":0.0463416762650013},{"label":"SIBERIAN HUSKY","score":0.04229243844747543},{"label":"EGYPTIAN CAT","score":0.03711051866412163}]}

Found on 2024-01-24 15:44

Fingerprint: b18befd9dd653682ab6699f1ab6699f1ab6699f1ab6699f1ab6699f1ab6699f1

{"inputs":{"image":[]},"response":[{"label":"PERSIAN CAT","score":0.4944339990615845},{"label":"EGYPTIAN CAT","score":0.11436344683170319},{"label":"QUILT","score":0.04878699406981468},{"label":"TABBY","score":0.039064280688762665},{"label":"TELEVISION","score":0.021725477650761604}]}

Found on 2024-01-24 15:44

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 172.67.190.86
Domain: teffoo.top
Port: 443
URL: https://teffoo.top

First seen 2024-01-24 15:44
Last seen 2024-02-02 04:30
Open for 8 days

Fingerprint: b18befd9dd65368294fd8fe694fd8fe694fd8fe694fd8fe694fd8fe694fd8fe6

{"inputs":{"image":[]},"response":[{"label":"EGYPTIAN CAT","score":0.8666948080062866},{"label":"TABBY","score":0.10702736675739288},{"label":"TIGER CAT","score":0.014916475862264633},{"label":"LYNX","score":0.009109792299568653},{"label":"CROSSWORD PUZZLE","score":0.0005467700539156795}]}

Found on 2024-02-02 04:30

Fingerprint: b18befd9dd653682440fb4b6440fb4b6440fb4b6440fb4b6440fb4b6440fb4b6

{"inputs":{"image":[]},"response":[{"label":"EGYPTIAN CAT","score":0.3015744090080261},{"label":"TABBY","score":0.22004902362823486},{"label":"LYNX","score":0.2004203498363495},{"label":"TIGER CAT","score":0.07948455214500427},{"label":"PLASTIC BAG","score":0.031045321375131607}]}

Found on 2024-01-24 15:44

Fingerprint: b18befd9dd653682626ab7da626ab7da626ab7da626ab7da626ab7da626ab7da

{"inputs":{"image":[]},"response":[{"label":"PRINTER","score":0.8036010265350342},{"label":"SCREEN","score":0.08644147962331772},{"label":"TELEVISION","score":0.022130273282527924},{"label":"MOUSE","score":0.010921669192612171},{"label":"RADIO","score":0.009492783807218075}]}

Found on 2024-01-24 15:44

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: nfotevoutrathertown.tk
Port: 443
URL: https://nfotevoutrathertown.tk

First seen 2023-03-18 00:46
Last seen 2024-01-07 09:22
Open for 295 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2024-01-07 09:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: nfotevoutrathertown.tk
Port: 80
URL: http://nfotevoutrathertown.tk

First seen 2023-03-18 00:46
Last seen 2024-01-07 02:06
Open for 295 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2024-01-07 02:06
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: rounolurpaynen.tk
Port: 80
URL: http://rounolurpaynen.tk

First seen 2022-08-31 07:49
Last seen 2023-12-24 04:40
Open for 479 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-24 04:40
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: vauscoubnoscourtscatta.tk
Port: 80
URL: http://vauscoubnoscourtscatta.tk

First seen 2022-10-09 02:57
Last seen 2023-12-24 04:17
Open for 441 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-24 04:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: toicumsfaldara.cf
Port: 443
URL: https://toicumsfaldara.cf

First seen 2022-12-13 02:37
Last seen 2023-12-24 03:12
Open for 376 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-24 03:12
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: lirandosokather.tk
Port: 80
URL: http://lirandosokather.tk

First seen 2023-02-14 18:33
Last seen 2023-12-24 01:09
Open for 312 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-24 01:09
Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 104.21.76.62
Domain: vnxnxx.com
Port: 443
URL: https://vnxnxx.com

First seen 2023-11-06 08:05
Last seen 2023-12-24 00:50
Open for 47 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111968a2e11968a2e37a9e86b

Apache Status

Apache Server Status for vnxnxx.com (via 139.99.61.27)

Server Version: Apache/2.4.54 (Unix) OpenSSL/1.1.1q PHP/7.4.30 mod_perl/2.0.12 Perl/v5.34.1
Server MPM: prefork
Server Built: Sep 25 2022 20:47:11

Current Time: Sunday, 24-Dec-2023 07:50:18 +07
Restart Time: Sunday, 24-Dec-2023 07:30:03 +07
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  20 minutes 15 seconds
Server load: 1.58 1.95 2.17
Total accesses: 167507 - Total Traffic: 465.9 MB - Total Duration: 6894990
CPU Usage: u2314.74 s189.66 cu0 cs0 - 206% CPU load
138 requests/sec - 392.7 kB/second - 2916 B/request - 41.1624 ms/request
3 requests currently being processed, 109 idle workers
_K_________W____________________________________________________
__________________________________________W_____................
................................................................
................................................................
................................................................
................................................................
................................................................
....................................................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-027051050/1515/1515_
22.40015596600.04.104.10
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

1-027051063/1515/1515K
23.0300547482.84.094.09
139.99.60.156http/1.1test.com:80GET /server-status?auto HTTP/1.1

2-027051070/1507/1507_
22.59011674270.04.174.17
139.99.60.156http/1.1giaodien3:2003GET /file/webfonts/fa-thin-100.ttf HTTP/1.0

3-027051080/1513/1513_
21.99013588320.03.993.99
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

4-027051090/1516/1516_
22.0700556590.04.244.24
139.99.60.156http/1.1localhost:82GET /?durf=10-20min&k=bigo%20live%20indonesia&p=148 HTTP/1.0

5-027051100/1516/1516_
22.91013573370.04.674.67
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

6-027051110/1514/1514_
22.61016552990.04.654.65
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

7-027051120/1514/1514_
22.91016581910.04.634.63
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

8-027051130/1516/1516_
22.62015554840.03.983.98
139.99.60.156http/1.1giaodien8:2008POST /ajax.php HTTP/1.0

9-027051140/1512/1512_
22.10013628990.04.064.06
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

10-027051150/1503/1503_
23.29047736480.04.644.64
139.99.60.156http/1.1giaodien4:2004GET /search/l%E1%BB%97+nh%E1%BB%8B HTTP/1.0

11-027051160/1508/1508W
22.7300647100.04.744.74
139.99.60.156http/1.1giaodien2:2002GET /dien-vien/hayama-miku HTTP/1.0

12-027051170/1515/1515_
22.64013547680.04.154.15
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

13-027051180/1514/1514_
22.6500560720.04.174.17
139.99.60.156http/1.1localhost:8021GET /search/gold/fullhd/sexy+hot+ass HTTP/1.0

14-027051190/1515/1515_
22.57014558260.04.224.22
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

15-027051200/1454/1454_
20.26013487020.03.603.60
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

16-027051210/1513/1513_
22.87012577810.04.104.10
139.99.60.156http/1.1giaodien3:2003GET /file/webfonts/fa-thin-100.woff HTTP/1.0

17-027051220/1510/1510_
22.85015631880.04.064.06
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

18-027051230/1512/1512_
22.6601584870.04.474.47
139.99.60.156http/1.1localhost:86GET /search/%E8%BA%AB%E6%9D%90%E7%89%B9%E5%AE%8C%E7%BE%8E%E7%9A

19-027051240/1516/1516_
22.96016542850.04.604.60
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

20-027051250/1514/1514_
22.78012568880.04.694.69
139.99.60.156http/1.1giaodien3:2003GET /file/webfonts/fa-thin-100.ttf HTTP/1.0

21-027051260/1515/1515_
23.11015554640.04.294.29
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

22-027051270/1509/1509_
22.49015644440.04.474.47
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

23-027051280/1509/1509_
22.85013642470.03.953.95
139.99.60.156http/1.1giaodien8:2008POST /ajax.php HTTP/1.0

24-027051290/1510/1510_
22.28098619550.04.094.09
139.99.60.156http/1.1giaodien14:2014GET /search/aobdai/6 HTTP/1.0

25-027051300/1512/1512_
22.11016593800.04.064.06
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

26-027051310/1516/1516_
22.44036540600.04.434.43
139.99.60.156http/1.1giaodien1:2001GET /video/2003/f1il-dap-em-nyc-nhu-may-khau HTTP/1.0

27-027051320/1516/1516_
22.46014542570.03.853.85
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

28-027051330/1511/1511_
22.76014605430.04.234.23
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

29-027051340/1491/1491_
20.70015544660.03.863.86
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

30-027051350/1495/1495_
21.30016547310.03.923.92
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

31-027051360/1510/1510_
22.86014646080.04.514.51
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

32-027051370/1512/1512_
22.93011608890.04.194.19
139.99.60.156http/1.1giaodien3:2003GET /file/webfonts/fa-thin-100.ttf HTTP/1.0

33-027051380/1514/1514_
22.57013545580.04.224.22
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

34-027051390/1515/1515_
23.42015554440.04.314.31
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

35-027051400/1512/1512_
22.96012591580.04.494.49
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

36-027051410/1515/1515_
22.61015553450.04.024.02
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

37-027051420/1505/1505_
23.49014688950.04.234.23
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

38-027051430/1514/1514_
22.41013574840.03.743.74
139.99.60.156http/1.1giaodien3:2003GET /file/webfonts/fa-thin-100.woff2 HTTP/1.0

39-027051440/1514/1514_
22.22013560640.03.843.84
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

40-027051450/1509/1509_
23.25013631930.04.364.36
139.99.60.156http/1.1giaodien1:2001POST /ajax.php HTTP/1.0

41-027051460/1508/1508_
22.74014663070.04.344.34
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

42-027051470/1510/1510_
22.61041603710.04.404.40
139.99.60.156http/1.1giaodien14:2014GET /watch/999/klsp-cau-con-trai-phat-hien-bo-ngoai-tinh-voi-co

43-027051480/1514/1514_
22.3801560040.04.494.49
139.99.60.156http/1.1localhost:82GET /video15700559/doctor_assists_with_hymen_examination_and_de

44-027051490/1511/1511_
22.78020585810.04.004.00
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

45-027051500/1515/1515_
22.73015552320.03.983.98
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

46-027051510/1512/1512_
22.30013607290.03.973.97
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

47-027051520/1496/1496_
20.75013553250.03.793.79
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

48-027051530/1517/1517_
22.59015517680.04.164.16
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

49-027051540/1498/1498_
21.17013498720.03.943.94
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

50-027051550/1502/1502_
22.82

Found on 2023-12-24 00:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a00cec58a00cec580419a011

Apache Status

Apache Server Status for vnxnxx.com (via 51.79.240.25)

Server Version: Apache/2.4.48 (Unix) OpenSSL/1.1.1k PHP/7.4.22 mod_perl/2.0.11 Perl/v5.32.1
Server MPM: prefork
Server Built: Jul 30 2021 08:42:11

Current Time: Monday, 11-Dec-2023 21:46:17 +07
Restart Time: Monday, 11-Dec-2023 21:45:03 +07
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 minute 14 seconds
Server load: 1.23 1.40 1.50
Total accesses: 8685 - Total Traffic: 32.1 MB - Total Duration: 1131707
CPU Usage: u97.03 s6.5 cu45.18 cs3.25 - 205% CPU load
117 requests/sec - 444.7 kB/second - 3880 B/request - 130.306 ms/request
10 requests currently being processed, 8 idle workers
_W_._W__WW_WW_WWWW_.............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0159820/182/478_
3.28019691650.00.721.88
139.99.60.156http/1.1giaodien10:2010POST /ajax.php HTTP/1.0

1-0159620/546/546W
9.5400843270.01.961.96
139.99.60.156http/1.1giaodien1:2001GET /tags/m:3month/q:1080p/se-la-traga HTTP/1.0

2-0159830/196/550_
3.41031709410.00.542.36
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

3-0-0/0/688.
0.0000692120.00.002.48
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

4-0159650/653/653_
11.45024729690.02.412.41
139.99.60.156http/1.1giaodien1:2001POST /ajax.php HTTP/1.0

5-0159770/383/435W
6.7000871970.01.421.66
139.99.60.156http/1.1giaodien2:2002GET /search/du+ban+than+toan+nuoc/35 HTTP/1.0

6-0159790/318/472_
5.58017665530.01.321.83
139.99.60.156http/1.1giaodien2:2002POST /ajax.php HTTP/1.0

7-0159680/572/572_
9.99025759780.02.202.20
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

8-0160090/87/468W
1.6100703100.00.291.65
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

9-0160100/17/412W
0.3110427420.00.081.94
139.99.60.156http/1.1xnxx.com:8004GET /video-ushuz78/teen_group HTTP/1.0

10-0159710/427/427_
7.63021854640.01.701.70
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

11-0159780/463/470W
8.0200562810.01.791.82
139.99.60.156http/1.1xnxx.com:8003GET /video-1a0n7led/THUMBNUM/i_asked_a_stranger_to_film_me_on_t

12-0159730/557/557W
9.7400708230.01.951.95
139.99.60.156http/1.1xnxx.com:8003GET /search/ilovechristinafox HTTP/1.0

13-0159740/631/631_
10.78019595570.01.901.90
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

14-0159750/571/571W
9.9000640820.01.831.83
139.99.60.156http/1.1brazzers.com:8005GET /c/s:uploaddate/d:1-3min/q:1080P/Pornstar-57 HTTP/1.0

15-0160110/16/417W
0.2800463650.00.031.43
139.99.60.156http/1.1xnxx.com:8003GET /video-230xt96/uncensored_japanese_erotic_fetish_sex_-_les_

16-0159810/270/308W
4.7500379300.00.901.00
139.99.60.156http/1.1giaodien1:2001GET /server-status HTTP/1.0

17-0160120/23/23W
0.390015350.00.110.11
139.99.60.156http/1.1giaodien4:2004GET /search/lam+them/1 HTTP/1.0

18-0160130/7/7_
0.100212670.00.010.01
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss

Found on 2023-12-11 14:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b3d97a10b3d97a1073bffa10

Apache Status

Apache Server Status for vnxnxx.com (via 51.79.242.188)

Server Version: Apache/2.4.48 (Unix) OpenSSL/1.1.1k PHP/7.4.22 mod_perl/2.0.11 Perl/v5.32.1
Server MPM: prefork
Server Built: Jul 30 2021 08:42:11

Current Time: Friday, 17-Nov-2023 03:27:37 +07
Restart Time: Tuesday, 07-Nov-2023 18:08:11 +07
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 9 hours 19 minutes 25 seconds
Server load: 0.24 0.37 0.45
Total accesses: 45961097 - Total Traffic: 293.8 GB - Total Duration: 9530745253
CPU Usage: u105.79 s141.59 cu622047 cs46478.5 - 82.4% CPU load
56.7 requests/sec - 379.8 kB/second - 6.7 kB/request - 207.365 ms/request
5 requests currently being processed, 7 idle workers
_WWW____.__W.W..................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-06410/150/3375128_
2.340685683190120.01.7522161.43
139.99.60.156http/1.1giaodien6:2006GET /clip/dat-camera-gia-vo-goi-dien-bat-qua-tang-vo-dit-cung-t

1-0124790/403/1083416W
5.9350034902393355080.04.218132.40
139.99.60.156http/1.1xnxx.com:8004GET /video-16u7d4b7/9/seductive_babes_jenna_foxx_and_sky_blue_p

2-06270/500/3366389W
7.33005656038300.04.3722075.05
139.99.60.156http/1.1sexapi.xyz:8002GET /play/sv2/video/MTcyMg== HTTP/1.0

3-06390/303/3338777W
4.48005606387160.02.1921903.09
139.99.60.156http/1.1brazzers.com:8007GET /?durf=10-20min&k=fuck&p=7&sort=views HTTP/1.0

4-06230/583/3309696_
8.71015577431920.04.4621750.90
139.99.60.156http/1.1sexapi.xyz:8002POST /ajax.php HTTP/1.0

5-06300/465/3267038_
6.80015497840330.03.7821438.70
139.99.60.156http/1.1sexapi.xyz:8002POST /ajax.php HTTP/1.0

6-06320/356/3236195_
5.410205446618190.02.9721252.21
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

7-06480/47/3173047_
0.690245360482490.00.2120888.07
139.99.60.156http/1.1giaodien13:2013POST /ajax.php HTTP/1.0

8-0-0/0/3123286.
0.004205290132250.00.0020552.32
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

9-04410/2458/3066984_
37.2102545184913360.022.9620180.13
139.99.60.156http/1.1giaodien6:2006GET /search/ado+kurata HTTP/1.0

10-05860/1129/2969786_
16.610174997723320.09.1719485.67
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

11-06450/208/2811470W
3.05004744630550.01.1718415.46
139.99.60.156http/1.1giaodien1:2001GET /server-status HTTP/1.0

12-0-0/0/2609945.
0.004604413695500.00.0017102.78
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

13-06120/664/2249141W
9.96003832050740.05.4914674.94
139.99.60.156http/1.1xnxx.com:8003GET /video-tqtgjd6/vr_4k_two_horny_lesbians_play_with_each_othe

14-0-0/0/1702223.
0.0016502894305750.00.0010877.46
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

15-0-0/0/976138.
0.0015301740523090.00.006098.24
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

16-0-0/0/532145.
0.00124201032752860.00.003279.68
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

17-0-0/0/308166.
0.0026420696354940.00.001921.85
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

18-0-0/0/233219.
0.0064620521431480.00.001391.41
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

19-0-0/0/145518.
0.0065660391566180.00.00895.70
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

20-0-0/0/89524.
0.0068320292411410.00.00556.28
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

21-0-0/0/87388.
0.0068450255338440.00.00512.30
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

22-0-0/0/51978.
0.0068870200670000.00.00294.81
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

23-0-0/0/46130.
0.0086910176126360.00.00264.26
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

24-0-0/0/45679.
0.0083920167176600.00.00252.20
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

25-0-0/0/37362.
0.0088450158616810.00.00226.00
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

26-0-0/0/30474.
0.0088440145492170.00.00174.57
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

27-0-0/0/18736.
0.0087240125226180.00.00111.96
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

28-0-0/0/24388.
0.0088360137282770.00.00144.67
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

29-0-0/0/29448.
0.0085490141159030.00.00180.46
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

30-0-0/0/13931.
0.00124410116999790.00.0085.53
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

31-0-0/0/24759.
0.00124380127438080.00.00135.09
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

32-0-0/0/13407.
0.00124320107433390.00.0071.28
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

33-0-0/0/13610.
0.00121560106082090.00.0079.12
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

34-0-0/0/23444.
0.00123290122289950.00.00122.78
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

35-0-0/0/9066.
0.0012421099927160.00.0056.37
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

36-0-0/0/12642.
0.00124290107613910.00.0073.40
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

37-0-0/0/18205.
0.00124130109778650.00.00110.95
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

38-0-0/0/10242.
0.00124180102026560.00.0062.98
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

39-0-0/0/12597.
0.001244028102067400.00.0069.56
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

40-0-0/0/10642.
0.0012384097219580.00.0058.90
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

41-0-0/0/9160.
0.0012443099124950.00.0053.05
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

42-0-0/0/13474.
0.00124371102838980.00.0071.07
139.99.60.156http/1.1sexapi.xyz:8002POST /ajax.php HTTP/1.0

43-0-0/0/11455.
0.0012425097645650.00.0061.79
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

44-0-0/0/5715.
0.0016033094665880.00.0038.48
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

45-0-0/0/8200.
0.001870130103708800.00.0055.06
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

46-0-0/0/5162.
0.00187035093781730.00.0031.46
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

47-0-0/0/4372.
0.00187011090059710.00.0028.53
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

48-0-0/0/4420.
0.00187005089021430.00.0027.46
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

49-0-0/0/4423.
0.00186947090001770.00.0026.31
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

50-0-0/0/3743.
0.00187037087245010.00.0023.40
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

51-0-0/0/3423.
0.00187043085180840.00.0022.17
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

52-0-0/0/5224.
0.00187020092850130.00.0031.97
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

53-0-0/0/3391.
0.00187046088374590.00.0021.35
::1http/1.1

Found on 2023-11-16 20:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310c9abad70c9abad732f71cfa

Apache Status

Apache Server Status for vnxnxx.com (via 15.235.187.178)

Server Version: Apache/2.4.54 (Unix) OpenSSL/1.1.1q PHP/7.4.30 mod_perl/2.0.12 Perl/v5.34.1
Server MPM: prefork
Server Built: Sep 25 2022 20:47:11

Current Time: Monday, 06-Nov-2023 08:05:16 UTC
Restart Time: Monday, 06-Nov-2023 08:00:02 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 minutes 14 seconds
Server load: 0.27 0.40 0.47
Total accesses: 11287 - Total Traffic: 42.6 MB - Total Duration: 2149802
CPU Usage: u65.27 s5.81 cu93.02 cs8.51 - 55% CPU load
35.9 requests/sec - 138.9 kB/second - 3955 B/request - 190.467 ms/request
3 requests currently being processed, 9 idle workers
___W___WW___....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0147990/448/932_
6.710571596730.01.543.36
54.161.105.202http/1.1

1-0147380/1015/1015_
15.500181902120.03.863.86
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

2-0147510/801/972_
12.020281977120.02.893.50
139.99.60.156http/1.1giaodien14:2014POST /ajax.php HTTP/1.0

3-0147660/780/934W
11.91001751240.03.133.80
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

4-0148020/310/816_
4.8102201599930.01.353.37
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

5-0148040/255/885_
3.800171714600.00.903.24
139.99.60.156http/1.1giaodien4:2004POST /ajax.php HTTP/1.0

6-0148350/146/675_
2.2001871346060.00.652.51
54.161.105.202http/1.1

7-0148360/60/973W
0.95001899730.00.303.61
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

8-0148330/202/632W
2.99001211120.00.782.35
139.99.60.156http/1.1giaodien1:2001GET /server-status HTTP/1.0

9-0148340/172/904_
2.610191777600.00.693.50
139.99.60.156http/1.1giaodien10:2010POST /ajax.php HTTP/1.0

10-0147980/473/894_
7.010191597800.01.653.26
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

11-0148370/34/618_
0.490191124230.00.132.35
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

12-0-0/0/179.
0.002200374690.00.000.66
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

13-0-0/0/858.
0.00301624980.00.003.22
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 8subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 291 seconds, (range: 288...295)index usage: 0%, cache usage: 0%total entries stored since starting: 8total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 6 misstotal removes since starting: 0 hit, 0 miss

Found on 2023-11-06 08:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb310c9abad70c9abad73f9b7c60

Apache Status

Apache Server Status for vnxnxx.com (via 15.235.187.178)

Server Version: Apache/2.4.54 (Unix) OpenSSL/1.1.1q PHP/7.4.30 mod_perl/2.0.12 Perl/v5.34.1
Server MPM: prefork
Server Built: Sep 25 2022 20:47:11

Current Time: Monday, 06-Nov-2023 08:05:10 UTC
Restart Time: Monday, 06-Nov-2023 08:00:02 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 minutes 7 seconds
Server load: 0.30 0.40 0.47
Total accesses: 11068 - Total Traffic: 41.8 MB - Total Duration: 2108730
CPU Usage: u74.39 s6.71 cu80.97 cs7.36 - 55.2% CPU load
36.1 requests/sec - 139.5 kB/second - 3962 B/request - 190.525 ms/request
7 requests currently being processed, 6 idle workers
_WW_W___RWW_.W..................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0147990/429/913_
6.440191567840.01.473.29
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

1-0147380/997/997W
15.23001859570.03.813.81
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

2-0147510/783/954W
11.77001939840.02.833.44
139.99.60.156http/1.1giaodien1:2001GET /server-status HTTP/1.0

3-0147660/764/918_
11.670341724970.03.063.73
139.99.60.156http/1.1direct.com:8002GET /search/erina+shirase/83 HTTP/1.0

4-0148020/291/797W
4.55001564760.01.283.31
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

5-0148040/240/870_
3.590161686090.00.863.20
139.99.60.156http/1.1giaodien10:2010POST /ajax.php HTTP/1.0

6-0148350/126/655_
1.910191313540.00.552.40
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

7-0148360/43/956_
0.6702751857590.00.243.55
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

8-0148330/185/615R
2.775171185810.00.742.31
54.161.105.202http/1.1

9-0148340/157/889W
2.38001734580.00.643.45
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0

10-0147980/453/874W
6.73001575130.01.593.19
139.99.60.156http/1.1giaodien8:2008POST /ajax.php HTTP/1.0

11-0148370/15/599_
0.200231087030.00.052.28
139.99.60.156http/1.1giaodien3:2003POST /ajax.php HTTP/1.0

12-0-0/0/179.
0.002140374690.00.000.66
::1http/1.1giaodien20:2020OPTIONS * HTTP/1.0

13-0147500/852/852W
13.11001615790.03.213.21
139.99.60.156http/1.1giaodien6:2006POST /ajax.php HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 4subcaches: 32, indexes per subcache: 88time left on oldest entries' objects: avg: 294 seconds, (range: 294...295)index usage: 0%, cache usage: 0%total entries stored since starting: 4total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 6 misstotal removes since starting: 0 hit, 0 miss

Found on 2023-11-06 08:05

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: spirmanturegpated.tk
Port: 80
URL: http://spirmanturegpated.tk

First seen 2022-08-31 09:54
Last seen 2023-12-23 23:57
Open for 479 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-23 23:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: sursepame.tk
Port: 80
URL: http://sursepame.tk

First seen 2023-01-10 12:30
Last seen 2023-12-23 20:46
Open for 347 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-23 20:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: sursepame.tk
Port: 443
URL: https://sursepame.tk

First seen 2023-01-10 12:30
Last seen 2023-12-23 20:46
Open for 347 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-23 20:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: panrilare.gq
Port: 443
URL: https://panrilare.gq

First seen 2022-11-12 13:48
Last seen 2023-12-23 20:46
Open for 406 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2023-12-23 20:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: mail.vipramanager.online
Port: 80
URL: http://mail.vipramanager.online

First seen 2023-11-02 10:09
Last seen 2023-12-11 23:21
Open for 39 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcff5cd47929debc69212f7a5c0e7b08473
```
Found 25 files trough .DS_Store spidering:

/.htaccess
/css
/download-percentage.txt
/images
/images/beep.wav
/images/brand.png
/images/category.png
/images/expense.png
/images/lang.png
/images/login_background.svg
/images/order.png
/images/product.png
/images/sample_staff_members.csv
/images/sample_translations.csv
/images/user.png
/images/verify_purchase_background.svg
/images/warehouse.png
/images/warehouse_dark.png
/index.php
/installer
/js
/mix-manifest.json
/robots.txt
/uploads
/version.txt
```
  Found on 2023-12-11 23:21
Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: ultracoins.fun
Port: 443
URL: https://ultracoins.fun

First seen 2023-06-05 18:32
Last seen 2023-10-10 23:48
Open for 127 days

Fingerprint: b18befd9dd6536aa30550de58887709e81fd8f1c765cc5c28f21a21a3aca3e40

{
  "source": "https://ultracoins.fun",
  "sub_id_6": "lexus",
  "sub_id_8": "crabs",
  "main_page": "index.html",
  "white_page": "",
  "offer_page": "https://kt.traffer.su/{company_id}?utm_term={keyword}&utm_creative={creative}&utm_campaign={campaignid}&utm_position={adposition}&utm_network={network}&utm_target={target}&sub_id_4={}&sub_id_6={sub_id_6}&subid={subid}&sub_id_8={sub_id_8}&source={source}&sub_id_1={sub_id_1}",
  "company_id": "cBdt9P",
  "sid": "",
  "adspect_action": false,
  "sub_id_1": "",
  "debug_mode": false,
  "stealth": true,
  "allow_geo": "PL",
  "block_geo": "",
  "utm": true,
  "offer_method": "302",
  "white_method": "302",
  "no_ref": true,
  "white_ref": "google",
  "block_apple": false,
  "block_android": false,
  "block_win": false,
  "block_mobile": false,
  "block_desktop": false,
  "allow_vpn": false,
  "delay_start": "0",
  "delay_permanent": false,
  "paranoid": false,
  "disable_cache": true,
  "disable_cloak": false,
  "tg_channel": "",
  "last_generation": 1681047342337
}

Found on 2023-10-10 23:48

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tewigsca.cf
Port: 443
URL: https://tewigsca.cf

First seen 2022-10-25 02:13
Last seen 2023-09-07 02:25
Open for 317 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-25 02:13
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: phivisevensdresfo.tk
Port: 443
URL: https://phivisevensdresfo.tk

First seen 2022-10-30 01:24
Last seen 2023-09-05 15:35
Open for 310 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-30 01:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: viaterfhertter.tk
Port: 80
URL: http://viaterfhertter.tk

First seen 2023-06-12 04:08
Last seen 2023-09-04 17:39
Open for 84 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-12 04:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: maubarly.gq
Port: 443
URL: https://maubarly.gq

First seen 2022-10-14 02:10
Last seen 2023-09-03 04:36
Open for 324 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-14 02:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: nixcitabhongtur.tk
Port: 443
URL: https://nixcitabhongtur.tk

First seen 2022-10-20 01:19
Last seen 2023-08-30 21:25
Open for 314 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-20 01:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: nuphininalne.cf
Port: 443
URL: https://nuphininalne.cf

First seen 2023-01-06 03:25
Last seen 2023-08-30 12:44
Open for 236 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-01-06 03:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: fesabopensalo.tk
Port: 443
URL: https://fesabopensalo.tk

First seen 2022-12-28 02:24
Last seen 2023-08-29 10:52
Open for 244 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-12-28 02:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: fesabopensalo.tk
Port: 80
URL: http://fesabopensalo.tk

First seen 2022-12-28 02:24
Last seen 2023-08-29 10:52
Open for 244 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-12-28 02:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: opennantecztes.cf
Port: 443
URL: https://opennantecztes.cf

First seen 2022-09-28 13:58
Last seen 2023-08-29 04:00
Open for 334 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-28 13:58
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: letsvertca.tk
Port: 443
URL: https://letsvertca.tk

First seen 2022-09-06 01:21
Last seen 2023-08-26 22:19
Open for 354 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-06 01:21
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: cucentve.gq
Port: 80
URL: http://cucentve.gq

First seen 2023-06-28 04:44
Last seen 2023-08-26 06:57
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-28 04:44
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: cucentve.gq
Port: 443
URL: https://cucentve.gq

First seen 2023-06-28 04:44
Last seen 2023-08-26 06:57
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-28 04:44
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: lipusca.tk
Port: 80
URL: http://lipusca.tk

First seen 2023-06-27 03:45
Last seen 2023-08-25 06:30
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-27 03:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: lipusca.tk
Port: 443
URL: https://lipusca.tk

First seen 2023-06-27 03:45
Last seen 2023-08-25 06:30
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-27 03:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: subsfanfeitikingle.tk
Port: 443
URL: https://subsfanfeitikingle.tk

First seen 2023-06-27 03:10
Last seen 2023-08-25 05:10
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-27 03:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: placfolksadebom.tk
Port: 80
URL: http://placfolksadebom.tk

First seen 2022-12-17 05:55
Last seen 2023-08-22 14:31
Open for 248 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-12-17 05:55
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tangedici.tk
Port: 80
URL: http://tangedici.tk

First seen 2022-12-26 02:46
Last seen 2023-08-19 14:27
Open for 236 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-12-26 02:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: lacksubsomomag.tk
Port: 80
URL: http://lacksubsomomag.tk

First seen 2023-02-20 05:41
Last seen 2023-08-16 15:18
Open for 177 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-02-20 05:41
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: siowalbuyzubour.tk
Port: 443
URL: https://siowalbuyzubour.tk

First seen 2023-06-13 02:24
Last seen 2023-08-11 03:42
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-13 02:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: weimarare.tk
Port: 80
URL: http://weimarare.tk

First seen 2023-06-11 05:52
Last seen 2023-08-10 18:10
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-11 05:52
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: imencerith.tk
Port: 443
URL: https://imencerith.tk

First seen 2023-06-12 02:11
Last seen 2023-08-10 03:48
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-06-12 02:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: waltiobamarta.tk
Port: 80
URL: http://waltiobamarta.tk

First seen 2022-12-14 15:27
Last seen 2023-08-07 21:36
Open for 236 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-12-14 15:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: stardenbuchilddenvi.tk
Port: 443
URL: https://stardenbuchilddenvi.tk

First seen 2022-09-01 04:07
Last seen 2023-08-02 06:05
Open for 335 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-01 04:07
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tangmipohaper.tk
Port: 443
URL: https://tangmipohaper.tk

First seen 2022-08-30 14:06
Last seen 2023-07-31 06:08
Open for 334 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-30 14:06
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tangmipohaper.tk
Port: 80
URL: http://tangmipohaper.tk

First seen 2022-08-30 14:06
Last seen 2023-07-31 06:08
Open for 334 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-30 14:06
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tainoamist.tk
Port: 443
URL: https://tainoamist.tk

First seen 2022-10-14 01:52
Last seen 2023-07-30 21:29
Open for 289 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-14 01:52
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tainoamist.tk
Port: 80
URL: http://tainoamist.tk

First seen 2022-10-14 01:52
Last seen 2023-07-30 21:29
Open for 289 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-14 01:52
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: agargun.tk
Port: 443
URL: https://agargun.tk

First seen 2022-11-02 02:16
Last seen 2023-07-28 19:03
Open for 268 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-11-02 02:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: agargun.tk
Port: 80
URL: http://agargun.tk

First seen 2022-11-02 02:16
Last seen 2023-07-28 19:03
Open for 268 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-11-02 02:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: outinafanru.cf
Port: 80
URL: http://outinafanru.cf

First seen 2023-05-30 07:57
Last seen 2023-07-28 08:10
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-05-30 07:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: veijuibelafintie.cf
Port: 80
URL: http://veijuibelafintie.cf

First seen 2022-09-12 04:23
Last seen 2023-07-24 18:00
Open for 315 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-12 04:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: cesssubackciness.gq
Port: 80
URL: http://cesssubackciness.gq

First seen 2023-07-21 09:49
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-07-21 09:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: cesssubackciness.gq
Port: 443
URL: https://cesssubackciness.gq

First seen 2023-07-21 09:49
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-07-21 09:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: quilighvenkadenba.cf
Port: 443
URL: https://quilighvenkadenba.cf

First seen 2023-05-23 15:07
Last seen 2023-07-21 04:48
Open for 58 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-05-23 15:07
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: duquhoo.fun
Port: 443
URL: https://duquhoo.fun

First seen 2023-03-20 08:45
Last seen 2023-07-16 17:53
Open for 118 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab44393d1d64f30c460ed3db3372a0a13e
```
Found 7 files trough .DS_Store spidering:

/.idea
/b_assets
/b_assets/css
/b_assets/fassets
/b_assets/fassets/form_js
/b_assets/fassets/img
/b_assets/img
```
  Found on 2023-07-16 17:53
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc93c5a0a5b053eeff90012c2f652dddb2
```
Found 4 files trough .DS_Store spidering:

/b_assets
/b_assets/urotonus_one
/b_assets/urotonus_one/dok_prost
/b_assets/urotonus_one/dok_prost/index_files
```
  Found on 2023-03-20 08:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: anprotsumosam.tk
Port: 443
URL: https://anprotsumosam.tk

First seen 2022-10-19 04:36
Last seen 2023-07-12 01:15
Open for 265 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-19 04:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: guifascadi.gq
Port: 443
URL: https://guifascadi.gq

First seen 2022-10-14 01:41
Last seen 2023-07-05 08:08
Open for 264 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-14 01:41
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tocehuver.ml
Port: 80
URL: http://tocehuver.ml

First seen 2022-09-11 18:08
Last seen 2023-07-03 18:30
Open for 295 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-11 18:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: putbacksacacoco.tk
Port: 443
URL: https://putbacksacacoco.tk

First seen 2022-09-28 20:43
Last seen 2023-07-03 10:27
Open for 277 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-28 20:43
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: elecexjun.ml
Port: 443
URL: https://elecexjun.ml

First seen 2022-09-10 05:45
Last seen 2023-07-02 14:39
Open for 295 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-10 05:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: nvesgibgiggvensbuci.ga
Port: 443
URL: https://nvesgibgiggvensbuci.ga

First seen 2023-05-25 05:19
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-05-25 05:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: nvesgibgiggvensbuci.ga
Port: 80
URL: http://nvesgibgiggvensbuci.ga

First seen 2023-05-25 05:19
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-05-25 05:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: catencosu.ml
Port: 443
URL: https://catencosu.ml

First seen 2023-05-25 04:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-05-25 04:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: gamartotinesda.ga
Port: 80
URL: http://gamartotinesda.ga

First seen 2023-05-24 06:08
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-05-24 06:08
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: rossnito.ml
Port: 80
URL: http://rossnito.ml

First seen 2023-05-24 05:39
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2023-05-24 05:39
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.21.76.62
Domain: pcgamestuff.com
Port: 443
URL: https://pcgamestuff.com

First seen 2023-03-28 08:53
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652284bd90e8
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:trangthancb/VPS-Client-Cloaking-Links--v2.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[pull]
	rebase = true
```
  Found on 2023-03-28 08:53
  
  303 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.21.76.62
Domain: pcgamestuff.com
Port: 80
URL: http://pcgamestuff.com

First seen 2023-03-28 08:53
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652284bd90e8
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:trangthancb/VPS-Client-Cloaking-Links--v2.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[pull]
	rebase = true
```
  Found on 2023-03-28 08:53
  
  303 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: rudersthoconpickco.cf
Port: 443
URL: https://rudersthoconpickco.cf

First seen 2022-09-25 22:31
Last seen 2023-03-26 14:13
Open for 181 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-25 22:31
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: rudersthoconpickco.cf
Port: 80
URL: http://rudersthoconpickco.cf

First seen 2022-09-25 22:31
Last seen 2023-03-26 14:13
Open for 181 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-25 22:31
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: luniversdemarie.com
Port: 443
URL: https://luniversdemarie.com

First seen 2023-02-28 01:38
Last seen 2023-03-08 04:07
Open for 8 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b78f6c255a5003be00c0a2544baf568b6d

Found 128 files trough .DS_Store spidering:

/Class
/Class/Blog.php
/Class/Commentaires.php
/Class/Currency.php
/Class/hCaptcha.php
/Class/Logs.php
/Class/Pages.php
/Class/SendInBlue.php
/Class/Site.php
/Class/SMS.php
/Class/Store_Commande.php
/Class/Store_Panier.php
/Class/Store_Produit.php
/Class/Stripe.php
/Class/Survey.php
/Class/User.php
/css
/documentation
/fonts
/HTML
/HTML/blog_classic_v1.html
/HTML/blog_classic_v2.html
/HTML/blog_grid_v1.html
/HTML/blog_grid_v2.html
/HTML/blog_masonry_v1.html
/HTML/blog_masonry_v2.html
/HTML/blog_single_v1.html
/HTML/blog_single_v2.html
/HTML/css
/HTML/elements_accordions_toggles.html
/HTML/elements_alert_boxes_buttons.html
/HTML/elements_banners.html
/HTML/elements_blog_posts.html
/HTML/elements_call_to_actions.html
/HTML/elements_counters_countdowns.html
/HTML/elements_dropcaps_blockquotes.html
/HTML/elements_gallery_grid.html
/HTML/elements_gallery_masonry.html
/HTML/elements_headings_and_paragraphs.html
/HTML/elements_highlights_tooltips_listings.html
/HTML/elements_icon_boxes.html
/HTML/elements_image_boxes.html
/HTML/elements_partners.html
/HTML/elements_pricing_table.html
/HTML/elements_progress_tables_charts.html
/HTML/elements_speakers.html
/HTML/elements_tabs_tours.html
/HTML/elements_testimonials.html
/HTML/fonts
/HTML/home_2.html
/HTML/home_3.html
/HTML/images
/HTML/index.html
/HTML/js
/HTML/Kunstwerk_svg_icons
/HTML/pages_404.html
/HTML/pages_about_v1.html
/HTML/pages_about_v2.html
/HTML/pages_coming_soon.html
/HTML/pages_contact_v1.html
/HTML/pages_contact_v2.html
/HTML/pages_sell.html
/HTML/pages_store_v1.html
/HTML/pages_store_v2.html
/HTML/pages_team.html
/HTML/pages_vendors.html
/HTML/php
/HTML/portfolio_grid.html
/HTML/portfolio_masonry.html
/HTML/portfolio_single.html
/HTML/shop_account.html
/HTML/shop_cart.html
/HTML/shop_checkout.html
/HTML/shop_front.html
/HTML/shop_single.html
/HTML/vendors
/images
/includes
/includes/BDD.php
/includes/Class.php
/includes/fonctions.php
/includes/Footer.php
/includes/Header.php
/includes/IPbanVerif.php
/index.php
/js
/Kunstwerk_svg_icons
/Pages
/Pages/404.php
/Pages/apropos.php
/Pages/Blog
/Pages/Blog/ID.php
/Pages/Blog/index.php
/Pages/Blog.php
/Pages/CGU.php
/Pages/coming-soon.php
/Pages/Contact.php
/Pages/index.php
/Pages/Store
/Pages/Store/Cart.php
/Pages/Store/Checkout.php
/Pages/Store/ID.php
/Pages/Store/ID2.php
/Pages/Store/index.php
/Pages/Store/index2.php
/Pages/Store/Order.php
/Pages/Store.php
/vendors
/vendors/arcticmodal
/vendors/charts
/vendors/countdown
/vendors/elevatezoom.min.js
/vendors/fancybox
/vendors/handlebars-v4.0.5.min.js
/vendors/instafeed.min.js
/vendors/instafeed.wrapper.min.js
/vendors/isotope.pkgd.min.js
/vendors/jquery-3.3.1.min.js
/vendors/jquery-ui
/vendors/jquery.easing.1.3.min.js
/vendors/jquery.parallax-1.1.3.min.js
/vendors/mad.customselect.js
/vendors/modernizr.js
/vendors/monkeysan-tooltip
/vendors/monkeysan.accordion.js
/vendors/monkeysan.counters.js
/vendors/monkeysan.jquery.nav.1.0.js
/vendors/monkeysan.jquery.nav.1.0.min.js

Found on 2023-03-08 04:07

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dd4f915d001bd7556ef600f8943039eb6

Found 27 files trough .DS_Store spidering:

/Class
/Class/Blog.php
/Class/Commentaires.php
/Class/Currency.php
/Class/hCaptcha.php
/Class/Logs.php
/Class/Pages.php
/Class/SendInBlue.php
/Class/Site.php
/Class/SMS.php
/Class/Store_Commande.php
/Class/Store_Panier.php
/Class/Store_Produit.php
/Class/Stripe.php
/Class/Survey.php
/Class/User.php
/css
/documentation
/fonts
/HTML
/images
/includes
/index.php
/js
/Kunstwerk_svg_icons
/Pages
/vendors

Found on 2023-02-28 01:38

Severity: medium
Fingerprint: 5f32cf5d6962f09ce95adb67e95adb67739246ca379f271086bebc9b25f7af29

Found 83 files trough .DS_Store spidering:

/Class
/Class/Blog.php
/Class/Commentaires.php
/Class/Currency.php
/Class/hCaptcha.php
/Class/Logs.php
/Class/Pages.php
/Class/SendInBlue.php
/Class/Site.php
/Class/SMS.php
/Class/Store_Commande.php
/Class/Store_Panier.php
/Class/Store_Produit.php
/Class/Stripe.php
/Class/Survey.php
/Class/User.php
/css
/documentation
/fonts
/HTML
/HTML/blog_classic_v1.html
/HTML/blog_classic_v2.html
/HTML/blog_grid_v1.html
/HTML/blog_grid_v2.html
/HTML/blog_masonry_v1.html
/HTML/blog_masonry_v2.html
/HTML/blog_single_v1.html
/HTML/blog_single_v2.html
/HTML/css
/HTML/elements_accordions_toggles.html
/HTML/elements_alert_boxes_buttons.html
/HTML/elements_banners.html
/HTML/elements_blog_posts.html
/HTML/elements_call_to_actions.html
/HTML/elements_counters_countdowns.html
/HTML/elements_dropcaps_blockquotes.html
/HTML/elements_gallery_grid.html
/HTML/elements_gallery_masonry.html
/HTML/elements_headings_and_paragraphs.html
/HTML/elements_highlights_tooltips_listings.html
/HTML/elements_icon_boxes.html
/HTML/elements_image_boxes.html
/HTML/elements_partners.html
/HTML/elements_pricing_table.html
/HTML/elements_progress_tables_charts.html
/HTML/elements_speakers.html
/HTML/elements_tabs_tours.html
/HTML/elements_testimonials.html
/HTML/fonts
/HTML/home_2.html
/HTML/home_3.html
/HTML/images
/HTML/index.html
/HTML/js
/HTML/Kunstwerk_svg_icons
/HTML/pages_404.html
/HTML/pages_about_v1.html
/HTML/pages_about_v2.html
/HTML/pages_coming_soon.html
/HTML/pages_contact_v1.html
/HTML/pages_contact_v2.html
/HTML/pages_sell.html
/HTML/pages_store_v1.html
/HTML/pages_store_v2.html
/HTML/pages_team.html
/HTML/pages_vendors.html
/HTML/php
/HTML/portfolio_grid.html
/HTML/portfolio_masonry.html
/HTML/portfolio_single.html
/HTML/shop_account.html
/HTML/shop_cart.html
/HTML/shop_checkout.html
/HTML/shop_front.html
/HTML/shop_single.html
/HTML/vendors
/images
/includes
/index.php
/js
/Kunstwerk_svg_icons
/Pages
/vendors

Found on 2023-02-28 01:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tubackxaword.ga
Port: 443
URL: https://tubackxaword.ga

First seen 2022-09-10 12:30
Last seen 2023-03-06 17:04
Open for 177 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-10 12:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: tubackxaword.ga
Port: 80
URL: http://tubackxaword.ga

First seen 2022-09-10 12:30
Last seen 2023-03-06 17:04
Open for 177 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-10 12:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: ualowlo.cf
Port: 443
URL: https://ualowlo.cf

First seen 2022-10-04 10:16
Last seen 2023-02-07 16:50
Open for 126 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2022-10-04 10:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: ualowlo.cf
Port: 80
URL: http://ualowlo.cf

First seen 2022-10-04 10:16
Last seen 2023-02-07 16:50
Open for 126 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642af3ab66038c4f18c38c4f18c38c4f18c
```
Found 2 files trough .DS_Store spidering:

/templs
/templs/templ7
```
  Found on 2022-10-04 10:16
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: lonobapetoti.tk
Port: 443
URL: https://lonobapetoti.tk

First seen 2022-10-02 03:58
Last seen 2023-02-05 04:20
Open for 126 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-02 03:58
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: merknahacantisab.tk
Port: 80
URL: http://merknahacantisab.tk

First seen 2022-09-26 14:55
Last seen 2023-01-25 03:52
Open for 120 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-26 14:55
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: merknahacantisab.tk
Port: 443
URL: https://merknahacantisab.tk

First seen 2022-09-26 14:55
Last seen 2023-01-25 03:52
Open for 120 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-26 14:55
Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 104.21.76.62
Domain: sands888.site
Port: 443
URL: https://sands888.site

First seen 2023-01-06 10:38

Fingerprint: b18befd9dd6536aa30550de530550de530550de530550de530550de571f2f2b4

{




 

        "frontendServerURL": "",



        "nodeProxyUrl": "wss://web.lucky999.life",
	"useLobbyServerURLForGameServers": true,
        "loggerServiceUrl": "https://web.lucky999.life/html5poker-services/logger",
        "restoreSessionUrl": "",
        "useServiceWorkers": true,

        "swDest": "sw.js",

	"fbAppId": "",
	"prod": true,
	"integrationMode": "",

        "supportCasinoGames": true,

        "usePreferredAsDefaultDisplayCurrency": false,


        "defaultDisplayCurrency": "none",




        "loadCasinoWebPImages": true,


        "clientPingIntervalInSeconds": 60,





        "analyticsTrackEvents": false,

        "analyticsSampleRate": 20,

        "loaderMaintenanceStatusURL": "https://service.poker-server.com/lucky999casino/status.json?anticache=20221121T083421",
	"googleAppId": ""

}

Found on 2023-01-06 10:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: beperviatyrrsumbpons.ml
Port: 80
URL: http://beperviatyrrsumbpons.ml

First seen 2022-09-02 01:29
Last seen 2022-12-29 15:05
Open for 118 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-02 01:29
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: beperviatyrrsumbpons.ml
Port: 443
URL: https://beperviatyrrsumbpons.ml

First seen 2022-09-02 01:29
Last seen 2022-12-29 15:05
Open for 118 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-09-02 01:29
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: rmacnotdelecagdi.ga
Port: 80
URL: http://rmacnotdelecagdi.ga

First seen 2022-10-24 01:42
Last seen 2022-12-23 01:43
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-24 01:42
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: rmacnotdelecagdi.ga
Port: 443
URL: https://rmacnotdelecagdi.ga

First seen 2022-10-24 01:42
Last seen 2022-12-23 01:43
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-24 01:42
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: landcoslearnbu.tk
Port: 443
URL: https://landcoslearnbu.tk

First seen 2022-10-20 01:23
Last seen 2022-12-18 07:51
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-10-20 01:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: neauworkhard.cf
Port: 80
URL: http://neauworkhard.cf

First seen 2022-08-31 19:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-31 19:18
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: neauworkhard.cf
Port: 443
URL: https://neauworkhard.cf

First seen 2022-08-31 19:18
Last seen 2022-08-31 19:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-31 19:18
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: trovrethear.tk
Port: 443
URL: https://trovrethear.tk

First seen 2022-08-31 02:09
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-31 02:09
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: ventdarafor.ga
Port: 443
URL: https://ventdarafor.ga

First seen 2022-08-30 04:38
Last seen 2022-08-30 04:38
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-30 04:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: loplaycate.tk
Port: 80
URL: http://loplaycate.tk

First seen 2022-08-29 04:38
Last seen 2022-08-29 04:39
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-29 04:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.76.62
Domain: loplaycate.tk
Port: 443
URL: https://loplaycate.tk

First seen 2022-08-29 04:38
Last seen 2022-08-29 04:38
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dc6d5a297c6d5a297c6d5a297c6d5a297
```
Found 1 files trough .DS_Store spidering:

/smartdoor
```
  Found on 2022-08-29 04:38
Create report

Open service 104.21.76.62:80 · www.worklifelaw.org

2024-12-22 08:06

HTTP/1.1 301 Moved Permanently
Date: Sun, 22 Dec 2024 08:06:52 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Location: https://www.worklifelaw.org/
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XLISJUWA6uQl101v8gmyBqNeCm0wpC7iQK3X5l6lc802rqnNihdcRt86zVsh5yKP9K3f%2Bkgxltp1sCKnv%2B95FabIClM8PW%2BSwSEupgqxB%2F1AO964Iu7wpdOMe6%2FWM0zsWwEPk7dT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8f5e9d6ffbddc436-EWR
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=919&min_rtt=919&rtt_var=459&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=217&delivery_rate=0&cwnd=232&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://www.worklifelaw.org/">here</a>.</p>
</body></html>

Found 38 minutes ago by HttpPlugin